
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft
File: 50296D63899E692A0BA1D29C54A95275354500E5.mft (raw, json)
Hash identifier: 83oZoaurh+Al2QyLyBn3rftGxvKRVm0RKYEOzGQnR0s=
Subject key identifier: 22:55:2F:BD:8D:E5:6F:93:CD:F8:CE:20:84:75:9E:59:7E:7F:46:B9
Authority key identifier: 50:29:6D:63:89:9E:69:2A:0B:A1:D2:9C:54:A9:52:75:35:45:00:E5
Certificate issuer: /CN=50296D63899E692A0BA1D29C54A95275354500E5
Certificate serial: 095ECE56C0F9A1C5AD3FB415CC1D683D9657DB77
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50296D63899E692A0BA1D29C54A95275354500E5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft
Manifest number: 22
Signing time: Thu 15 Oct 2026 00:05:52 +0000
Manifest this update: Thu 15 Oct 2026 00:00:52 +0000
Manifest next update: Sun 18 Oct 2026 08:34:52 +0000
Files and hashes: 1: 50296D63899E692A0BA1D29C54A95275354500E5.crl (hash: uOOfLeCGhzhnBRy8aaruDa8oeSvnmWNRNYArvgud1YM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.crl
rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50296D63899E692A0BA1D29C54A95275354500E5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:34:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5e:ce:56:c0:f9:a1:c5:ad:3f:b4:15:cc:1d:68:3d:96:57:db:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50296D63899E692A0BA1D29C54A95275354500E5
Validity
Not Before: Oct 15 00:00:52 2026 GMT
Not After : Oct 18 08:34:52 2026 GMT
Subject: CN=22552FBD8DE56F93CDF8CE2084759E597E7F46B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:25:d2:0c:42:10:52:d1:6a:c6:3c:2c:93:
3a:bb:b3:6f:c3:9d:35:5e:8e:2a:f2:c9:d0:3e:bc:
07:1b:a3:70:56:74:05:a0:6f:01:db:63:20:78:be:
7d:04:14:75:79:12:52:6f:c5:ab:e8:29:e2:9a:4b:
5c:dc:04:08:22:49:9f:8d:5a:9b:58:72:13:ab:90:
26:ae:c2:a1:63:f4:6e:ce:33:0a:5e:b9:2a:70:d0:
35:57:04:cd:f2:d6:bb:ca:80:27:56:c2:c8:cc:58:
74:8b:48:41:af:c5:3a:8e:a9:2d:8b:62:24:e0:c3:
ec:31:7d:b3:29:e7:b3:76:dc:e8:04:e3:f5:c3:55:
4f:b6:fe:ab:01:f4:ea:49:c3:ec:92:a0:f7:51:de:
b9:1a:58:bf:20:4d:a8:b9:5e:03:5e:79:f3:c7:e5:
88:1d:32:c7:d1:53:70:73:35:6e:9c:21:84:e9:f4:
ca:c0:25:4f:96:b2:7c:6b:37:05:bf:d6:a2:9b:6e:
ae:2b:a7:c8:14:59:58:f1:42:cb:2b:65:bf:9b:31:
3d:84:b9:c7:09:37:b6:ed:a7:57:cb:03:90:aa:99:
db:e1:e5:4b:71:96:3e:bb:07:fd:40:a8:1a:c8:e6:
a8:fd:28:8d:83:5f:b6:04:2a:3f:ee:cb:ec:06:a1:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:55:2F:BD:8D:E5:6F:93:CD:F8:CE:20:84:75:9E:59:7E:7F:46:B9
X509v3 Authority Key Identifier:
keyid:50:29:6D:63:89:9E:69:2A:0B:A1:D2:9C:54:A9:52:75:35:45:00:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50296D63899E692A0BA1D29C54A95275354500E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1142630347997970475/0/50296D63899E692A0BA1D29C54A95275354500E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1c:7a:b7:6c:85:f8:4e:aa:8b:e7:c5:f6:7f:5d:8c:00:02:
80:10:3d:96:a8:4b:e6:d1:77:cc:4c:ab:3c:a5:e6:51:bb:34:
a8:58:ee:20:5f:bd:1e:c4:bf:f8:16:96:23:77:b7:42:f5:8f:
29:63:3f:d0:24:71:0c:76:6e:39:1c:61:42:d1:31:25:43:39:
ff:48:03:57:ee:44:a7:1b:04:b4:03:f3:93:36:81:cb:e7:29:
e0:12:f6:aa:47:d4:32:1e:99:fe:ed:7b:f4:3a:64:6d:eb:73:
ec:17:77:7c:2c:90:28:61:74:c8:4c:0c:37:89:46:0f:d7:3c:
6f:b8:78:18:fe:a4:0b:86:75:c8:14:37:3b:cd:ce:be:5d:99:
27:7f:d5:cf:72:6a:97:00:55:c6:d4:3d:99:6c:93:8f:72:55:
c6:f1:55:62:a9:0a:96:b0:0a:a8:f5:79:b9:9d:ba:b3:0a:ca:
52:3e:1c:f2:7e:b0:0b:fe:60:13:50:0c:7a:11:96:15:10:42:
57:29:2c:73:04:07:0b:f3:41:79:fe:0d:f9:83:de:2d:b0:c6:
a2:53:33:8d:7f:91:4d:78:af:bf:55:02:52:8b:10:f3:39:42:
37:d2:4e:86:c5:2d:62:d8:d1:9d:04:e1:f2:6c:62:f9:80:ec:
bb:05:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:38:14 2026 by rpki-client