$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft File: LAMU397UGrYR2Z9UIGOYL-OAgLo.mft (raw, json) Hash identifier: VoaDxgpetDoHlX6iPvgs99WG0Wtyqk+gQUggYHO8yEo= Subject key identifier: 74:42:E6:E2:8B:69:53:C8:FF:2C:62:81:03:A5:70:4F:41:34:CC:99 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 0455 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft Manifest number: 044D Signing time: Fri 22 Nov 2024 10:21:56 +0000 Manifest this update: Fri 22 Nov 2024 10:21:56 +0000 Manifest next update: Fri 22 Nov 2024 16:21:56 +0000 Files and hashes: 1: 6OOgbcc6tw2AkFZlOv9og89RGzM.roa (hash: PqGCVipLIB4LfMJFXO580kMf7UBPAoR85GnhUUFQplo=) 2: LAMU397UGrYR2Z9UIGOYL-OAgLo.crl (hash: WVVydPM95WQPx8Tqbb2ZFawoxMDJeQ2nAZVD+uWlLeI=) 3: _HchNpPiucZHjxJdDgfsWKt7Xog.roa (hash: kNUEHg8rOTa/hcGFTUV8dhvSGXIDG9kOTkD9ixsnoLs=) 4: nWxT4RYlEY5Aret9o0t0WZLlzV0.roa (hash: iOXZTU/yrX1KRmPP2U0zN+Z9WjuSxTrE9F05Jz7zG64=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 16:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: Nov 22 10:21:56 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=7442E6E28B6953C8FF2C628103A5704F4134CC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:a1:56:29:25:ce:9f:77:91:a7:5e:47:0f: d7:d4:8f:2c:cb:b4:a5:54:73:a3:3e:19:22:00:a6: 7a:95:68:9c:7a:32:49:36:6c:39:51:ce:3c:79:f3: 74:08:ee:45:d4:02:52:61:dc:bd:aa:e7:7f:8d:8c: ef:55:51:8b:eb:12:ad:b5:17:9e:82:29:14:e0:30: 8d:00:1a:8b:f6:b6:aa:1a:53:b4:e3:13:49:1f:52: 3c:e3:33:fd:94:a7:cf:eb:3f:d0:cd:b3:13:73:2f: 2d:2e:49:26:13:4a:82:8e:79:aa:53:eb:9f:59:77: 30:9a:34:37:ed:cc:63:6e:c8:f6:3f:a6:e5:eb:b0: 50:82:d1:34:8b:33:4c:ba:a5:c9:ae:85:37:c0:e1: 7b:9b:98:95:86:7c:7e:e0:3c:ad:3c:19:68:d0:46: 85:8d:e4:d4:71:52:ef:bc:de:37:11:55:67:ca:9d: 13:94:1b:60:91:d6:4e:91:fc:a0:2a:55:d2:0c:18: c0:16:f4:67:cb:37:15:6e:fb:1f:d9:b3:db:81:75: a1:a7:aa:1e:76:a6:5c:fe:75:32:4e:5d:b9:b3:71: e7:7d:d1:9c:cd:11:48:f0:34:1e:dd:81:5c:c4:05: a5:85:f4:27:81:6f:23:f1:a2:71:1f:7a:82:86:a7: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:42:E6:E2:8B:69:53:C8:FF:2C:62:81:03:A5:70:4F:41:34:CC:99 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8b:bd:65:62:04:fa:0d:cd:4d:fd:01:ee:c7:b2:fc:9d:d4: 0b:4d:47:21:ab:63:68:e9:9c:73:8d:28:70:21:65:1d:20:e2: e2:87:98:b6:b6:11:d9:d6:d0:21:e1:ae:f9:15:a9:5c:e0:62: 17:2e:dd:a1:b7:92:86:93:1d:ca:dc:05:37:8c:13:f5:49:25: 9d:a3:26:ad:67:82:6d:01:75:ef:fc:ed:1e:32:9a:fb:43:7a: 6e:26:db:03:f6:dc:f2:02:15:7a:ec:69:70:83:2a:da:ea:e4: ab:89:66:f5:a7:91:4b:01:15:e8:b1:e9:3a:dd:23:1e:7b:23: 62:59:f2:07:07:8d:77:10:6d:b0:6d:3b:f8:30:ce:bb:af:b9: cd:5d:cd:46:65:1a:f6:13:af:26:99:ba:0c:5a:f7:18:1c:63: 3c:93:22:df:f8:f2:0d:9f:67:c6:0b:fa:56:74:a6:01:14:a7: e9:bb:8b:1d:40:1e:b4:38:22:7a:b3:0d:ed:53:6a:42:ce:31: 90:a0:b3:d2:6b:f8:e5:2a:5f:dc:44:33:7e:13:a3:c6:a0:cd: 25:e5:44:49:d1:8b:4e:91:31:10:15:18:c9:52:51:35:c6:74: 8d:cc:30:84:0b:70:58:ab:ee:5f:8c:c5:be:49:b2:fa:76:c5: 59:18:35:b2 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNDExMjIx MDIxNTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc0NDJFNkUyOEI2OTUz QzhGRjJDNjI4MTAzQTU3MDRGNDEzNENDOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvY6FWKSXOn3eRp15HD9fUjyzLtKVUc6M+GSIApnqVaJx6Mkk2 bDlRzjx583QI7kXUAlJh3L2q53+NjO9VUYvrEq21F56CKRTgMI0AGov2tqoaU7Tj E0kfUjzjM/2Up8/rP9DNsxNzLy0uSSYTSoKOeapT659ZdzCaNDftzGNuyPY/puXr sFCC0TSLM0y6pcmuhTfA4XubmJWGfH7gPK08GWjQRoWN5NRxUu+83jcRVWfKnROU G2CR1k6R/KAqVdIMGMAW9GfLNxVu+x/Zs9uBdaGnqh52plz+dTJOXbmzced90ZzN EUjwNB7dgVzEBaWF9CeBbyPxonEfeoKGp7a5AgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUdELm4otpU8j/LGKBA6VwT0E0zJkwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9MQU1VMzk3VUdyWVIyWjlV SUdPWUwtT0FnTG8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA mou9ZWIE+g3NTf0B7sey/J3UC01HIatjaOmcc40ocCFlHSDi4oeYtrYR2dbQIeGu +RWpXOBiFy7dobeShpMdytwFN4wT9UklnaMmrWeCbQF17/ztHjKa+0N6bibbA/bc 8gIVeuxpcIMq2urkq4lm9aeRSwEV6LHpOt0jHnsjYlnyBweNdxBtsG07+DDOu6+5 zV3NRmUa9hOvJpm6DFr3GBxjPJMi3/jyDZ9nxgv6VnSmARSn6buLHUAetDgierMN 7VNqQs4xkKCz0mv45Spf3EQzfhOjxqDNJeVESdGLTpExEBUYyVJRNcZ0jcwwhAtw WKvuX4zFvkmy+nbFWRg1sg== -----END CERTIFICATE-----Generated at Fri Nov 22 16:05:39 2024 by rpki-client on console-fra.rpki-client.org