
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
File: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json)
Hash identifier: ejIL4ImsutyrdaH1tFSdhk/EpSeEDj3ff+fdyv/ufNo=
Subject key identifier: 93:9B:C1:46:A9:64:35:8C:CA:C8:7E:5B:32:5E:24:44:7B:C4:D5:EC
Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1
Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1
Certificate serial: 5F5E11CE31E72A3DD33C63277F31F194D5D714B1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
Manifest number: 013E
Signing time: Wed 14 Oct 2026 15:44:20 +0000
Manifest this update: Wed 14 Oct 2026 15:39:20 +0000
Manifest next update: Sat 17 Oct 2026 15:47:20 +0000
Files and hashes: 1: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=)
2: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: xhYFmP666S56GsgJ8MNHLaYOURmMofEl+vZPTylGhw8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 15:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:5e:11:ce:31:e7:2a:3d:d3:3c:63:27:7f:31:f1:94:d5:d7:14:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1
Validity
Not Before: Oct 14 15:39:20 2026 GMT
Not After : Oct 17 15:47:20 2026 GMT
Subject: CN=939BC146A964358CCAC87E5B325E24447BC4D5EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:f4:13:00:2b:e0:73:fd:aa:28:51:77:d8:
4e:90:e6:1e:02:f8:10:64:56:3d:c6:c5:9a:a3:9b:
78:5f:ac:5a:0a:be:27:e0:29:b8:97:c4:e6:78:db:
30:5f:4c:05:35:04:19:4a:dc:a5:dd:bc:8c:ba:5c:
c6:d6:32:53:e4:a7:6a:4a:b3:81:13:b9:8c:2d:fe:
99:b8:65:37:4d:61:3d:31:b6:f3:08:7d:62:d2:1f:
e3:6f:ca:ed:b3:9c:5d:ab:d4:5b:a3:c0:c7:a1:c2:
fc:2a:4e:54:9f:86:9a:a8:5b:41:c0:a0:0f:3e:89:
9c:c5:33:35:ad:9c:59:aa:e7:2a:0e:fa:b8:9b:6d:
81:0c:8e:73:3f:3d:a9:ba:4f:9e:24:90:57:32:63:
de:f1:d4:f2:6a:25:b3:e9:0a:dd:51:4d:e1:d0:49:
bc:c5:52:3c:b0:bf:5e:8b:a5:dd:cf:a3:ed:28:3f:
29:bf:9a:84:ef:fc:c2:a9:96:2a:c7:cc:4e:cf:e0:
f5:3b:fb:c5:3f:5b:cd:bd:9c:3f:39:57:fb:44:89:
8a:83:63:63:d1:16:d6:eb:dd:bc:4c:c3:3d:11:98:
d2:da:d8:26:e3:9c:08:58:ba:c9:00:52:a0:f2:46:
4a:f7:4c:86:b4:25:de:41:00:3e:1c:32:6c:00:f0:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9B:C1:46:A9:64:35:8C:CA:C8:7E:5B:32:5E:24:44:7B:C4:D5:EC
X509v3 Authority Key Identifier:
keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:54:b4:47:04:dc:a9:83:28:29:6c:e2:b1:fb:eb:e9:4f:34:
5e:a0:ea:ae:d7:4d:07:af:2d:20:81:cc:3e:ce:aa:fc:b8:f7:
24:49:51:6a:40:98:b3:95:2c:0d:d0:f6:cc:20:99:b8:6a:a8:
e4:b5:c2:4c:f6:26:fa:f1:ba:5a:04:7e:53:9c:ed:57:1a:f4:
3c:95:fa:6f:39:30:82:ed:a2:38:83:d3:13:4e:18:16:16:6c:
0d:5e:93:8d:c4:34:7f:4e:89:f4:4f:94:95:c8:91:57:dd:72:
d9:06:71:92:b0:ce:33:96:fb:04:30:af:5b:d7:ce:ea:5c:10:
44:fa:0e:43:c3:cc:9e:26:2a:59:a8:0d:23:83:4a:ec:a7:3c:
66:38:fe:16:c4:0b:d2:fb:4f:99:2c:4d:fd:8f:47:94:8c:1a:
c1:36:db:67:fc:03:c3:9d:61:3b:21:94:66:0f:9b:44:cc:6e:
52:74:e5:07:a5:7d:7b:9b:1a:c2:bc:25:da:f2:f3:48:20:64:
ed:42:7f:41:2c:65:62:ee:38:19:bf:35:43:a0:5b:15:8d:eb:
2f:9a:60:a8:6d:07:3a:71:ef:55:e6:04:17:fa:10:2e:2d:49:
1b:65:29:ed:9e:86:30:d2:49:3b:3a:b5:c9:6d:b7:b6:23:62:
c1:94:9c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:27:28 2026 by rpki-client