$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft File: LAMU397UGrYR2Z9UIGOYL-OAgLo.mft (raw, json) Hash identifier: erqXcrY04XyJFUIXJNjIRA7i6BCdCE8cCYKZn+7ZP1k= Subject key identifier: 74:42:E6:E2:8B:69:53:C8:FF:2C:62:81:03:A5:70:4F:41:34:CC:99 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 076C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft Manifest number: 0755 Signing time: Sat 26 Apr 2025 09:36:30 +0000 Manifest this update: Sat 26 Apr 2025 09:36:30 +0000 Manifest next update: Sat 26 Apr 2025 15:36:30 +0000 Files and hashes: 1: 4cLX9iCz9j4UMXO3ryUlADdFmq4.roa (hash: BxvhNstrmCO1v2uBFcsxuHSxwrVzJAjNSJpdxI3xEc8=) 2: Am3i00z5BdYXeTzSVZeG0BWoOzQ.roa (hash: 7JYzi8wNmGetBqkqq4TaSTPE6M0T+awLOmkmSp9BLW8=) 3: Bza58ss-4JUQhHxFuPhJj85INLI.roa (hash: H0B4wUHoC4mfs2yi8t17ZRT7PkDxlTqbRPrNqlNq2DQ=) 4: G6Xd8MC-idjbwwBddxYJxSObjtc.roa (hash: DzOjC79l1HvGmJywrUVBN8cvFPgxYrBwfetg3weCvA8=) 5: I5n1NWJVBvFwHjRL1bty30hEFOo.roa (hash: drvwiQtO0StE5Q0z1cTQ0UnCfs5kaJGrqnyQSTY83zo=) 6: JjuPfSenFrZVTiEEu74GswyJ-sk.roa (hash: eDkeBiEH+VaW3mi5v0Cy2GbZH/oA9mCrQzj+ONPGzLA=) 7: LAMU397UGrYR2Z9UIGOYL-OAgLo.crl (hash: /MH1cH5U7fbWDMEzgigCC0xZZqCqcAS/1YXUMrfsh4U=) 8: R9txMPuZG2S6aYddE4rUKEGN1Mw.roa (hash: PY4wEXWSpJ2A4pmHLPKFwkZQ7SpPUzOckLUk+iMS2x8=) 9: Tgo2UalC6bYN3cuohaOJh4-z75g.roa (hash: cSW2xNecbkNlatrGyY1RoXGp18g76R8Vll7U8KvNzfg=) 10: eDVpCKSCjOECYQXGK61_TpJvS2o.roa (hash: PEgLgUhf8PFFXZSGKxa9WlpLw+1acH+JmVO2jjDNgwk=) 11: fqhuozlBrtff98veExy-YwUrTw0.roa (hash: SoW5KqNHxhcvKBUoWhDGCxvWss3O5ILfwqepBJsOlPk=) 12: i-Ka6yqw9yla2wiDdBUs3m7wtc8.roa (hash: 8a3s9KqUkQhOrZSBJq2JkK0Sdj3yykOgJrB/OxjID58=) 13: j3MYc-ZeCZUltYcD7mGB_gOh4YE.roa (hash: PkiT7gawVseGEcOBUMRq39rqP4+AKQxW3mx8fnr5pm0=) 14: kMcdy1E4DFO-Jg53Q4WhdY5F1dU.roa (hash: olJLbza9joPjLOUZlWHdKthChKYdp6YVQx/j27noLUU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 15:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1900 (0x76c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Apr 26 09:36:30 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7442E6E28B6953C8FF2C628103A5704F4134CC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:a1:56:29:25:ce:9f:77:91:a7:5e:47:0f: d7:d4:8f:2c:cb:b4:a5:54:73:a3:3e:19:22:00:a6: 7a:95:68:9c:7a:32:49:36:6c:39:51:ce:3c:79:f3: 74:08:ee:45:d4:02:52:61:dc:bd:aa:e7:7f:8d:8c: ef:55:51:8b:eb:12:ad:b5:17:9e:82:29:14:e0:30: 8d:00:1a:8b:f6:b6:aa:1a:53:b4:e3:13:49:1f:52: 3c:e3:33:fd:94:a7:cf:eb:3f:d0:cd:b3:13:73:2f: 2d:2e:49:26:13:4a:82:8e:79:aa:53:eb:9f:59:77: 30:9a:34:37:ed:cc:63:6e:c8:f6:3f:a6:e5:eb:b0: 50:82:d1:34:8b:33:4c:ba:a5:c9:ae:85:37:c0:e1: 7b:9b:98:95:86:7c:7e:e0:3c:ad:3c:19:68:d0:46: 85:8d:e4:d4:71:52:ef:bc:de:37:11:55:67:ca:9d: 13:94:1b:60:91:d6:4e:91:fc:a0:2a:55:d2:0c:18: c0:16:f4:67:cb:37:15:6e:fb:1f:d9:b3:db:81:75: a1:a7:aa:1e:76:a6:5c:fe:75:32:4e:5d:b9:b3:71: e7:7d:d1:9c:cd:11:48:f0:34:1e:dd:81:5c:c4:05: a5:85:f4:27:81:6f:23:f1:a2:71:1f:7a:82:86:a7: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:42:E6:E2:8B:69:53:C8:FF:2C:62:81:03:A5:70:4F:41:34:CC:99 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:43:b2:82:3c:0b:8e:73:13:cb:f1:06:d1:49:b1:ef:73:eb: d8:30:99:e7:82:75:de:1f:73:7b:65:34:48:11:65:c7:d7:87: 04:9e:c5:12:c3:0a:4f:9f:24:a3:ac:1a:5e:65:c2:2a:86:9d: 94:d2:5f:0f:5b:5a:a3:74:51:b8:73:83:ee:c1:ac:8f:69:d5: 7b:6a:30:45:c8:aa:f0:08:ec:cb:f9:8f:ce:ac:29:02:22:10: f6:3e:6a:c1:48:e6:6d:65:00:ef:24:ba:93:59:80:d7:90:fd: 02:eb:bc:12:72:78:c2:a2:1d:9b:54:72:62:f9:2c:f7:ba:ce: 3d:ec:5b:de:09:19:f0:b2:79:89:55:95:69:df:e8:c1:e3:94: 6f:01:06:8c:73:50:92:a3:63:12:e0:cf:00:66:42:92:a7:d7: 57:f4:bd:99:3e:bd:3d:d2:8d:5f:42:1c:e4:8a:ab:4e:c5:29: 06:68:eb:e7:30:ce:1f:49:fd:4b:80:d6:9c:70:ed:2e:84:71: 32:68:af:64:ec:2f:69:2e:e1:5f:dd:f1:8d:2a:0a:c8:e6:81: 77:ca:bd:be:a9:ba:81:a0:e3:ca:c3:a2:1f:d4:f1:ae:47:2f: b6:9f:93:e4:73:02:c3:03:24:c8:35:1b:a6:10:37:cd:27:c5: c9:88:32:a3 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA0MjYw OTM2MzBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc0NDJFNkUyOEI2OTUz QzhGRjJDNjI4MTAzQTU3MDRGNDEzNENDOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvY6FWKSXOn3eRp15HD9fUjyzLtKVUc6M+GSIApnqVaJx6Mkk2 bDlRzjx583QI7kXUAlJh3L2q53+NjO9VUYvrEq21F56CKRTgMI0AGov2tqoaU7Tj E0kfUjzjM/2Up8/rP9DNsxNzLy0uSSYTSoKOeapT659ZdzCaNDftzGNuyPY/puXr sFCC0TSLM0y6pcmuhTfA4XubmJWGfH7gPK08GWjQRoWN5NRxUu+83jcRVWfKnROU G2CR1k6R/KAqVdIMGMAW9GfLNxVu+x/Zs9uBdaGnqh52plz+dTJOXbmzced90ZzN EUjwNB7dgVzEBaWF9CeBbyPxonEfeoKGp7a5AgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUdELm4otpU8j/LGKBA6VwT0E0zJkwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9MQU1VMzk3VUdyWVIyWjlV SUdPWUwtT0FnTG8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA NEOygjwLjnMTy/EG0Umx73Pr2DCZ54J13h9ze2U0SBFlx9eHBJ7FEsMKT58ko6wa XmXCKoadlNJfD1tao3RRuHOD7sGsj2nVe2owRciq8Ajsy/mPzqwpAiIQ9j5qwUjm bWUA7yS6k1mA15D9Auu8EnJ4wqIdm1RyYvks97rOPexb3gkZ8LJ5iVWVad/oweOU bwEGjHNQkqNjEuDPAGZCkqfXV/S9mT69PdKNX0Ic5IqrTsUpBmjr5zDOH0n9S4DW nHDtLoRxMmivZOwvaS7hX93xjSoKyOaBd8q9vqm6gaDjysOiH9Txrkcvtp+T5HMC wwMkyDUbphA3zSfFyYgyow== -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:37 2025 by rpki-client