$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft File: 25C6596195B162409A5AFAA92570F258BAD3C42D.mft (raw, json) Hash identifier: FWB1QSxjRWvXerbVU5yGMlHShoq75vlp9lGNbMrQBe4= Subject key identifier: 21:7C:0B:26:D2:49:17:02:21:24:AD:68:8B:F1:06:CE:8C:6E:82:BA Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 0DA319DBB1E02CF0111E25C3744FC02D8A610701 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 11:23:16 +0000 Manifest this update: Sun 01 Mar 2026 11:18:16 +0000 Manifest next update: Mon 02 Mar 2026 12:51:16 +0000 Files and hashes: 1: 25C6596195B162409A5AFAA92570F258BAD3C42D.crl (hash: KjkfWIiEiHO76cLwYrayDQGH4RGfyKsnw2RO+Tb75x8=) 2: 3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa (hash: OqthX14Z5si5Z7IYFzrZNKv5x092FOwbR0BMAozLLVc=) 3: 3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa (hash: JP55VF7KYTKS5/sVQC9CenTZrXdL8P2f1BqN6bAELNE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 09:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a3:19:db:b1:e0:2c:f0:11:1e:25:c3:74:4f:c0:2d:8a:61:07:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Mar 1 11:18:16 2026 GMT Not After : Mar 2 12:51:16 2026 GMT Subject: CN=217C0B26D24917022124AD688BF106CE8C6E82BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:09:71:54:64:16:b4:85:c1:84:ab:9c:a9:b6: fc:f0:01:83:43:2f:da:ef:8b:44:53:4a:37:2c:dd: 52:95:3f:88:f2:61:d3:3c:0f:0c:4d:19:bb:88:91: 83:5c:7c:d7:81:88:73:71:7e:1e:47:e0:93:bd:fa: 93:74:6c:01:4b:05:3f:a0:ed:1e:5f:30:97:fa:55: 23:d8:56:52:5f:80:1e:d4:52:e8:bd:91:45:10:2d: 23:a8:05:ee:5f:4c:b6:3d:6c:2c:e9:f2:ee:e4:81: 5e:5c:dd:37:78:c9:a1:42:1d:2b:1c:59:f0:b4:40: f5:8f:29:44:14:73:2f:28:5b:01:fc:35:22:7c:e2: 8d:05:83:7b:29:bd:d2:65:14:b4:27:32:41:dd:21: 0c:92:a8:4f:f8:0c:5b:90:d5:10:b1:14:44:d9:ad: e1:ce:c7:73:4c:bd:2a:70:84:05:7e:d0:ac:67:f1: e0:59:14:eb:10:2a:17:a8:35:aa:77:80:97:65:d1: 14:df:97:f4:44:f4:fa:48:33:c4:48:64:87:82:85: 30:ea:ad:0a:98:fe:8d:4c:07:2d:43:f5:7c:57:bf: b7:6c:6c:64:d3:1a:c8:c5:34:e9:c0:79:ad:93:3f: 32:19:36:bb:bd:0e:36:c6:85:8d:af:c9:b8:fb:69: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7C:0B:26:D2:49:17:02:21:24:AD:68:8B:F1:06:CE:8C:6E:82:BA X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:84:cf:29:1f:b8:ea:c7:35:c8:9c:53:f9:97:fb:ae:17:e5: 34:dd:5b:a3:c3:7c:28:50:f6:e0:3e:18:7a:d8:2b:50:a0:6d: a1:2a:d8:ed:9e:54:30:94:49:ae:7b:e3:c9:3a:43:50:63:5b: ee:f9:24:c1:9a:3d:48:e3:e6:c7:d2:18:cc:f1:d4:be:3e:92: e6:bf:3f:04:2a:3b:aa:3b:23:07:5c:d0:de:29:25:e2:3c:07: 14:05:ab:26:9b:81:f0:b8:44:53:7e:a2:45:e2:5f:34:90:f7: cf:b6:7a:3a:a3:a6:11:5a:54:7f:c1:df:0c:fd:5e:63:e7:70: 4a:38:74:fe:90:86:db:ee:34:32:cb:4d:1c:be:36:3c:5c:c5: 55:a3:ed:08:26:31:3f:e2:3a:69:38:6c:01:0d:90:cc:45:23: 1c:41:1c:b2:4e:1c:13:72:dd:11:cf:34:6c:89:c2:45:df:c5: 5d:2f:f8:79:ee:18:97:55:6e:0e:58:c3:61:3c:c9:5a:bd:54: 8f:82:34:c7:aa:2b:33:9c:00:db:01:f1:7b:65:29:de:d1:08: d1:2f:73:75:8d:47:0d:43:fd:17:13:d4:20:26:a4:2e:0c:65: 33:06:5a:49:c7:9a:ce:d4:05:d6:12:c9:e3:9b:23:75:74:23: a9:4d:ef:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDaMZ27HgLPARHiXDdE/ALYphBwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjAzMDExMTE4MTZaFw0yNjAzMDIxMjUxMTZaMDMxMTAvBgNV BAMTKDIxN0MwQjI2RDI0OTE3MDIyMTI0QUQ2ODhCRjEwNkNFOEM2RTgyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaCXFUZBa0hcGEq5yptvzwAYND L9rvi0RTSjcs3VKVP4jyYdM8DwxNGbuIkYNcfNeBiHNxfh5H4JO9+pN0bAFLBT+g 7R5fMJf6VSPYVlJfgB7UUui9kUUQLSOoBe5fTLY9bCzp8u7kgV5c3Td4yaFCHSsc WfC0QPWPKUQUcy8oWwH8NSJ84o0Fg3spvdJlFLQnMkHdIQySqE/4DFuQ1RCxFETZ reHOx3NMvSpwhAV+0Kxn8eBZFOsQKheoNap3gJdl0RTfl/RE9PpIM8RIZIeChTDq rQqY/o1MBy1D9XxXv7dsbGTTGsjFNOnAea2TPzIZNru9DjbGhY2vybj7af9zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIXwLJtJJFwIhJK1oi/EGzoxugrowHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTY5OTYzNTUvMC8yNUM2NTk2MTk1QjE2 MjQwOUE1QUZBQTkyNTcwRjI1OEJBRDNDNDJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdITPKR+46sc1 yJxT+Zf7rhflNN1bo8N8KFD24D4YetgrUKBtoSrY7Z5UMJRJrnvjyTpDUGNb7vkk wZo9SOPmx9IYzPHUvj6S5r8/BCo7qjsjB1zQ3ikl4jwHFAWrJpuB8LhEU36iReJf NJD3z7Z6OqOmEVpUf8HfDP1eY+dwSjh0/pCG2+40MstNHL42PFzFVaPtCCYxP+I6 aThsAQ2QzEUjHEEcsk4cE3LdEc80bInCRd/FXS/4ee4Yl1VuDljDYTzJWr1Uj4I0 x6orM5wA2wHxe2Up3tEI0S9zdY1HDUP9FxPUICakLgxlMwZaSceaztQF1hLJ45sj dXQjqU3vig== -----END CERTIFICATE-----Generated at Mon Mar 2 03:08:22 2026 by rpki-client