$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft File: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json) Hash identifier: HOZmsKX4hISkbVMuHmZ0Sq4ro7cGMYplWyZwsNWcuZk= Subject key identifier: BF:C3:50:82:38:D9:C6:26:0A:9E:CD:E9:4C:1C:58:ED:25:AE:3B:FF Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Certificate serial: 2CA0B83E409ECE079F5D4C260A837EACE7344BA2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft Manifest number: 9A Signing time: Wed 13 May 2026 11:56:04 +0000 Manifest this update: Wed 13 May 2026 11:51:04 +0000 Manifest next update: Thu 14 May 2026 14:16:04 +0000 Files and hashes: 1: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: x0/Q3or+RBheWEwMfdCMsW2fzwVTmwloWTx9jNFgYsM=) 2: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a0:b8:3e:40:9e:ce:07:9f:5d:4c:26:0a:83:7e:ac:e7:34:4b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Validity Not Before: May 13 11:51:04 2026 GMT Not After : May 14 14:16:04 2026 GMT Subject: CN=BFC3508238D9C6260A9ECDE94C1C58ED25AE3BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:fd:0c:63:2d:bd:7d:48:10:19:fe:ab:03: 01:5b:34:2c:af:a6:22:ce:f8:4b:0c:bb:88:29:6c: 01:b3:4f:19:70:0c:d5:bd:42:8e:28:91:fc:dc:c7: d4:39:6a:df:1f:18:a8:fd:7c:39:bd:50:4b:27:58: 10:ed:90:1f:b5:92:e8:9d:12:0b:12:96:0d:7e:28: 3f:e3:47:37:23:35:d2:0e:c2:f7:76:50:2a:23:6e: ef:fc:fa:2f:29:b0:5c:d4:7e:52:13:78:45:2a:35: 43:0f:71:65:51:54:c8:04:b3:c3:b6:97:d4:b9:85: e7:24:6d:7c:be:4e:3f:b0:34:f8:e9:77:f8:2d:88: db:c2:72:58:83:13:60:13:4c:b9:e6:dd:ef:f3:56: 50:bf:da:ce:2e:5d:e4:43:f9:fc:cd:98:ca:c1:d2: 4f:cc:52:02:4c:73:cd:c7:56:8f:21:61:d4:b6:37: fe:0f:87:da:9f:9c:88:b0:0e:78:66:6e:46:64:c0: 4d:8b:d2:c3:95:72:4e:3e:b2:bb:51:59:f5:c5:30: 7e:c7:85:dc:d2:19:de:ae:df:b5:d7:34:45:5d:22: 11:4a:50:30:9f:d9:a7:23:36:e0:2b:67:38:02:df: 61:c7:38:8a:29:4a:23:7a:b8:e8:2f:d6:9c:03:1e: 4c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C3:50:82:38:D9:C6:26:0A:9E:CD:E9:4C:1C:58:ED:25:AE:3B:FF X509v3 Authority Key Identifier: keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:42:81:1a:05:bb:6f:cf:45:8e:07:8e:41:bf:ce:76:64:fb: fa:c4:4b:1d:29:35:d4:96:b6:7f:6c:f4:e9:99:47:81:74:26: 03:a9:f4:b6:bd:ec:1e:d6:5f:98:8c:ce:88:65:b6:cb:02:46: 78:d0:09:b0:a9:d1:68:47:a9:1b:d1:72:e6:b0:00:e5:73:4f: a7:7a:2d:ec:ff:b6:cf:e5:06:74:b6:da:45:25:e5:54:cd:5a: 6e:90:1e:3b:73:a0:37:6f:07:da:9d:ef:37:bc:84:d4:5b:6e: da:22:64:c4:17:dd:fb:b9:32:a4:0c:f7:ac:02:6c:9f:55:c0: 20:e2:f0:f8:7b:98:da:22:e8:aa:de:f6:04:43:1d:26:a0:b4: da:2c:b5:6b:88:dd:1a:fa:01:ac:24:93:e1:e3:f3:30:d8:2e: e5:54:38:d6:89:ba:19:1b:28:2c:b3:c6:f6:79:ce:98:3b:56: 60:36:7c:ec:c8:55:f8:9b:bf:57:51:30:b8:a6:46:95:2d:d9: a2:3e:e6:8f:92:20:d9:45:d2:dd:83:74:7d:97:a4:a3:96:18: 6f:27:cb:c8:ad:f0:80:17:d2:f5:88:3d:d0:e9:f9:c0:37:0b: c4:4d:40:15:25:d5:d7:06:e8:d4:15:4e:aa:aa:a8:e5:bb:77: f2:54:da:a7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULKC4PkCezgefXUwmCoN+rOc0S6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMw MURBMkVGMTAeFw0yNjA1MTMxMTUxMDRaFw0yNjA1MTQxNDE2MDRaMDMxMTAvBgNV BAMTKEJGQzM1MDgyMzhEOUM2MjYwQTlFQ0RFOTRDMUM1OEVEMjVBRTNCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hP0MYy29fUgQGf6rAwFbNCyv piLO+EsMu4gpbAGzTxlwDNW9Qo4okfzcx9Q5at8fGKj9fDm9UEsnWBDtkB+1kuid EgsSlg1+KD/jRzcjNdIOwvd2UCojbu/8+i8psFzUflITeEUqNUMPcWVRVMgEs8O2 l9S5heckbXy+Tj+wNPjpd/gtiNvCcliDE2ATTLnm3e/zVlC/2s4uXeRD+fzNmMrB 0k/MUgJMc83HVo8hYdS2N/4Ph9qfnIiwDnhmbkZkwE2L0sOVck4+srtRWfXFMH7H hdzSGd6u37XXNEVdIhFKUDCf2acjNuArZzgC32HHOIopSiN6uOgv1pwDHkzbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv8NQgjjZxiYKns3pTBxY7SWuO/8wHwYDVR0j BBgwFoAUfVDr3aAkJDZSRfGafflYwwHaLvEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3MzE2NjQzMDAyNzc3OS8wLzdENTBFQkREQTAyNDI0MzY1MjQ1RjE5QTdERjk1 OEMzMDFEQTJFRjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMwMURBMkVGMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzMxNjY0MzAwMjc3NzkvMC83RDUwRUJEREEwMjQy NDM2NTI0NUYxOUE3REY5NThDMzAxREEyRUYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEKBGgW7b89F jgeOQb/OdmT7+sRLHSk11Ja2f2z06ZlHgXQmA6n0tr3sHtZfmIzOiGW2ywJGeNAJ sKnRaEepG9Fy5rAA5XNPp3ot7P+2z+UGdLbaRSXlVM1abpAeO3OgN28H2p3vN7yE 1Ftu2iJkxBfd+7kypAz3rAJsn1XAIOLw+HuY2iLoqt72BEMdJqC02iy1a4jdGvoB rCST4ePzMNgu5VQ41om6GRsoLLPG9nnOmDtWYDZ87MhV+Ju/V1EwuKZGlS3Zoj7m j5Ig2UXS3YN0fZeko5YYbyfLyK3wgBfS9Yg90On5wDcLxE1AFSXV1wbo1BVOqqqo 5bt38lTapw== -----END CERTIFICATE-----Generated at Wed May 13 19:42:34 2026 by rpki-client