$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft File: 3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json) Hash identifier: gwy8H7aU9jcbSlsQNmKTXTjC1hD/5aHiYbYA39ZZTOw= Subject key identifier: CF:4F:85:29:B5:EC:ED:6E:D6:B8:52:0B:1A:0B:96:75:0D:A7:3B:FE Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 552DB9804FC6DA4D5C384ECED8516073F93B73DA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 08:53:28 +0000 Manifest this update: Thu 26 Mar 2026 08:48:28 +0000 Manifest next update: Fri 27 Mar 2026 10:16:28 +0000 Files and hashes: 1: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=) 2: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=) 3: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=) 4: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=) 5: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=) 6: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=) 7: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=) 8: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=) 9: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=) 10: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=) 11: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=) 12: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=) 13: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=) 14: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=) 15: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=) 16: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=) 17: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=) 18: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=) 19: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=) 20: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=) 21: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=) 22: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=) 23: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=) 24: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=) 25: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=) 26: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=) 27: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=) 28: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=) 29: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=) 30: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=) 31: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: nhcTk8Jz5Q3Wg5ylm47Ea6UT/XJ0jiI2X8mdWDCAHOw=) 32: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2d:b9:80:4f:c6:da:4d:5c:38:4e:ce:d8:51:60:73:f9:3b:73:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Mar 26 08:48:28 2026 GMT Not After : Mar 27 10:16:28 2026 GMT Subject: CN=CF4F8529B5ECED6ED6B8520B1A0B96750DA73BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:e7:f4:06:7a:d8:02:d6:13:c7:2c:10:f7: d5:02:9f:e0:c6:1a:ec:6d:a7:1f:b6:c2:20:ee:ee: 99:5f:4e:12:71:e9:5c:96:72:15:6e:07:e3:c1:df: a5:51:9a:a0:4d:01:d4:53:c9:75:ce:63:96:17:a8: e1:32:47:9a:3e:f0:98:53:7b:06:26:bf:38:73:86: 4b:bc:d3:97:d8:98:ba:be:da:37:6d:1e:43:24:bd: 30:0d:c5:e2:72:62:c4:3a:43:e2:7f:7e:69:14:25: ea:64:69:27:e3:23:fd:38:1d:cd:6d:a2:12:96:0a: 9d:4d:db:a9:22:69:ae:23:27:df:d2:36:cb:08:c0: e1:88:25:cf:6a:42:9f:08:b8:87:ce:41:04:ca:c5: 68:62:7c:09:3e:6a:0a:96:62:87:ef:52:2d:36:75: a3:59:5b:59:39:32:e5:bb:44:7c:b4:a1:74:5c:25: ff:63:c5:a6:ef:8e:26:c2:6e:68:42:6b:26:97:c3: 1f:e9:69:1e:36:c6:2b:a2:cf:5e:04:ce:f0:7c:9a: 3f:b5:b2:95:3c:89:e6:dd:f5:bc:8d:87:b5:3f:f8: fd:97:c6:f9:7a:41:9b:fd:b7:a0:78:a8:ee:c2:fb: dd:e7:c0:e7:8d:e6:31:de:01:bf:b4:bc:17:c3:89: 04:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4F:85:29:B5:EC:ED:6E:D6:B8:52:0B:1A:0B:96:75:0D:A7:3B:FE X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5f:8c:06:48:9c:5e:b0:c4:34:c6:7b:42:a8:49:bd:d1:a7: cc:42:ce:6f:50:36:c2:6f:50:77:36:53:53:36:56:28:7c:f6: ff:27:8b:1b:07:ac:69:78:f6:8e:d6:f7:35:0d:56:b1:50:e6: 6e:16:0e:72:7d:58:ef:08:99:03:0d:b9:f3:46:2e:4b:a4:57: da:eb:4d:b9:ef:2c:68:26:dc:0c:c5:8d:50:75:78:a5:c8:ff: 05:f7:59:9b:25:bf:64:35:cd:0e:f1:ae:2d:37:1a:1d:74:88: ae:fa:51:89:c1:70:16:41:75:6f:a7:df:46:61:27:ea:37:bf: 87:fc:ac:09:75:e3:c7:5b:86:a1:49:6a:94:4b:12:0e:df:2d: 20:5a:b9:8a:bf:98:fb:fd:ee:71:a3:2f:e5:5d:fc:ec:d3:ab: 16:ae:e9:76:49:12:3d:1f:98:25:21:d8:76:17:5d:0d:60:bd: da:3e:68:20:00:e2:84:96:b4:c7:be:d4:27:ec:b8:f7:8f:bc: 3a:83:fc:9f:23:90:dd:e7:9c:30:c8:a9:7d:82:db:84:c3:ad: 3e:22:3a:22:3c:76:69:ee:59:c2:00:96:e0:64:e0:31:5b:34: 9c:cc:2f:72:f0:34:44:75:2d:98:ad:e5:80:1b:61:6e:4e:31: 42:63:81:10 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVS25gE/G2k1cOE7O2FFgc/k7c9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjAzMjYwODQ4MjhaFw0yNjAzMjcxMDE2MjhaMDMxMTAvBgNV BAMTKENGNEY4NTI5QjVFQ0VENkVENkI4NTIwQjFBMEI5Njc1MERBNzNCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEO+f0BnrYAtYTxywQ99UCn+DG Guxtpx+2wiDu7plfThJx6VyWchVuB+PB36VRmqBNAdRTyXXOY5YXqOEyR5o+8JhT ewYmvzhzhku805fYmLq+2jdtHkMkvTANxeJyYsQ6Q+J/fmkUJepkaSfjI/04Hc1t ohKWCp1N26kiaa4jJ9/SNssIwOGIJc9qQp8IuIfOQQTKxWhifAk+agqWYofvUi02 daNZW1k5MuW7RHy0oXRcJf9jxabvjibCbmhCayaXwx/paR42xiuiz14EzvB8mj+1 spU8iebd9byNh7U/+P2Xxvl6QZv9t6B4qO7C+93nwOeN5jHeAb+0vBfDiQQrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUz0+FKbXs7W7WuFILGguWdQ2nO/4wHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE3ODYyNDIvMC8zRUMyRDg4NEE1NEU4 NzhEODQ4RURFNDI1MTc0NjYxNTNGNzQ3NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdF+MBkicXrDE NMZ7QqhJvdGnzELOb1A2wm9QdzZTUzZWKHz2/yeLGwesaXj2jtb3NQ1WsVDmbhYO cn1Y7wiZAw2580YuS6RX2utNue8saCbcDMWNUHV4pcj/BfdZmyW/ZDXNDvGuLTca HXSIrvpRicFwFkF1b6ffRmEn6je/h/ysCXXjx1uGoUlqlEsSDt8tIFq5ir+Y+/3u caMv5V387NOrFq7pdkkSPR+YJSHYdhddDWC92j5oIADihJa0x77UJ+y494+8OoP8 nyOQ3eecMMipfYLbhMOtPiI6Ijx2ae5ZwgCW4GTgMVs0nMwvcvA0RHUtmK3lgBth bk4xQmOBEA== -----END CERTIFICATE-----Generated at Thu Mar 26 21:06:59 2026 by rpki-client