
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
File: 25C6596195B162409A5AFAA92570F258BAD3C42D.mft (raw, json)
Hash identifier: aWTVeLKsmSLEdye72i1HcrPr3esCnw5xEN0+YdxSXSY=
Subject key identifier: 14:50:39:59:C7:4A:E6:6F:C1:AD:07:45:26:14:AC:89:4A:66:B1:FE
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial: 5ADEA8B095EC773FE1E988F4539DAC70DF4DEE1D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
Manifest number: 0148
Signing time: Fri 28 Aug 2026 06:48:09 +0000
Manifest this update: Fri 28 Aug 2026 06:43:09 +0000
Manifest next update: Mon 31 Aug 2026 13:25:09 +0000
Files and hashes: 1: 3130332e3234382e3135352e302f32342d3234203d3e2034383131.roa (hash: S9wm7V1jEKsdWPhliBOnVYmKnnehtzWifE6l9yAwEJg=)
2: 323430373a323363303a393030303a3a2f34382d3438203d3e20313331353136.roa (hash: HooXl0STL7+vA4y5loKAhiQ0ttCXS6FWqk90oFrQCFE=)
3: 3130332e3234382e3135322e302f32322d3232203d3e2034383131.roa (hash: /7rj/QcFgTDp7MvZGzIZbCKZ8StvP8QNCrn6T5j/bJw=)
4: 25C6596195B162409A5AFAA92570F258BAD3C42D.crl (hash: SwUkognpnYnzC74bdcrDv7rmJqNc7MUCqXp9PtBrPOs=)
5: 3130332e3234382e3135342e302f32342d3234203d3e2034383131.roa (hash: KAjdya8x+2gN63TLVyS7AqFJkMdT4MHE18PLMVeWd8k=)
6: 3131362e3139362e3134342e302f32342d3234203d3e2034383131.roa (hash: 9lNsOYHlBt3jOOWXIqM/tEhd4rY9Jo/RkS+XO3kphW4=)
7: 3130332e3234382e3135322e302f32332d3233203d3e2034383337.roa (hash: RjJHANjcAdvy65zfoA1JZXtiUKo0l8e+tJU+O7hVZOg=)
8: 3130332e3234382e3135352e302f32342d3234203d3e2034383337.roa (hash: GSWkomBBmIiUvBccJZTo7QIT4Kh/QztIyW9ekDjdNho=)
9: 3135302e3234322e3234302e302f32322d3234203d3e20313331353136.roa (hash: uzEDoJO/HvzsS7Mob7amPkS2gE4be7zeo6tmlv3hVOY=)
10: 3130332e3234382e3135342e302f32342d3234203d3e2034383337.roa (hash: PY+ClSSe7FsRUgsLEHUWmvZxgE87mH+i5+iDE+XZpYc=)
11: 3131362e3139362e3132382e302f31392d3234203d3e20313331353136.roa (hash: kBDnBj7F6mTZybN06dLoVjAeHV729EiyoegL3hPqQzM=)
12: 3130332e3234382e3135322e302f32322d3232203d3e20313331353136.roa (hash: BEPDI9JjyhWXovz7qdW56OXAxRKMxAl3iJ8iWpozrBs=)
13: 3130332e3234382e3135332e302f32342d3234203d3e20313331353136.roa (hash: 1iXEnXLh1xjdmjgXZ+Zf2vht0HF5V9Iqk2Y4dx/afiY=)
14: 3130332e3234382e3135342e302f32342d3234203d3e20313331353136.roa (hash: AbBhVMl/Tp7ypYL8yo65ASVOEdUu8CE2kxrufe7/zNo=)
15: 3132332e3137362e38302e302f32302d3234203d3e20313331353136.roa (hash: 5fiZ5GttxYaOcgluy/azTpDTtS6E6CiNnc8yymDFWMk=)
16: 323430373a323363303a3a2f34382d3438203d3e20313331353136.roa (hash: wcGi4BVAeDcAp/nOf2xkGsZ/mRWopZ/upq8jqtv04OM=)
17: 3231312e3134372e39362e302f32302d3234203d3e20313331353136.roa (hash: VZcRbqZjxjAhNXelM57YDaEk4eZQzgx6rRmelt9cpwo=)
18: 3131362e38392e3134342e302f32302d3234203d3e20313331353136.roa (hash: y83JS4Deej8KRcxGmYNU7f1r9CNZBaKtnt6Q+/BvP5c=)
19: 3130332e3234382e3135322e302f32322d3232203d3e2034383337.roa (hash: tTioZtMfA6LFLhFJnqTItEnqrP0K5duf4eFzlBRimiI=)
20: 3130332e3234382e3135332e302f32342d3234203d3e2034383337.roa (hash: YySm2cg/E+3trgCgazleVF/zeEgC2VFWmTffoSCCZPM=)
21: 3130332e3234382e3135342e302f32332d3233203d3e2034383337.roa (hash: bFUXV7r+rSsEUVYMUqo14Vw3PumvgJpm1BUWD3yTOkM=)
22: 3130332e3233392e3138342e302f32322d3234203d3e20313331353136.roa (hash: o8HMGS9kzgCp9mgs2gxP2h4xE9GBcQPF4KHqqwWWjXQ=)
23: 3130332e3234382e3135322e302f32342d3234203d3e20313331353339.roa (hash: yZTpfBHpH5MbMUc6K4PpX17M1KKUWIj/3QMpbArfxcY=)
24: 3130332e3234382e3135322e302f32342d3234203d3e20313331353136.roa (hash: cIq9MgWj4NH0uaLLMAKtqZDrNxWys9C1vRXMwCMHMP0=)
25: 3130332e3234382e3135322e302f32342d3234203d3e2034383131.roa (hash: IA2hFi2CzsnZHIr72bt17O67Ue+IFnsgu8KG1Q9hGIw=)
26: 3130332e3234382e3135352e302f32342d3234203d3e20313331353136.roa (hash: 1V11KSH8ZO65QDHqe59FXALQdIKmYboBt78naZPL0Gk=)
27: 3130332e3234382e3135332e302f32342d3234203d3e2034383131.roa (hash: jpxk8QYfaZ4Lq+wqbBKWvAn7PWKauaHwfOdE/GNQ1bA=)
28: 34332e3235352e3138342e302f32322d3234203d3e20313331353136.roa (hash: 7oa2kTENkUrrhZuO8E0qYQsNSb3CZOgzY84ZsFhWVl4=)
29: 3131362e3139362e3136302e302f32302d3234203d3e20313331353136.roa (hash: bttkYH0l28mImsKE4xKoKUkJaI1GuonkjKPOMwf2P0g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:25:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:de:a8:b0:95:ec:77:3f:e1:e9:88:f4:53:9d:ac:70:df:4d:ee:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Validity
Not Before: Aug 28 06:43:09 2026 GMT
Not After : Aug 31 13:25:09 2026 GMT
Subject: CN=14503959C74AE66FC1AD07452614AC894A66B1FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:1b:4d:04:ca:1e:1b:db:81:4b:8d:ae:4c:
03:76:4a:66:1d:8f:74:51:56:23:60:49:da:a7:ac:
22:cc:c4:66:40:e9:e0:c9:7f:32:d4:45:6d:b1:02:
ec:af:27:d9:10:a3:1f:52:8e:46:e6:0f:d1:3d:86:
bf:f2:c7:b1:36:16:5c:38:82:72:5d:53:1e:2a:9f:
78:c5:b0:9f:3e:ac:60:6b:e8:62:d8:f0:e9:73:1e:
20:0f:f6:02:64:8d:ce:6d:f3:31:f9:4b:7d:ae:a9:
f0:ac:71:16:d6:86:4a:ab:f3:66:1f:ae:03:28:dc:
ad:21:94:99:9b:61:1f:61:bf:2f:70:97:14:d0:99:
d2:61:f5:3d:46:3f:43:1d:cf:2a:46:59:b8:9b:7b:
b7:37:cb:c9:58:c9:4b:dc:79:6b:ea:65:fe:09:bb:
b1:fd:e6:82:16:53:64:f7:c0:e9:e6:4a:40:42:c6:
c3:f4:c5:06:5b:03:4b:10:fb:b3:47:a0:a5:fc:78:
70:93:f7:36:a8:41:60:ab:80:ad:b7:32:db:a4:df:
16:25:6b:5d:0c:fd:40:ed:b4:1d:55:84:27:2b:38:
5f:80:26:4d:c3:fc:3b:c5:7f:b1:6d:cd:03:93:1c:
69:25:f2:7b:a5:43:26:ad:e1:c0:5f:fc:3a:fe:9a:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:50:39:59:C7:4A:E6:6F:C1:AD:07:45:26:14:AC:89:4A:66:B1:FE
X509v3 Authority Key Identifier:
keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5b:dc:d1:cc:be:7c:d9:f0:48:95:1f:ae:55:64:f9:66:b4:
95:36:c3:a3:1d:44:f0:d3:8e:17:5e:8a:23:ad:f6:b0:27:61:
ee:6b:6e:7e:d2:a2:f4:e5:37:2d:93:de:16:8d:94:6a:86:d9:
24:ec:fa:aa:03:de:e3:7a:01:c1:bb:a4:71:84:ff:af:91:5c:
b2:59:62:fe:31:30:16:97:66:2b:54:3b:80:81:bc:94:b3:3a:
be:0a:0c:75:82:32:4c:fa:9b:67:a3:f8:68:3f:2d:61:ef:a6:
6e:f8:75:b1:64:b3:0c:dd:ca:ea:e2:dd:4a:2a:ff:f8:42:3c:
66:c6:5e:1e:6b:71:4d:c8:c0:1c:86:e8:7e:b0:4f:f5:62:43:
2c:a3:db:22:17:4a:16:b4:e7:bb:52:e5:fd:89:97:7a:27:96:
c8:1d:1e:16:59:58:9b:bb:e2:78:d7:d1:f6:8a:69:97:b6:68:
b7:95:5a:6c:04:f6:5a:8f:61:e4:01:63:52:d6:94:82:0c:ca:
93:bc:af:6a:33:60:40:0e:76:13:1d:f8:7e:6f:24:4f:63:07:
46:02:bd:ce:11:8d:20:b0:a9:3a:d0:ad:fb:1d:8c:9f:af:ae:
7a:62:03:cb:46:e1:c3:80:23:89:3e:dc:23:37:e6:ec:97:36:
8d:98:2c:48
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWt6osJXsdz/h6Yj0U52scN9N7h0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC
QUQzQzQyRDAeFw0yNjA4MjgwNjQzMDlaFw0yNjA4MzExMzI1MDlaMDMxMTAvBgNV
BAMTKDE0NTAzOTU5Qzc0QUU2NkZDMUFEMDc0NTI2MTRBQzg5NEE2NkIxRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZRhtNBMoeG9uBS42uTAN2SmYd
j3RRViNgSdqnrCLMxGZA6eDJfzLURW2xAuyvJ9kQox9SjkbmD9E9hr/yx7E2Flw4
gnJdUx4qn3jFsJ8+rGBr6GLY8OlzHiAP9gJkjc5t8zH5S32uqfCscRbWhkqr82Yf
rgMo3K0hlJmbYR9hvy9wlxTQmdJh9T1GP0MdzypGWbibe7c3y8lYyUvceWvqZf4J
u7H95oIWU2T3wOnmSkBCxsP0xQZbA0sQ+7NHoKX8eHCT9zaoQWCrgK23Mtuk3xYl
a10M/UDttB1VhCcrOF+AJk3D/DvFf7FtzQOTHGkl8nulQyat4cBf/Dr+mp0lAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUFFA5WcdK5m/BrQdFJhSsiUpmsf4wHwYDVR0j
BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG
MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTY5OTYzNTUvMC8yNUM2NTk2MTk1QjE2
MjQwOUE1QUZBQTkyNTcwRjI1OEJBRDNDNDJELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVvc0cy+fNnw
SJUfrlVk+Wa0lTbDox1E8NOOF16KI632sCdh7mtuftKi9OU3LZPeFo2UaobZJOz6
qgPe43oBwbukcYT/r5Fcslli/jEwFpdmK1Q7gIG8lLM6vgoMdYIyTPqbZ6P4aD8t
Ye+mbvh1sWSzDN3K6uLdSir/+EI8ZsZeHmtxTcjAHIbofrBP9WJDLKPbIhdKFrTn
u1Ll/YmXeieWyB0eFllYm7vieNfR9oppl7Zot5VabAT2Wo9h5AFjUtaUggzKk7yv
ajNgQA52Ex34fm8kT2MHRgK9zhGNILCpOtCt+x2Mn6+uemIDy0bhw4AjiT7cIzfm
7Jc2jZgsSA==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:45:26 2026 by rpki-client