
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
File: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json)
Hash identifier: G69oTWyzXcVU43MsIENHbhC9SpI119JUFIj9zOCA0P0=
Subject key identifier: 21:9C:1B:BA:8A:C0:F0:7F:CC:F7:74:45:FC:D9:45:50:2D:CC:F1:34
Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1
Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1
Certificate serial: 04E76F5EA8C551E0974FC518AA894010EA0E89C1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
Manifest number: 0101
Signing time: Wed 29 Jul 2026 10:34:09 +0000
Manifest this update: Wed 29 Jul 2026 10:29:09 +0000
Manifest next update: Thu 30 Jul 2026 11:57:09 +0000
Files and hashes: 1: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: dqw45ARdD2kpmRA2AXWoSg6+j/i+mlrIgkKOZuQ+ONY=)
2: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e7:6f:5e:a8:c5:51:e0:97:4f:c5:18:aa:89:40:10:ea:0e:89:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1
Validity
Not Before: Jul 29 10:29:09 2026 GMT
Not After : Jul 30 11:57:09 2026 GMT
Subject: CN=219C1BBA8AC0F07FCCF77445FCD945502DCCF134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:0f:16:99:28:61:b0:e1:bb:20:83:8e:3b:
78:2b:f7:ba:15:c8:9a:cd:f3:5b:60:15:93:0c:44:
e8:29:b9:9c:a0:dd:74:5a:36:77:6b:5c:c6:1d:67:
a4:33:c6:32:1e:cf:58:1b:e4:12:22:36:1c:8d:15:
c6:ce:74:51:bf:88:98:67:92:55:2c:06:86:fa:be:
10:0e:13:21:69:f1:3c:86:ca:24:79:78:90:66:69:
14:57:0e:29:cd:c8:4a:e8:1a:24:8b:87:e1:17:13:
a7:dc:d0:54:67:3a:f9:cb:8a:26:ab:f9:4f:40:a8:
85:df:ee:a9:ac:2a:2b:0b:97:26:38:37:a1:21:62:
06:83:fa:94:04:12:97:82:89:c6:f4:09:db:77:a1:
b2:d2:f4:bc:2a:04:5d:75:5c:fe:f4:c0:7a:69:ec:
06:a4:9c:96:84:47:64:60:d7:83:00:ed:48:3b:72:
3c:e7:f4:31:82:dc:fb:7f:3e:49:ef:1a:78:71:4d:
bb:8d:ab:ff:92:45:8c:b6:f8:aa:cb:87:fd:79:e2:
93:54:f6:56:8a:fa:55:87:03:f8:ac:e3:56:56:07:
49:65:f8:a2:05:2b:68:fc:76:b9:50:53:25:a8:b9:
03:2f:6f:9d:ce:03:40:48:6c:50:ee:37:0c:fc:b2:
a4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9C:1B:BA:8A:C0:F0:7F:CC:F7:74:45:FC:D9:45:50:2D:CC:F1:34
X509v3 Authority Key Identifier:
keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:17:06:13:c2:7a:53:db:26:5b:7d:70:e9:91:a4:ed:97:c3:
ea:28:94:dc:92:36:e4:e4:10:df:d9:d4:83:4a:ee:c7:ec:d6:
1f:83:19:ec:05:18:84:f1:1e:b7:7f:ef:c1:b7:16:c0:f8:04:
9f:be:f0:d1:b6:18:47:16:9c:9a:c4:0b:ff:d6:76:9e:8b:43:
80:93:fd:6f:62:16:03:c0:21:09:db:81:03:21:69:f5:92:d0:
bc:4c:20:44:a0:57:f9:56:72:d5:e0:62:eb:2c:77:53:e0:fc:
ee:c1:21:e7:d4:0f:83:63:43:19:97:38:fe:d7:9b:2a:a9:f0:
56:fe:ae:54:ce:bc:27:fb:25:c0:ef:10:65:0b:51:ac:ea:50:
9c:aa:64:50:89:2e:56:c4:93:fb:da:92:c4:81:99:11:03:5f:
38:b8:03:9e:76:10:ca:ec:52:de:94:57:99:f3:ae:aa:11:a0:
29:47:77:1c:0d:96:d1:37:20:f5:3d:46:ea:80:25:29:60:dc:
73:d5:11:9e:f5:e4:ea:47:bb:cc:b7:8d:5e:d3:f3:f4:34:0c:
f8:f3:c2:08:34:11:f7:b3:b1:10:c3:20:18:5b:be:48:3e:fb:
25:ae:4e:36:2c:c4:b2:e8:bd:f0:45:b4:21:67:ab:56:43:b0:
3b:71:2b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:02:22 2026 by rpki-client