
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
File: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json)
Hash identifier: hDPb44wTulVblsmYIsRh/M8UI4E7J9rm0UeICjhcRGo=
Subject key identifier: 2F:F0:0B:F5:DE:50:10:19:94:97:85:78:EE:46:5D:27:FB:22:88:99
Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1
Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1
Certificate serial: 0FE41EE0FD206D5CDC40ED7B7F68A705AFF28D1E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
Manifest number: 5A
Signing time: Thu 26 Mar 2026 17:48:28 +0000
Manifest this update: Thu 26 Mar 2026 17:43:28 +0000
Manifest next update: Fri 27 Mar 2026 20:27:28 +0000
Files and hashes: 1: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: g3Qzz6/iDvbe5XRGIS48omqeAzVeUz2zaxO7AmnokHI=)
2: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 20:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e4:1e:e0:fd:20:6d:5c:dc:40:ed:7b:7f:68:a7:05:af:f2:8d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1
Validity
Not Before: Mar 26 17:43:28 2026 GMT
Not After : Mar 27 20:27:28 2026 GMT
Subject: CN=2FF00BF5DE50101994978578EE465D27FB228899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:00:29:93:a0:ac:b9:d0:0c:41:10:17:64:
eb:2a:c6:ae:ab:88:bf:75:69:c3:30:fc:c9:7c:3c:
a8:ad:34:f7:50:61:3a:61:df:c6:c2:bd:53:c3:52:
27:64:f2:7b:ce:b5:b4:d5:d2:d6:21:7e:7d:df:32:
df:5e:fa:bc:f7:36:1b:6b:1f:74:d6:40:33:a9:d7:
21:ac:05:bd:ad:60:e7:00:a3:1f:b2:68:29:f4:6f:
a2:ab:27:5c:92:01:a9:48:8b:b2:7f:7f:a2:fc:bb:
07:6b:ae:b6:2c:63:09:68:fa:cb:23:c1:b0:f5:4b:
f3:27:ca:a5:7d:0d:a3:5d:3a:04:01:5a:be:d3:0f:
35:ec:79:e0:36:dd:a6:05:a1:41:14:aa:a2:a5:d0:
5e:20:9a:bc:76:bd:66:e6:68:77:c1:21:59:10:5e:
95:1f:37:81:82:b6:f2:87:db:e4:71:0a:b4:94:ef:
b2:d9:7f:13:0e:db:55:49:6f:9b:36:1d:36:f8:09:
6f:b3:f4:cc:21:3b:fe:a5:cc:db:4e:af:d0:9b:fc:
06:f2:43:d7:57:a3:65:ea:60:30:4f:0f:dc:7d:41:
33:8f:e0:37:87:ed:fd:72:ca:69:e3:5a:98:a2:1e:
9b:2e:ca:c7:47:12:ee:2d:7f:90:8d:e1:ef:d4:59:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F0:0B:F5:DE:50:10:19:94:97:85:78:EE:46:5D:27:FB:22:88:99
X509v3 Authority Key Identifier:
keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e4:3d:51:69:4a:93:8d:8c:3c:70:81:de:43:0d:00:b4:1e:
da:83:94:8e:fa:8d:76:b2:f6:53:56:e2:c7:1f:00:7d:6f:d5:
0f:cc:52:7f:6e:0c:c8:b2:71:77:2f:37:14:03:cd:f4:8a:f7:
3c:10:7c:ea:a5:c1:fe:eb:33:5a:c2:43:dd:2f:f5:78:50:b6:
6e:38:f2:7c:e1:2a:9e:5f:26:af:19:49:69:82:ce:2a:c2:58:
cb:6c:8c:f0:4c:46:2d:1f:8a:53:c0:a5:e1:8c:19:85:08:36:
4d:a9:63:1d:bd:fc:fe:52:7e:ed:e2:cd:3f:9a:18:53:11:bb:
f6:a8:28:fc:ea:53:ff:2b:a4:e8:24:13:69:92:03:cb:92:ba:
af:d8:7d:bf:aa:df:dd:b0:eb:f0:28:52:bb:3d:3e:c0:86:56:
dd:ce:23:0a:a8:0c:e4:6e:ef:11:a4:20:ce:06:ab:ce:bf:2d:
08:69:1f:2e:7a:ec:fc:ef:c9:89:3a:62:8b:78:96:31:ec:f0:
4a:39:d3:81:5a:96:69:b8:71:06:ca:40:29:23:15:46:57:cf:
dc:ba:68:d9:ad:a3:46:31:cd:5b:f1:6c:85:0c:ea:3d:cc:19:
44:f4:eb:62:98:24:ae:b7:e8:e2:d4:71:a6:c5:d0:85:a4:3c:
67:e5:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:10 2026 by rpki-client