
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
File: 3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json)
Hash identifier: COXWklKZMdOEL3Mn34ZjdkZ3GOPO/0FOCt0RifHlVw8=
Subject key identifier: FA:CF:72:55:48:D1:74:35:B1:9C:30:25:B0:AD:25:81:43:F2:23:EF
Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434
Certificate serial: 73007A40C970F235AB9EC5762FE442F47429CA39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
Manifest number: 9A
Signing time: Tue 12 May 2026 19:25:42 +0000
Manifest this update: Tue 12 May 2026 19:20:42 +0000
Manifest next update: Wed 13 May 2026 21:19:42 +0000
Files and hashes: 1: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=)
2: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=)
3: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=)
4: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=)
5: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=)
6: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=)
7: 3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa (hash: xG1I6r6UAJfACKwK5sIgDn22lg/beJ2nLiIhCgnhcBM=)
8: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=)
9: 3230332e39352e3132382e302f32332d3234203d3e2034383038.roa (hash: r5nYtZ1bV8qfqfApkLDYfOj428A/V96xIcnp5lpFiB0=)
10: 323430343a373630303a3a2f33322d3332203d3e203233383533.roa (hash: gKtWmniIjY7C6+YlmHdzCK3hP/+EVEt8A1Yl3RllWsc=)
11: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=)
12: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=)
13: 3132302e3133362e3135322e302f32322d3234203d3e203233383533.roa (hash: erIblciMvEQNpFoiI29fK8Db0M3ixaF8v4DyoPNB8/8=)
14: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=)
15: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=)
16: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=)
17: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=)
18: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=)
19: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=)
20: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=)
21: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=)
22: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: dwSZ5HBH2klPsXDpu/4hqTYbV33TnbJY6mcEOcOTgG4=)
23: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=)
24: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=)
25: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=)
26: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=)
27: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=)
28: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=)
29: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=)
30: 3230332e39352e3132382e302f32332d3234203d3e2034383437.roa (hash: raJHohu1PhKXXDQxq7Zw6mLF7Xtxfw/jencxtzoXqDY=)
31: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=)
32: 3132302e3133362e3138382e302f32322d3234203d3e203233383533.roa (hash: bOMoD4GkZR5G7bg1hwUbmvGxSHBuMAi8FYq4NpkEpt0=)
33: 3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa (hash: sJNFmFXoGKjrXXYM8WkTLWH9FsRgIw0tU5UB7xfQNtw=)
34: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=)
35: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=)
36: 3132302e3133362e3134342e302f32312d3234203d3e203233383533.roa (hash: E24J4lCzhRkOqJW0ZJR5Sy9+c+JL4dSoESoQ2DvI8xM=)
37: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=)
38: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=)
39: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=)
40: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:19:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:00:7a:40:c9:70:f2:35:ab:9e:c5:76:2f:e4:42:f4:74:29:ca:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434
Validity
Not Before: May 12 19:20:42 2026 GMT
Not After : May 13 21:19:42 2026 GMT
Subject: CN=FACF725548D17435B19C3025B0AD258143F223EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:0b:50:ba:cd:8c:13:8c:49:79:05:02:79:
30:e5:58:73:0f:6a:fe:32:30:62:f8:66:33:21:35:
c9:b4:29:2c:b7:3f:aa:27:17:3a:be:b7:04:da:9b:
5f:2b:fc:35:f3:5a:39:f0:80:c5:19:e8:2a:97:0f:
cb:ad:3b:7a:28:28:5b:da:a0:d0:5e:2f:d9:27:b5:
f4:65:35:4c:ad:55:83:30:01:01:56:4b:29:09:d7:
d4:9b:17:aa:33:e2:21:b2:b1:f1:48:a0:19:6e:5b:
e8:0f:91:69:d3:13:9e:78:3e:76:f7:85:4d:c2:4b:
c5:52:b7:16:5f:a4:ec:7e:00:64:99:0d:60:cc:99:
0a:00:b9:a7:c6:96:0e:81:72:0e:2b:16:60:50:59:
21:0c:03:a8:38:bf:7c:99:f3:83:b3:05:b6:10:80:
17:94:20:96:fa:17:b5:e3:61:bd:97:88:98:8c:3e:
c6:73:82:05:f0:0c:a7:3c:14:ce:34:d0:cd:7e:a9:
15:51:4e:ec:34:41:2e:ec:f2:93:5c:83:31:a0:63:
93:ed:2a:d2:d3:0d:30:c5:af:9c:0e:a5:b4:5a:61:
13:02:94:ab:fc:dd:f6:c8:22:fd:82:14:b2:7d:eb:
ff:13:a1:ce:4d:11:a6:3d:76:04:9d:98:83:83:c5:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CF:72:55:48:D1:74:35:B1:9C:30:25:B0:AD:25:81:43:F2:23:EF
X509v3 Authority Key Identifier:
keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e1:d7:ea:97:07:fb:89:ff:91:7c:fa:6f:26:e5:d8:2d:2d:
0a:e1:7a:39:2a:67:70:b7:ef:5d:72:8b:96:3d:da:c0:f6:77:
ee:4a:dc:61:48:83:be:e3:93:c9:1c:32:5e:cf:9a:e7:e7:29:
e5:e1:51:17:9e:25:b7:da:78:b0:f0:30:9c:68:0b:ba:7e:ab:
ab:16:ea:95:8c:5a:e5:a8:ca:d8:01:70:61:ca:72:07:41:82:
a8:5e:7c:2a:75:5d:6b:c8:b0:89:5c:84:86:64:9a:13:37:67:
67:5c:f5:11:98:7c:7c:f8:ea:d7:86:b6:52:ac:bf:6b:3e:4e:
66:a7:a2:6d:e3:86:00:ca:d3:7e:33:73:b1:f8:65:2e:52:9a:
b7:83:b3:29:9e:e0:10:31:e2:db:da:3b:2d:e9:3c:e5:7b:1b:
1a:50:d7:b3:e8:e7:98:1d:1e:65:fd:3f:14:15:b5:0c:dc:38:
14:b9:fa:f2:a4:38:96:a5:2b:ad:98:44:a7:4e:c8:9d:e2:7c:
01:a7:76:4b:20:ad:af:54:88:c1:1a:f5:d7:e4:c3:4d:c4:ca:
ea:99:a0:62:01:d0:fb:5f:56:49:b9:9c:ef:5a:17:7d:72:c3:
c7:cd:fd:8f:61:36:ee:a4:00:b5:34:d6:13:dd:af:e9:b8:af:
26:48:18:25
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUcwB6QMlw8jWrnsV2L+RC9HQpyjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz
Rjc0NzQzNDAeFw0yNjA1MTIxOTIwNDJaFw0yNjA1MTMyMTE5NDJaMDMxMTAvBgNV
BAMTKEZBQ0Y3MjU1NDhEMTc0MzVCMTlDMzAyNUIwQUQyNTgxNDNGMjIzRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFQtQus2ME4xJeQUCeTDlWHMP
av4yMGL4ZjMhNcm0KSy3P6onFzq+twTam18r/DXzWjnwgMUZ6CqXD8utO3ooKFva
oNBeL9kntfRlNUytVYMwAQFWSykJ19SbF6oz4iGysfFIoBluW+gPkWnTE554Pnb3
hU3CS8VStxZfpOx+AGSZDWDMmQoAuafGlg6Bcg4rFmBQWSEMA6g4v3yZ84OzBbYQ
gBeUIJb6F7XjYb2XiJiMPsZzggXwDKc8FM400M1+qRVRTuw0QS7s8pNcgzGgY5Pt
KtLTDTDFr5wOpbRaYRMClKv83fbIIv2CFLJ96/8Toc5NEaY9dgSdmIODxTGTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU+s9yVUjRdDWxnDAlsK0lgUPyI+8wHwYDVR0j
BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2
NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE3ODYyNDIvMC8zRUMyRDg4NEE1NEU4
NzhEODQ4RURFNDI1MTc0NjYxNTNGNzQ3NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuHX6pcH+4n/
kXz6bybl2C0tCuF6OSpncLfvXXKLlj3awPZ37krcYUiDvuOTyRwyXs+a5+cp5eFR
F54lt9p4sPAwnGgLun6rqxbqlYxa5ajK2AFwYcpyB0GCqF58KnVda8iwiVyEhmSa
EzdnZ1z1EZh8fPjq14a2Uqy/az5OZqeibeOGAMrTfjNzsfhlLlKat4OzKZ7gEDHi
29o7Lek85XsbGlDXs+jnmB0eZf0/FBW1DNw4FLn68qQ4lqUrrZhEp07IneJ8Aad2
SyCtr1SIwRr11+TDTcTK6pmgYgHQ+19WSbmc71oXfXLDx839j2E27qQAtTTWE92v
6bivJkgYJQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:18:08 2026 by rpki-client