$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft File: VmmSAinFc-RDR45E9R7VvAKq9SQ.mft (raw, json) Hash identifier: KH2Mq9HxKThplDHoXMa09TkOQyc0Sp97G9A3Tg5fKWU= Subject key identifier: 1D:6F:78:40:9A:FB:A4:7B:EF:EB:85:14:CA:B3:4B:99:3A:16:8B:50 Authority key identifier: 56:69:92:02:29:C5:73:E4:43:47:8E:44:F5:1E:D5:BC:02:AA:F5:24 Certificate issuer: /CN=5669920229C573E443478E44F51ED5BC02AAF524 Certificate serial: 32 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft Manifest number: 32 Signing time: Fri 04 Jul 2025 17:42:14 +0000 Manifest this update: Fri 04 Jul 2025 17:42:14 +0000 Manifest next update: Fri 04 Jul 2025 23:42:14 +0000 Files and hashes: 1: VmmSAinFc-RDR45E9R7VvAKq9SQ.crl (hash: POkCpIUtkknPcI66e2LIrXrxXy+G0ly2NfSiD+Yo5T0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 20:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5669920229C573E443478E44F51ED5BC02AAF524 Validity Not Before: Jul 4 17:42:14 2025 GMT Not After : Jun 25 01:38:52 2026 GMT Subject: CN=1D6F78409AFBA47BEFEB8514CAB34B993A168B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:6f:02:cf:f4:27:31:5e:ab:ec:89:c9:5a: ca:9f:9a:b9:91:56:ad:bf:28:d0:aa:89:1e:ed:d0: d3:fa:a7:f5:31:c6:39:05:05:e7:4d:55:3e:7e:f2: de:34:6a:bc:f6:60:5b:1d:c7:75:81:9d:92:29:01: 11:3c:01:fa:f3:57:a0:88:40:4c:76:42:f4:fd:ac: 90:44:b8:8b:dc:24:20:25:d2:1c:4b:03:3c:d6:e9: 6c:27:23:c6:ac:b1:6b:18:b6:2d:ee:ba:3e:f4:d6: fb:aa:e4:6d:b3:f6:92:ed:8d:49:45:97:6b:23:19: c9:df:01:3a:14:be:ef:1a:cd:df:75:4e:26:82:a4: ed:75:63:f0:39:fc:16:40:5e:04:eb:8a:33:17:45: ee:60:87:d1:9e:13:17:9a:72:ca:94:27:d8:72:db: fc:46:0d:e6:68:9e:94:11:5f:d0:9c:51:e8:91:19: cd:99:25:b4:41:3d:8d:24:ac:5f:7b:d5:74:c1:fb: 73:63:90:67:b8:ab:e2:94:a8:65:6e:29:f3:a0:61: fa:8e:7e:63:71:ac:44:00:14:07:21:a1:d2:4f:79: 7c:ac:f1:79:47:c3:6e:54:74:d0:2e:2a:a1:cf:32: 23:fb:53:21:7f:c5:d4:77:aa:35:8b:07:9b:65:4e: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6F:78:40:9A:FB:A4:7B:EF:EB:85:14:CA:B3:4B:99:3A:16:8B:50 X509v3 Authority Key Identifier: keyid:56:69:92:02:29:C5:73:E4:43:47:8E:44:F5:1E:D5:BC:02:AA:F5:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/VmmSAinFc-RDR45E9R7VvAKq9SQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/VmmSAinFc-RDR45E9R7VvAKq9SQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:93:c4:cf:37:a0:f4:fb:d8:ac:9f:02:76:8d:50:b8:8d:70: 4c:b0:95:49:e0:2a:f3:5b:4c:9c:93:3a:41:f1:f4:5c:3c:4b: ce:5f:08:58:db:33:85:98:a2:fa:87:ab:34:62:56:9e:76:59: 8d:03:6a:5a:ae:29:7a:21:63:91:6d:1c:12:e5:c5:4a:99:7f: 50:1f:1d:2c:d6:1a:03:cc:05:ad:32:0f:3f:7b:eb:67:74:d1: c3:c4:6b:2f:16:be:5f:93:2f:d6:c7:57:f4:bb:8d:d7:38:73: 93:2c:f5:39:5b:5e:3f:6a:c6:72:46:2c:01:72:43:e5:77:f6: 57:e7:71:ff:fc:73:a0:28:4e:c7:59:2e:30:a3:ab:4b:a4:2c: 1c:cc:4c:41:03:44:76:0e:fc:41:6c:84:fe:48:86:16:e8:3c: b2:f9:d6:58:be:be:68:4a:fc:3f:31:d8:54:eb:61:68:39:d7: f8:00:22:8f:b1:4a:44:1d:ea:fb:50:24:5e:58:45:cb:29:99: e6:f0:02:09:4d:49:4e:82:ae:5a:46:3f:c9:8e:48:92:5b:ba: c8:a6:32:89:52:aa:19:24:77:f7:39:3a:85:ad:0c:ba:7f:b5: 91:69:e4:c9:03:e0:9f:68:a5:02:d7:54:a4:2c:ca:53:26:b9: 5c:3d:97:10 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NjY5 OTIwMjI5QzU3M0U0NDM0NzhFNDRGNTFFRDVCQzAyQUFGNTI0MB4XDTI1MDcwNDE3 NDIxNFoXDTI2MDYyNTAxMzg1MlowMzExMC8GA1UEAxMoMUQ2Rjc4NDA5QUZCQTQ3 QkVGRUI4NTE0Q0FCMzRCOTkzQTE2OEI1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALfMbwLP9CcxXqvsiclayp+auZFWrb8o0KqJHu3Q0/qn9THGOQUF 501VPn7y3jRqvPZgWx3HdYGdkikBETwB+vNXoIhATHZC9P2skES4i9wkICXSHEsD PNbpbCcjxqyxaxi2Le66PvTW+6rkbbP2ku2NSUWXayMZyd8BOhS+7xrN33VOJoKk 7XVj8Dn8FkBeBOuKMxdF7mCH0Z4TF5pyypQn2HLb/EYN5mielBFf0JxR6JEZzZkl tEE9jSSsX3vVdMH7c2OQZ7ir4pSoZW4p86Bh+o5+Y3GsRAAUByGh0k95fKzxeUfD blR00C4qoc8yI/tTIX/F1HeqNYsHm2VOJN0CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQdb3hAmvuke+/rhRTKs0uZOhaLUDAfBgNVHSMEGDAWgBRWaZICKcVz5ENHjkT1 HtW8Aqr1JDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzc4 L1ZtbVNBaW5GYy1SRFI0NUU5UjdWdkFLcTlTUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvVm1tU0FpbkZjLVJEUjQ1RTlSN1Z2QUtxOVNRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3OC9WbW1TQWluRmMtUkRS NDVFOVI3VnZBS3E5U1EubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi5PEzzeg9PvYrJ8Cdo1QuI1wTLCVSeAq81tMnJM6QfH0XDxLzl8IWNszhZii +oerNGJWnnZZjQNqWq4peiFjkW0cEuXFSpl/UB8dLNYaA8wFrTIPP3vrZ3TRw8Rr Lxa+X5Mv1sdX9LuN1zhzkyz1OVteP2rGckYsAXJD5Xf2V+dx//xzoChOx1kuMKOr S6QsHMxMQQNEdg78QWyE/kiGFug8svnWWL6+aEr8PzHYVOthaDnX+AAij7FKRB3q +1AkXlhFyymZ5vACCU1JToKuWkY/yY5Iklu6yKYyiVKqGSR39zk6ha0Mun+1kWnk yQPgn2ilAtdUpCzKUya5XD2XEA== -----END CERTIFICATE-----Generated at Fri Jul 4 19:32:12 2025 by rpki-client