$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft File: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json) Hash identifier: 7Pawz9JYqa730zsUdbfntPcWUGX2heannw6L4UHLUxI= Subject key identifier: E8:AE:6B:D7:26:F3:ED:AC:C4:90:96:0F:CA:06:92:A0:A6:E9:65:B2 Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Certificate serial: 7F68273B332A0177F72AEE9260FBF487414E2913 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft Manifest number: 013D Signing time: Mon 12 Oct 2026 03:51:27 +0000 Manifest this update: Mon 12 Oct 2026 03:46:27 +0000 Manifest next update: Thu 15 Oct 2026 15:39:27 +0000 Files and hashes: 1: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: pRtCaetQjwxkAw5G9np4WhysjKZQ/8NW04pxN/paz2M=) 2: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:68:27:3b:33:2a:01:77:f7:2a:ee:92:60:fb:f4:87:41:4e:29:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Validity Not Before: Oct 12 03:46:27 2026 GMT Not After : Oct 15 15:39:27 2026 GMT Subject: CN=E8AE6BD726F3EDACC490960FCA0692A0A6E965B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0a:70:a3:b0:b9:bf:93:5c:2a:49:72:ea:e1: 51:31:3e:05:5a:eb:0f:8f:ae:8f:5f:a7:af:d0:34: 78:b6:1c:f7:76:db:34:28:22:47:f9:99:5c:95:b1: 71:db:91:6f:b7:ce:d6:9f:93:cd:b1:8e:30:1a:a3: b2:12:c0:3d:3d:41:f3:d9:a8:c5:a5:ae:c3:a6:7c: 46:05:9a:00:1c:1b:98:af:5e:9b:ab:1b:24:b7:7f: e6:6e:c7:30:a4:bb:7f:9f:b2:82:38:92:c3:eb:d2: f6:be:dd:ff:ce:37:24:9b:4c:71:fb:f5:06:03:61: b6:b4:1a:bd:2f:bb:7f:d8:0f:b3:cb:73:10:86:df: ef:84:64:a0:da:67:ac:0d:3e:b6:cb:51:d3:aa:36: 74:57:06:43:c7:d1:d9:55:aa:e2:5c:a5:5b:41:cc: f6:e3:0c:9e:17:39:d6:ec:dc:4a:34:8d:36:b9:85: 0a:95:da:1e:07:3a:f2:f7:18:e0:9e:13:cd:3a:a2: fb:09:0f:d6:b3:30:ab:12:89:ad:16:00:29:fb:86: 0f:f5:4f:c8:6b:58:03:d8:10:ae:f8:64:b4:93:a3: 37:ad:ab:21:27:34:80:65:e7:0b:f2:96:68:bb:4b: b1:3e:58:37:2d:d9:80:8a:cf:c0:8d:2d:e7:7e:03: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AE:6B:D7:26:F3:ED:AC:C4:90:96:0F:CA:06:92:A0:A6:E9:65:B2 X509v3 Authority Key Identifier: keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:30:61:c9:a0:74:2d:dc:f6:4a:26:9c:c2:2e:73:c7:9c:5f: 82:91:1a:3f:f9:cd:32:3c:fb:cf:6a:f8:fc:06:af:8e:f6:a0: b7:75:a8:9f:b3:61:8f:c1:af:be:82:da:10:f5:cf:64:21:21: 34:b3:3c:cf:72:9d:36:2f:84:22:51:e5:6d:29:c4:42:73:ba: cb:6b:79:09:8d:71:a7:bb:6f:0d:d5:bf:0e:5a:f4:b0:9c:e2: 0b:6b:ff:c9:b3:2f:b8:d3:0e:75:80:03:d6:44:f1:df:1f:5c: 6c:ee:69:2a:a2:78:0d:50:bd:20:d9:49:2f:ad:e0:11:db:44: 2d:89:bf:1b:a0:35:88:58:14:84:bf:b6:96:4d:89:89:5d:5f: ec:7d:cf:d6:39:f8:87:fd:d1:e1:90:27:3b:f5:81:6a:47:90: 5b:6c:50:93:30:76:9a:34:f2:73:ac:44:d0:1d:69:e7:3e:0f: 2b:9d:e8:83:fb:27:4f:97:68:cf:85:56:49:bf:33:bd:3a:03: ac:73:9b:5c:5d:9c:79:4f:25:b6:80:e9:9f:37:d4:4b:25:d6: 53:e1:47:2f:3e:54:4d:33:d1:67:a6:8d:6a:ed:68:ed:8a:a4: ca:6a:65:93:a8:6e:aa:9c:02:d9:e5:13:fd:76:98:c4:7b:5b: eb:80:ea:dc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf2gnOzMqAXf3Ku6SYPv0h0FOKRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMw MURBMkVGMTAeFw0yNjEwMTIwMzQ2MjdaFw0yNjEwMTUxNTM5MjdaMDMxMTAvBgNV BAMTKEU4QUU2QkQ3MjZGM0VEQUNDNDkwOTYwRkNBMDY5MkEwQTZFOTY1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjCnCjsLm/k1wqSXLq4VExPgVa 6w+Pro9fp6/QNHi2HPd22zQoIkf5mVyVsXHbkW+3ztafk82xjjAao7ISwD09QfPZ qMWlrsOmfEYFmgAcG5ivXpurGyS3f+ZuxzCku3+fsoI4ksPr0va+3f/ONySbTHH7 9QYDYba0Gr0vu3/YD7PLcxCG3++EZKDaZ6wNPrbLUdOqNnRXBkPH0dlVquJcpVtB zPbjDJ4XOdbs3Eo0jTa5hQqV2h4HOvL3GOCeE806ovsJD9azMKsSia0WACn7hg/1 T8hrWAPYEK74ZLSTozetqyEnNIBl5wvylmi7S7E+WDct2YCKz8CNLed+AyAbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6K5r1ybz7azEkJYPygaSoKbpZbIwHwYDVR0j BBgwFoAUfVDr3aAkJDZSRfGafflYwwHaLvEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3MzE2NjQzMDAyNzc3OS8wLzdENTBFQkREQTAyNDI0MzY1MjQ1RjE5QTdERjk1 OEMzMDFEQTJFRjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMwMURBMkVGMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzMxNjY0MzAwMjc3NzkvMC83RDUwRUJEREEwMjQy NDM2NTI0NUYxOUE3REY5NThDMzAxREEyRUYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTBhyaB0Ldz2 Siacwi5zx5xfgpEaP/nNMjz7z2r4/Aavjvagt3Won7Nhj8GvvoLaEPXPZCEhNLM8 z3KdNi+EIlHlbSnEQnO6y2t5CY1xp7tvDdW/Dlr0sJziC2v/ybMvuNMOdYAD1kTx 3x9cbO5pKqJ4DVC9INlJL63gEdtELYm/G6A1iFgUhL+2lk2JiV1f7H3P1jn4h/3R 4ZAnO/WBakeQW2xQkzB2mjTyc6xE0B1p5z4PK53og/snT5doz4VWSb8zvToDrHOb XF2ceU8ltoDpnzfUSyXWU+FHLz5UTTPRZ6aNau1o7Yqkymplk6huqpwC2eUT/XaY xHtb64Dq3A== -----END CERTIFICATE-----Generated at Tue Oct 13 16:04:18 2026 by rpki-client