
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
File: D569CE49ED940955318F718AEACD6D410BFF66B3.mft (raw, json)
Hash identifier: JMVNs+OCz5VAEwFg2Jo5x/d8LX9dCcoNYa6USp56oEM=
Subject key identifier: 40:C2:EF:FF:A7:27:EE:25:1E:1C:50:71:0C:02:B1:C5:63:2B:A3:3B
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial: 66257729C4818A9592DDD54C283144D7BF1138F3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
Manifest number: 9C
Signing time: Fri 24 Jul 2026 04:05:19 +0000
Manifest this update: Fri 24 Jul 2026 04:00:19 +0000
Manifest next update: Sat 25 Jul 2026 04:47:19 +0000
Files and hashes: 1: 3130332e34372e34382e302f32322d3232203d3e2034383038.roa (hash: tQrGvA+ovIhb2o+IGqUAyjVnC1YGmGLo20op2NAtTds=)
2: 34332e3232382e33362e302f32332d3233203d3e2034383038.roa (hash: Xa5AXQxRxhiNUn0Q383X3+I1dkYG4/UzCR3ox8vQoXk=)
3: 3130332e34332e3138342e302f32332d3233203d3e2034383038.roa (hash: 58sAFUQcffD9Ee3VUeCuDzcGIFTa8oRrzCJsEFONdi4=)
4: 3130332e39332e3230342e302f32322d3232203d3e2034383437.roa (hash: c3GeuIs4VkQfLWWRwfzcWcUnDjF1Zl2LhsyNxr5DM1U=)
5: 34332e3234312e3234302e302f32332d3233203d3e2034383038.roa (hash: Lydf+HeHIzjAwoZErdFDn5KtbiIWOENNEr7cVYyLFk0=)
6: 3130332e3139382e36322e302f32332d3233203d3e2034383038.roa (hash: tozC0Xn5DxnoxIpvuHYtie3w0rP28y+UfkhwTkZQI30=)
7: 3130332e34332e3138362e302f32332d3233203d3e2034383038.roa (hash: +/hzGXAPdjUFZN2ItUhpXUD6o25OXmDnYup+aveZY+s=)
8: 3130332e3139382e36302e302f32332d3233203d3e2034383038.roa (hash: MBq3OH/vne3tS8JtiUeLcCuvfUCea9w4ciYPqhPXhsQ=)
9: D569CE49ED940955318F718AEACD6D410BFF66B3.crl (hash: SnuKF1SsdOhB/vfvrdIfMJyUWavTSeNFu3bDa07XkfM=)
10: 3130332e33382e3232362e302f32332d3233203d3e2034383038.roa (hash: bXClGDPYbjWgMEq8SA5ZPYKAYZZCbMQZiJ3UF69ee60=)
11: 34332e3234332e3133382e302f32332d3233203d3e2034383038.roa (hash: UFc1MA45ujfU5YItyaYkZq1sEQBdwiNu5jfwq/iSPDU=)
12: 34332e3234312e3234322e302f32332d3233203d3e2034383038.roa (hash: sVydZ+GvGDFoPNuzhCTpLN5HOyW0wDG576NjGm+vN2Y=)
13: 34332e3232372e3235342e302f32332d3233203d3e2034383038.roa (hash: cdPx20syskwekFlfeG9W3LsffSVTsSoPcPp0Zkm0kCM=)
14: 35392e3135332e36342e302f32322d3232203d3e2030.roa (hash: gYggE55VWRSwMIbG1Cq3gSFhE0CBxFxT1X9h0NKFL8I=)
15: 3130332e34372e34382e302f32332d3233203d3e2034383038.roa (hash: EGFeWmWIyr+USyiqXj6ibb0EHfeKnqu7Opu/tId22Yk=)
16: 34332e3232372e3235322e302f32332d3233203d3e2034383038.roa (hash: kqBTKXZuUTFu7ozAEqtreqOTWSE2PVCXlgb+48hQccY=)
17: 34332e3234332e3133362e302f32332d3233203d3e2034383038.roa (hash: MeegwRZIHce0h2CLLPnHVq97GiQa/EeEGjxY12mLK40=)
18: 3130332e33382e3232342e302f32332d3233203d3e2034383038.roa (hash: 7dPSFCDj0PIzP6El/y+lacMv5iRRwMATYARYTzcJCTg=)
19: 3130332e33372e3137322e302f32322d3232203d3e2034383437.roa (hash: ZLSAj91TCNLWpmJqAuFupd75mGM7DIEK9ACn9QOoMRU=)
20: 3130332e34372e35302e302f32332d3233203d3e2034383038.roa (hash: 5oyY01hEuqvle1ETlN/iZfm3VvugkwkDCcQO5FZtFZk=)
21: 34332e3232382e33382e302f32332d3233203d3e2034383038.roa (hash: mpbAsvFDLG/ZIcdpHFPiePOhuggrNP073Yxd6/YcbSE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:25:77:29:c4:81:8a:95:92:dd:d5:4c:28:31:44:d7:bf:11:38:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Validity
Not Before: Jul 24 04:00:19 2026 GMT
Not After : Jul 25 04:47:19 2026 GMT
Subject: CN=40C2EFFFA727EE251E1C50710C02B1C5632BA33B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:91:e6:0c:15:be:dd:7e:79:0c:c8:ae:08:
7b:b1:fd:b0:de:cd:83:b6:14:18:d5:1f:b7:98:20:
a3:9e:e9:5d:1d:58:f3:3e:2f:10:87:5a:d7:ce:c0:
0f:f0:94:6d:ac:ce:91:ec:38:c2:e8:2f:78:11:d0:
59:49:d7:12:84:80:2c:2d:77:c4:7b:bb:70:a9:95:
59:8a:d5:9f:60:42:ba:be:bd:30:ea:5a:ff:61:83:
9b:e8:88:7f:6c:fb:d9:22:ba:e9:07:a5:d5:1e:82:
b8:98:98:ee:e2:b4:73:b9:ec:2b:c1:23:a2:23:54:
22:d3:69:62:54:8a:b9:c1:b8:9b:ae:f0:f6:7f:cc:
0b:22:df:a4:59:88:85:a6:9c:d0:74:e6:0c:90:74:
d9:8c:a9:17:3d:82:3e:9a:d4:30:7e:77:0a:be:d2:
37:d8:0e:b2:91:38:e9:77:f7:3f:d0:0d:61:cd:47:
51:99:88:a9:5f:7a:ba:16:38:68:ea:11:aa:84:2b:
df:92:f6:18:92:d5:34:29:a3:d3:6e:84:08:24:35:
30:91:0d:a6:c0:88:a6:80:fc:72:7a:95:dd:e6:96:
8e:5d:6d:7a:ec:6e:8e:c7:8d:41:e9:3d:fd:1e:2c:
b8:36:5c:20:49:b7:c6:41:7c:f6:91:84:2d:d8:41:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C2:EF:FF:A7:27:EE:25:1E:1C:50:71:0C:02:B1:C5:63:2B:A3:3B
X509v3 Authority Key Identifier:
keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:df:01:6b:83:23:fb:ec:06:21:6b:8e:31:b7:ef:07:c5:d7:
46:67:6c:04:84:88:ca:6d:f7:dd:e6:a9:13:ac:80:de:c5:a6:
a6:e3:7e:30:07:7e:37:08:e1:75:4d:07:22:60:b7:08:76:00:
72:1d:b1:79:54:1d:23:a0:d1:ea:0e:48:7d:84:46:b5:69:fc:
cc:c2:25:ab:3e:5e:d5:9c:7b:e4:3d:9f:05:06:a6:4b:47:9c:
28:4a:4a:e0:b7:45:f4:61:d0:68:7a:ff:77:66:f4:9a:da:6f:
56:2e:9e:a3:1a:c7:e3:85:d4:3b:d3:06:37:a6:98:16:63:ef:
56:36:e9:72:57:9b:ce:20:99:d8:af:22:32:cf:ea:4f:fc:5a:
80:d7:f5:64:8d:06:f8:55:57:95:ee:82:d3:80:7f:66:54:57:
fe:15:3e:71:17:16:6f:fc:b0:14:80:74:ff:1f:9c:1a:7f:e3:
49:32:53:db:bf:fc:5e:62:9b:9c:74:ff:6e:30:b3:35:d9:09:
ed:25:f5:15:2f:0a:15:95:7c:6a:e7:65:df:24:ae:a0:d8:2a:
41:85:13:58:4b:ef:52:31:0b:3d:bc:6e:32:a5:b2:4a:54:3a:
56:5a:db:d0:82:d6:d8:3f:59:7c:35:74:22:ff:1c:63:e0:d2:
03:ae:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:26:25 2026 by rpki-client