
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
File: 25C6596195B162409A5AFAA92570F258BAD3C42D.mft (raw, json)
Hash identifier: MMGH5Yh8btDtuWCsvykW3nutSv2tb07cqHfVvVSNPFc=
Subject key identifier: 7D:C3:93:60:8B:37:8B:2B:0B:13:7B:E4:48:45:16:4E:6F:49:F9:FC
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial: 6996AD965B98D72B14FBC781DC8E6036B878309B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
Manifest number: C5
Signing time: Fri 29 May 2026 07:47:43 +0000
Manifest this update: Fri 29 May 2026 07:42:43 +0000
Manifest next update: Sat 30 May 2026 09:07:43 +0000
Files and hashes: 1: 3130332e3234382e3135322e302f32322d3232203d3e2034383131.roa (hash: /7rj/QcFgTDp7MvZGzIZbCKZ8StvP8QNCrn6T5j/bJw=)
2: 3130332e3234382e3135352e302f32342d3234203d3e2034383337.roa (hash: GSWkomBBmIiUvBccJZTo7QIT4Kh/QztIyW9ekDjdNho=)
3: 3135302e3234322e3234302e302f32322d3234203d3e20313331353136.roa (hash: uzEDoJO/HvzsS7Mob7amPkS2gE4be7zeo6tmlv3hVOY=)
4: 3131362e3139362e3136302e302f32302d3234203d3e20313331353136.roa (hash: bttkYH0l28mImsKE4xKoKUkJaI1GuonkjKPOMwf2P0g=)
5: 3130332e3234382e3135332e302f32342d3234203d3e20313331353136.roa (hash: 1iXEnXLh1xjdmjgXZ+Zf2vht0HF5V9Iqk2Y4dx/afiY=)
6: 3231312e3134372e39362e302f32302d3234203d3e20313331353136.roa (hash: VZcRbqZjxjAhNXelM57YDaEk4eZQzgx6rRmelt9cpwo=)
7: 3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa (hash: ayxs+w4/JeX6PHaC3sPkLMgzAQlZveMnqBCO9/aNy4o=)
8: 3130332e3234382e3135342e302f32342d3234203d3e2034383131.roa (hash: KAjdya8x+2gN63TLVyS7AqFJkMdT4MHE18PLMVeWd8k=)
9: 3131362e3139362e3132382e302f31392d3234203d3e20313331353136.roa (hash: kBDnBj7F6mTZybN06dLoVjAeHV729EiyoegL3hPqQzM=)
10: 3130332e3234382e3135342e302f32342d3234203d3e20313331353136.roa (hash: AbBhVMl/Tp7ypYL8yo65ASVOEdUu8CE2kxrufe7/zNo=)
11: 3132332e3137362e38302e302f32302d3234203d3e20313331353136.roa (hash: 5fiZ5GttxYaOcgluy/azTpDTtS6E6CiNnc8yymDFWMk=)
12: 3130332e3233392e3138342e302f32322d3234203d3e20313331353136.roa (hash: o8HMGS9kzgCp9mgs2gxP2h4xE9GBcQPF4KHqqwWWjXQ=)
13: 34332e3235352e3138342e302f32322d3234203d3e20313331353136.roa (hash: 7oa2kTENkUrrhZuO8E0qYQsNSb3CZOgzY84ZsFhWVl4=)
14: 3130332e3234382e3135332e302f32342d3234203d3e2034383131.roa (hash: jpxk8QYfaZ4Lq+wqbBKWvAn7PWKauaHwfOdE/GNQ1bA=)
15: 3130332e3234382e3135352e302f32342d3234203d3e2034383131.roa (hash: S9wm7V1jEKsdWPhliBOnVYmKnnehtzWifE6l9yAwEJg=)
16: 3130332e3234382e3135352e302f32342d3234203d3e20313331353136.roa (hash: 1V11KSH8ZO65QDHqe59FXALQdIKmYboBt78naZPL0Gk=)
17: 3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa (hash: 8ZraEktX3VtCYvzeeQU+MzLd5o1i1pDGkDAgGT9Uhp4=)
18: 3130332e3234382e3135322e302f32322d3232203d3e20313331353136.roa (hash: BEPDI9JjyhWXovz7qdW56OXAxRKMxAl3iJ8iWpozrBs=)
19: 323430373a323363303a393030303a3a2f34382d3634203d3e20313331353136.roa (hash: r7RuRxDknaWXm06Dy5betKYQwsDUO7ouhImWyjv2B6g=)
20: 3130332e3234382e3135342e302f32342d3234203d3e2034383337.roa (hash: PY+ClSSe7FsRUgsLEHUWmvZxgE87mH+i5+iDE+XZpYc=)
21: 3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa (hash: YySm2cg/E+3trgCgazleVF/zeEgC2VFWmTffoSCCZPM=)
22: 25C6596195B162409A5AFAA92570F258BAD3C42D.crl (hash: tCzRpqeVt8oEQ4lGpasRYDvqUokDyI4XjM+wKh8Lyq8=)
23: 3131362e38392e3134342e302f32302d3234203d3e20313331353136.roa (hash: y83JS4Deej8KRcxGmYNU7f1r9CNZBaKtnt6Q+/BvP5c=)
24: 3130332e3234382e3135322e302f32322d3232203d3e2034383337.roa (hash: tTioZtMfA6LFLhFJnqTItEnqrP0K5duf4eFzlBRimiI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:96:ad:96:5b:98:d7:2b:14:fb:c7:81:dc:8e:60:36:b8:78:30:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Validity
Not Before: May 29 07:42:43 2026 GMT
Not After : May 30 09:07:43 2026 GMT
Subject: CN=7DC393608B378B2B0B137BE44845164E6F49F9FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:da:31:35:2d:3a:7b:e6:8a:47:68:06:67:
f3:91:b1:fa:4c:1e:f1:7a:a8:05:c7:0c:6b:03:4d:
12:b6:4f:c2:75:c2:a9:48:3e:44:27:9d:47:1c:66:
4a:b8:68:4c:b0:18:64:fc:a6:99:60:30:fb:8b:b3:
82:f3:be:2e:85:c7:27:2b:b9:cb:c7:3d:09:98:3d:
10:a1:40:35:fe:17:5a:73:8f:e4:aa:1b:ae:24:5e:
06:72:41:3b:6a:38:3f:6c:b9:b0:28:85:85:12:98:
00:13:16:bf:28:c8:b0:3c:86:6c:56:6c:31:3b:d6:
62:27:8d:ee:14:47:77:b5:e3:5f:34:f4:d7:bb:a9:
22:e5:17:94:78:26:81:2f:1f:e0:3b:37:b3:08:d4:
af:a6:6c:ae:27:89:c0:d4:ed:30:d0:fa:ba:36:8c:
f4:e8:79:f1:98:a4:85:66:2b:78:bd:23:0d:09:e4:
eb:96:19:b0:bd:d3:aa:7e:03:e5:6c:db:da:13:3b:
a4:e3:55:c1:80:bd:51:45:90:b3:07:9c:1b:10:ea:
0c:95:19:b5:e0:09:ee:66:71:6d:3a:72:ca:bc:ae:
a7:8f:f2:06:85:8f:a4:49:82:f0:ae:f7:70:ae:5c:
d2:81:23:86:36:6d:df:54:e6:f1:17:d3:e2:2f:f3:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C3:93:60:8B:37:8B:2B:0B:13:7B:E4:48:45:16:4E:6F:49:F9:FC
X509v3 Authority Key Identifier:
keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:29:f2:dc:e8:70:3d:8e:70:c2:35:9c:e4:d2:e6:89:24:e5:
f8:aa:af:46:7c:6c:fd:eb:15:8f:fc:ea:a0:25:e9:1e:73:78:
f0:95:70:e4:50:5f:0a:a8:80:5c:2a:fb:a0:39:2f:11:09:37:
dc:fa:5a:05:d3:9b:eb:ac:6b:24:d8:57:4c:ba:ad:aa:ff:d9:
31:f7:31:4b:ce:05:18:b1:19:c5:77:fe:7f:e4:6b:b0:29:7d:
64:b4:51:55:ab:c3:43:55:08:f8:4c:ea:a9:33:cf:52:7d:f3:
30:57:a6:f7:ab:a4:31:f0:ad:85:9c:3b:00:93:54:2b:58:3a:
5b:f0:88:61:7a:a1:fb:3d:c0:1a:8f:d4:87:3f:ef:9c:38:a7:
f4:12:eb:59:af:42:b7:70:14:50:7f:64:1e:68:f3:79:5d:7d:
a3:d6:d9:b1:47:70:1a:c1:00:5e:79:d0:d9:fd:17:1b:7b:81:
21:c1:0e:3f:55:1e:26:3d:67:85:83:4a:0c:e2:bb:f6:b8:43:
54:4a:0b:09:d1:5d:48:4d:6b:aa:dc:78:e8:17:a1:aa:cc:a9:
8c:c6:13:40:6a:90:ad:72:5f:1a:41:a4:ee:00:60:ab:65:c1:
69:d0:82:a0:74:6b:29:99:ba:fc:4f:7e:bf:7c:95:d9:ca:5a:
94:93:e0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:22 2026 by rpki-client