
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
File: 3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json)
Hash identifier: HXXeunaQPgC2UyrhnARlrgmiiRcdMhOSLYQDFPIQF5o=
Subject key identifier: 04:62:11:21:C8:E6:D0:0C:25:DE:66:3C:1E:18:A1:E7:CF:7F:2E:63
Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434
Certificate serial: 1517AE25106AF4A509B985C4CB69E8EF9E2DFF8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
Manifest number: 0100
Signing time: Tue 28 Jul 2026 18:02:26 +0000
Manifest this update: Tue 28 Jul 2026 17:57:26 +0000
Manifest next update: Wed 29 Jul 2026 19:39:26 +0000
Files and hashes: 1: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=)
2: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=)
3: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=)
4: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=)
5: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=)
6: 3132302e3133362e3135322e302f32322d3234203d3e203233383533.roa (hash: erIblciMvEQNpFoiI29fK8Db0M3ixaF8v4DyoPNB8/8=)
7: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=)
8: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=)
9: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=)
10: 3132302e3133362e3138382e302f32322d3234203d3e203233383533.roa (hash: bOMoD4GkZR5G7bg1hwUbmvGxSHBuMAi8FYq4NpkEpt0=)
11: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: Mmm60AvJmYR4kxU5dbJXmlFhY1UIz/AvByOCONlPmqU=)
12: 3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa (hash: xG1I6r6UAJfACKwK5sIgDn22lg/beJ2nLiIhCgnhcBM=)
13: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=)
14: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=)
15: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=)
16: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=)
17: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=)
18: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=)
19: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=)
20: 3132302e3133362e3134342e302f32312d3234203d3e203233383533.roa (hash: E24J4lCzhRkOqJW0ZJR5Sy9+c+JL4dSoESoQ2DvI8xM=)
21: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=)
22: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=)
23: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=)
24: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=)
25: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=)
26: 3230332e39352e3132382e302f32332d3234203d3e2034383038.roa (hash: r5nYtZ1bV8qfqfApkLDYfOj428A/V96xIcnp5lpFiB0=)
27: 3230332e39352e3132382e302f32332d3234203d3e2034383437.roa (hash: raJHohu1PhKXXDQxq7Zw6mLF7Xtxfw/jencxtzoXqDY=)
28: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=)
29: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=)
30: 3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa (hash: sJNFmFXoGKjrXXYM8WkTLWH9FsRgIw0tU5UB7xfQNtw=)
31: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=)
32: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=)
33: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=)
34: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=)
35: 323430343a373630303a3a2f33322d3332203d3e203233383533.roa (hash: gKtWmniIjY7C6+YlmHdzCK3hP/+EVEt8A1Yl3RllWsc=)
36: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=)
37: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=)
38: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=)
39: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=)
40: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:17:ae:25:10:6a:f4:a5:09:b9:85:c4:cb:69:e8:ef:9e:2d:ff:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434
Validity
Not Before: Jul 28 17:57:26 2026 GMT
Not After : Jul 29 19:39:26 2026 GMT
Subject: CN=04621121C8E6D00C25DE663C1E18A1E7CF7F2E63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:8a:dc:1f:aa:65:81:4a:b4:c8:cb:cf:23:
b7:93:7c:69:69:3e:a9:9d:51:0d:cd:de:5d:46:47:
4d:1a:65:ac:5b:c2:f4:1a:c2:54:91:46:bd:78:95:
7b:29:1d:15:ee:e5:5a:60:2d:81:43:8e:24:15:a6:
98:b0:dd:d7:78:e4:10:70:db:54:e2:6e:19:42:3d:
e0:6c:95:75:3a:17:d6:6c:52:d0:10:5f:83:c9:52:
82:b5:e1:fb:25:9a:ea:bd:c4:76:5d:4e:e5:33:19:
be:62:cb:62:be:52:3c:ec:6c:6b:d9:2b:de:0c:99:
07:b6:f0:36:af:d1:96:57:ca:2c:e3:ac:77:60:9e:
0d:bc:29:f2:53:79:e3:c5:59:9a:66:5d:89:e8:2f:
ae:ed:2a:8e:f0:ae:70:e0:04:9f:18:5c:d8:2c:62:
cf:c1:ab:59:75:1d:3d:05:78:49:de:cb:6f:ba:f5:
a6:50:f9:0e:87:00:79:3f:8d:55:d9:7e:88:e8:b5:
ae:4c:96:f6:7c:d6:7b:c0:30:d7:9f:c1:7c:dd:3a:
79:86:a2:59:2e:2b:95:59:98:5b:c6:d0:37:64:f6:
88:ca:45:02:de:5f:6f:ad:01:67:09:ba:4e:07:51:
96:25:d9:aa:53:a6:a2:b3:91:d1:03:91:ab:da:d6:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:62:11:21:C8:E6:D0:0C:25:DE:66:3C:1E:18:A1:E7:CF:7F:2E:63
X509v3 Authority Key Identifier:
keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:07:46:9e:df:c7:1d:2e:d5:86:da:d2:b2:0e:9a:09:9b:82:
86:5a:7c:5a:cc:fd:a9:a4:52:a2:a9:c0:6b:9f:91:9a:0f:9b:
5d:ff:da:82:13:6c:6e:11:e6:c8:ea:42:29:2f:cd:2c:93:9f:
3c:99:f7:a4:56:90:60:9b:b4:44:0b:5d:44:18:6c:5e:dd:49:
f2:7b:76:29:b2:1d:9f:19:75:6f:a6:43:be:bc:ac:b6:30:e3:
0b:8a:e1:75:15:dc:5f:d1:04:29:2d:3b:61:75:2a:f0:a8:27:
78:30:2b:70:ae:e3:a8:09:35:63:2b:5f:9d:82:7e:26:c9:94:
8b:87:3b:bd:16:44:bb:a9:81:72:13:0b:da:72:89:c1:e1:9e:
08:1b:ba:c4:bd:ae:74:8f:56:58:4e:cd:50:b2:38:0b:92:12:
0e:12:e3:bd:ed:85:05:1b:63:6d:2d:e1:b5:5e:c2:0b:e4:12:
6b:79:89:00:95:02:08:1c:5e:73:8a:f1:b0:9a:da:e2:d0:00:
5f:77:35:c5:f6:56:41:ef:80:01:b0:d7:75:1c:e9:9b:db:88:
b7:6b:36:ec:85:12:12:2a:3e:e6:8d:fa:40:73:7f:3e:cd:ba:
73:9f:bf:c3:8c:bc:19:2e:89:34:29:85:75:45:69:ce:27:f1:
c1:28:90:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:17:45 2026 by rpki-client