
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
File: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft (raw, json)
Hash identifier: tWPvYQ7+XHn7kYgiTqg+BGA3Z0Z2EOM/1PNkyomNUcw=
Subject key identifier: 97:C2:89:81:15:1D:12:99:AA:08:8F:DE:68:8B:96:07:8A:E3:7A:75
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial: 71A780DEEA698682C748B92A13EEBFC59E12AEFB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
Manifest number: 0148
Signing time: Sat 03 Oct 2026 10:21:50 +0000
Manifest this update: Sat 03 Oct 2026 10:16:50 +0000
Manifest next update: Tue 06 Oct 2026 17:43:50 +0000
Files and hashes: 1: 3231312e3135352e3131352e302f32342d3234203d3e20313338393135.roa (hash: nIl2i2B02vIqBDHcb7FeY/BxvEeovZo9z6802hKW/QY=)
2: 34352e3131392e36302e302f32322d3232203d3e20313333373734.roa (hash: Sm4T6PdlaWK5L2THDkzzGLZz2EgkHdch3D9qDQ6YrT4=)
3: 3231312e3135352e3131352e302f32342d3234203d3e203538383534.roa (hash: TReC9XrrN7Nwf1erqtsk0E8oVQofSFHJgWXfzrRUE/I=)
4: 3130332e32372e372e302f32342d3234203d3e203538383534.roa (hash: g+hnuBNKsm6ziUrgUw+cA7ldB47CwfimIC2umZGUB+8=)
5: 3130332e37332e3134302e302f32322d3232203d3e20313333373734.roa (hash: 8WSsYxHsECWbvPccgByEONrwAZ9fl3TFYCpPNGSJT20=)
6: 3130332e32372e342e302f32342d3234203d3e203538383534.roa (hash: qGte1Ot7Eg/0TbNzqdJBQ/lLSyl2J5F4UszZ0mAyRSA=)
7: 3231312e3135352e3130342e302f32322d3232203d3e20313333373734.roa (hash: g7URIOtpeptv0I7W/H+Q02JimqVDks0/5btGuJMLPrQ=)
8: 3231312e3135352e3132302e302f32312d3231203d3e203538353431.roa (hash: H6Z1n4816A3cvrcg/4JXWuWg2N4DIsmC9oHT0+xO5As=)
9: 3231312e3135352e3130382e302f32322d3232203d3e20313333373734.roa (hash: ogYFO207LFn8kLObTi8Qo2cpfCdN22qWreV61dxA9c0=)
10: 3130332e3233362e3235322e302f32322d3232203d3e203538383534.roa (hash: nLGhDHJd/7rK44szUZ5Kzu32mo/lJeTWCIKFN5gT67c=)
11: 3130332e37332e3133362e302f32322d3232203d3e20313333373734.roa (hash: ZbFlWcVsJTKN95YZjDMwOGcWQuTPwIm4cw3vdL6PP2Q=)
12: 3231312e3135352e3130302e302f32322d3232203d3e203538383534.roa (hash: NnUTERng8XaU5Ibm8Y9WptoyvnTqqEUE7HudYxpFaiM=)
13: 3231312e3135352e3131322e302f32322d3232203d3e20313333373734.roa (hash: DdMXKf2YuUywOCcCTI+DqM/FwcP9SDtTMYZyLt6wl/w=)
14: 3231312e3135352e39362e302f32322d3232203d3e203538383534.roa (hash: vVLRo+HKLvh/kXcauZdzM35qZL4rcz/wF9d38NpTTv0=)
15: 3231312e3135352e3130302e302f32322d3232203d3e20313338393135.roa (hash: b4z4tTY89/Ga0J0Dc9lDy7pLUYgbukf87p/xggmu81Y=)
16: 3130332e32372e342e302f32322d3232203d3e203538383534.roa (hash: X07mjB9bjxe2OIWzT2PkfOiYRqWsVnjKrNMXTnKBIxg=)
17: 32372e302e3133322e302f32322d3232203d3e20313333373734.roa (hash: 0BCrGq9sKzR0fU7bZ94Uyl76JvH1VOtee+YKTiZ4qb0=)
18: 3231312e3135352e3132302e302f32322d3232203d3e203538353431.roa (hash: XqKnIABB835jNYZmEZ3t9axw68PnzIQthEAUJrJc+yI=)
19: 3231312e3135352e3132342e302f32322d3232203d3e203538353431.roa (hash: NOufZeeVBWAEETKbJl+H6zHNtoZyY/S4SDIVSid74d0=)
20: 3231312e3135352e3131362e302f32322d3232203d3e203538353431.roa (hash: 0dz8ghbPK3azmdvVE2lLdDzedpnnWzUkxi94JHAmQg0=)
21: 3130332e32372e362e302f32342d3234203d3e203538383534.roa (hash: hYzmn3mM9dAzyh5h5bkJq/XcXwmxINBr6hHDnWDJgA4=)
22: 34352e3132362e3132302e302f32322d3232203d3e20313333373734.roa (hash: AgfUQHFuvXuvbVut6uk3L47mq/FUpfzy8Xxpq7sQuwI=)
23: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl (hash: xNfaRPXd/fUUpo1uwXUY8eHdS4/AEgrMLmpZC2HAb30=)
24: 323430373a376430303a313a3a2f34382d3438203d3e203538383534.roa (hash: zOAxiWcQ3idJewlosYrGmuniZSxq36jngRIx+dMCARs=)
25: 3130332e36342e3231322e302f32322d3232203d3e20313333373734.roa (hash: Kqvu3gp6OHhgSZJSSxhvDaYWPDX1Qo8zwYxhwHJDdoc=)
26: 3130332e36342e3135362e302f32322d3232203d3e20313333373734.roa (hash: S6hC0YjpsJuxmy8Axv3uYCWhbCGQrPkkDePjTyATLac=)
27: 3231312e3135352e3130342e302f32322d3232203d3e20313338393135.roa (hash: bB7BfzKkIwZUwlWdw9j4kqEd/PrTF1o3u3Y0+/9z3ps=)
28: 3130332e3130352e36302e302f32322d3232203d3e203538353431.roa (hash: aNs6sRli221O5KrEAoD0mNIaznXphx0V3lJfd42p1ac=)
29: 323430373a376430303a313a3a2f34382d3438203d3e20313338393135.roa (hash: GVUrnj180FKd+SY6zIZzgnNqGMgtGlxATCY9H/0PTKQ=)
30: 3135302e3234322e39362e302f32322d3232203d3e20313333373734.roa (hash: E4lAz1S/muh0tSxxpwW01U7VqwUZl+TwwxwZTCkuE8Y=)
31: 3130332e35392e3131322e302f32322d3232203d3e20313333373734.roa (hash: fW0XDmPZUdQM2bQp/l3K+jPOu3T0QqmCbPxXrk2cD7Y=)
32: 3231312e3135352e39362e302f32322d3232203d3e20313338393135.roa (hash: mkRk/FfIjDtmaIG6G1C+HoEu70RiS2JMavmAU6dcucM=)
33: 3130332e32372e352e302f32342d3234203d3e203538383534.roa (hash: 7pTtCdtAeXZxGjA7RJCZZdkN9oIX588wv35Q/6jbVas=)
34: 34332e3234322e37322e302f32322d3232203d3e20313333373734.roa (hash: uwR1P/ibjSn0EqNSQlz8TQd0LIi6DXH9VY+ve+oFQ5E=)
35: 32372e302e3133322e302f32322d3232203d3e203538383534.roa (hash: j1leNzG71vinHeU48HQ2pH/5kmDNO6G4B6bCEWPWmMc=)
36: 3231312e3135352e3130342e302f32322d3232203d3e203538383534.roa (hash: ZvvpEEOuSCVRSI9C2BZN47oe6i/TIVMXv0WiVVEFrdA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 09:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a7:80:de:ea:69:86:82:c7:48:b9:2a:13:ee:bf:c5:9e:12:ae:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Validity
Not Before: Oct 3 10:16:50 2026 GMT
Not After : Oct 6 17:43:50 2026 GMT
Subject: CN=97C28981151D1299AA088FDE688B96078AE37A75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:ee:58:59:22:b2:a5:2d:e7:6d:65:06:46:
a7:c7:8a:53:ed:2f:5b:ba:ea:19:2d:be:1e:2e:79:
fe:5b:51:2e:61:ac:5d:86:88:80:d5:e5:94:6c:c1:
23:24:3e:bc:8f:ce:51:94:f6:77:e4:7d:af:19:5e:
fa:b4:f0:f6:2a:0e:83:82:45:c6:cc:23:4a:49:c9:
14:e9:37:cb:74:89:0a:6a:d3:d1:25:b7:cf:e3:6e:
23:af:3a:2b:da:4a:d0:fa:1f:34:2e:24:9c:55:c3:
5c:e9:8d:ab:e4:32:f8:f3:97:4f:15:25:60:d6:35:
89:67:3f:5b:d3:55:9d:05:04:ee:0d:11:65:bc:5b:
27:08:72:f8:ed:b3:0f:54:51:6f:7d:18:20:af:5f:
41:e0:c7:c1:64:e6:8f:f9:cc:8f:dc:85:14:fd:c0:
d4:9d:c8:cf:52:8e:4e:80:16:27:c4:d1:96:bc:de:
a2:47:b0:17:09:b3:17:1b:f3:b5:5e:d0:00:95:4a:
8c:53:b8:98:d3:25:9c:80:b5:c2:9c:29:bd:37:06:
94:c6:e6:c5:d8:e5:f6:87:0d:48:fd:ab:c2:b2:d6:
5a:4d:7a:97:3c:a6:34:c3:9a:ce:3b:6c:0f:65:d4:
e9:60:aa:8e:b3:d6:40:5b:25:7d:5f:87:fd:16:52:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C2:89:81:15:1D:12:99:AA:08:8F:DE:68:8B:96:07:8A:E3:7A:75
X509v3 Authority Key Identifier:
keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ca:36:ff:9c:12:5d:4f:61:c9:f4:a9:89:40:46:00:d7:b5:
32:9b:06:4d:d2:de:2f:15:68:80:bf:17:f0:41:8a:53:ac:e8:
e7:a1:5a:ef:95:8e:c4:b1:6b:a0:8f:9a:18:f6:37:44:11:57:
51:9f:29:fe:97:a8:4c:29:1f:25:7c:19:d0:de:89:af:79:b6:
9d:46:4d:a2:1d:2b:5f:95:bc:24:94:74:db:04:da:9a:6d:50:
d4:5e:dc:f6:47:05:3c:fe:e5:4c:3a:bc:d3:f2:6c:7b:46:40:
67:c2:c4:de:46:7b:1d:4b:d8:9b:96:4e:e2:39:ff:0e:b9:80:
c8:64:b9:06:e0:c2:d4:c9:10:4b:1d:0f:24:cc:45:35:51:bb:
0b:2d:56:91:bd:2f:b5:a8:c1:2b:21:fb:bc:79:44:51:2f:18:
89:d4:09:cd:b3:c4:b8:a9:86:2f:21:aa:38:8f:97:60:9f:55:
34:91:28:08:b0:f4:d6:5e:eb:e1:3b:4c:d0:91:33:1f:43:00:
82:f8:61:a7:6f:1c:c1:92:b1:c3:3b:24:8b:dd:ae:60:fe:85:
c4:be:f1:64:d7:21:43:93:54:20:07:2d:86:13:42:7f:f3:72:
bb:f7:31:80:f7:30:6c:e3:65:3c:5c:98:9e:b2:66:eb:26:27:
d5:01:2e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:35:16 2026 by rpki-client