
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
File: 3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json)
Hash identifier: GoprVDBtaE/uRX9YOe7N+UOQWk88ud9TeM/5Qo5Wpek=
Subject key identifier: C9:2E:9B:BD:D8:EB:78:85:8D:CC:54:7D:D8:41:98:12:49:60:6A:3F
Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434
Certificate serial: 404F05DF3702E9B232F4A9AF5EA9EF8BB12BFC3E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
Manifest number: 38
Signing time: Sun 01 Mar 2026 19:23:16 +0000
Manifest this update: Sun 01 Mar 2026 19:18:16 +0000
Manifest next update: Mon 02 Mar 2026 20:58:16 +0000
Files and hashes: 1: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=)
2: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=)
3: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=)
4: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=)
5: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=)
6: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=)
7: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=)
8: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=)
9: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=)
10: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=)
11: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=)
12: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=)
13: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: /gATQ6a0LFDI8KzRmxjm8u+oXSC3glh1ze4OYtNFQUw=)
14: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=)
15: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=)
16: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=)
17: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=)
18: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=)
19: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=)
20: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=)
21: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=)
22: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=)
23: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=)
24: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=)
25: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=)
26: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=)
27: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=)
28: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=)
29: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=)
30: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=)
31: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=)
32: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 20:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:4f:05:df:37:02:e9:b2:32:f4:a9:af:5e:a9:ef:8b:b1:2b:fc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434
Validity
Not Before: Mar 1 19:18:16 2026 GMT
Not After : Mar 2 20:58:16 2026 GMT
Subject: CN=C92E9BBDD8EB78858DCC547DD841981249606A3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:6f:09:40:b5:88:f4:61:17:1f:55:7c:3a:
a3:15:81:97:8f:f4:36:a4:0e:7d:55:22:f3:b3:80:
56:66:b6:92:c6:92:6b:d5:7a:ab:fe:75:98:60:19:
42:ae:b4:87:66:e2:51:ef:95:b5:7e:cd:76:3a:50:
54:71:8f:01:b6:6e:60:c7:17:df:20:de:38:6a:cd:
6c:c7:3d:05:27:b9:33:57:20:56:54:44:77:d8:01:
20:48:e1:1d:05:8b:cf:ae:82:d6:6f:40:30:95:31:
a1:d5:97:d1:f2:13:c0:8d:f4:ab:ba:12:a3:fc:c6:
b7:62:e1:82:fc:1b:c1:5c:c1:ae:16:ea:f2:16:44:
08:c3:40:12:05:f7:da:59:b3:5d:ad:57:d0:ff:1c:
0c:d4:06:6f:35:46:6c:ad:4c:70:11:ab:63:de:b3:
26:62:dc:f5:3d:58:67:67:45:e9:c1:27:96:91:87:
d0:96:97:71:53:60:12:e6:20:63:99:dd:bb:1b:f0:
79:d4:29:3e:9a:a2:57:2c:2a:40:ca:61:aa:13:c8:
93:19:01:2a:ab:c3:44:a4:c7:f6:a6:5c:3e:94:e6:
2a:aa:f4:43:1d:5a:49:43:72:b2:18:07:18:47:ca:
63:e4:2e:e0:14:1e:cb:c3:96:31:3a:8d:ad:f1:38:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2E:9B:BD:D8:EB:78:85:8D:CC:54:7D:D8:41:98:12:49:60:6A:3F
X509v3 Authority Key Identifier:
keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a8:84:26:03:78:5d:79:bd:b2:65:e3:a8:91:f9:a9:e0:1e:
69:5d:85:0a:d0:4d:13:0b:02:46:f4:69:da:76:54:53:19:2a:
81:b7:4f:23:52:33:2a:3a:8c:88:ad:8e:d2:c5:fd:8b:2e:38:
6c:6a:6d:73:1e:80:39:3b:ce:09:2e:6c:53:a9:de:f1:19:c7:
22:ce:ef:c2:7e:a8:c0:7a:0f:2d:ca:89:40:25:2b:5d:2d:ae:
34:23:a0:c5:67:16:37:53:a2:bf:f3:cc:17:07:41:e8:00:59:
d2:30:61:07:e3:72:85:2e:3b:bb:a7:ed:80:df:8e:76:6f:10:
06:f4:34:68:9b:ad:43:1f:c6:48:28:f4:9e:1d:4d:f3:23:e8:
aa:3d:d5:12:7a:8c:ed:0a:1d:90:de:32:9e:44:ba:28:a1:92:
73:d3:3f:37:83:d8:bd:af:10:47:97:93:f2:6a:f4:1a:16:66:
58:b2:19:60:2d:5f:35:6e:09:bc:77:df:03:88:2d:75:26:b9:
9a:a4:4d:a8:7b:58:41:eb:4b:af:ad:ce:bb:50:21:09:6a:42:
66:f1:c8:f4:47:dd:b7:5e:15:c3:79:f7:fd:92:19:1d:84:a4:
e4:bc:11:7f:13:ea:1a:fe:cf:2c:e1:e6:d1:50:96:f4:59:43:
79:f7:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:50 2026 by rpki-client