$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft File: LAMU397UGrYR2Z9UIGOYL-OAgLo.mft (raw, json) Hash identifier: JApuVz2LJT6kxhqmMgkmHLZZLBygYQI7h9AJsKobNNw= Subject key identifier: 74:42:E6:E2:8B:69:53:C8:FF:2C:62:81:03:A5:70:4F:41:34:CC:99 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: FA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft Manifest number: F2 Signing time: Sat 01 Jun 2024 10:25:09 +0000 Manifest this update: Sat 01 Jun 2024 10:25:09 +0000 Manifest next update: Sat 01 Jun 2024 16:25:09 +0000 Files and hashes: 1: 6OOgbcc6tw2AkFZlOv9og89RGzM.roa (hash: PqGCVipLIB4LfMJFXO580kMf7UBPAoR85GnhUUFQplo=) 2: LAMU397UGrYR2Z9UIGOYL-OAgLo.crl (hash: dhXaYZO3JtbCx0SugsgpkTG1tzGMzm95uyo9QtvDXU0=) 3: _HchNpPiucZHjxJdDgfsWKt7Xog.roa (hash: kNUEHg8rOTa/hcGFTUV8dhvSGXIDG9kOTkD9ixsnoLs=) 4: nWxT4RYlEY5Aret9o0t0WZLlzV0.roa (hash: iOXZTU/yrX1KRmPP2U0zN+Z9WjuSxTrE9F05Jz7zG64=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 16:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Jun 1 10:25:09 2024 GMT Not After : Apr 15 07:02:50 2025 GMT Subject: CN=7442E6E28B6953C8FF2C628103A5704F4134CC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:a1:56:29:25:ce:9f:77:91:a7:5e:47:0f: d7:d4:8f:2c:cb:b4:a5:54:73:a3:3e:19:22:00:a6: 7a:95:68:9c:7a:32:49:36:6c:39:51:ce:3c:79:f3: 74:08:ee:45:d4:02:52:61:dc:bd:aa:e7:7f:8d:8c: ef:55:51:8b:eb:12:ad:b5:17:9e:82:29:14:e0:30: 8d:00:1a:8b:f6:b6:aa:1a:53:b4:e3:13:49:1f:52: 3c:e3:33:fd:94:a7:cf:eb:3f:d0:cd:b3:13:73:2f: 2d:2e:49:26:13:4a:82:8e:79:aa:53:eb:9f:59:77: 30:9a:34:37:ed:cc:63:6e:c8:f6:3f:a6:e5:eb:b0: 50:82:d1:34:8b:33:4c:ba:a5:c9:ae:85:37:c0:e1: 7b:9b:98:95:86:7c:7e:e0:3c:ad:3c:19:68:d0:46: 85:8d:e4:d4:71:52:ef:bc:de:37:11:55:67:ca:9d: 13:94:1b:60:91:d6:4e:91:fc:a0:2a:55:d2:0c:18: c0:16:f4:67:cb:37:15:6e:fb:1f:d9:b3:db:81:75: a1:a7:aa:1e:76:a6:5c:fe:75:32:4e:5d:b9:b3:71: e7:7d:d1:9c:cd:11:48:f0:34:1e:dd:81:5c:c4:05: a5:85:f4:27:81:6f:23:f1:a2:71:1f:7a:82:86:a7: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:42:E6:E2:8B:69:53:C8:FF:2C:62:81:03:A5:70:4F:41:34:CC:99 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:76:e2:83:7a:f0:6e:6f:da:59:ef:d2:5a:00:6e:59:b9:ef: a3:ee:b9:b1:b3:e0:5b:eb:94:66:4e:27:dd:59:58:30:be:1e: fd:7d:32:cd:a7:4e:84:18:e4:6a:d0:1d:60:a5:ca:d5:c4:41: 77:b7:c6:39:4e:5b:99:ab:a9:13:ec:6f:20:41:51:f5:2e:7e: eb:e9:c6:b3:67:80:12:33:08:88:a7:d0:71:65:2a:04:2e:8f: 14:f0:01:f3:45:3f:c4:fa:28:cd:d0:e9:cf:5d:70:76:38:8c: fc:7f:bd:06:32:a9:97:8c:b5:29:e3:e0:2d:2f:4f:ea:09:63: 15:85:cb:c4:fa:f6:9c:27:7a:f7:58:03:0a:38:1a:36:fb:b3: a2:ad:d8:d8:46:bc:1b:ce:de:df:2c:17:18:32:56:72:25:fd: dc:18:61:21:a4:42:44:c0:68:ac:ab:3a:1b:39:84:59:47:bc: de:e7:31:8f:f2:55:5d:5b:c6:d0:83:1f:22:7a:71:70:15:f7: 4e:73:f4:af:79:10:c9:90:3c:27:5c:1f:11:07:4b:ff:c3:eb: 66:10:8e:44:ee:68:11:7b:cd:de:f9:aa:98:9f:40:6c:5b:a7: cc:68:fc:8e:c5:58:6f:ec:0d:ab:b1:68:06:1b:a8:e4:62:81: 6d:9b:3a:6d -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICAPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNDA2MDEx MDI1MDlaFw0yNTA0MTUwNzAyNTBaMDMxMTAvBgNVBAMTKDc0NDJFNkUyOEI2OTUz QzhGRjJDNjI4MTAzQTU3MDRGNDEzNENDOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvY6FWKSXOn3eRp15HD9fUjyzLtKVUc6M+GSIApnqVaJx6Mkk2 bDlRzjx583QI7kXUAlJh3L2q53+NjO9VUYvrEq21F56CKRTgMI0AGov2tqoaU7Tj E0kfUjzjM/2Up8/rP9DNsxNzLy0uSSYTSoKOeapT659ZdzCaNDftzGNuyPY/puXr sFCC0TSLM0y6pcmuhTfA4XubmJWGfH7gPK08GWjQRoWN5NRxUu+83jcRVWfKnROU G2CR1k6R/KAqVdIMGMAW9GfLNxVu+x/Zs9uBdaGnqh52plz+dTJOXbmzced90ZzN EUjwNB7dgVzEBaWF9CeBbyPxonEfeoKGp7a5AgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUdELm4otpU8j/LGKBA6VwT0E0zJkwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9MQU1VMzk3VUdyWVIyWjlV SUdPWUwtT0FnTG8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Lnbig3rwbm/aWe/SWgBuWbnvo+65sbPgW+uUZk4n3VlYML4e/X0yzadOhBjkatAd YKXK1cRBd7fGOU5bmaupE+xvIEFR9S5+6+nGs2eAEjMIiKfQcWUqBC6PFPAB80U/ xPoozdDpz11wdjiM/H+9BjKpl4y1KePgLS9P6gljFYXLxPr2nCd691gDCjgaNvuz oq3Y2Ea8G87e3ywXGDJWciX93BhhIaRCRMBorKs6GzmEWUe83ucxj/JVXVvG0IMf InpxcBX3TnP0r3kQyZA8J1wfEQdL/8PrZhCORO5oEXvN3vmqmJ9AbFunzGj8jsVY b+wNq7FoBhuo5GKBbZs6bQ== -----END CERTIFICATE-----Generated at Sat Jun 1 12:23:49 2024 by rpki-client on console-ams.rpki-client.org