$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft File: 25C6596195B162409A5AFAA92570F258BAD3C42D.mft (raw, json) Hash identifier: j2jg7HRLtFfFE6gy1ecqZij4uerqEi9maJ+50YCUYos= Subject key identifier: 20:B3:06:D0:D2:74:88:1A:60:66:24:2C:60:14:78:B1:DE:F5:0C:4C Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 79E40C3D01089071C68EB426D4488A079207354E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft Manifest number: 8B Signing time: Thu 16 Apr 2026 18:48:04 +0000 Manifest this update: Thu 16 Apr 2026 18:43:04 +0000 Manifest next update: Fri 17 Apr 2026 21:34:04 +0000 Files and hashes: 1: 25C6596195B162409A5AFAA92570F258BAD3C42D.crl (hash: JFiSNip8ijqDgGwUQT4QStAbsDtPbqrF/DoQC8+6vds=) 2: 34332e3235352e3138342e302f32322d3234203d3e20313331353136.roa (hash: 7oa2kTENkUrrhZuO8E0qYQsNSb3CZOgzY84ZsFhWVl4=) 3: 3130332e3234382e3135332e302f32342d3234203d3e20313331353136.roa (hash: 1iXEnXLh1xjdmjgXZ+Zf2vht0HF5V9Iqk2Y4dx/afiY=) 4: 3130332e3234382e3135352e302f32342d3234203d3e20313331353136.roa (hash: 1V11KSH8ZO65QDHqe59FXALQdIKmYboBt78naZPL0Gk=) 5: 3130332e3234382e3135342e302f32342d3234203d3e2034383131.roa (hash: KAjdya8x+2gN63TLVyS7AqFJkMdT4MHE18PLMVeWd8k=) 6: 3131362e3139362e3136302e302f32302d3234203d3e20313331353136.roa (hash: bttkYH0l28mImsKE4xKoKUkJaI1GuonkjKPOMwf2P0g=) 7: 3131362e38392e3134342e302f32302d3234203d3e20313331353136.roa (hash: y83JS4Deej8KRcxGmYNU7f1r9CNZBaKtnt6Q+/BvP5c=) 8: 3132332e3137362e38302e302f32302d3234203d3e20313331353136.roa (hash: 5fiZ5GttxYaOcgluy/azTpDTtS6E6CiNnc8yymDFWMk=) 9: 3130332e3234382e3135332e302f32342d3234203d3e2034383131.roa (hash: jpxk8QYfaZ4Lq+wqbBKWvAn7PWKauaHwfOdE/GNQ1bA=) 10: 3130332e3234382e3135352e302f32342d3234203d3e2034383337.roa (hash: GSWkomBBmIiUvBccJZTo7QIT4Kh/QztIyW9ekDjdNho=) 11: 3130332e3234382e3135342e302f32342d3234203d3e20313331353136.roa (hash: AbBhVMl/Tp7ypYL8yo65ASVOEdUu8CE2kxrufe7/zNo=) 12: 3131362e3139362e3132382e302f31392d3234203d3e20313331353136.roa (hash: kBDnBj7F6mTZybN06dLoVjAeHV729EiyoegL3hPqQzM=) 13: 3135302e3234322e3234302e302f32322d3234203d3e20313331353136.roa (hash: uzEDoJO/HvzsS7Mob7amPkS2gE4be7zeo6tmlv3hVOY=) 14: 3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa (hash: 8ZraEktX3VtCYvzeeQU+MzLd5o1i1pDGkDAgGT9Uhp4=) 15: 3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa (hash: YySm2cg/E+3trgCgazleVF/zeEgC2VFWmTffoSCCZPM=) 16: 3231312e3134372e39362e302f32302d3234203d3e20313331353136.roa (hash: VZcRbqZjxjAhNXelM57YDaEk4eZQzgx6rRmelt9cpwo=) 17: 3130332e3233392e3138342e302f32322d3234203d3e20313331353136.roa (hash: o8HMGS9kzgCp9mgs2gxP2h4xE9GBcQPF4KHqqwWWjXQ=) 18: 3130332e3234382e3135342e302f32342d3234203d3e2034383337.roa (hash: PY+ClSSe7FsRUgsLEHUWmvZxgE87mH+i5+iDE+XZpYc=) 19: 323430373a323363303a393030303a3a2f34382d3634203d3e20313331353136.roa (hash: r7RuRxDknaWXm06Dy5betKYQwsDUO7ouhImWyjv2B6g=) 20: 3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa (hash: ayxs+w4/JeX6PHaC3sPkLMgzAQlZveMnqBCO9/aNy4o=) 21: 3130332e3234382e3135352e302f32342d3234203d3e2034383131.roa (hash: S9wm7V1jEKsdWPhliBOnVYmKnnehtzWifE6l9yAwEJg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 21:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e4:0c:3d:01:08:90:71:c6:8e:b4:26:d4:48:8a:07:92:07:35:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Apr 16 18:43:04 2026 GMT Not After : Apr 17 21:34:04 2026 GMT Subject: CN=20B306D0D274881A6066242C601478B1DEF50C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:92:63:2d:9e:af:38:19:37:0c:94:61:12: 35:44:c9:4c:13:46:3e:e1:8d:96:05:96:22:29:39: 80:db:5f:e2:df:a9:86:91:eb:b0:2b:b5:ff:43:68: 7c:5a:04:76:4c:17:71:80:5b:68:47:ef:26:83:5f: 15:d0:df:12:57:d8:c3:59:85:50:19:8d:2a:95:79: 6b:17:a8:e9:c6:7e:7a:ee:24:fe:9c:c5:af:b0:14: 97:6c:0f:00:7f:c6:b9:46:15:ac:c2:8d:4f:f2:4f: d6:36:c8:91:3a:6a:d8:ee:82:61:3b:aa:86:45:15: 7b:2b:83:f1:b3:74:07:20:57:50:7a:6c:cf:b3:8e: d8:b3:ba:ed:7d:00:3e:f1:87:cf:cb:7d:93:26:33: 9e:45:3a:74:3b:23:fb:32:fa:13:29:9f:9a:32:b9: 00:88:81:95:b7:79:3a:18:bc:c9:7c:f9:c5:f9:c0: 48:ae:11:a5:10:94:d0:74:2c:00:4f:94:3d:a9:ec: 7b:77:85:8f:ed:9e:92:cf:46:e9:28:7b:3f:c4:ec: d8:28:c0:38:b9:aa:88:57:2f:bc:3f:4b:51:55:66: 42:76:12:76:54:66:de:28:a0:94:cc:ae:2b:e8:5a: bc:94:4f:cb:c4:cd:77:1c:26:0e:aa:13:b6:1e:ca: af:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B3:06:D0:D2:74:88:1A:60:66:24:2C:60:14:78:B1:DE:F5:0C:4C X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fd:96:06:c3:d2:43:c8:35:fc:ed:cb:fa:60:b4:47:96:c6: be:cf:65:ca:cc:70:78:1a:f5:39:12:79:9e:a1:4b:95:79:5d: 6f:81:86:27:60:cd:b4:cd:7f:d0:d0:ed:e7:96:72:ac:34:47: a7:0a:cc:65:ff:1c:70:89:72:15:20:27:5c:ff:1e:23:a9:f5: 73:92:5a:a3:ef:66:ff:46:39:23:ab:92:8f:1f:fc:39:e1:a8: 1a:b5:c5:51:0c:a2:45:00:97:33:81:a0:25:ef:fc:38:02:b3: 2c:c1:13:2b:c6:ce:87:fc:30:97:66:ff:75:71:d9:57:58:63: 03:dc:01:99:45:a4:ed:74:a4:3f:6b:a9:4d:1e:37:59:a4:a1: 62:61:8e:65:68:82:7a:4a:3c:ea:87:b0:f4:40:a8:68:30:d5: b3:12:7c:b5:48:29:cd:a0:93:f2:82:8f:1f:4b:eb:a1:33:71: 9c:c4:0e:5d:58:01:c1:75:ab:a9:f3:6f:b1:9c:9d:6f:8e:9d: d7:af:cd:ad:41:91:14:ca:ae:72:fa:d9:27:a5:d3:d1:f1:a0: 0f:b6:86:b8:a8:8d:c4:33:3d:be:50:57:bc:68:e9:be:84:77: 07:6c:81:48:3f:65:e9:92:5e:c9:83:da:fe:52:81:f1:8c:a7: bb:0c:a3:02 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeeQMPQEIkHHGjrQm1EiKB5IHNU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjA0MTYxODQzMDRaFw0yNjA0MTcyMTM0MDRaMDMxMTAvBgNV BAMTKDIwQjMwNkQwRDI3NDg4MUE2MDY2MjQyQzYwMTQ3OEIxREVGNTBDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GJJjLZ6vOBk3DJRhEjVEyUwT Rj7hjZYFliIpOYDbX+LfqYaR67Artf9DaHxaBHZMF3GAW2hH7yaDXxXQ3xJX2MNZ hVAZjSqVeWsXqOnGfnruJP6cxa+wFJdsDwB/xrlGFazCjU/yT9Y2yJE6atjugmE7 qoZFFXsrg/GzdAcgV1B6bM+zjtizuu19AD7xh8/LfZMmM55FOnQ7I/sy+hMpn5oy uQCIgZW3eToYvMl8+cX5wEiuEaUQlNB0LABPlD2p7Ht3hY/tnpLPRukoez/E7Ngo wDi5qohXL7w/S1FVZkJ2EnZUZt4ooJTMrivoWryUT8vEzXccJg6qE7Yeyq8DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUILMG0NJ0iBpgZiQsYBR4sd71DEwwHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTY5OTYzNTUvMC8yNUM2NTk2MTk1QjE2 MjQwOUE1QUZBQTkyNTcwRjI1OEJBRDNDNDJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGv2WBsPSQ8g1 /O3L+mC0R5bGvs9lysxweBr1ORJ5nqFLlXldb4GGJ2DNtM1/0NDt55ZyrDRHpwrM Zf8ccIlyFSAnXP8eI6n1c5Jao+9m/0Y5I6uSjx/8OeGoGrXFUQyiRQCXM4GgJe/8 OAKzLMETK8bOh/wwl2b/dXHZV1hjA9wBmUWk7XSkP2upTR43WaShYmGOZWiCeko8 6oew9ECoaDDVsxJ8tUgpzaCT8oKPH0vroTNxnMQOXVgBwXWrqfNvsZydb46d16/N rUGRFMqucvrZJ6XT0fGgD7aGuKiNxDM9vlBXvGjpvoR3B2yBSD9l6ZJeyYPa/lKB 8YynuwyjAg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:42:06 2026 by rpki-client