
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
File: D569CE49ED940955318F718AEACD6D410BFF66B3.mft (raw, json)
Hash identifier: mkyLB4wdshTBMS9OMmVxbFiU3Q5vknNSxrAU+jOyNbQ=
Subject key identifier: 6F:59:31:9F:88:D5:D0:A3:DB:12:AC:10:C1:82:EC:14:7C:A0:4B:84
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial: 2E2C8EA5CC33E273A28EBEB34BC758CC9EA943BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
Manifest number: 16
Signing time: Fri 17 Apr 2026 14:04:43 +0000
Manifest this update: Fri 17 Apr 2026 13:59:43 +0000
Manifest next update: Sat 18 Apr 2026 14:50:43 +0000
Files and hashes: 1: D569CE49ED940955318F718AEACD6D410BFF66B3.crl (hash: wFlE86ZZtFA+7ebNUoD9/XOIuZqDRtcXloCy9QwlWJo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 14:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:2c:8e:a5:cc:33:e2:73:a2:8e:be:b3:4b:c7:58:cc:9e:a9:43:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Validity
Not Before: Apr 17 13:59:43 2026 GMT
Not After : Apr 18 14:50:43 2026 GMT
Subject: CN=6F59319F88D5D0A3DB12AC10C182EC147CA04B84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:12:6a:07:e7:09:7a:ae:f6:56:74:14:2e:
02:68:56:9c:64:db:eb:d9:53:1a:65:1d:64:7f:c7:
e8:ba:bc:ef:80:31:a8:09:62:99:b7:28:fc:f6:45:
68:5f:92:50:e2:c8:ba:74:ed:47:31:16:af:9f:0d:
36:92:6e:77:4c:19:e6:b4:2b:61:99:3f:50:64:a3:
a4:32:fd:a7:99:07:a8:93:8a:24:6f:a3:4d:d3:77:
0b:1e:25:8c:96:f7:49:19:b0:1a:6f:4f:33:bb:2f:
75:30:39:c0:d7:2d:43:44:61:ed:b7:29:a2:aa:c9:
76:89:94:d1:dc:af:b6:4a:ec:9e:38:4b:d1:d9:90:
29:4d:f3:42:94:a5:7d:e4:f0:3a:db:b4:0d:4a:1c:
75:40:7b:ef:06:85:79:ab:f6:8c:fc:58:1f:1c:6c:
6d:61:47:fe:ac:11:7d:c9:8e:65:42:a6:ae:aa:27:
b3:d0:b6:8b:8c:2f:5d:a5:5f:35:72:1e:a9:c3:7f:
f4:c3:77:81:8c:19:7c:47:a9:ce:4f:28:32:74:c2:
a7:f2:f1:f4:e4:fa:f1:8b:77:06:75:4b:f2:e9:df:
8d:75:a4:76:b1:9d:f4:a6:ac:c0:de:74:a1:c4:e7:
79:e7:ab:29:01:e7:0c:80:b2:ba:e5:40:8c:30:74:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:59:31:9F:88:D5:D0:A3:DB:12:AC:10:C1:82:EC:14:7C:A0:4B:84
X509v3 Authority Key Identifier:
keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d7:c3:8f:c4:38:0e:0e:3f:97:96:74:d9:95:46:a2:22:3f:
f7:db:c5:23:a4:63:c9:a3:f1:48:27:60:44:c2:8c:40:9c:f2:
d0:28:b9:e5:10:a9:5c:bc:d9:ac:d4:94:ef:e6:71:5d:80:cb:
d0:e8:42:be:72:02:4c:52:d3:20:df:91:5b:2f:69:74:1a:07:
76:d4:e6:f2:df:ef:14:19:b8:a6:1a:55:85:47:17:ae:14:59:
d9:8d:a0:1d:6a:4e:09:a5:39:57:7f:05:ab:66:56:ad:bc:eb:
1c:85:0c:70:d6:ee:3c:0c:28:00:8f:47:d4:ad:50:e4:29:e6:
cb:6f:72:64:ca:95:95:2f:e6:93:e7:02:ca:d7:aa:a5:1c:e1:
ef:15:6c:2b:81:f8:88:f8:ba:b6:1b:d2:96:bb:ab:3c:a5:0a:
44:10:10:54:cc:7c:1a:34:55:e4:fb:e6:d8:3d:59:ee:3b:37:
89:7f:40:6a:c6:4e:bd:4c:27:1b:c7:de:ea:ac:bb:95:96:5e:
11:38:67:8d:e1:e3:96:12:59:94:42:42:2c:a8:62:11:14:38:
e6:39:52:49:a2:e8:b5:16:61:68:d1:f8:9e:22:6b:64:74:ba:
eb:ed:1c:db:9a:52:1b:ab:70:e8:cb:72:87:d3:ca:ba:7e:9d:
41:fb:8b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:42:56 2026 by rpki-client