$ git clone -n https://gitee.com/src-anolis-os/ca-certificates.git /var/lib/mock/dist-an8.10-build-590083-99013/root/chroot_tmpdir/scmroot/ca-certificates
Cloning into '/var/lib/mock/dist-an8.10-build-590083-99013/root/chroot_tmpdir/scmroot/ca-certificates'...
$ git reset --hard 4ae18664b15cb74e767316bb510ae78c7468e0ef
HEAD is now at 4ae1866 invalidate two certs 'emSign Root TLS CA - G3' and 'Comodo AAA Services root'