$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft File: 25C6596195B162409A5AFAA92570F258BAD3C42D.mft (raw, json) Hash identifier: RRWt0XSp3z7cy/G9RYFDtCrH+hxliJnS2jm90IelHl4= Subject key identifier: 8F:3A:67:EE:63:AE:28:A1:11:1A:C8:A4:59:E1:59:56:50:8F:39:41 Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 409A297E9C6B865950E5666E269C840D189E353D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft Manifest number: 2F Signing time: Sun 22 Feb 2026 17:32:30 +0000 Manifest this update: Sun 22 Feb 2026 17:27:30 +0000 Manifest next update: Mon 23 Feb 2026 19:43:30 +0000 Files and hashes: 1: 3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa (hash: JP55VF7KYTKS5/sVQC9CenTZrXdL8P2f1BqN6bAELNE=) 2: 3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa (hash: OqthX14Z5si5Z7IYFzrZNKv5x092FOwbR0BMAozLLVc=) 3: 25C6596195B162409A5AFAA92570F258BAD3C42D.crl (hash: 8WSgBoNVwcIXDrAf9Q6HSwnYXk3ndhibPGss9J5usRg=) 4: 3130332e3234382e3135332e302f32342d3234203d3e20313333303333.roa (hash: I2uuWEd8qf4ct5ZLh+z7iLcyWwEtolLGJXavFEgmc/c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9a:29:7e:9c:6b:86:59:50:e5:66:6e:26:9c:84:0d:18:9e:35:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Feb 22 17:27:30 2026 GMT Not After : Feb 23 19:43:30 2026 GMT Subject: CN=8F3A67EE63AE28A1111AC8A459E15956508F3941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:5e:3e:bb:bf:bf:09:21:f5:60:ff:45:9c: c2:43:3b:99:ac:3e:14:df:94:57:32:6e:06:e1:26: bd:9b:dc:f5:f1:d4:b1:97:6e:3e:2b:bb:be:b4:a3: e9:f3:bb:01:39:ef:2d:f7:f0:b1:8f:dc:0d:3a:4b: 7a:94:a0:5f:3b:1f:3d:97:70:36:02:c5:df:0f:16: 30:fd:2b:c9:a1:67:3a:80:8d:65:db:9a:65:34:64: 58:9e:85:42:65:9c:52:61:60:44:c5:97:95:b0:43: 8a:5c:2b:7a:f4:f8:e1:db:0a:95:79:56:a9:12:58: cb:d0:5f:7c:f6:10:30:4f:9b:c4:f4:98:52:b8:33: f2:a2:e2:f6:58:9e:b2:0e:1a:31:4c:9a:f1:cf:68: af:ce:1d:b4:5c:38:27:32:60:39:56:18:76:da:f6: a1:eb:ac:80:3f:39:69:a8:d4:0f:77:3c:c6:b9:c4: ed:cb:a3:de:ca:cd:47:72:54:68:a2:9b:42:b4:dc: 30:e5:f3:46:b0:22:fc:eb:25:58:35:5a:7a:10:fb: aa:ff:33:03:70:39:14:73:b7:c6:c2:b6:71:68:c2: 34:12:8c:b5:b4:68:d7:e3:a7:1a:b4:7c:96:ac:eb: 99:1e:a6:30:54:70:f5:ef:6e:5c:eb:06:a6:6d:22: 7e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3A:67:EE:63:AE:28:A1:11:1A:C8:A4:59:E1:59:56:50:8F:39:41 X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f5:d3:04:93:db:74:ab:58:d1:f4:f8:7d:ba:4a:e4:27:fd: 4a:3b:01:54:88:91:05:a9:da:47:24:e1:f5:d3:9b:56:d7:e0: b8:a5:f2:a3:39:7c:b0:fc:a6:0f:0e:bb:b3:28:82:20:7c:08: b3:0f:16:05:8f:4e:ad:7f:df:35:9b:a1:9f:9f:81:5a:4c:15: 2b:e6:d9:aa:b4:41:51:26:79:42:64:f8:c5:cd:54:c3:2e:05: d7:e7:b7:99:09:95:8e:9e:42:b9:8f:b1:d9:08:e3:cc:81:4a: 20:ea:e3:a6:d7:64:43:2f:26:14:14:78:f1:9a:0c:c0:64:58: ad:0d:e4:4d:15:8c:d2:d8:bd:6f:01:03:b4:3e:4b:83:33:c1: 47:a6:3b:6c:bf:69:11:f0:86:fe:0d:a2:61:10:df:00:80:99: a4:cc:37:63:f2:09:07:c8:92:a3:a7:5c:08:68:d5:01:c3:c9: 23:de:b0:09:09:95:7f:14:4b:10:fc:46:33:1e:54:45:3a:00: a5:03:c9:aa:4b:da:2e:5d:59:0d:e6:28:74:35:3d:8c:97:5c: 49:b1:a8:6b:2b:44:6e:8d:c0:3b:0d:11:17:7f:b7:34:39:ce: dd:b9:6f:11:58:a0:59:d7:47:dd:35:eb:0c:18:ea:33:aa:3c: 77:2f:a2:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQJopfpxrhllQ5WZuJpyEDRieNT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjAyMjIxNzI3MzBaFw0yNjAyMjMxOTQzMzBaMDMxMTAvBgNV BAMTKDhGM0E2N0VFNjNBRTI4QTExMTFBQzhBNDU5RTE1OTU2NTA4RjM5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohV4+u7+/CSH1YP9FnMJDO5ms PhTflFcybgbhJr2b3PXx1LGXbj4ru760o+nzuwE57y338LGP3A06S3qUoF87Hz2X cDYCxd8PFjD9K8mhZzqAjWXbmmU0ZFiehUJlnFJhYETFl5WwQ4pcK3r0+OHbCpV5 VqkSWMvQX3z2EDBPm8T0mFK4M/Ki4vZYnrIOGjFMmvHPaK/OHbRcOCcyYDlWGHba 9qHrrIA/OWmo1A93PMa5xO3Lo97KzUdyVGiim0K03DDl80awIvzrJVg1WnoQ+6r/ MwNwORRzt8bCtnFowjQSjLW0aNfjpxq0fJas65kepjBUcPXvblzrBqZtIn7HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjzpn7mOuKKERGsikWeFZVlCPOUEwHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTY5OTYzNTUvMC8yNUM2NTk2MTk1QjE2 MjQwOUE1QUZBQTkyNTcwRjI1OEJBRDNDNDJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPXTBJPbdKtY 0fT4fbpK5Cf9SjsBVIiRBanaRyTh9dObVtfguKXyozl8sPymDw67syiCIHwIsw8W BY9OrX/fNZuhn5+BWkwVK+bZqrRBUSZ5QmT4xc1Uwy4F1+e3mQmVjp5CuY+x2Qjj zIFKIOrjptdkQy8mFBR48ZoMwGRYrQ3kTRWM0ti9bwEDtD5LgzPBR6Y7bL9pEfCG /g2iYRDfAICZpMw3Y/IJB8iSo6dcCGjVAcPJI96wCQmVfxRLEPxGMx5URToApQPJ qkvaLl1ZDeYodDU9jJdcSbGoaytEbo3AOw0RF3+3NDnO3blvEVigWddH3TXrDBjq M6o8dy+i8A== -----END CERTIFICATE-----Generated at Mon Feb 23 02:06:12 2026 by rpki-client