Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft
File:                     VmmSAinFc-RDR45E9R7VvAKq9SQ.mft (raw, json)
Hash identifier:          Xm5NU/SFEsJz5orW0ijJpactwiN6Dm4z7wsZhDBdanA=
Subject key identifier:   1D:6F:78:40:9A:FB:A4:7B:EF:EB:85:14:CA:B3:4B:99:3A:16:8B:50
Authority key identifier: 56:69:92:02:29:C5:73:E4:43:47:8E:44:F5:1E:D5:BC:02:AA:F5:24
Certificate issuer:       /CN=5669920229C573E443478E44F51ED5BC02AAF524
Certificate serial:       EC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft
Manifest number:          EC
Signing time:             Mon 11 Aug 2025 09:02:21 +0000
Manifest this update:     Mon 11 Aug 2025 09:02:21 +0000
Manifest next update:     Mon 11 Aug 2025 15:02:21 +0000
Files and hashes:         1: VmmSAinFc-RDR45E9R7VvAKq9SQ.crl (hash: NHrfG2V1S5KC9pUdg4gBZ55KfC4wkJK/jdXwyO/BH6M=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5669920229C573E443478E44F51ED5BC02AAF524
        Validity
            Not Before: Aug 11 09:02:21 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=1D6F78409AFBA47BEFEB8514CAB34B993A168B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:6f:02:cf:f4:27:31:5e:ab:ec:89:c9:5a:
                    ca:9f:9a:b9:91:56:ad:bf:28:d0:aa:89:1e:ed:d0:
                    d3:fa:a7:f5:31:c6:39:05:05:e7:4d:55:3e:7e:f2:
                    de:34:6a:bc:f6:60:5b:1d:c7:75:81:9d:92:29:01:
                    11:3c:01:fa:f3:57:a0:88:40:4c:76:42:f4:fd:ac:
                    90:44:b8:8b:dc:24:20:25:d2:1c:4b:03:3c:d6:e9:
                    6c:27:23:c6:ac:b1:6b:18:b6:2d:ee:ba:3e:f4:d6:
                    fb:aa:e4:6d:b3:f6:92:ed:8d:49:45:97:6b:23:19:
                    c9:df:01:3a:14:be:ef:1a:cd:df:75:4e:26:82:a4:
                    ed:75:63:f0:39:fc:16:40:5e:04:eb:8a:33:17:45:
                    ee:60:87:d1:9e:13:17:9a:72:ca:94:27:d8:72:db:
                    fc:46:0d:e6:68:9e:94:11:5f:d0:9c:51:e8:91:19:
                    cd:99:25:b4:41:3d:8d:24:ac:5f:7b:d5:74:c1:fb:
                    73:63:90:67:b8:ab:e2:94:a8:65:6e:29:f3:a0:61:
                    fa:8e:7e:63:71:ac:44:00:14:07:21:a1:d2:4f:79:
                    7c:ac:f1:79:47:c3:6e:54:74:d0:2e:2a:a1:cf:32:
                    23:fb:53:21:7f:c5:d4:77:aa:35:8b:07:9b:65:4e:
                    24:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6F:78:40:9A:FB:A4:7B:EF:EB:85:14:CA:B3:4B:99:3A:16:8B:50
            X509v3 Authority Key Identifier:
                keyid:56:69:92:02:29:C5:73:E4:43:47:8E:44:F5:1E:D5:BC:02:AA:F5:24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:81:2b:5b:42:07:3c:d0:33:c2:84:0f:b0:68:2b:da:91:66:
         52:d0:24:2d:b2:9a:c9:e4:0e:60:93:12:5e:f3:7e:a6:06:8e:
         23:51:66:16:70:37:43:cf:2e:87:ce:cb:29:1d:b9:b3:d7:87:
         61:b6:5a:ad:2f:b2:a3:8d:b5:bd:e2:90:9a:ae:1b:83:ae:a5:
         93:95:3a:7b:fb:82:21:95:bb:2a:64:25:e6:e5:19:4c:a4:d2:
         23:c4:bf:bd:57:ac:ec:d7:83:19:af:c8:4f:ff:c9:97:e5:d1:
         02:fc:c9:17:63:ff:19:d1:88:c0:4f:06:57:64:b1:ef:83:6e:
         88:65:a9:5d:ca:a6:11:c7:6b:54:44:47:b8:7f:21:50:51:70:
         14:23:27:5d:d0:1b:15:71:87:b3:6d:18:b6:93:8f:07:93:07:
         9c:2a:a0:e1:2b:28:d0:69:cf:36:12:01:d4:3a:1b:03:9c:d6:
         49:f3:3b:fc:30:b4:7c:b0:73:09:b3:83:f3:26:b9:ce:bf:99:
         b7:f6:4c:cf:d7:d5:32:07:02:9b:3d:40:a6:33:57:b2:d9:c3:
         da:7d:5c:46:bd:4a:d0:97:11:0b:6f:87:e8:9b:db:74:43:9b:
         85:ad:94:35:68:fc:b5:34:4f:8a:67:2f:cc:30:22:72:5b:93:
         52:47:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:00:11 2025 by rpki-client