$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft File: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json) Hash identifier: 3mTCaDNvhSTtm3arn8FkdDjEETDrakTujamZJr6yzks= Subject key identifier: 5A:AE:47:70:AF:C6:96:95:47:06:3D:6F:7E:23:AE:2A:B0:54:E1:78 Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Certificate serial: 48DAC3DBBA8D4A81BB1E07A9654B9FDEF22DE9E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 06:48:00 +0000 Manifest this update: Fri 28 Aug 2026 06:43:00 +0000 Manifest next update: Mon 31 Aug 2026 18:11:00 +0000 Files and hashes: 1: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=) 2: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: 4Z7+45HHQGDiYgKixMR10Afzf0D8EAlHjkjP0YTo/SA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:da:c3:db:ba:8d:4a:81:bb:1e:07:a9:65:4b:9f:de:f2:2d:e9:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Validity Not Before: Aug 28 06:43:00 2026 GMT Not After : Aug 31 18:11:00 2026 GMT Subject: CN=5AAE4770AFC6969547063D6F7E23AE2AB054E178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cb:5b:87:05:03:29:be:dd:5d:33:09:f1:fe: 61:af:e5:8f:22:37:50:5c:4e:68:9a:32:17:b0:73: a9:89:20:8d:dd:30:2f:83:64:f0:c8:85:c5:c6:d9: ca:6d:dd:e0:36:83:02:38:88:28:ea:c3:c3:20:0b: d7:fb:c0:bd:8d:04:7c:6a:63:58:70:d1:a4:b2:d3: 46:6d:4c:da:1e:65:af:13:26:aa:a0:d1:39:da:16: 7b:2d:b9:9d:ff:d0:1c:34:9e:a3:7b:c7:74:27:fa: fa:c3:39:fe:b4:18:de:1f:bd:29:b8:2c:b9:03:83: a3:15:06:46:e4:de:7d:d3:b9:c6:93:77:2c:9b:56: 28:19:8e:24:88:ad:8b:c5:75:07:d9:68:95:e4:13: 80:46:66:3d:54:fa:1a:69:16:6b:2b:91:4c:72:a9: c9:fa:6a:bc:69:4a:7c:1f:fc:3d:92:10:56:cf:8f: 6f:2a:2c:9a:16:5d:c8:d9:10:e0:9c:63:6f:9a:2c: 23:47:bf:73:dd:3e:27:aa:fb:c2:0b:b8:8e:6b:b2: 12:90:57:c8:c3:ca:cf:f1:81:d0:2c:4f:11:06:3a: be:9a:0c:56:cd:2f:ff:8f:67:a1:62:61:94:c6:5d: 56:26:12:00:cd:87:ce:24:41:c8:72:bc:7a:b7:85: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AE:47:70:AF:C6:96:95:47:06:3D:6F:7E:23:AE:2A:B0:54:E1:78 X509v3 Authority Key Identifier: keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:61:5e:06:be:35:e1:c9:f4:a0:cd:8e:0d:37:6d:c4:cb:29: 4f:2d:45:c4:f4:b7:62:10:4a:5c:34:f6:b6:3a:b4:1a:53:b6: 48:57:c2:6a:34:de:4c:aa:ec:1e:2e:7e:d7:09:f7:93:6f:31: a7:2d:f6:39:d0:33:b7:65:82:2b:6f:3f:8e:12:dc:a1:ff:c0: 60:85:69:b5:ce:f4:96:72:82:56:de:d2:2a:8c:f5:e2:91:68: 82:8c:7f:de:00:cd:55:b5:e9:31:8b:2f:ba:72:11:83:94:e0: 7b:fa:13:db:90:ee:5d:72:b4:50:df:0a:b6:88:43:3e:96:a4: 4c:1c:8f:63:69:16:0f:16:74:9f:e4:b6:69:d1:0d:e7:82:52: db:47:63:72:eb:8e:11:3c:e8:00:a3:36:17:6a:4e:93:67:1a: dc:56:32:85:20:71:36:3b:5a:27:b0:da:96:24:f5:da:67:56: 3f:7a:6a:16:52:1a:b2:4b:21:35:e7:0d:b0:47:9e:a4:ac:a6: 10:99:35:92:ce:00:e9:a0:fc:58:a4:a4:8f:76:5a:f4:e3:10: 32:e0:68:61:55:d3:c0:03:f5:4e:15:65:7c:1c:48:de:ed:19: da:db:a6:1a:d7:c2:96:aa:36:3a:99:27:41:87:24:6e:f0:1e: 8a:03:e0:9e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSNrD27qNSoG7HgepZUuf3vIt6eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMw MURBMkVGMTAeFw0yNjA4MjgwNjQzMDBaFw0yNjA4MzExODExMDBaMDMxMTAvBgNV BAMTKDVBQUU0NzcwQUZDNjk2OTU0NzA2M0Q2RjdFMjNBRTJBQjA1NEUxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdy1uHBQMpvt1dMwnx/mGv5Y8i N1BcTmiaMhewc6mJII3dMC+DZPDIhcXG2cpt3eA2gwI4iCjqw8MgC9f7wL2NBHxq Y1hw0aSy00ZtTNoeZa8TJqqg0TnaFnstuZ3/0Bw0nqN7x3Qn+vrDOf60GN4fvSm4 LLkDg6MVBkbk3n3TucaTdyybVigZjiSIrYvFdQfZaJXkE4BGZj1U+hppFmsrkUxy qcn6arxpSnwf/D2SEFbPj28qLJoWXcjZEOCcY2+aLCNHv3PdPieq+8ILuI5rshKQ V8jDys/xgdAsTxEGOr6aDFbNL/+PZ6FiYZTGXVYmEgDNh84kQchyvHq3hX+VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWq5HcK/GlpVHBj1vfiOuKrBU4XgwHwYDVR0j BBgwFoAUfVDr3aAkJDZSRfGafflYwwHaLvEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3MzE2NjQzMDAyNzc3OS8wLzdENTBFQkREQTAyNDI0MzY1MjQ1RjE5QTdERjk1 OEMzMDFEQTJFRjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMwMURBMkVGMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzMxNjY0MzAwMjc3NzkvMC83RDUwRUJEREEwMjQy NDM2NTI0NUYxOUE3REY5NThDMzAxREEyRUYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWFeBr414cn0 oM2ODTdtxMspTy1FxPS3YhBKXDT2tjq0GlO2SFfCajTeTKrsHi5+1wn3k28xpy32 OdAzt2WCK28/jhLcof/AYIVptc70lnKCVt7SKoz14pFogox/3gDNVbXpMYsvunIR g5Tge/oT25DuXXK0UN8KtohDPpakTByPY2kWDxZ0n+S2adEN54JS20djcuuOETzo AKM2F2pOk2ca3FYyhSBxNjtaJ7DaliT12mdWP3pqFlIaskshNecNsEeepKymEJk1 ks4A6aD8WKSkj3Za9OMQMuBoYVXTwAP1ThVlfBxI3u0Z2tumGtfClqo2OpknQYck bvAeigPgng== -----END CERTIFICATE-----Generated at Sat Aug 29 07:17:21 2026 by rpki-client