
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
File: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft (raw, json)
Hash identifier: EkAlOshVfIVo1x/NItgnBDlPAFuyOBabdqFN2gpTFTg=
Subject key identifier: 16:F4:D8:52:5B:86:90:AB:BA:FD:4E:64:7A:22:D9:42:5E:3A:FC:17
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial: 5D4209FF860CE87AE9DC1F5312061589CF951C71
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
Manifest number: D2
Signing time: Sat 13 Jun 2026 19:07:08 +0000
Manifest this update: Sat 13 Jun 2026 19:02:08 +0000
Manifest next update: Sun 14 Jun 2026 19:57:08 +0000
Files and hashes: 1: 34332e3234322e37322e302f32322d3232203d3e20313333373734.roa (hash: uwR1P/ibjSn0EqNSQlz8TQd0LIi6DXH9VY+ve+oFQ5E=)
2: 3130332e32372e352e302f32342d3234203d3e203538383534.roa (hash: 7pTtCdtAeXZxGjA7RJCZZdkN9oIX588wv35Q/6jbVas=)
3: 3130332e37332e3134302e302f32322d3232203d3e20313333373734.roa (hash: 8WSsYxHsECWbvPccgByEONrwAZ9fl3TFYCpPNGSJT20=)
4: 32372e302e3133322e302f32322d3232203d3e203538383534.roa (hash: j1leNzG71vinHeU48HQ2pH/5kmDNO6G4B6bCEWPWmMc=)
5: 3130332e35392e3131322e302f32322d3232203d3e20313333373734.roa (hash: fW0XDmPZUdQM2bQp/l3K+jPOu3T0QqmCbPxXrk2cD7Y=)
6: 3231312e3135352e3132302e302f32322d3232203d3e203538353431.roa (hash: XqKnIABB835jNYZmEZ3t9axw68PnzIQthEAUJrJc+yI=)
7: 3231312e3135352e3131352e302f32342d3234203d3e20313338393135.roa (hash: nIl2i2B02vIqBDHcb7FeY/BxvEeovZo9z6802hKW/QY=)
8: 3135302e3234322e39362e302f32322d3232203d3e20313333373734.roa (hash: E4lAz1S/muh0tSxxpwW01U7VqwUZl+TwwxwZTCkuE8Y=)
9: 3130332e3233362e3235322e302f32322d3232203d3e203538383534.roa (hash: nLGhDHJd/7rK44szUZ5Kzu32mo/lJeTWCIKFN5gT67c=)
10: 32372e302e3133322e302f32322d3232203d3e20313333373734.roa (hash: 0BCrGq9sKzR0fU7bZ94Uyl76JvH1VOtee+YKTiZ4qb0=)
11: 3231312e3135352e3130302e302f32322d3232203d3e20313338393135.roa (hash: b4z4tTY89/Ga0J0Dc9lDy7pLUYgbukf87p/xggmu81Y=)
12: 3130332e36342e3231322e302f32322d3232203d3e20313333373734.roa (hash: Kqvu3gp6OHhgSZJSSxhvDaYWPDX1Qo8zwYxhwHJDdoc=)
13: 3231312e3135352e39362e302f32322d3232203d3e203538383534.roa (hash: vVLRo+HKLvh/kXcauZdzM35qZL4rcz/wF9d38NpTTv0=)
14: 3231312e3135352e3131362e302f32322d3232203d3e203538353431.roa (hash: 0dz8ghbPK3azmdvVE2lLdDzedpnnWzUkxi94JHAmQg0=)
15: 323430373a376430303a313a3a2f34382d3438203d3e203538383534.roa (hash: zOAxiWcQ3idJewlosYrGmuniZSxq36jngRIx+dMCARs=)
16: 3231312e3135352e3130382e302f32322d3232203d3e20313333373734.roa (hash: ogYFO207LFn8kLObTi8Qo2cpfCdN22qWreV61dxA9c0=)
17: 3130332e36342e3135362e302f32322d3232203d3e20313333373734.roa (hash: S6hC0YjpsJuxmy8Axv3uYCWhbCGQrPkkDePjTyATLac=)
18: 3130332e32372e362e302f32342d3234203d3e203538383534.roa (hash: hYzmn3mM9dAzyh5h5bkJq/XcXwmxINBr6hHDnWDJgA4=)
19: 323430373a376430303a313a3a2f34382d3438203d3e20313338393135.roa (hash: GVUrnj180FKd+SY6zIZzgnNqGMgtGlxATCY9H/0PTKQ=)
20: 3231312e3135352e3131322e302f32322d3232203d3e20313333373734.roa (hash: DdMXKf2YuUywOCcCTI+DqM/FwcP9SDtTMYZyLt6wl/w=)
21: 3231312e3135352e3130302e302f32322d3232203d3e203538383534.roa (hash: NnUTERng8XaU5Ibm8Y9WptoyvnTqqEUE7HudYxpFaiM=)
22: 34352e3131392e36302e302f32322d3232203d3e20313333373734.roa (hash: Sm4T6PdlaWK5L2THDkzzGLZz2EgkHdch3D9qDQ6YrT4=)
23: 3130332e32372e372e302f32342d3234203d3e203538383534.roa (hash: g+hnuBNKsm6ziUrgUw+cA7ldB47CwfimIC2umZGUB+8=)
24: 3231312e3135352e3130342e302f32322d3232203d3e20313338393135.roa (hash: bB7BfzKkIwZUwlWdw9j4kqEd/PrTF1o3u3Y0+/9z3ps=)
25: 3231312e3135352e3130342e302f32322d3232203d3e20313333373734.roa (hash: g7URIOtpeptv0I7W/H+Q02JimqVDks0/5btGuJMLPrQ=)
26: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl (hash: cC0CApaLMbnzlwAnRzZUX+yLYINcE68uUe2feyekewg=)
27: 3130332e32372e342e302f32322d3232203d3e203538383534.roa (hash: X07mjB9bjxe2OIWzT2PkfOiYRqWsVnjKrNMXTnKBIxg=)
28: 3231312e3135352e3132302e302f32312d3231203d3e203538353431.roa (hash: H6Z1n4816A3cvrcg/4JXWuWg2N4DIsmC9oHT0+xO5As=)
29: 3130332e37332e3133362e302f32322d3232203d3e20313333373734.roa (hash: ZbFlWcVsJTKN95YZjDMwOGcWQuTPwIm4cw3vdL6PP2Q=)
30: 3130332e32372e342e302f32342d3234203d3e203538383534.roa (hash: qGte1Ot7Eg/0TbNzqdJBQ/lLSyl2J5F4UszZ0mAyRSA=)
31: 3231312e3135352e39362e302f32322d3232203d3e20313338393135.roa (hash: mkRk/FfIjDtmaIG6G1C+HoEu70RiS2JMavmAU6dcucM=)
32: 34352e3132362e3132302e302f32322d3232203d3e20313333373734.roa (hash: AgfUQHFuvXuvbVut6uk3L47mq/FUpfzy8Xxpq7sQuwI=)
33: 3231312e3135352e3130342e302f32322d3232203d3e203538383534.roa (hash: ZvvpEEOuSCVRSI9C2BZN47oe6i/TIVMXv0WiVVEFrdA=)
34: 3231312e3135352e3132342e302f32322d3232203d3e203538353431.roa (hash: NOufZeeVBWAEETKbJl+H6zHNtoZyY/S4SDIVSid74d0=)
35: 3231312e3135352e3131352e302f32342d3234203d3e203538383534.roa (hash: TReC9XrrN7Nwf1erqtsk0E8oVQofSFHJgWXfzrRUE/I=)
36: 3130332e3130352e36302e302f32322d3232203d3e203538353431.roa (hash: aNs6sRli221O5KrEAoD0mNIaznXphx0V3lJfd42p1ac=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:42:09:ff:86:0c:e8:7a:e9:dc:1f:53:12:06:15:89:cf:95:1c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Validity
Not Before: Jun 13 19:02:08 2026 GMT
Not After : Jun 14 19:57:08 2026 GMT
Subject: CN=16F4D8525B8690ABBAFD4E647A22D9425E3AFC17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:3e:73:d5:76:9a:72:22:10:29:ef:bc:1e:
07:fe:dc:4c:e9:67:59:00:d1:d6:9e:88:62:37:1d:
b4:2c:54:01:c3:7f:63:48:b0:e5:11:4a:85:39:3d:
71:ce:ca:42:c9:8d:18:31:5b:05:de:06:64:bd:92:
c2:08:9b:0a:2c:95:fc:da:85:82:f5:1e:08:57:da:
8b:a5:77:64:d8:09:cd:81:9c:e0:8c:e3:16:43:75:
33:db:d2:27:c7:25:b7:93:b6:b3:53:69:fe:a2:10:
f7:72:bb:52:59:a7:8e:02:df:e7:1d:43:33:f2:de:
09:4c:67:33:11:b5:a3:ea:66:b2:3f:b5:fc:64:c7:
05:2f:52:18:f0:78:e3:a1:ea:4e:a3:8b:5f:29:79:
88:10:61:ce:50:29:6e:5b:ce:d7:31:e3:7d:8a:92:
8c:14:95:a3:b9:bb:fb:05:1e:c2:09:7f:fd:05:c0:
5a:8e:c0:00:3a:e5:da:0b:90:60:74:71:9a:6b:a4:
78:0a:2a:9c:75:be:fb:26:47:c8:ef:f6:8e:54:4a:
d0:b8:96:aa:79:9f:6f:a9:b6:fc:24:a5:0d:8c:58:
f3:14:06:9d:9c:e0:69:2c:87:d5:96:0c:43:8a:17:
c1:4a:83:25:8d:d2:62:1c:1c:8c:e7:c1:0a:67:a3:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:D8:52:5B:86:90:AB:BA:FD:4E:64:7A:22:D9:42:5E:3A:FC:17
X509v3 Authority Key Identifier:
keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d1:f0:13:a7:9a:95:65:a3:d0:1b:6d:a3:f1:bb:ff:49:e7:
cb:74:00:2d:95:62:85:72:1b:fe:23:48:d6:a1:f6:f7:59:66:
88:74:4c:1b:cc:52:7b:e4:10:d5:1d:13:bd:2f:b0:e5:62:d1:
b9:53:f2:92:6c:72:2f:96:7c:75:d6:93:43:31:98:d0:f6:d8:
6e:e9:72:9c:c4:8d:74:ac:b4:74:f7:91:4a:1b:47:7e:7b:94:
b9:ab:49:df:30:8e:bc:ca:4d:37:c4:d4:07:ca:e4:71:a5:92:
fe:15:f1:39:00:df:1d:0e:23:a1:6c:9f:89:3a:ee:bb:e8:ac:
89:cc:fb:25:df:31:db:74:84:0b:04:f0:ae:50:9a:ab:ca:97:
35:a3:4c:6e:14:67:c7:a8:fb:68:80:8a:f8:14:3c:de:8c:89:
78:37:36:aa:f4:6f:54:f3:ce:22:eb:ac:97:6b:21:11:8a:61:
06:fa:9b:e7:82:23:ab:73:ee:18:0f:02:63:cd:c6:c5:9e:b3:
42:07:05:5d:84:d3:38:26:15:d6:67:49:f6:7b:7e:d9:fc:c9:
b1:95:35:b4:19:3d:25:34:cb:e3:70:c5:0b:b0:16:3c:c2:f4:
d8:ca:64:54:56:ba:ca:11:98:03:a5:70:9c:67:09:61:e8:b5:
7d:3b:ef:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:40:28 2026 by rpki-client