
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096620927086493698/0/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.mft
File: 50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.mft (raw, json)
Hash identifier: KbptWucKvhTQL3U7Cefr+WZ1GNLY9ELmPGBLL6zQkZM=
Subject key identifier: EF:1F:61:5C:A1:CA:86:9B:0B:97:97:2D:A2:3F:7C:65:C0:66:2D:87
Authority key identifier: 50:F2:5C:99:22:8B:3E:6C:74:0B:1F:C9:C5:87:A9:AC:0E:D3:2F:12
Certificate issuer: /CN=50F25C99228B3E6C740B1FC9C587A9AC0ED32F12
Certificate serial: 1BA9086A0FB4715258706905E457700F73FC6A63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096620927086493698/0/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.mft
Manifest number: 0F
Signing time: Fri 17 Apr 2026 09:59:42 +0000
Manifest this update: Fri 17 Apr 2026 09:54:42 +0000
Manifest next update: Sat 18 Apr 2026 12:36:42 +0000
Files and hashes: 1: 3131302e35312e3132382e302f31382d3234203d3e203435313133.roa (hash: SL+zxWGHwke5jODGtFlXdQa/92f8UFMhStx17fOitEI=)
2: 3131302e35312e302e302f31362d3234203d3e203435313133.roa (hash: 6XAYAYmiR0BGNtLlbChXZJuR9ZgYvbNXqwx07taxHOM=)
3: 50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.crl (hash: RjCZKF2MTLOx9lwAurmCM6gg1WtvX2lOUFgoyJKSVik=)
4: 3131302e35312e3139322e302f31382d3234203d3e203435313133.roa (hash: q3H8IqfogqAoFQzW880vmftjmriCt9IumTsqJfIJTGY=)
5: 3131302e35312e36342e302f31382d3234203d3e203435313133.roa (hash: IDfXLg8m8GrtEcL2jzSpMP454gSQolzN0sAy3b1okoA=)
6: 3131302e35312e302e302f31382d3234203d3e203435313133.roa (hash: 8jOkX6ArNfW2X56bB7XC0NVU60MJOWprC78SYaYs6Kg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096620927086493698/0/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.crl
rsync://rpki-rps.cnnic.cn/repo/A1096620927086493698/0/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 12:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a9:08:6a:0f:b4:71:52:58:70:69:05:e4:57:70:0f:73:fc:6a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50F25C99228B3E6C740B1FC9C587A9AC0ED32F12
Validity
Not Before: Apr 17 09:54:42 2026 GMT
Not After : Apr 18 12:36:42 2026 GMT
Subject: CN=EF1F615CA1CA869B0B97972DA23F7C65C0662D87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:63:0d:e1:75:18:97:e9:1d:40:e9:61:d7:
a3:09:1b:0c:2d:6e:8d:ff:44:02:7a:37:e1:51:e2:
1f:7a:4e:9c:8e:c0:84:32:db:e4:37:42:8e:bf:de:
e0:ca:a1:76:39:43:34:68:1a:f0:13:36:5c:1f:8a:
9c:b7:a4:08:58:14:53:1d:0f:53:f7:c6:83:7e:80:
85:9d:a1:ac:13:11:71:eb:6d:1b:c5:c5:56:f6:b0:
e1:e1:59:05:47:08:52:29:b4:65:85:30:52:64:b8:
b1:a0:5b:07:86:a7:85:2b:b4:36:40:a1:e9:30:14:
80:9d:02:3b:c2:5d:52:5f:a4:6e:e3:f6:9c:c7:0b:
51:46:c4:65:5c:df:5e:da:ef:d2:da:26:a0:9a:3f:
83:f5:77:96:99:76:4f:24:d8:39:28:59:eb:3f:08:
14:d3:98:40:22:f8:66:21:a1:46:76:fb:2d:2b:47:
25:93:9f:27:2b:56:fc:04:a4:bd:f8:fb:ab:60:66:
08:09:7c:24:e6:1b:e0:d3:f7:9b:0b:50:c4:62:b7:
54:3b:63:18:84:18:fe:b1:76:24:82:2d:72:63:f0:
fb:bf:e7:72:c0:d6:0c:80:d3:71:44:32:68:91:6e:
9a:92:bb:21:b9:f4:ff:57:b0:db:c3:d8:d2:f2:ef:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1F:61:5C:A1:CA:86:9B:0B:97:97:2D:A2:3F:7C:65:C0:66:2D:87
X509v3 Authority Key Identifier:
keyid:50:F2:5C:99:22:8B:3E:6C:74:0B:1F:C9:C5:87:A9:AC:0E:D3:2F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096620927086493698/0/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096620927086493698/0/50F25C99228B3E6C740B1FC9C587A9AC0ED32F12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:63:f3:c3:73:33:6b:4c:34:17:e5:e7:72:18:bf:82:ea:42:
3e:82:3a:f1:17:39:0c:6e:41:e5:54:85:7f:74:bf:5a:c0:c1:
99:2b:bb:14:b5:99:b6:0d:a2:49:6f:7f:49:49:ed:3b:24:08:
64:99:11:02:e2:c0:1a:30:cd:d2:83:a3:a9:07:64:00:4a:20:
c0:bf:a8:a0:e1:9e:a9:69:87:14:2b:c5:76:47:ca:d7:ed:13:
ac:e8:dd:85:e3:39:f2:cc:f0:05:a1:e6:e7:8f:a7:2e:d7:9d:
df:8b:06:27:34:e2:ed:c1:d7:2a:8b:b6:b4:4a:23:04:47:0d:
ce:ca:06:55:cf:54:26:e8:f3:f2:5e:45:f3:f0:58:d3:f5:25:
31:58:c3:91:10:39:0e:61:d7:0a:b5:67:21:4b:de:74:2a:08:
87:0a:41:60:92:9b:db:49:ed:79:8a:8a:cd:49:1b:bf:5e:3e:
d7:14:82:ba:3a:da:47:ec:86:30:9d:61:44:9d:6e:ef:cf:46:
5c:e0:d0:da:a2:3e:ac:20:2d:5a:eb:50:7c:5e:24:04:31:c8:
70:cf:7b:fb:af:54:94:70:7a:01:23:2a:28:29:b9:a2:71:6b:
33:95:1b:9f:7d:ff:ed:78:79:46:82:a4:f4:36:b2:a2:79:e6:
59:dc:61:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:13 2026 by rpki-client