
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
File: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft (raw, json)
Hash identifier: i1/t2aZPqPI9yd6ZNzMAta0GxC3HRs6nPjZPbrANRzA=
Subject key identifier: A8:4C:5A:B3:24:5A:D0:7D:C1:E9:03:65:12:AE:83:0A:52:04:8E:02
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial: 7CA339240405C72D47EB550ECFB8F388EE0FC7B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
Manifest number: 0108
Signing time: Thu 23 Jul 2026 23:19:49 +0000
Manifest this update: Thu 23 Jul 2026 23:14:49 +0000
Manifest next update: Sat 25 Jul 2026 00:25:49 +0000
Files and hashes: 1: 3231312e3135352e3132342e302f32322d3232203d3e203538353431.roa (hash: NOufZeeVBWAEETKbJl+H6zHNtoZyY/S4SDIVSid74d0=)
2: 3130332e32372e342e302f32322d3232203d3e203538383534.roa (hash: X07mjB9bjxe2OIWzT2PkfOiYRqWsVnjKrNMXTnKBIxg=)
3: 3135302e3234322e39362e302f32322d3232203d3e20313333373734.roa (hash: E4lAz1S/muh0tSxxpwW01U7VqwUZl+TwwxwZTCkuE8Y=)
4: 323430373a376430303a313a3a2f34382d3438203d3e20313338393135.roa (hash: GVUrnj180FKd+SY6zIZzgnNqGMgtGlxATCY9H/0PTKQ=)
5: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl (hash: czCHHv91iO32wajknBABEqFtO+fqTjffRMTxVp83brg=)
6: 323430373a376430303a313a3a2f34382d3438203d3e203538383534.roa (hash: zOAxiWcQ3idJewlosYrGmuniZSxq36jngRIx+dMCARs=)
7: 3231312e3135352e3130302e302f32322d3232203d3e203538383534.roa (hash: NnUTERng8XaU5Ibm8Y9WptoyvnTqqEUE7HudYxpFaiM=)
8: 3130332e35392e3131322e302f32322d3232203d3e20313333373734.roa (hash: fW0XDmPZUdQM2bQp/l3K+jPOu3T0QqmCbPxXrk2cD7Y=)
9: 3130332e32372e342e302f32342d3234203d3e203538383534.roa (hash: qGte1Ot7Eg/0TbNzqdJBQ/lLSyl2J5F4UszZ0mAyRSA=)
10: 3231312e3135352e3131322e302f32322d3232203d3e20313333373734.roa (hash: DdMXKf2YuUywOCcCTI+DqM/FwcP9SDtTMYZyLt6wl/w=)
11: 3231312e3135352e3131352e302f32342d3234203d3e203538383534.roa (hash: TReC9XrrN7Nwf1erqtsk0E8oVQofSFHJgWXfzrRUE/I=)
12: 3130332e36342e3135362e302f32322d3232203d3e20313333373734.roa (hash: S6hC0YjpsJuxmy8Axv3uYCWhbCGQrPkkDePjTyATLac=)
13: 3130332e36342e3231322e302f32322d3232203d3e20313333373734.roa (hash: Kqvu3gp6OHhgSZJSSxhvDaYWPDX1Qo8zwYxhwHJDdoc=)
14: 3130332e32372e362e302f32342d3234203d3e203538383534.roa (hash: hYzmn3mM9dAzyh5h5bkJq/XcXwmxINBr6hHDnWDJgA4=)
15: 3231312e3135352e3130342e302f32322d3232203d3e203538383534.roa (hash: ZvvpEEOuSCVRSI9C2BZN47oe6i/TIVMXv0WiVVEFrdA=)
16: 34352e3132362e3132302e302f32322d3232203d3e20313333373734.roa (hash: AgfUQHFuvXuvbVut6uk3L47mq/FUpfzy8Xxpq7sQuwI=)
17: 3130332e3130352e36302e302f32322d3232203d3e203538353431.roa (hash: aNs6sRli221O5KrEAoD0mNIaznXphx0V3lJfd42p1ac=)
18: 3130332e37332e3134302e302f32322d3232203d3e20313333373734.roa (hash: 8WSsYxHsECWbvPccgByEONrwAZ9fl3TFYCpPNGSJT20=)
19: 3231312e3135352e3130302e302f32322d3232203d3e20313338393135.roa (hash: b4z4tTY89/Ga0J0Dc9lDy7pLUYgbukf87p/xggmu81Y=)
20: 3231312e3135352e3130382e302f32322d3232203d3e20313333373734.roa (hash: ogYFO207LFn8kLObTi8Qo2cpfCdN22qWreV61dxA9c0=)
21: 3231312e3135352e3131362e302f32322d3232203d3e203538353431.roa (hash: 0dz8ghbPK3azmdvVE2lLdDzedpnnWzUkxi94JHAmQg0=)
22: 3231312e3135352e39362e302f32322d3232203d3e203538383534.roa (hash: vVLRo+HKLvh/kXcauZdzM35qZL4rcz/wF9d38NpTTv0=)
23: 3231312e3135352e3130342e302f32322d3232203d3e20313338393135.roa (hash: bB7BfzKkIwZUwlWdw9j4kqEd/PrTF1o3u3Y0+/9z3ps=)
24: 34332e3234322e37322e302f32322d3232203d3e20313333373734.roa (hash: uwR1P/ibjSn0EqNSQlz8TQd0LIi6DXH9VY+ve+oFQ5E=)
25: 3130332e3233362e3235322e302f32322d3232203d3e203538383534.roa (hash: nLGhDHJd/7rK44szUZ5Kzu32mo/lJeTWCIKFN5gT67c=)
26: 3231312e3135352e3131352e302f32342d3234203d3e20313338393135.roa (hash: nIl2i2B02vIqBDHcb7FeY/BxvEeovZo9z6802hKW/QY=)
27: 3231312e3135352e3130342e302f32322d3232203d3e20313333373734.roa (hash: g7URIOtpeptv0I7W/H+Q02JimqVDks0/5btGuJMLPrQ=)
28: 3231312e3135352e3132302e302f32322d3232203d3e203538353431.roa (hash: XqKnIABB835jNYZmEZ3t9axw68PnzIQthEAUJrJc+yI=)
29: 3130332e32372e352e302f32342d3234203d3e203538383534.roa (hash: 7pTtCdtAeXZxGjA7RJCZZdkN9oIX588wv35Q/6jbVas=)
30: 3130332e37332e3133362e302f32322d3232203d3e20313333373734.roa (hash: ZbFlWcVsJTKN95YZjDMwOGcWQuTPwIm4cw3vdL6PP2Q=)
31: 32372e302e3133322e302f32322d3232203d3e20313333373734.roa (hash: 0BCrGq9sKzR0fU7bZ94Uyl76JvH1VOtee+YKTiZ4qb0=)
32: 34352e3131392e36302e302f32322d3232203d3e20313333373734.roa (hash: Sm4T6PdlaWK5L2THDkzzGLZz2EgkHdch3D9qDQ6YrT4=)
33: 3130332e32372e372e302f32342d3234203d3e203538383534.roa (hash: g+hnuBNKsm6ziUrgUw+cA7ldB47CwfimIC2umZGUB+8=)
34: 3231312e3135352e3132302e302f32312d3231203d3e203538353431.roa (hash: H6Z1n4816A3cvrcg/4JXWuWg2N4DIsmC9oHT0+xO5As=)
35: 3231312e3135352e39362e302f32322d3232203d3e20313338393135.roa (hash: mkRk/FfIjDtmaIG6G1C+HoEu70RiS2JMavmAU6dcucM=)
36: 32372e302e3133322e302f32322d3232203d3e203538383534.roa (hash: j1leNzG71vinHeU48HQ2pH/5kmDNO6G4B6bCEWPWmMc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a3:39:24:04:05:c7:2d:47:eb:55:0e:cf:b8:f3:88:ee:0f:c7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Validity
Not Before: Jul 23 23:14:49 2026 GMT
Not After : Jul 25 00:25:49 2026 GMT
Subject: CN=A84C5AB3245AD07DC1E9036512AE830A52048E02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:92:02:54:ca:14:d7:e9:e1:40:0c:86:e5:
20:f6:93:f7:83:e8:78:1c:01:6e:76:6f:c9:8e:04:
71:ca:4d:f7:72:88:34:fb:d8:c0:19:53:b8:31:35:
54:90:70:c1:23:4a:60:fd:3c:cb:67:ba:76:a5:9b:
c9:9b:f8:a4:68:ab:39:2e:1d:75:fe:5c:4f:93:79:
63:d6:5a:6f:03:4a:03:94:97:4c:f2:8f:91:46:b2:
78:d7:19:98:35:e2:db:7d:00:71:cb:2c:d1:f6:81:
02:4d:86:88:1f:1c:74:33:c9:f8:bb:f6:53:6f:06:
61:7f:68:fa:c9:37:67:c8:24:f1:f8:5b:c1:5c:39:
4e:12:73:47:de:6a:b0:60:df:87:2f:d3:c0:1e:8d:
97:9c:de:49:09:9f:d7:1a:a7:5b:b7:e4:da:f7:34:
4d:74:a7:40:18:8f:e5:b2:4e:44:54:b4:3e:d5:46:
d5:a0:fb:60:cf:2c:b6:c1:fe:93:70:08:43:05:ef:
ff:c6:c0:d0:02:61:fc:b6:01:f4:e3:cb:f9:1b:0b:
c6:80:b7:f8:d1:e2:5c:23:d9:58:d5:37:5b:af:ec:
1e:86:70:63:83:28:ce:87:a1:fe:be:64:fe:1f:bd:
4b:14:77:e9:6f:ba:20:26:e6:80:65:de:de:58:5f:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4C:5A:B3:24:5A:D0:7D:C1:E9:03:65:12:AE:83:0A:52:04:8E:02
X509v3 Authority Key Identifier:
keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:14:fe:c0:60:64:c8:9f:f0:dc:f5:b3:e9:ff:30:d2:98:cd:
37:ba:3e:e5:29:39:9c:1e:e7:d6:72:6c:19:5f:ed:3b:66:a7:
84:ec:83:82:74:1b:9f:53:97:5a:b8:b6:a7:f4:06:f3:93:14:
1d:21:d6:e4:0b:b5:9a:f9:7c:bb:67:b7:50:e4:21:90:8f:1a:
d0:24:25:36:ba:b4:37:a5:a8:ee:00:f5:42:1d:d2:17:24:db:
82:2f:42:28:50:9f:d8:67:03:66:ae:a4:9f:92:2b:9c:eb:db:
7e:66:7c:b5:c6:a2:63:d9:88:f2:df:50:a7:24:65:f0:fc:de:
ae:a2:fe:13:7b:c8:95:a8:d3:ea:f4:35:2e:56:8f:00:3e:11:
58:d9:8c:5b:40:73:00:5f:e5:62:ad:2e:08:b2:4c:99:55:b0:
3e:91:60:8b:71:c3:a1:d1:07:3f:c9:a5:02:91:0b:55:cd:2f:
eb:d6:f0:64:08:c2:dc:f2:f7:a3:7d:fd:fa:c2:e5:40:ef:9a:
98:0d:12:4b:db:14:a9:37:50:09:14:82:e8:0d:58:d9:ee:33:
1b:32:25:f6:3d:36:0d:85:03:2f:ff:bb:b3:af:61:b1:e7:6b:
c8:ad:5a:fd:b3:38:0f:38:ec:1a:39:58:53:a4:24:de:32:06:
8c:76:0b:41
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUfKM5JAQFxy1H61UOz7jziO4Px7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE
NzgxMDFENDAeFw0yNjA3MjMyMzE0NDlaFw0yNjA3MjUwMDI1NDlaMDMxMTAvBgNV
BAMTKEE4NEM1QUIzMjQ1QUQwN0RDMUU5MDM2NTEyQUU4MzBBNTIwNDhFMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmIJICVMoU1+nhQAyG5SD2k/eD
6HgcAW52b8mOBHHKTfdyiDT72MAZU7gxNVSQcMEjSmD9PMtnunalm8mb+KRoqzku
HXX+XE+TeWPWWm8DSgOUl0zyj5FGsnjXGZg14tt9AHHLLNH2gQJNhogfHHQzyfi7
9lNvBmF/aPrJN2fIJPH4W8FcOU4Sc0fearBg34cv08AejZec3kkJn9cap1u35Nr3
NE10p0AYj+WyTkRUtD7VRtWg+2DPLLbB/pNwCEMF7//GwNACYfy2AfTjy/kbC8aA
t/jR4lwj2VjVN1uv7B6GcGODKM6Hof6+ZP4fvUsUd+lvuiAm5oBl3t5YX9L5AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUqExasyRa0H3B6QNlEq6DClIEjgIwHwYDVR0j
BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0
RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ0ODc4MDkvMC9FQzlFMUM4NDBDODcw
NUU3NTRDMkUzRkYzMkE0NEZCOUQ3ODEwMUQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBT+wGBkyJ/w
3PWz6f8w0pjNN7o+5Sk5nB7n1nJsGV/tO2anhOyDgnQbn1OXWri2p/QG85MUHSHW
5Au1mvl8u2e3UOQhkI8a0CQlNrq0N6Wo7gD1Qh3SFyTbgi9CKFCf2GcDZq6kn5Ir
nOvbfmZ8tcaiY9mI8t9QpyRl8PzerqL+E3vIlajT6vQ1LlaPAD4RWNmMW0BzAF/l
Yq0uCLJMmVWwPpFgi3HDodEHP8mlApELVc0v69bwZAjC3PL3o339+sLlQO+amA0S
S9sUqTdQCRSC6A1Y2e4zGzIl9j02DYUDL/+7s69hsedryK1a/bM4DzjsGjlYU6Qk
3jIGjHYLQQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:25:39 2026 by rpki-client