
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
File: D569CE49ED940955318F718AEACD6D410BFF66B3.mft (raw, json)
Hash identifier: yUnfZCSuXwlvKvyq9FTxxuWd6pu5e4w3xdv5uDHIJlU=
Subject key identifier: 3B:AB:75:3B:AA:66:6C:A8:E4:03:70:0E:E0:1D:B5:26:21:3C:33:E0
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial: 1CE632B641C12221FB9CE10C65AEA8B73446A971
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
Manifest number: DF
Signing time: Mon 12 Oct 2026 10:51:52 +0000
Manifest this update: Mon 12 Oct 2026 10:46:52 +0000
Manifest next update: Thu 15 Oct 2026 13:50:52 +0000
Files and hashes: 1: 34332e3234312e3234322e302f32332d3233203d3e2034383038.roa (hash: sVydZ+GvGDFoPNuzhCTpLN5HOyW0wDG576NjGm+vN2Y=)
2: 34332e3232382e33382e302f32332d3233203d3e2034383038.roa (hash: mpbAsvFDLG/ZIcdpHFPiePOhuggrNP073Yxd6/YcbSE=)
3: 34332e3234332e3133362e302f32332d3233203d3e2034383038.roa (hash: MeegwRZIHce0h2CLLPnHVq97GiQa/EeEGjxY12mLK40=)
4: 35392e3135332e36342e302f32322d3232203d3e2030.roa (hash: gYggE55VWRSwMIbG1Cq3gSFhE0CBxFxT1X9h0NKFL8I=)
5: 34332e3234312e3234302e302f32332d3233203d3e2034383038.roa (hash: Lydf+HeHIzjAwoZErdFDn5KtbiIWOENNEr7cVYyLFk0=)
6: 3130332e34332e3138342e302f32332d3233203d3e2034383038.roa (hash: 58sAFUQcffD9Ee3VUeCuDzcGIFTa8oRrzCJsEFONdi4=)
7: 3130332e34372e35302e302f32332d3233203d3e2034383038.roa (hash: 5oyY01hEuqvle1ETlN/iZfm3VvugkwkDCcQO5FZtFZk=)
8: D569CE49ED940955318F718AEACD6D410BFF66B3.crl (hash: MP/LLMpMaiG7nTk3zgmI8IV7xZ+2sbG/k7b3p3pvWgs=)
9: 3130332e34372e34382e302f32332d3233203d3e2034383038.roa (hash: EGFeWmWIyr+USyiqXj6ibb0EHfeKnqu7Opu/tId22Yk=)
10: 34332e3232372e3235322e302f32332d3233203d3e2034383038.roa (hash: kqBTKXZuUTFu7ozAEqtreqOTWSE2PVCXlgb+48hQccY=)
11: 3130332e34372e34382e302f32322d3232203d3e2034383038.roa (hash: tQrGvA+ovIhb2o+IGqUAyjVnC1YGmGLo20op2NAtTds=)
12: 3130332e3139382e36322e302f32332d3233203d3e2034383038.roa (hash: tozC0Xn5DxnoxIpvuHYtie3w0rP28y+UfkhwTkZQI30=)
13: 3130332e3139382e36302e302f32332d3233203d3e2034383038.roa (hash: MBq3OH/vne3tS8JtiUeLcCuvfUCea9w4ciYPqhPXhsQ=)
14: 3130332e33382e3232362e302f32332d3233203d3e2034383038.roa (hash: bXClGDPYbjWgMEq8SA5ZPYKAYZZCbMQZiJ3UF69ee60=)
15: 3130332e33372e3137322e302f32322d3232203d3e2034383437.roa (hash: ZLSAj91TCNLWpmJqAuFupd75mGM7DIEK9ACn9QOoMRU=)
16: 34332e3234332e3133382e302f32332d3233203d3e2034383038.roa (hash: UFc1MA45ujfU5YItyaYkZq1sEQBdwiNu5jfwq/iSPDU=)
17: 34332e3232372e3235342e302f32332d3233203d3e2034383038.roa (hash: cdPx20syskwekFlfeG9W3LsffSVTsSoPcPp0Zkm0kCM=)
18: 3130332e33382e3232342e302f32332d3233203d3e2034383038.roa (hash: 7dPSFCDj0PIzP6El/y+lacMv5iRRwMATYARYTzcJCTg=)
19: 3130332e39332e3230342e302f32322d3232203d3e2034383437.roa (hash: c3GeuIs4VkQfLWWRwfzcWcUnDjF1Zl2LhsyNxr5DM1U=)
20: 3130332e34332e3138362e302f32332d3233203d3e2034383038.roa (hash: +/hzGXAPdjUFZN2ItUhpXUD6o25OXmDnYup+aveZY+s=)
21: 34332e3232382e33362e302f32332d3233203d3e2034383038.roa (hash: Xa5AXQxRxhiNUn0Q383X3+I1dkYG4/UzCR3ox8vQoXk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e6:32:b6:41:c1:22:21:fb:9c:e1:0c:65:ae:a8:b7:34:46:a9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Validity
Not Before: Oct 12 10:46:52 2026 GMT
Not After : Oct 15 13:50:52 2026 GMT
Subject: CN=3BAB753BAA666CA8E403700EE01DB526213C33E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:a5:d5:6a:da:0a:53:bf:dd:0a:83:57:1c:
47:a1:7f:a2:8d:f6:61:34:92:af:d8:47:56:16:7c:
0c:c4:57:cd:73:a2:9e:e4:cd:02:46:10:5d:1d:39:
85:bd:eb:1d:c0:8b:d1:a0:9d:6b:74:53:9f:84:a4:
d1:42:5a:d1:58:05:89:f8:4b:80:dc:ed:e2:51:f7:
61:e0:5e:f0:20:ed:16:bd:14:80:33:90:84:7c:2e:
31:8f:4c:6b:d5:3c:83:93:b3:d4:b3:63:c7:56:35:
fb:b3:c3:48:88:37:81:17:bb:03:3a:c1:80:a5:9c:
1a:14:32:70:5c:a1:be:ed:41:f6:39:2f:c9:4c:c2:
f8:00:bd:7a:99:49:db:f8:6e:a3:78:2b:47:16:10:
60:71:e7:ae:05:85:a0:77:17:69:c6:95:d7:e1:52:
51:bf:3c:d6:87:04:5b:30:13:42:9a:04:e7:32:d9:
4c:5d:2a:d1:6a:75:04:9c:41:56:e2:b3:69:44:0d:
21:fa:4d:4b:5c:a6:9d:6e:a4:5e:41:0c:17:8e:df:
9d:69:e2:70:35:dc:bb:5b:cd:02:6c:84:86:d3:ab:
49:fb:1a:b4:91:21:d2:c0:84:b6:dc:80:b3:4b:4f:
a9:bc:6f:a6:23:f6:9d:b8:50:ec:67:31:7e:78:bb:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:75:3B:AA:66:6C:A8:E4:03:70:0E:E0:1D:B5:26:21:3C:33:E0
X509v3 Authority Key Identifier:
keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:50:7b:5f:7b:21:b3:f6:22:06:83:17:88:92:93:5a:b0:52:
52:79:1f:fb:fc:91:c6:0a:f9:8d:63:20:0a:ca:20:12:60:2d:
02:be:45:84:42:b6:37:93:40:71:c4:65:5f:23:f7:d4:5c:a1:
ac:7a:06:78:a1:76:b0:16:b0:fb:5b:73:0c:6f:9e:f4:bf:d9:
af:94:5c:e4:aa:ba:52:56:cf:bc:c5:84:c6:91:ea:14:e6:de:
a1:f5:cc:22:0a:4b:30:74:0b:b2:7c:f4:99:23:cc:d2:ba:cf:
85:78:90:eb:b9:7d:86:13:79:09:6f:d9:a8:75:cd:62:51:52:
a6:8a:dd:2f:90:b9:17:50:1a:62:82:28:18:96:23:f0:61:10:
c9:e8:59:68:41:4e:37:95:6e:59:78:c7:f6:be:ae:d4:b7:ee:
29:d9:00:0b:1c:f5:0d:5e:c7:f2:40:77:e0:84:e7:4c:95:b6:
6c:67:ce:80:d1:7d:43:06:c6:18:af:a5:a6:7f:11:1f:0c:5f:
fa:6e:ee:8b:86:df:da:d8:20:cd:3a:6f:34:f1:3b:9e:ea:5e:
ab:c1:b1:7b:c2:d5:ab:6d:e6:ed:5a:1f:ef:28:8b:26:cf:20:
24:ea:7b:de:47:8d:1d:c5:69:27:27:3b:62:87:28:3e:ef:b0:
27:dc:d3:6f
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHOYytkHBIiH7nOEMZa6otzRGqXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEw
QkZGNjZCMzAeFw0yNjEwMTIxMDQ2NTJaFw0yNjEwMTUxMzUwNTJaMDMxMTAvBgNV
BAMTKDNCQUI3NTNCQUE2NjZDQThFNDAzNzAwRUUwMURCNTI2MjEzQzMzRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFaXVatoKU7/dCoNXHEehf6KN
9mE0kq/YR1YWfAzEV81zop7kzQJGEF0dOYW96x3Ai9GgnWt0U5+EpNFCWtFYBYn4
S4Dc7eJR92HgXvAg7Ra9FIAzkIR8LjGPTGvVPIOTs9SzY8dWNfuzw0iIN4EXuwM6
wYClnBoUMnBcob7tQfY5L8lMwvgAvXqZSdv4bqN4K0cWEGBx564FhaB3F2nGldfh
UlG/PNaHBFswE0KaBOcy2UxdKtFqdQScQVbis2lEDSH6TUtcpp1upF5BDBeO351p
4nA13LtbzQJshIbTq0n7GrSRIdLAhLbcgLNLT6m8b6Yj9p24UOxnMX54ux1nAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUO6t1O6pmbKjkA3AO4B21JiE8M+AwHwYDVR0j
BBgwFoAU1WnOSe2UCVUxj3GK6s1tQQv/ZrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMzMDg1OTA5MjUwODY3My8wL0Q1NjlDRTQ5RUQ5NDA5NTUzMThGNzE4QUVBQ0Q2
RDQxMEJGRjY2QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEwQkZGNjZCMy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTI1MDg2NzMvMC9ENTY5Q0U0OUVEOTQw
OTU1MzE4RjcxOEFFQUNENkQ0MTBCRkY2NkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClB7X3shs/Yi
BoMXiJKTWrBSUnkf+/yRxgr5jWMgCsogEmAtAr5FhEK2N5NAccRlXyP31FyhrHoG
eKF2sBaw+1tzDG+e9L/Zr5Rc5Kq6UlbPvMWExpHqFObeofXMIgpLMHQLsnz0mSPM
0rrPhXiQ67l9hhN5CW/ZqHXNYlFSpordL5C5F1AaYoIoGJYj8GEQyehZaEFON5Vu
WXjH9r6u1LfuKdkACxz1DV7H8kB34ITnTJW2bGfOgNF9QwbGGK+lpn8RHwxf+m7u
i4bf2tggzTpvNPE7nupeq8Gxe8LVq23m7Vof7yiLJs8gJOp73keNHcVpJyc7Yoco
Pu+wJ9zTbw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:21:55 2026 by rpki-client