$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft File: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json) Hash identifier: cr0CeNzIp5PJMJthfhW8WjOIAPfZVYEc00re/9oVZvo= Subject key identifier: 1B:89:93:83:71:1A:B3:F9:33:EE:04:F0:C0:80:5A:C4:89:07:80:50 Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Certificate serial: 38A0E3935B966077C7BB4C2E3B1F22BC0CC98C3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 12:58:17 +0000 Manifest this update: Mon 02 Mar 2026 12:53:17 +0000 Manifest next update: Tue 03 Mar 2026 16:07:17 +0000 Files and hashes: 1: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=) 2: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: ipN51jch8fdibSpx7Dj8WyPqy99qJnxoOdV1uFLcdVg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a0:e3:93:5b:96:60:77:c7:bb:4c:2e:3b:1f:22:bc:0c:c9:8c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Validity Not Before: Mar 2 12:53:17 2026 GMT Not After : Mar 3 16:07:17 2026 GMT Subject: CN=1B899383711AB3F933EE04F0C0805AC489078050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:54:71:ba:15:b0:8f:be:04:a7:4c:e1:2b:ca: 1b:68:2b:37:5f:86:7f:3d:99:d9:46:04:9d:61:04: 96:2c:f8:76:4c:1e:22:4d:ef:8b:a6:e2:88:51:f4: 82:27:10:a2:6e:f1:a6:1b:71:09:5e:42:ea:90:5d: a1:8f:08:25:13:3c:70:0b:9e:db:e9:1b:b4:4c:1f: 94:79:b5:c3:b3:fe:b6:f1:15:2b:2c:4d:59:4d:6f: d7:c7:ad:c8:a5:86:c4:39:7a:cb:20:95:b9:d6:ba: 21:aa:ef:b1:d4:08:40:1d:60:14:81:52:64:05:97: da:60:38:fe:ff:5c:10:be:ab:e8:1f:51:06:98:eb: c1:4f:4a:8d:4f:c5:0b:31:3d:1d:b9:a7:dd:96:e2: 9f:99:d0:9a:33:c3:1a:15:ea:12:55:82:b5:9e:ef: 71:76:1b:da:89:b4:d6:b1:a9:ad:ec:40:92:2e:6f: 60:38:c9:e8:5b:91:41:8d:87:30:17:43:1d:dc:66: 38:a1:a1:11:0e:a7:18:9f:e9:37:23:bb:88:24:10: 4d:da:74:da:19:58:ad:29:f2:4c:36:59:b8:67:ff: 07:b3:b9:41:4b:7c:14:35:48:dd:04:95:c4:51:c8: ad:63:76:aa:7c:18:4a:8e:18:61:6d:1e:f1:ed:a6: db:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:89:93:83:71:1A:B3:F9:33:EE:04:F0:C0:80:5A:C4:89:07:80:50 X509v3 Authority Key Identifier: keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:66:71:3d:08:10:6d:4c:38:55:f4:fa:51:78:05:7b:63:24: b7:2d:be:96:3b:be:cf:a0:59:d5:50:07:bc:60:10:46:16:e7: d0:98:28:3a:4d:40:d5:e1:4e:ef:fb:6a:a1:07:05:ae:ef:97: d1:25:3b:77:16:a5:02:01:61:d6:a9:30:54:05:4a:d0:3b:a5: 5f:f2:e7:35:ad:96:3d:07:27:0e:ff:66:8f:bf:07:81:b1:f9: 8f:30:ee:41:2b:ea:71:df:b7:14:20:20:17:0d:b9:54:5d:81: 22:8a:bd:9a:93:56:40:f3:5e:20:0c:52:ab:c5:45:b8:5d:02: 1c:76:46:60:2d:8d:7e:b6:66:8d:72:eb:75:1d:70:d8:62:84: 05:59:29:d7:4a:94:47:9e:4a:ce:1c:6a:23:9e:81:1a:fa:f4: 53:d4:d3:20:40:c1:2a:24:8a:42:bd:2b:64:99:89:dc:b8:02: 05:7c:bf:5a:a7:50:c4:92:31:11:26:c5:58:f7:ff:90:5c:b6: 50:c0:df:ad:fe:96:27:7a:e3:d9:6b:98:16:85:6f:0a:58:a4: ae:b3:ed:56:2f:f9:f7:20:cc:8c:60:fd:68:65:b7:a6:47:4c: e9:51:be:1e:6c:f5:38:26:d2:78:ae:2f:b8:d3:df:d3:86:22: ab:17:df:83 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOKDjk1uWYHfHu0wuOx8ivAzJjDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMw MURBMkVGMTAeFw0yNjAzMDIxMjUzMTdaFw0yNjAzMDMxNjA3MTdaMDMxMTAvBgNV BAMTKDFCODk5MzgzNzExQUIzRjkzM0VFMDRGMEMwODA1QUM0ODkwNzgwNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVHG6FbCPvgSnTOEryhtoKzdf hn89mdlGBJ1hBJYs+HZMHiJN74um4ohR9IInEKJu8aYbcQleQuqQXaGPCCUTPHAL ntvpG7RMH5R5tcOz/rbxFSssTVlNb9fHrcilhsQ5essglbnWuiGq77HUCEAdYBSB UmQFl9pgOP7/XBC+q+gfUQaY68FPSo1PxQsxPR25p92W4p+Z0JozwxoV6hJVgrWe 73F2G9qJtNaxqa3sQJIub2A4yehbkUGNhzAXQx3cZjihoREOpxif6Tcju4gkEE3a dNoZWK0p8kw2Wbhn/wezuUFLfBQ1SN0ElcRRyK1jdqp8GEqOGGFtHvHtptt7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUG4mTg3Eas/kz7gTwwIBaxIkHgFAwHwYDVR0j BBgwFoAUfVDr3aAkJDZSRfGafflYwwHaLvEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3MzE2NjQzMDAyNzc3OS8wLzdENTBFQkREQTAyNDI0MzY1MjQ1RjE5QTdERjk1 OEMzMDFEQTJFRjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMwMURBMkVGMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzMxNjY0MzAwMjc3NzkvMC83RDUwRUJEREEwMjQy NDM2NTI0NUYxOUE3REY5NThDMzAxREEyRUYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGZxPQgQbUw4 VfT6UXgFe2Mkty2+lju+z6BZ1VAHvGAQRhbn0JgoOk1A1eFO7/tqoQcFru+X0SU7 dxalAgFh1qkwVAVK0DulX/LnNa2WPQcnDv9mj78HgbH5jzDuQSvqcd+3FCAgFw25 VF2BIoq9mpNWQPNeIAxSq8VFuF0CHHZGYC2NfrZmjXLrdR1w2GKEBVkp10qUR55K zhxqI56BGvr0U9TTIEDBKiSKQr0rZJmJ3LgCBXy/WqdQxJIxESbFWPf/kFy2UMDf rf6WJ3rj2WuYFoVvClikrrPtVi/59yDMjGD9aGW3pkdM6VG+Hmz1OCbSeK4vuNPf 04Yiqxffgw== -----END CERTIFICATE-----Generated at Tue Mar 3 01:50:26 2026 by rpki-client