$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft File: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft (raw, json) Hash identifier: qkVYu5Rt6s/ColZEYhEXSlC1XIF+tf2cUxSraeKb6IU= Subject key identifier: 22:D9:C3:EE:2C:9A:2B:CB:99:9C:CD:DF:28:3C:1B:30:E2:0D:19:77 Authority key identifier: 7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 Certificate issuer: /CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Certificate serial: 5F4885F71608F60DBF27FFAD768ECBF6A686B9F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft Manifest number: C4 Signing time: Sun 14 Jun 2026 02:42:37 +0000 Manifest this update: Sun 14 Jun 2026 02:37:37 +0000 Manifest next update: Mon 15 Jun 2026 05:40:37 +0000 Files and hashes: 1: 7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl (hash: zfljXZEKP6/3RHq45+qk2SpcijQkltXLl0q06WAE/aQ=) 2: 3130332e32392e32342e302f32332d3234203d3e203338333738.roa (hash: NT/C7rQ1zYJGV0hCs88gAssgdTjQx+7zJXhspcVDh8w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:48:85:f7:16:08:f6:0d:bf:27:ff:ad:76:8e:cb:f6:a6:86:b9:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D50EBDDA02424365245F19A7DF958C301DA2EF1 Validity Not Before: Jun 14 02:37:37 2026 GMT Not After : Jun 15 05:40:37 2026 GMT Subject: CN=22D9C3EE2C9A2BCB999CCDDF283C1B30E20D1977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:dc:16:56:73:0e:60:74:e5:d8:24:3f:eb: 41:d0:1d:c9:67:bb:17:86:c4:4e:59:2e:49:86:18: cc:83:74:b1:3d:11:cb:76:cd:0f:71:f7:ad:50:3d: 12:19:72:e7:02:26:0a:20:e4:86:dc:82:41:1e:dd: a5:00:0d:42:02:20:77:7d:8d:50:02:57:a6:b4:56: ac:12:b4:a0:87:e5:fc:e4:53:c1:9e:8c:fb:66:f0: 5c:9e:f5:c2:8d:d5:0e:bc:76:81:3c:2b:e9:bd:8c: ce:4c:07:62:4f:fc:3f:d7:dd:3a:25:04:71:0a:a7: 24:2b:2c:86:5f:ca:ce:b9:94:c5:b8:ba:0d:9c:f7: cd:b9:80:9c:a0:7f:d3:9f:ad:7c:eb:ac:35:e6:22: c8:13:f9:03:66:1b:22:85:8f:2e:27:79:5d:aa:4b: 52:33:1c:0e:24:19:8f:0d:9e:82:e7:f3:9c:55:3b: c5:5c:62:f9:de:84:e4:9b:02:2e:0a:4a:22:e4:c4: b4:71:fa:6c:c8:cc:fb:63:f8:df:af:ae:21:1c:de: 6e:61:bc:02:a2:03:28:d0:75:06:72:46:74:dd:c4: 0b:f8:fa:06:21:14:4d:7b:05:b2:0d:4f:16:af:c1: 9c:1f:20:3b:58:77:16:40:33:b8:5e:22:58:df:9d: 2e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D9:C3:EE:2C:9A:2B:CB:99:9C:CD:DF:28:3C:1B:30:E2:0D:19:77 X509v3 Authority Key Identifier: keyid:7D:50:EB:DD:A0:24:24:36:52:45:F1:9A:7D:F9:58:C3:01:DA:2E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D50EBDDA02424365245F19A7DF958C301DA2EF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065573166430027779/0/7D50EBDDA02424365245F19A7DF958C301DA2EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8a:a7:d2:03:07:b3:d6:18:57:4a:19:fd:f8:25:14:ad:35: c9:0a:9c:c5:c0:77:cf:61:00:3f:2c:bb:4f:57:81:1a:88:55: f0:cc:aa:68:a9:27:b8:17:30:59:05:8a:82:66:4e:b6:cf:1b: 18:b3:51:d8:81:d9:6b:ac:67:8f:10:0b:db:6c:d2:e1:02:a1: 3e:09:ba:b9:86:65:4e:61:54:e6:db:22:3b:6f:2c:2e:9e:89: 6c:e0:b7:01:6a:5b:94:bb:19:99:ff:ed:34:4f:ba:f5:0e:ed: 52:aa:7a:46:03:1d:6d:5f:04:d4:82:d5:5d:af:b0:0c:cd:da: 66:ff:b2:22:3c:75:c4:18:68:0d:92:c5:31:b9:fc:a0:10:f9: 5c:62:5f:f5:c3:e1:b0:4d:48:50:24:f8:cd:6b:13:11:cf:2f: dc:26:ea:93:d7:ec:fa:48:20:c3:75:66:70:57:18:85:6b:af: c3:1d:b9:37:a5:66:aa:e1:8f:12:f2:af:94:dd:6e:ba:00:d4: df:38:f4:4c:cc:05:50:04:60:d5:15:98:6e:e6:65:6d:37:52: b4:3b:74:98:65:12:1c:8f:8c:33:d6:e6:29:e3:ca:f7:ee:d5: 4c:30:2c:53:e2:2b:e3:ef:30:78:4e:c9:33:3f:a5:4e:67:ed: ec:c1:aa:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX0iF9xYI9g2/J/+tdo7L9qaGufUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMw MURBMkVGMTAeFw0yNjA2MTQwMjM3MzdaFw0yNjA2MTUwNTQwMzdaMDMxMTAvBgNV BAMTKDIyRDlDM0VFMkM5QTJCQ0I5OTlDQ0RERjI4M0MxQjMwRTIwRDE5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfltwWVnMOYHTl2CQ/60HQHcln uxeGxE5ZLkmGGMyDdLE9Ect2zQ9x961QPRIZcucCJgog5IbcgkEe3aUADUICIHd9 jVACV6a0VqwStKCH5fzkU8GejPtm8Fye9cKN1Q68doE8K+m9jM5MB2JP/D/X3Tol BHEKpyQrLIZfys65lMW4ug2c9825gJygf9OfrXzrrDXmIsgT+QNmGyKFjy4neV2q S1IzHA4kGY8NnoLn85xVO8VcYvnehOSbAi4KSiLkxLRx+mzIzPtj+N+vriEc3m5h vAKiAyjQdQZyRnTdxAv4+gYhFE17BbINTxavwZwfIDtYdxZAM7heIljfnS65AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUItnD7iyaK8uZnM3fKDwbMOINGXcwHwYDVR0j BBgwFoAUfVDr3aAkJDZSRfGafflYwwHaLvEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3MzE2NjQzMDAyNzc3OS8wLzdENTBFQkREQTAyNDI0MzY1MjQ1RjE5QTdERjk1 OEMzMDFEQTJFRjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0Q1MEVCRERBMDI0MjQzNjUyNDVGMTlBN0RGOTU4QzMwMURBMkVGMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzMxNjY0MzAwMjc3NzkvMC83RDUwRUJEREEwMjQy NDM2NTI0NUYxOUE3REY5NThDMzAxREEyRUYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYqn0gMHs9YY V0oZ/fglFK01yQqcxcB3z2EAPyy7T1eBGohV8MyqaKknuBcwWQWKgmZOts8bGLNR 2IHZa6xnjxAL22zS4QKhPgm6uYZlTmFU5tsiO28sLp6JbOC3AWpblLsZmf/tNE+6 9Q7tUqp6RgMdbV8E1ILVXa+wDM3aZv+yIjx1xBhoDZLFMbn8oBD5XGJf9cPhsE1I UCT4zWsTEc8v3Cbqk9fs+kggw3VmcFcYhWuvwx25N6VmquGPEvKvlN1uugDU3zj0 TMwFUARg1RWYbuZlbTdStDt0mGUSHI+MM9bmKePK9+7VTDAsU+Ir4+8weE7JMz+l Tmft7MGq9A== -----END CERTIFICATE-----Generated at Sun Jun 14 08:36:41 2026 by rpki-client