$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft File: 25C6596195B162409A5AFAA92570F258BAD3C42D.mft (raw, json) Hash identifier: ek0UNmHlAhzCmWJ0b2w3klMGGtP/3kvynxdQAkSFlZ4= Subject key identifier: F5:79:64:AD:87:7E:0A:8C:F7:CA:D0:25:77:4F:C5:83:C8:5B:A1:9E Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 1323FAC7386452A1E12D5FBBD7DEBAD0B50F3494 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 01:34:17 +0000 Manifest this update: Mon 13 Apr 2026 01:29:17 +0000 Manifest next update: Tue 14 Apr 2026 02:17:17 +0000 Files and hashes: 1: 3130332e3234382e3135322e302f32342d3234203d3e20313333303333.roa (hash: JP55VF7KYTKS5/sVQC9CenTZrXdL8P2f1BqN6bAELNE=) 2: 3130332e3234382e3135342e302f32342d3234203d3e20313333303333.roa (hash: OqthX14Z5si5Z7IYFzrZNKv5x092FOwbR0BMAozLLVc=) 3: 25C6596195B162409A5AFAA92570F258BAD3C42D.crl (hash: pMKamu8woxpM2I7nHZ6m+CPs0JHQHPOgpbJEJI0gang=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 02:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:23:fa:c7:38:64:52:a1:e1:2d:5f:bb:d7:de:ba:d0:b5:0f:34:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Apr 13 01:29:17 2026 GMT Not After : Apr 14 02:17:17 2026 GMT Subject: CN=F57964AD877E0A8CF7CAD025774FC583C85BA19E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:28:fd:91:06:ac:48:28:6c:6c:9f:1f:80: 23:70:ff:1d:fb:1d:97:28:5e:90:c4:f6:2a:39:d1: fd:3d:10:e0:a5:3c:34:80:a1:98:2b:97:c1:14:73: bd:88:ba:8c:86:0c:69:4e:f5:34:f2:52:45:a2:9d: 4f:bf:9a:ef:59:cb:de:19:84:c1:89:fc:50:87:4a: bc:37:4c:59:6c:1e:32:50:0f:a9:41:4d:2c:4f:10: 3a:0e:42:34:e8:9f:7d:6e:f9:fe:59:2b:5c:3a:fb: 38:cc:8f:07:17:97:25:f8:f4:98:a3:1d:8f:83:bb: ce:a0:b1:c1:46:4a:0f:bd:d0:b2:94:44:1b:a0:12: f5:f1:5f:73:30:02:5a:8b:97:29:f4:52:cb:6b:08: 96:33:fb:ae:5f:da:43:42:83:07:a5:3a:0e:96:9b: 01:66:c0:bf:28:dc:6d:76:e0:04:d2:86:e2:43:a1: 6e:f1:dd:73:82:24:f1:a7:7b:31:c3:ee:5a:80:ff: 63:ca:09:38:09:d6:38:63:b5:e1:2a:bf:11:60:7c: 64:a3:8d:e0:32:5a:e6:b4:ac:26:3a:3a:b5:75:65: fb:e1:b0:b1:15:78:9e:e9:ef:2d:cf:e9:49:57:a4: 8b:68:dd:5a:23:24:52:ba:77:b3:69:19:05:df:fc: 1c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:79:64:AD:87:7E:0A:8C:F7:CA:D0:25:77:4F:C5:83:C8:5B:A1:9E X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c5:a7:05:70:da:24:66:f8:3d:e6:00:ee:8c:94:88:f7:79: f6:92:40:6b:4f:4c:b7:60:be:b4:46:c7:d4:84:0a:cd:4f:15: c3:bc:32:58:c1:fa:11:3d:4d:e3:a9:54:60:31:1d:21:70:01: 8d:42:51:be:ec:84:9b:2e:c1:df:45:b5:ab:8a:23:81:23:1c: 00:bb:b4:f2:cc:af:da:ed:b1:17:53:cf:1d:7a:5a:7a:98:ff: 87:56:80:0f:d5:e8:f1:6b:52:12:08:93:ab:4a:c6:f6:9b:d0: 20:76:ff:0e:6e:e7:ed:00:c7:38:33:d6:d1:a1:4a:ea:3e:f8: b8:7b:65:1b:22:3f:a2:b8:7a:3b:07:99:9d:77:68:a3:2d:1e: 42:e1:ae:8a:dd:15:24:f5:88:ec:88:a2:35:0b:f3:87:ed:e0: cc:fb:f7:78:da:81:78:a2:73:52:ad:2e:c0:bc:de:11:09:2b: ac:fc:52:40:59:1a:c2:39:96:fb:1d:f0:6b:07:71:42:30:27: 2a:e7:08:13:62:47:a2:4d:3d:2e:82:25:78:9f:56:3a:79:6e: 5a:6f:f0:93:30:e9:0e:17:96:31:20:6c:4d:a1:6a:38:7a:8c: ad:c3:92:59:a8:24:61:29:eb:18:9e:d8:ec:55:49:0c:3e:cb: 83:a2:9b:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEyP6xzhkUqHhLV+719660LUPNJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjA0MTMwMTI5MTdaFw0yNjA0MTQwMjE3MTdaMDMxMTAvBgNV BAMTKEY1Nzk2NEFEODc3RTBBOENGN0NBRDAyNTc3NEZDNTgzQzg1QkExOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOij9kQasSChsbJ8fgCNw/x37 HZcoXpDE9io50f09EOClPDSAoZgrl8EUc72IuoyGDGlO9TTyUkWinU+/mu9Zy94Z hMGJ/FCHSrw3TFlsHjJQD6lBTSxPEDoOQjTon31u+f5ZK1w6+zjMjwcXlyX49Jij HY+Du86gscFGSg+90LKURBugEvXxX3MwAlqLlyn0UstrCJYz+65f2kNCgwelOg6W mwFmwL8o3G124ATShuJDoW7x3XOCJPGnezHD7lqA/2PKCTgJ1jhjteEqvxFgfGSj jeAyWua0rCY6OrV1ZfvhsLEVeJ7p7y3P6UlXpIto3VojJFK6d7NpGQXf/ByHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9XlkrYd+Coz3ytAld0/Fg8hboZ4wHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTY5OTYzNTUvMC8yNUM2NTk2MTk1QjE2 MjQwOUE1QUZBQTkyNTcwRjI1OEJBRDNDNDJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMWnBXDaJGb4 PeYA7oyUiPd59pJAa09Mt2C+tEbH1IQKzU8Vw7wyWMH6ET1N46lUYDEdIXABjUJR vuyEmy7B30W1q4ojgSMcALu08syv2u2xF1PPHXpaepj/h1aAD9Xo8WtSEgiTq0rG 9pvQIHb/Dm7n7QDHODPW0aFK6j74uHtlGyI/orh6OweZnXdooy0eQuGuit0VJPWI 7IiiNQvzh+3gzPv3eNqBeKJzUq0uwLzeEQkrrPxSQFkawjmW+x3wawdxQjAnKucI E2JHok09LoIleJ9WOnluWm/wkzDpDheWMSBsTaFqOHqMrcOSWagkYSnrGJ7Y7FVJ DD7Lg6KbVw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:57:27 2026 by rpki-client