
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
File: 50A5171941F715FACDCF9DD46FA674046AC02D04.mft (raw, json)
Hash identifier: 14funIoIDpuFP7SJfrav5oOOlRuiK9rp4+zdnO2cqQU=
Subject key identifier: 8C:2C:B4:AD:6F:60:B4:4A:7A:8D:D8:B9:E2:34:99:DA:36:8D:CD:58
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Certificate issuer: /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial: 27A0F9682DB8E05C0977EBB4080175B6597CCBAD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
Manifest number: 5A
Signing time: Thu 26 Mar 2026 11:13:28 +0000
Manifest this update: Thu 26 Mar 2026 11:08:28 +0000
Manifest next update: Fri 27 Mar 2026 14:27:28 +0000
Files and hashes: 1: 3131382e3138342e3132382e302f31372d3234203d3e203138323537.roa (hash: BdhmLC4zgYEiVmndB2HSccET9FqpO3NsVZi11RKwT6Y=)
2: 50A5171941F715FACDCF9DD46FA674046AC02D04.crl (hash: I8MpEfqP3Q3yYFzfJ3Hnbeo6jODQpPHEmmm3EU6mA6A=)
3: 3131382e3138342e3132382e302f31372d3234203d3e20313338393530.roa (hash: BPTzwC6QNr0mZbMlCDApnpFNWALr7CkeZYYL4jfCJqI=)
4: 3131382e3138342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7LPc87hS5rjIOtI6iPGGcyZ23idOROuWnZG/gbZcJmY=)
5: 3131382e3138342e3132382e302f31372d3234203d3e203233363530.roa (hash: M2mhmaVYXohsZSx0mGr2+YhMGZG5m/A4U5wT++q9UVk=)
6: 323430343a363338303a3a2f33322d3438203d3e20313430323933.roa (hash: wOEu4s8or2SwQwHND5Q2d5xq0kfsHWiBIQ/WtFCz69A=)
7: 3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa (hash: j5borvIgjotWQ92+vPRSlxUfz7IOQtoG2WJTyai460I=)
8: 323430343a363338303a3a2f33322d3438203d3e203138323537.roa (hash: e092N5ZIw8NIOzez3Wr2tRokhJN6B0n06OiT8fKrvto=)
9: 323430343a363338303a3a2f33322d3438203d3e203233363530.roa (hash: ZonKZhguTk17nFk21NONrgzeysQRGdLBzTmVOs0FiTI=)
10: 323430343a363338303a3a2f33322d3438203d3e20313338393530.roa (hash: um5xmJsffRW2lIF7biMqE2a2cHsjZcaKv+O4nXwQlmI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 05:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a0:f9:68:2d:b8:e0:5c:09:77:eb:b4:08:01:75:b6:59:7c:cb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Validity
Not Before: Mar 26 11:08:28 2026 GMT
Not After : Mar 27 14:27:28 2026 GMT
Subject: CN=8C2CB4AD6F60B44A7A8DD8B9E23499DA368DCD58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:1c:50:2a:34:62:d4:0d:82:7b:ed:9b:b2:
a8:87:e0:16:4d:ca:74:d0:27:90:3f:d3:45:4d:11:
a9:96:da:d9:d8:b8:53:0e:32:40:45:14:32:77:72:
e0:14:3f:9b:e8:84:b4:71:2b:9c:39:cc:6f:03:c8:
b3:9e:5f:dc:d2:b6:0a:ce:81:4d:d6:b6:b6:1c:7c:
92:c0:1c:d2:3f:7b:59:8e:35:0f:99:22:fa:d3:04:
46:66:93:80:dd:27:67:e6:55:e7:04:4c:c1:9d:7f:
eb:be:bf:f2:30:95:20:52:ed:34:44:38:e7:4e:3f:
ba:fe:fb:74:a1:22:c9:80:0f:6e:ae:6b:7b:ce:48:
61:bf:37:a6:7b:c5:9c:a4:9f:0e:6c:fb:00:41:28:
fc:ff:29:e6:15:f1:ec:78:83:84:39:15:ec:88:f7:
de:24:52:ae:3a:95:16:91:26:82:43:71:72:5a:f4:
04:af:c3:d6:60:6b:7d:cd:af:cc:99:b2:ad:e1:5d:
c6:26:a1:67:54:c3:52:bc:42:8c:e4:e0:6e:8e:2d:
20:93:2d:62:88:80:f2:a6:46:ea:b1:5e:4c:4b:aa:
c2:6e:63:5e:be:d1:38:99:32:45:0e:48:12:e2:5c:
f8:f8:53:f5:2a:34:5f:08:92:fc:ec:25:9a:69:74:
71:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2C:B4:AD:6F:60:B4:4A:7A:8D:D8:B9:E2:34:99:DA:36:8D:CD:58
X509v3 Authority Key Identifier:
keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:18:af:29:38:0a:ba:72:2e:0a:75:82:4e:16:b4:a7:0c:4c:
29:cd:d8:01:69:16:c4:e0:a3:4d:a7:bf:04:73:b3:97:85:ea:
62:d0:30:ef:09:e6:b0:32:80:91:93:cc:64:38:fe:03:30:2f:
86:b2:3f:13:1d:81:e0:7f:47:f5:88:f5:79:d9:65:36:e6:a8:
3c:e7:4c:d1:81:42:39:71:f4:c1:8f:96:be:e0:b1:cf:b2:21:
25:8b:83:fc:f9:f1:6f:25:84:37:80:c4:0e:64:2a:6d:45:f5:
8d:24:45:0d:75:18:de:78:9e:a7:4b:27:b0:5c:ce:26:06:16:
e7:24:29:86:d2:54:29:5d:e3:5f:cf:d9:ba:95:5c:a7:75:dc:
5f:a8:5e:0d:61:c6:43:ee:ba:bb:51:f0:96:a4:14:8f:2b:46:
c4:db:a3:ae:90:89:77:d9:87:29:c2:cb:9e:31:d1:d8:32:0a:
b2:e3:5d:7d:fd:b1:88:cd:8d:bf:f0:1d:62:8a:e6:51:c5:07:
37:9a:2e:fa:96:74:65:01:66:11:76:df:e7:33:40:d3:7a:d8:
cf:d3:91:44:e9:03:66:d9:28:12:1c:95:03:19:2d:7b:f1:67:
1e:1e:10:ee:9a:94:5f:53:1b:78:4b:68:2f:3f:6b:21:73:b1:
2e:d6:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:31 2026 by rpki-client