$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft File: LAMU397UGrYR2Z9UIGOYL-OAgLo.mft (raw, json) Hash identifier: xS8pHeQ0XQ63/srzDHohHdC654g9ccPZqjOK0WU2Xrk= Subject key identifier: 74:42:E6:E2:8B:69:53:C8:FF:2C:62:81:03:A5:70:4F:41:34:CC:99 Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 07DA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft Manifest number: 07C0 Signing time: Sat 17 May 2025 15:07:40 +0000 Manifest this update: Sat 17 May 2025 15:07:40 +0000 Manifest next update: Sat 17 May 2025 21:07:40 +0000 Files and hashes: 1: 4cLX9iCz9j4UMXO3ryUlADdFmq4.roa (hash: BxvhNstrmCO1v2uBFcsxuHSxwrVzJAjNSJpdxI3xEc8=) 2: 8P5nxrSyLpNh0DrQq_L0aOZJdWI.roa (hash: 138BVXYTxmIfaAJ+ZCC6DvL1EUGXXlam0uEXBBSbV10=) 3: Am3i00z5BdYXeTzSVZeG0BWoOzQ.roa (hash: 7JYzi8wNmGetBqkqq4TaSTPE6M0T+awLOmkmSp9BLW8=) 4: Bza58ss-4JUQhHxFuPhJj85INLI.roa (hash: H0B4wUHoC4mfs2yi8t17ZRT7PkDxlTqbRPrNqlNq2DQ=) 5: G6Xd8MC-idjbwwBddxYJxSObjtc.roa (hash: DzOjC79l1HvGmJywrUVBN8cvFPgxYrBwfetg3weCvA8=) 6: I5n1NWJVBvFwHjRL1bty30hEFOo.roa (hash: drvwiQtO0StE5Q0z1cTQ0UnCfs5kaJGrqnyQSTY83zo=) 7: JjuPfSenFrZVTiEEu74GswyJ-sk.roa (hash: eDkeBiEH+VaW3mi5v0Cy2GbZH/oA9mCrQzj+ONPGzLA=) 8: LAMU397UGrYR2Z9UIGOYL-OAgLo.crl (hash: TBRHhi+8bWI62NtYaiBQ2C4NArhE+7xjIG0QCVpxXpg=) 9: R9txMPuZG2S6aYddE4rUKEGN1Mw.roa (hash: PY4wEXWSpJ2A4pmHLPKFwkZQ7SpPUzOckLUk+iMS2x8=) 10: Tgo2UalC6bYN3cuohaOJh4-z75g.roa (hash: cSW2xNecbkNlatrGyY1RoXGp18g76R8Vll7U8KvNzfg=) 11: eDVpCKSCjOECYQXGK61_TpJvS2o.roa (hash: PEgLgUhf8PFFXZSGKxa9WlpLw+1acH+JmVO2jjDNgwk=) 12: fqhuozlBrtff98veExy-YwUrTw0.roa (hash: SoW5KqNHxhcvKBUoWhDGCxvWss3O5ILfwqepBJsOlPk=) 13: i-Ka6yqw9yla2wiDdBUs3m7wtc8.roa (hash: 8a3s9KqUkQhOrZSBJq2JkK0Sdj3yykOgJrB/OxjID58=) 14: j3MYc-ZeCZUltYcD7mGB_gOh4YE.roa (hash: PkiT7gawVseGEcOBUMRq39rqP4+AKQxW3mx8fnr5pm0=) 15: kMcdy1E4DFO-Jg53Q4WhdY5F1dU.roa (hash: olJLbza9joPjLOUZlWHdKthChKYdp6YVQx/j27noLUU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 17 15:07:40 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=7442E6E28B6953C8FF2C628103A5704F4134CC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:a1:56:29:25:ce:9f:77:91:a7:5e:47:0f: d7:d4:8f:2c:cb:b4:a5:54:73:a3:3e:19:22:00:a6: 7a:95:68:9c:7a:32:49:36:6c:39:51:ce:3c:79:f3: 74:08:ee:45:d4:02:52:61:dc:bd:aa:e7:7f:8d:8c: ef:55:51:8b:eb:12:ad:b5:17:9e:82:29:14:e0:30: 8d:00:1a:8b:f6:b6:aa:1a:53:b4:e3:13:49:1f:52: 3c:e3:33:fd:94:a7:cf:eb:3f:d0:cd:b3:13:73:2f: 2d:2e:49:26:13:4a:82:8e:79:aa:53:eb:9f:59:77: 30:9a:34:37:ed:cc:63:6e:c8:f6:3f:a6:e5:eb:b0: 50:82:d1:34:8b:33:4c:ba:a5:c9:ae:85:37:c0:e1: 7b:9b:98:95:86:7c:7e:e0:3c:ad:3c:19:68:d0:46: 85:8d:e4:d4:71:52:ef:bc:de:37:11:55:67:ca:9d: 13:94:1b:60:91:d6:4e:91:fc:a0:2a:55:d2:0c:18: c0:16:f4:67:cb:37:15:6e:fb:1f:d9:b3:db:81:75: a1:a7:aa:1e:76:a6:5c:fe:75:32:4e:5d:b9:b3:71: e7:7d:d1:9c:cd:11:48:f0:34:1e:dd:81:5c:c4:05: a5:85:f4:27:81:6f:23:f1:a2:71:1f:7a:82:86:a7: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:42:E6:E2:8B:69:53:C8:FF:2C:62:81:03:A5:70:4F:41:34:CC:99 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:91:d3:46:47:d5:5e:60:de:c8:39:17:b8:f7:9b:6b:73:e5: 2c:97:bc:a0:e8:07:0a:1a:a5:2b:b3:0c:58:eb:7a:7a:f3:aa: ce:bf:2c:7d:f2:3b:d6:30:b8:e9:b5:15:9a:25:cf:96:30:60: f9:b3:21:ee:86:fb:b3:03:8f:d2:6c:16:c5:90:e5:b7:19:f5: d5:ad:88:d9:82:b2:d3:6c:bf:99:9f:2f:d4:7c:14:12:e1:28: 00:5a:86:c2:b6:ef:fa:4d:5c:74:9b:94:e8:9d:29:a8:53:4a: 48:b7:7e:eb:9c:74:a7:ad:e4:b2:d3:11:3d:b3:76:45:a8:72: 9e:40:2d:75:93:a1:cf:9f:72:08:b4:74:52:86:ca:fc:a0:f6: 4d:f8:30:6e:ea:6a:c7:ca:18:ed:05:a0:ba:ef:4b:84:f9:6f: 74:30:c8:b3:81:5b:d4:4f:3e:6d:f8:5a:ce:4f:45:be:dd:0d: c6:00:93:e1:8e:00:26:b2:09:b7:a3:d2:0f:07:24:a2:73:d1: 94:fc:0f:8b:a5:e6:5b:a1:f3:8b:49:95:9f:ed:d7:69:58:85: 7e:c9:b9:e9:ab:94:33:82:58:93:c9:d0:34:e8:87:f7:72:5a: fd:c5:e0:c2:67:2a:a2:33:07:f2:d4:ea:ce:ea:f1:73:eb:2d: 01:8c:37:be -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICB9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MTcx NTA3NDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc0NDJFNkUyOEI2OTUz QzhGRjJDNjI4MTAzQTU3MDRGNDEzNENDOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvY6FWKSXOn3eRp15HD9fUjyzLtKVUc6M+GSIApnqVaJx6Mkk2 bDlRzjx583QI7kXUAlJh3L2q53+NjO9VUYvrEq21F56CKRTgMI0AGov2tqoaU7Tj E0kfUjzjM/2Up8/rP9DNsxNzLy0uSSYTSoKOeapT659ZdzCaNDftzGNuyPY/puXr sFCC0TSLM0y6pcmuhTfA4XubmJWGfH7gPK08GWjQRoWN5NRxUu+83jcRVWfKnROU G2CR1k6R/KAqVdIMGMAW9GfLNxVu+x/Zs9uBdaGnqh52plz+dTJOXbmzced90ZzN EUjwNB7dgVzEBaWF9CeBbyPxonEfeoKGp7a5AgMBAAGjggIIMIICBDAdBgNVHQ4E FgQUdELm4otpU8j/LGKBA6VwT0E0zJkwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9MQU1VMzk3VUdyWVIyWjlV SUdPWUwtT0FnTG8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA aJHTRkfVXmDeyDkXuPeba3PlLJe8oOgHChqlK7MMWOt6evOqzr8sffI71jC46bUV miXPljBg+bMh7ob7swOP0mwWxZDltxn11a2I2YKy02y/mZ8v1HwUEuEoAFqGwrbv +k1cdJuU6J0pqFNKSLd+65x0p63kstMRPbN2RahynkAtdZOhz59yCLR0UobK/KD2 Tfgwbupqx8oY7QWguu9LhPlvdDDIs4Fb1E8+bfhazk9Fvt0NxgCT4Y4AJrIJt6PS DwckonPRlPwPi6XmW6Hzi0mVn+3XaViFfsm56auUM4JYk8nQNOiH93Ja/cXgwmcq ojMH8tTqzurxc+stAYw3vg== -----END CERTIFICATE-----Generated at Sat May 17 19:42:27 2025 by rpki-client