
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft
File: 50296D63899E692A0BA1D29C54A95275354500E5.mft (raw, json)
Hash identifier: 2pkOgY5AHgljv91hYDaXPwZilvIkBq6WGxsQmfTfaII=
Subject key identifier: F9:17:F2:5C:96:A9:7B:48:9D:8B:33:37:E4:94:00:B1:9B:76:E6:32
Authority key identifier: 50:29:6D:63:89:9E:69:2A:0B:A1:D2:9C:54:A9:52:75:35:45:00:E5
Certificate issuer: /CN=50296D63899E692A0BA1D29C54A95275354500E5
Certificate serial: 4DF1515A05B55A5907211612FB32666DA5258964
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50296D63899E692A0BA1D29C54A95275354500E5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft
Manifest number: 21
Signing time: Mon 12 Oct 2026 19:07:18 +0000
Manifest this update: Mon 12 Oct 2026 19:02:18 +0000
Manifest next update: Fri 16 Oct 2026 00:05:18 +0000
Files and hashes: 1: 50296D63899E692A0BA1D29C54A95275354500E5.crl (hash: rPs5GOJtyERuYRxbvMkG1yI7oembDJv5lyL5BGmNQ2Y=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.crl
rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50296D63899E692A0BA1D29C54A95275354500E5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f1:51:5a:05:b5:5a:59:07:21:16:12:fb:32:66:6d:a5:25:89:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50296D63899E692A0BA1D29C54A95275354500E5
Validity
Not Before: Oct 12 19:02:18 2026 GMT
Not After : Oct 16 00:05:18 2026 GMT
Subject: CN=F917F25C96A97B489D8B3337E49400B19B76E632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a9:a9:5a:9e:5e:95:47:dc:81:14:30:43:9f:
a9:43:9e:d8:ba:fa:59:3f:7f:01:7f:26:ec:7b:b0:
65:0c:35:3d:a1:96:e2:ab:56:45:f4:f0:48:0f:c9:
a2:35:47:43:ae:b0:30:9e:c8:0f:08:8e:aa:91:b7:
15:67:39:8d:23:a1:cf:7b:47:75:18:9e:26:0e:e5:
80:bc:09:55:ea:82:82:66:b5:3a:e8:10:cf:b2:e2:
0c:bc:ae:69:19:69:e6:af:62:70:95:a1:1c:18:84:
9f:3a:48:74:60:8c:2e:4a:d2:fb:10:a7:31:1c:16:
7b:0f:e7:1f:ac:32:1d:e6:32:71:93:6d:7c:43:05:
e0:07:8b:51:1d:19:ae:4a:00:37:b3:40:1b:b1:23:
fc:b2:25:b6:3e:c8:fd:f4:74:21:b0:5b:2c:8c:14:
81:48:a6:4b:ac:6e:ad:d6:28:a3:5b:87:58:f7:fb:
c8:b5:59:3f:ec:77:9f:74:b4:4a:9f:50:aa:32:0f:
95:68:94:5f:ac:74:28:bb:23:47:41:93:9c:3e:26:
86:42:8d:b0:d1:8f:9f:06:80:27:55:18:4f:06:b9:
2e:64:1c:a4:eb:5c:52:4f:33:ae:fe:ad:04:1b:7c:
20:1e:fc:07:73:59:4d:fc:d0:0c:8d:a9:9c:dc:ed:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:F2:5C:96:A9:7B:48:9D:8B:33:37:E4:94:00:B1:9B:76:E6:32
X509v3 Authority Key Identifier:
keyid:50:29:6D:63:89:9E:69:2A:0B:A1:D2:9C:54:A9:52:75:35:45:00:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50296D63899E692A0BA1D29C54A95275354500E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6f:62:34:8d:4b:9c:6f:1c:68:24:d4:b4:27:df:8c:6b:55:
51:9b:b9:5f:5c:47:31:f5:b0:72:3f:89:1a:09:dc:70:2f:d9:
75:31:42:c3:1a:19:0f:37:4a:b8:3a:d9:70:5b:3e:76:bb:23:
88:29:32:f5:27:96:c5:d5:bc:20:08:43:cd:c4:5b:fc:83:3a:
4e:46:64:4c:50:84:50:fa:d5:36:0b:4b:7d:36:2e:ab:3f:12:
bf:cf:62:1b:05:84:97:c0:88:91:5c:63:38:2a:f5:d7:e9:5a:
eb:2f:20:db:c1:57:99:77:15:2c:ec:a6:a9:2a:73:96:36:00:
a8:f9:88:06:0b:ef:df:f2:cb:c6:dc:5f:3b:96:3e:65:ad:cf:
97:e1:fe:30:54:0b:3b:66:ff:f9:e1:85:45:58:3d:40:dc:e4:
65:09:64:56:ae:ae:40:ce:0e:87:70:31:b2:8f:8e:10:c6:6d:
81:5c:a3:2d:3c:e6:92:6a:09:2e:a7:19:a7:6c:0e:fc:65:05:
ad:97:b3:50:d6:7f:6e:04:a2:9e:2b:6b:b8:fa:54:7f:f9:0b:
e6:6e:2d:02:fb:6d:57:be:51:ba:b5:2d:84:15:f4:e5:c6:11:
04:23:1d:c1:84:9b:e8:4a:74:17:32:94:c6:cf:60:88:75:a0:
2e:ac:66:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:34:51 2026 by rpki-client