
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
File: D569CE49ED940955318F718AEACD6D410BFF66B3.mft (raw, json)
Hash identifier: 4OahQkmjXzUJobywwxnXM6uOQmtSR1fnxDetCJ8bESA=
Subject key identifier: F2:17:85:78:B3:FC:61:F3:7F:53:44:DF:40:18:8D:8E:FC:8B:8A:B3
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial: 745F743F114F1B30C55B1E888F62E8002CE46FD0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
Manifest number: A2
Signing time: Tue 28 Jul 2026 17:27:21 +0000
Manifest this update: Tue 28 Jul 2026 17:22:21 +0000
Manifest next update: Wed 29 Jul 2026 17:53:21 +0000
Files and hashes: 1: 34332e3234332e3133382e302f32332d3233203d3e2034383038.roa (hash: UFc1MA45ujfU5YItyaYkZq1sEQBdwiNu5jfwq/iSPDU=)
2: 3130332e33382e3232342e302f32332d3233203d3e2034383038.roa (hash: 7dPSFCDj0PIzP6El/y+lacMv5iRRwMATYARYTzcJCTg=)
3: 3130332e39332e3230342e302f32322d3232203d3e2034383437.roa (hash: c3GeuIs4VkQfLWWRwfzcWcUnDjF1Zl2LhsyNxr5DM1U=)
4: 3130332e33372e3137322e302f32322d3232203d3e2034383437.roa (hash: ZLSAj91TCNLWpmJqAuFupd75mGM7DIEK9ACn9QOoMRU=)
5: 3130332e34332e3138362e302f32332d3233203d3e2034383038.roa (hash: +/hzGXAPdjUFZN2ItUhpXUD6o25OXmDnYup+aveZY+s=)
6: 3130332e34332e3138342e302f32332d3233203d3e2034383038.roa (hash: 58sAFUQcffD9Ee3VUeCuDzcGIFTa8oRrzCJsEFONdi4=)
7: 3130332e34372e34382e302f32332d3233203d3e2034383038.roa (hash: EGFeWmWIyr+USyiqXj6ibb0EHfeKnqu7Opu/tId22Yk=)
8: 35392e3135332e36342e302f32322d3232203d3e2030.roa (hash: gYggE55VWRSwMIbG1Cq3gSFhE0CBxFxT1X9h0NKFL8I=)
9: 34332e3234312e3234302e302f32332d3233203d3e2034383038.roa (hash: Lydf+HeHIzjAwoZErdFDn5KtbiIWOENNEr7cVYyLFk0=)
10: 3130332e3139382e36302e302f32332d3233203d3e2034383038.roa (hash: MBq3OH/vne3tS8JtiUeLcCuvfUCea9w4ciYPqhPXhsQ=)
11: 34332e3234312e3234322e302f32332d3233203d3e2034383038.roa (hash: sVydZ+GvGDFoPNuzhCTpLN5HOyW0wDG576NjGm+vN2Y=)
12: D569CE49ED940955318F718AEACD6D410BFF66B3.crl (hash: hWHhkByeR4R62KsILtq2liYScOZdOTfHatPL0UBAOEY=)
13: 34332e3232372e3235322e302f32332d3233203d3e2034383038.roa (hash: kqBTKXZuUTFu7ozAEqtreqOTWSE2PVCXlgb+48hQccY=)
14: 34332e3232372e3235342e302f32332d3233203d3e2034383038.roa (hash: cdPx20syskwekFlfeG9W3LsffSVTsSoPcPp0Zkm0kCM=)
15: 3130332e3139382e36322e302f32332d3233203d3e2034383038.roa (hash: tozC0Xn5DxnoxIpvuHYtie3w0rP28y+UfkhwTkZQI30=)
16: 3130332e34372e35302e302f32332d3233203d3e2034383038.roa (hash: 5oyY01hEuqvle1ETlN/iZfm3VvugkwkDCcQO5FZtFZk=)
17: 3130332e33382e3232362e302f32332d3233203d3e2034383038.roa (hash: bXClGDPYbjWgMEq8SA5ZPYKAYZZCbMQZiJ3UF69ee60=)
18: 34332e3232382e33362e302f32332d3233203d3e2034383038.roa (hash: Xa5AXQxRxhiNUn0Q383X3+I1dkYG4/UzCR3ox8vQoXk=)
19: 34332e3232382e33382e302f32332d3233203d3e2034383038.roa (hash: mpbAsvFDLG/ZIcdpHFPiePOhuggrNP073Yxd6/YcbSE=)
20: 3130332e34372e34382e302f32322d3232203d3e2034383038.roa (hash: tQrGvA+ovIhb2o+IGqUAyjVnC1YGmGLo20op2NAtTds=)
21: 34332e3234332e3133362e302f32332d3233203d3e2034383038.roa (hash: MeegwRZIHce0h2CLLPnHVq97GiQa/EeEGjxY12mLK40=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5f:74:3f:11:4f:1b:30:c5:5b:1e:88:8f:62:e8:00:2c:e4:6f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Validity
Not Before: Jul 28 17:22:21 2026 GMT
Not After : Jul 29 17:53:21 2026 GMT
Subject: CN=F2178578B3FC61F37F5344DF40188D8EFC8B8AB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:4c:30:16:8b:34:2d:e0:97:02:1b:31:c7:
61:f6:5e:63:b4:a1:64:a3:de:ef:bf:ec:be:d4:b3:
a5:75:98:a9:cd:9f:79:53:02:16:01:54:26:bb:5a:
7c:08:1e:7a:32:05:2d:7e:e6:e0:b3:66:fc:cc:5d:
dc:0c:88:cf:46:4e:c0:d3:4e:15:71:74:11:fc:fe:
26:ca:5b:8a:88:dc:b4:a0:92:2e:2f:02:57:07:30:
4a:00:a8:79:5d:79:7a:6a:60:77:a5:34:4a:f3:d5:
51:78:04:2e:13:f5:e3:aa:be:bf:4a:28:fe:ad:a0:
65:0a:c4:92:b6:5c:30:c1:81:4b:5a:6a:a0:8b:dc:
36:1b:43:e7:81:e0:52:f0:29:d8:1a:51:91:2a:f6:
ed:70:ac:ac:ca:f9:04:66:b8:18:bc:9b:0a:d5:00:
99:c8:f1:b5:2e:a2:b1:54:f2:5c:ea:c7:03:6f:5f:
ca:0d:ec:7e:19:dc:64:5e:0a:68:79:d5:54:6a:b9:
16:9f:3e:a8:dd:d0:8b:8f:fb:cc:d4:99:a4:12:e2:
83:90:1a:ee:e9:9c:ba:df:b7:0b:42:fc:d5:16:55:
11:e0:89:6e:30:ee:24:0f:3b:bb:45:92:5f:ef:4e:
2f:d9:66:dd:bc:a6:0c:a1:e4:80:bd:76:18:2f:a1:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:85:78:B3:FC:61:F3:7F:53:44:DF:40:18:8D:8E:FC:8B:8A:B3
X509v3 Authority Key Identifier:
keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8c:fb:45:eb:6c:c3:fb:bb:16:9e:cd:d7:b4:51:e5:89:3f:
b7:e6:79:2d:72:46:5d:15:67:32:c7:2f:16:4e:67:d4:94:19:
0e:13:c4:dc:fe:c0:9f:e5:2a:a5:c7:2c:57:98:d6:22:a4:1a:
39:6a:44:48:89:be:16:2f:1e:a2:99:99:f3:31:60:34:22:8c:
b9:98:11:fc:e9:e0:05:46:80:04:36:1d:cd:a7:46:5a:96:59:
53:65:61:b2:e3:c3:de:be:e9:cd:98:71:cc:53:ab:dc:de:cc:
d6:a8:f8:c7:a2:e2:e4:e5:c7:10:37:ae:a9:85:a1:12:c6:70:
99:f8:39:20:fe:90:69:6a:2c:17:48:1e:47:a3:c6:40:a8:5d:
99:46:df:9b:27:bc:e9:cb:04:b1:46:72:9a:8f:59:53:4d:d7:
12:d3:56:af:70:00:c9:3d:ab:24:b9:ff:60:3c:24:3a:5f:17:
6b:17:62:d2:f0:70:cb:1e:4f:4f:55:17:bc:e6:f2:16:9a:30:
85:e7:1e:92:a5:0f:7f:b9:90:65:35:56:dc:3f:9b:c1:58:9a:
b6:59:da:47:c1:a0:bc:fd:ef:c7:ba:59:79:c6:69:20:77:44:
32:4e:4e:96:a0:e8:e2:df:f4:1d:8d:8e:89:b2:31:dc:ac:c3:
ab:e7:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:05 2026 by rpki-client