
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
File: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json)
Hash identifier: 9cDFwId5e97+trNpgznGiO87SJ82SokH3RLjk871NTE=
Subject key identifier: C0:E0:55:3D:8D:1B:58:2C:F1:B4:75:74:F8:7A:BA:DA:DB:C0:96:31
Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1
Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1
Certificate serial: 6373D199D5BB3691F17EF6E75E113C6ECBDBE392
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
Manifest number: 3F
Signing time: Fri 06 Mar 2026 03:53:21 +0000
Manifest this update: Fri 06 Mar 2026 03:48:21 +0000
Manifest next update: Sat 07 Mar 2026 07:23:21 +0000
Files and hashes: 1: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: 6RFAXYO6hifikzF0M5oevFMp0Mj8osd39b/yqIgkiGk=)
2: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 04:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:73:d1:99:d5:bb:36:91:f1:7e:f6:e7:5e:11:3c:6e:cb:db:e3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1
Validity
Not Before: Mar 6 03:48:21 2026 GMT
Not After : Mar 7 07:23:21 2026 GMT
Subject: CN=C0E0553D8D1B582CF1B47574F87ABADADBC09631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:30:cf:6c:78:57:a1:3c:25:83:63:47:7d:
ac:23:0e:8a:12:18:3b:f1:06:83:aa:6d:90:45:07:
54:35:33:8d:4d:2d:a7:5a:8a:95:a8:99:20:ab:83:
4f:30:df:c1:a7:bd:74:ad:1c:96:fc:a3:c8:65:49:
48:77:fa:56:c0:ea:e6:2f:d2:31:04:04:45:e3:3d:
bb:61:7e:75:0b:1c:bc:b7:b8:5d:24:c4:2c:5d:9e:
f6:27:90:e7:8e:7a:01:86:00:bb:76:a1:8a:e9:e2:
a0:88:0d:3d:76:90:a8:16:a5:43:05:5d:b4:e3:86:
b6:39:c4:c0:a0:b3:2c:df:c6:a2:0a:18:e0:b3:b6:
8e:6c:0a:65:e2:e5:b0:88:77:35:b9:27:65:1d:fc:
75:fd:15:41:8b:3f:31:d4:5c:79:9b:92:0c:a9:23:
97:82:1b:1e:7e:b7:b0:38:ea:66:3e:e5:40:54:1a:
67:15:ae:1d:bc:be:3b:01:36:3c:9a:a9:8f:8c:e2:
57:2e:b0:d5:70:95:91:84:34:2c:51:89:ab:51:d8:
78:2e:63:3c:04:8b:f8:15:17:57:e2:d0:3a:d8:f9:
10:c8:89:93:48:b0:ee:16:05:c1:6a:0c:bd:83:d6:
02:9a:a5:bd:84:36:2f:0b:ce:07:1c:53:11:ea:2f:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E0:55:3D:8D:1B:58:2C:F1:B4:75:74:F8:7A:BA:DA:DB:C0:96:31
X509v3 Authority Key Identifier:
keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:64:b1:f8:f4:96:8f:8c:70:5f:11:08:bb:82:cd:1d:a1:
90:8d:8e:8f:83:c9:c4:7f:41:4e:4d:72:26:f1:00:f6:b5:8e:
c6:9e:24:a9:43:50:9e:43:4b:b8:84:2f:6c:85:e1:d0:db:ec:
cd:6d:f7:70:83:41:7d:12:85:36:72:cb:da:e6:4a:4d:68:67:
2d:e2:2e:56:c5:1f:d8:13:61:dd:4e:d8:6d:cf:9b:4f:90:73:
a4:74:ca:7c:f4:fe:85:3c:e8:04:ad:36:b8:4b:7b:14:10:d6:
ad:43:5e:66:45:5f:3f:26:8f:00:79:66:d3:b8:cf:0d:09:52:
46:0f:f4:ca:e9:4a:de:06:13:96:72:71:97:01:f8:61:8c:0b:
da:74:e2:82:6f:b3:98:85:51:e0:ab:f7:2a:9c:a9:3c:e1:fd:
b0:a3:6b:36:e8:3c:eb:84:05:7a:14:54:d2:21:70:8c:45:8b:
bb:cf:3a:f3:18:53:7b:2a:bf:33:6b:c1:a9:16:ab:d9:24:59:
d9:16:4c:82:c5:94:46:fd:ef:a0:5f:62:e3:2d:e7:26:15:dc:
33:2b:eb:99:b1:db:94:a7:3c:9e:20:b6:16:a8:89:b6:01:e0:
12:81:5b:6b:90:6c:36:30:4f:39:e0:39:e5:7e:56:87:ab:80:
0e:85:e3:14
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUY3PRmdW7NpHxfvbnXhE8bsvb45IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMw
MURBMkVGMTAeFw0yNjAzMDYwMzQ4MjFaFw0yNjAzMDcwNzIzMjFaMDMxMTAvBgNV
BAMTKEMwRTA1NTNEOEQxQjU4MkNGMUI0NzU3NEY4N0FCQURBREJDMDk2MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7jDPbHhXoTwlg2NHfawjDooS
GDvxBoOqbZBFB1Q1M41NLadaipWomSCrg08w38GnvXStHJb8o8hlSUh3+lbA6uYv
0jEEBEXjPbthfnULHLy3uF0kxCxdnvYnkOeOegGGALt2oYrp4qCIDT12kKgWpUMF
XbTjhrY5xMCgsyzfxqIKGOCzto5sCmXi5bCIdzW5J2Ud/HX9FUGLPzHUXHmbkgyp
I5eCGx5+t7A46mY+5UBUGmcVrh28vjsBNjyaqY+M4lcusNVwlZGENCxRiatR2Hgu
YzwEi/gVF1fi0DrY+RDIiZNIsO4WBcFqDL2D1gKapb2ENi8LzgccUxHqLz47AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUwOBVPY0bWCzxtHV0+Hq62tvAljEwHwYDVR0j
BBgwFoAUfVDr3aAkJDZSRfGafflYwwHaLvEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3MzE2NjQzMDAyNzc3OS8wLzdENTBFQkREQTAyNDI0MzY1MjQ1RjE5QTdERjk1
OEMzMDFEQTJFRjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMwMURBMkVGMS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzMxNjY0MzAwMjc3NzkvMC83RDUwRUJEREEwMjQy
NDM2NTI0NUYxOUE3REY5NThDMzAxREEyRUYxLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKpksfj0lo+M
cF8RCLuCzR2hkI2Oj4PJxH9BTk1yJvEA9rWOxp4kqUNQnkNLuIQvbIXh0NvszW33
cINBfRKFNnLL2uZKTWhnLeIuVsUf2BNh3U7Ybc+bT5BzpHTKfPT+hTzoBK02uEt7
FBDWrUNeZkVfPyaPAHlm07jPDQlSRg/0yulK3gYTlnJxlwH4YYwL2nTigm+zmIVR
4Kv3KpypPOH9sKNrNug864QFehRU0iFwjEWLu8868xhTeyq/M2vBqRar2SRZ2RZM
gsWURv3voF9i4y3nJhXcMyvrmbHblKc8niC2FqiJtgHgEoFba5BsNjBPOeA55X5W
h6uADoXjFA==
-----END CERTIFICATE-----
Generated at Fri Mar 6 06:53:53 2026 by rpki-client