
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
File: 3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json)
Hash identifier: 2VyFHQkD7CFDjgD7n5J+Hyl4OsNRWp+YgL8tmKH/ub0=
Subject key identifier: 59:62:2F:B2:CA:96:88:4C:F5:D9:07:52:1D:33:E7:BD:01:D4:83:C3
Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434
Certificate serial: 5D163F9005EE2DDE6B905433A8E1DD2603770BFC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
Manifest number: 012E
Signing time: Tue 08 Sep 2026 14:54:22 +0000
Manifest this update: Tue 08 Sep 2026 14:49:22 +0000
Manifest next update: Fri 11 Sep 2026 16:10:22 +0000
Files and hashes: 1: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=)
2: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=)
3: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=)
4: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=)
5: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=)
6: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=)
7: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=)
8: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=)
9: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=)
10: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=)
11: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=)
12: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: WOiptx8DmH+eXLBpzSalZS1Vyz4YBGHrcXzeAS5cixI=)
13: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=)
14: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=)
15: 3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa (hash: xG1I6r6UAJfACKwK5sIgDn22lg/beJ2nLiIhCgnhcBM=)
16: 3230332e39352e3132382e302f32332d3234203d3e2034383437.roa (hash: raJHohu1PhKXXDQxq7Zw6mLF7Xtxfw/jencxtzoXqDY=)
17: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=)
18: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=)
19: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=)
20: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=)
21: 3132302e3133362e3134342e302f32312d3234203d3e203233383533.roa (hash: E24J4lCzhRkOqJW0ZJR5Sy9+c+JL4dSoESoQ2DvI8xM=)
22: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=)
23: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=)
24: 3132302e3133362e3138382e302f32322d3234203d3e203233383533.roa (hash: bOMoD4GkZR5G7bg1hwUbmvGxSHBuMAi8FYq4NpkEpt0=)
25: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=)
26: 3230332e39352e3132382e302f32332d3234203d3e2034383038.roa (hash: r5nYtZ1bV8qfqfApkLDYfOj428A/V96xIcnp5lpFiB0=)
27: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=)
28: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=)
29: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=)
30: 323430343a373630303a3a2f33322d3332203d3e203233383533.roa (hash: gKtWmniIjY7C6+YlmHdzCK3hP/+EVEt8A1Yl3RllWsc=)
31: 3132302e3133362e3135322e302f32322d3234203d3e203233383533.roa (hash: erIblciMvEQNpFoiI29fK8Db0M3ixaF8v4DyoPNB8/8=)
32: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=)
33: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=)
34: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=)
35: 3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa (hash: sJNFmFXoGKjrXXYM8WkTLWH9FsRgIw0tU5UB7xfQNtw=)
36: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=)
37: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=)
38: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=)
39: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=)
40: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:16:3f:90:05:ee:2d:de:6b:90:54:33:a8:e1:dd:26:03:77:0b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434
Validity
Not Before: Sep 8 14:49:22 2026 GMT
Not After : Sep 11 16:10:22 2026 GMT
Subject: CN=59622FB2CA96884CF5D907521D33E7BD01D483C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:c8:fe:bc:b2:3d:42:63:1e:c4:8b:24:8c:
7e:27:3c:76:d8:e9:0f:86:e7:24:76:75:89:80:55:
9c:9b:05:60:27:54:63:46:d5:ba:9b:5d:bd:11:78:
b5:3b:d0:3d:d9:3a:b9:a1:cb:f0:48:15:f6:4e:e0:
23:8e:06:e0:33:94:87:fc:a1:1a:c8:eb:75:cf:00:
65:d6:1a:0b:13:e3:c3:5d:d8:f1:f8:3f:68:f7:f6:
8e:50:95:35:80:b8:3a:39:e1:df:b2:94:52:44:25:
96:1e:30:e6:9e:c7:30:64:e6:4b:ff:3c:a0:35:47:
20:df:7b:50:7b:3e:55:f8:93:85:11:ed:f7:d2:bb:
d9:b7:05:b8:00:ea:72:d9:fd:6c:2f:c4:af:95:17:
97:53:1a:79:e2:e4:36:23:a1:be:c8:ba:87:be:83:
23:7a:93:b7:63:ab:3c:03:8a:40:1e:8b:3a:b1:00:
cd:13:47:2c:65:0e:7e:e7:07:6e:15:dd:28:ae:08:
32:ec:a2:1a:a3:8a:d1:82:c3:26:e3:61:cf:4b:3f:
0b:d3:b5:d3:98:33:69:79:52:f4:65:8f:02:b1:7c:
88:7b:2f:54:e7:0b:5b:00:ba:f6:ff:89:a1:2e:37:
07:fe:e2:b2:e9:16:8f:7a:04:e3:85:54:7f:42:6f:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:62:2F:B2:CA:96:88:4C:F5:D9:07:52:1D:33:E7:BD:01:D4:83:C3
X509v3 Authority Key Identifier:
keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:67:99:f0:fc:0b:13:43:f9:ab:3a:9e:88:e0:f8:86:7a:92:
fa:83:a8:1f:1d:e4:f7:29:35:24:36:fb:97:76:4c:27:dc:47:
e1:a4:43:26:66:c9:1e:78:ed:ab:ed:d2:b9:85:ec:64:b4:1d:
f3:ff:b1:1f:ea:cd:56:37:44:98:ad:c9:03:95:94:39:cd:62:
e0:33:0a:64:9e:8e:1f:f9:cc:63:bc:a6:c3:9f:e5:3f:0b:9b:
16:1c:e4:a5:1e:ae:5a:17:7c:9e:b2:40:4f:2a:00:0c:51:b6:
3f:26:75:7e:cc:88:86:34:66:05:e7:32:ab:25:b5:25:45:9d:
b1:15:08:96:2f:35:cb:c7:ef:a8:25:c0:d7:3b:ad:79:7c:1b:
c1:1c:df:2d:39:fa:6c:18:12:cf:ef:0a:02:bc:f2:e3:70:b5:
1f:c3:7f:08:6c:e6:00:e9:50:72:a7:01:c8:26:78:10:a0:a1:
e7:16:8b:91:b0:8b:82:1e:01:4e:90:cc:c8:47:ca:a7:bf:24:
47:03:2b:88:0e:99:69:71:68:c6:4f:db:c1:0d:5f:05:0d:be:
2d:40:c8:f7:fb:18:3e:e4:3f:fa:58:5b:25:f7:04:7a:ce:10:
bb:ca:b8:18:f9:e4:3a:1f:78:d4:d1:e8:e8:1f:c6:f7:61:de:
fc:3e:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:43:47 2026 by rpki-client