$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft File: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json) Hash identifier: txzV1YWrXSqgiIacowo7PYtdZBnhCW5aUKU60wEEkrM= Subject key identifier: C9:2A:A4:B9:67:DE:BE:28:0D:5A:7B:A1:92:23:BF:5D:FC:7E:67:A2 Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Certificate serial: 295E51277180F336C003C75D2B0E9B4FC11535E4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft Manifest number: D0 Signing time: Tue 23 Jun 2026 00:19:03 +0000 Manifest this update: Tue 23 Jun 2026 00:14:03 +0000 Manifest next update: Wed 24 Jun 2026 03:56:03 +0000 Files and hashes: 1: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=) 2: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: pGRwOecziVQ389xLX+F9vCaMuiXN2PqBrXYzCSFnQgo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Jun 2026 03:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5e:51:27:71:80:f3:36:c0:03:c7:5d:2b:0e:9b:4f:c1:15:35:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Validity Not Before: Jun 23 00:14:03 2026 GMT Not After : Jun 24 03:56:03 2026 GMT Subject: CN=C92AA4B967DEBE280D5A7BA19223BF5DFC7E67A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:04:1e:fe:30:7c:2b:17:05:8a:20:40:04: 6b:f7:53:c3:eb:65:03:10:85:dd:17:e2:ce:c4:dd: 29:5b:ad:32:c7:20:93:6c:7c:bd:9d:a7:96:32:a2: 0d:0c:4b:5f:8b:28:92:22:aa:fd:b9:a0:a2:48:9c: 75:d0:25:ad:ea:4f:e3:03:8e:fb:e9:dc:7f:4d:35: 53:69:c1:6a:df:87:45:9e:04:42:1a:8a:8e:85:cd: b3:cd:91:60:fc:ae:32:de:f6:72:8a:76:eb:9d:13: ab:62:54:92:fc:7d:11:d5:de:88:9a:0a:13:ce:93: 00:f2:8d:51:d8:77:c1:c9:61:98:43:2c:e4:f2:c9: 2d:94:1e:83:a5:57:41:a4:21:d3:55:02:21:3e:8f: 25:a9:3f:a2:79:91:ae:de:a7:e0:71:75:82:3a:34: 89:cd:e3:00:61:ef:ab:f2:e4:26:f0:8b:80:13:73: cc:9c:e5:06:9e:35:d0:e0:78:7b:8b:8c:59:0a:20: 91:b2:e2:95:53:f8:69:79:bc:1c:a2:4b:5f:11:3b: 56:7e:ee:dd:c4:aa:dd:8d:9c:78:cc:0b:c7:69:be: 87:7b:35:f8:f3:05:70:d6:45:c9:74:b8:bb:0d:36: fe:32:de:d5:5b:3c:63:cb:06:00:cb:6e:d6:c3:20: d9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2A:A4:B9:67:DE:BE:28:0D:5A:7B:A1:92:23:BF:5D:FC:7E:67:A2 X509v3 Authority Key Identifier: keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:be:a0:95:96:f9:c7:5b:e2:32:d1:ca:27:a5:3d:d3:12:ae: d6:1d:ba:63:32:72:65:88:67:7a:ff:df:04:af:6b:fa:01:f3: 90:cc:5a:22:8c:2c:4a:41:a6:75:04:f3:d3:14:bc:03:dc:c0: f5:c3:c9:b1:54:32:22:47:95:a9:0f:d5:7b:76:b9:82:c8:e5: 91:01:89:e5:e7:1f:b4:53:07:30:b0:b4:ee:49:73:b2:7f:ae: 48:e6:82:f4:30:82:d6:1c:fe:ce:cc:c0:4d:aa:ea:0b:7d:9b: b1:9c:bc:fe:b2:df:e3:f2:c0:4a:77:7d:51:5a:7c:2f:c4:3e: 77:89:d5:ef:94:88:e0:7a:2e:46:76:de:7c:c1:a9:b8:1d:a2: 6c:29:4c:9e:3d:5f:8b:5f:12:0f:29:dd:a7:2d:f0:d8:a8:3f: 31:6f:ae:52:4e:6b:99:84:57:86:dd:52:e1:27:99:86:13:fb: 82:3a:11:e8:8e:32:2e:d6:28:29:ac:f0:44:86:ef:ff:b5:fb: df:ac:22:02:a7:b6:ec:7f:19:89:74:08:d9:46:04:b6:0e:42: 73:f1:0c:0e:82:73:3a:d4:a1:05:7d:d3:ff:b7:3d:92:e1:a3: 3e:45:1f:d6:a5:5d:38:5d:08:3b:6a:36:f8:d9:64:25:2a:3f: 46:82:bb:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKV5RJ3GA8zbAA8ddKw6bT8EVNeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMw MURBMkVGMTAeFw0yNjA2MjMwMDE0MDNaFw0yNjA2MjQwMzU2MDNaMDMxMTAvBgNV BAMTKEM5MkFBNEI5NjdERUJFMjgwRDVBN0JBMTkyMjNCRjVERkM3RTY3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIgQe/jB8KxcFiiBABGv3U8Pr ZQMQhd0X4s7E3SlbrTLHIJNsfL2dp5Yyog0MS1+LKJIiqv25oKJInHXQJa3qT+MD jvvp3H9NNVNpwWrfh0WeBEIaio6FzbPNkWD8rjLe9nKKduudE6tiVJL8fRHV3oia ChPOkwDyjVHYd8HJYZhDLOTyyS2UHoOlV0GkIdNVAiE+jyWpP6J5ka7ep+BxdYI6 NInN4wBh76vy5Cbwi4ATc8yc5QaeNdDgeHuLjFkKIJGy4pVT+Gl5vByiS18RO1Z+ 7t3Eqt2NnHjMC8dpvod7NfjzBXDWRcl0uLsNNv4y3tVbPGPLBgDLbtbDINkXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUySqkuWfevigNWnuhkiO/Xfx+Z6IwHwYDVR0j BBgwFoAUfVDr3aAkJDZSRfGafflYwwHaLvEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3MzE2NjQzMDAyNzc3OS8wLzdENTBFQkREQTAyNDI0MzY1MjQ1RjE5QTdERjk1 OEMzMDFEQTJFRjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMwMURBMkVGMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzMxNjY0MzAwMjc3NzkvMC83RDUwRUJEREEwMjQy NDM2NTI0NUYxOUE3REY5NThDMzAxREEyRUYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQL6glZb5x1vi MtHKJ6U90xKu1h26YzJyZYhnev/fBK9r+gHzkMxaIowsSkGmdQTz0xS8A9zA9cPJ sVQyIkeVqQ/Ve3a5gsjlkQGJ5ecftFMHMLC07klzsn+uSOaC9DCC1hz+zszATarq C32bsZy8/rLf4/LASnd9UVp8L8Q+d4nV75SI4HouRnbefMGpuB2ibClMnj1fi18S Dyndpy3w2Kg/MW+uUk5rmYRXht1S4SeZhhP7gjoR6I4yLtYoKazwRIbv/7X736wi Aqe27H8ZiXQI2UYEtg5Cc/EMDoJzOtShBX3T/7c9kuGjPkUf1qVdOF0IO2o2+Nlk JSo/RoK7eQ== -----END CERTIFICATE-----Generated at Tue Jun 23 11:54:44 2026 by rpki-client