$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.mft File: dK8EAv71bDShktHSGF5vtUaqcCw.mft (raw, json) Hash identifier: hVv92DCxIfcQ8ohGvBS3PqPOWSHdk8haJhafQLmfOdM= Subject key identifier: 3C:CC:70:A9:75:44:68:01:E0:FE:81:68:A6:08:C1:46:CE:67:2A:A8 Authority key identifier: 74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C Certificate issuer: /CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C Certificate serial: 0127 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.mft Manifest number: 0120 Signing time: Fri 31 May 2024 17:11:20 +0000 Manifest this update: Fri 31 May 2024 17:11:20 +0000 Manifest next update: Sun 02 Jun 2024 17:11:20 +0000 Files and hashes: 1: 5qykFt1CXRaZe_rXIDoZGvV5Gz4.roa (hash: Tc3boEl4x65kgCFbH7fzNk1kwxNwIMYdUZI0Bj5r6lY=) 2: QkQca3VzDjiVxqHQk1W7VpG1ftg.roa (hash: V1+2Fd/djNJN2PtPjW9G6w8bVFMGHgIfeYIkN3kjmkk=) 3: dK8EAv71bDShktHSGF5vtUaqcCw.crl (hash: 6lLoeG4xf4S4+VYUbpj7OV20lR60eHG9H4QfQarpQlQ=) 4: k0xaANVexlZR9iy1MCdQGU5oaoc.roa (hash: +BDwPPAW+c8P18Sn8QgEdQwUJ8HW206iufppdyIb1RQ=) 5: x5FVjSMXeQ_SU0NWfyJKAQr0SBY.roa (hash: JlHqjy/vk5nqbOJh7MH+70nKGR+3kz5niT0d0LuOvMI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 17:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C Validity Not Before: May 31 17:11:20 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3CCC70A975446801E0FE8168A608C146CE672AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:e4:88:4d:a9:1a:71:46:16:af:b3:15:e3: d4:dc:08:95:8f:cf:40:fb:64:58:39:3f:a6:a7:53: 3d:90:7b:d3:fe:8c:66:29:ce:a3:07:f8:fd:8d:82: 40:9f:2f:9d:42:7a:88:f5:92:75:20:4e:60:df:f2: 7a:0b:d8:a2:e3:5f:c9:60:95:9b:34:69:9e:a7:cc: ab:b4:85:99:ee:d5:63:a8:b0:7a:b0:78:9e:dd:5f: 9d:24:fc:2d:ce:f2:2f:ec:a8:14:8a:19:55:dc:29: 09:92:bb:f8:06:a7:a9:b5:22:c5:fe:30:c2:e3:4f: 66:cd:7f:62:30:dd:76:7f:f5:1d:36:22:8f:6c:33: 8a:a0:41:a4:b5:43:8f:b4:df:c6:7d:e1:ea:a8:49: 8a:07:d6:5f:db:b2:cc:db:48:05:c4:f9:55:69:c4: b4:94:b9:ee:54:5d:7f:13:46:f3:1f:f9:90:90:11: b4:1f:ac:c2:1d:1c:b3:26:52:99:26:89:1a:e8:ef: b4:47:90:5c:15:8b:6c:64:92:d1:70:5b:49:44:cc: 32:23:19:8a:4e:08:04:a6:fd:64:38:3f:6b:a8:a3: 0f:7d:99:a4:f2:20:53:bb:20:62:96:3b:b5:39:90: 62:90:30:0c:dd:59:eb:e5:c4:53:48:e0:ba:13:fd: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CC:70:A9:75:44:68:01:E0:FE:81:68:A6:08:C1:46:CE:67:2A:A8 X509v3 Authority Key Identifier: keyid:74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f6:96:23:f2:82:0e:ba:46:82:cf:9f:02:ab:e2:7a:9f:50: ea:96:1f:f9:1f:96:12:9a:2d:1f:c5:0e:27:74:2c:32:5b:e0: c0:c0:76:47:81:dc:25:1a:ba:94:6a:78:a6:e1:9e:ce:93:2b: b3:0c:bc:40:d3:8c:f8:f3:17:31:91:80:e1:b4:4f:5d:1e:00: cd:99:4d:8d:12:0e:25:3f:b8:b1:d6:d8:84:e8:6a:9a:0e:37: e1:4a:b5:22:27:19:06:04:02:7c:a5:cb:9b:48:76:95:00:5e: c1:a3:f8:7c:4a:bd:c4:cb:63:36:7a:98:98:37:e3:47:82:8f: 31:a4:e7:91:6a:54:c0:31:ac:54:68:50:17:5d:16:a0:04:e0: 40:a3:ed:1c:fe:e7:ee:d5:ef:b4:99:05:86:6d:3c:55:a3:34: 5d:a0:a6:d1:0c:78:f8:19:ec:bf:e7:ea:33:1b:a1:41:9b:5b: 88:7b:6d:16:f5:60:9a:11:df:5d:4c:ac:85:34:ab:f8:03:12: 49:de:f1:2d:07:de:e0:d7:af:31:ac:68:03:cf:b7:49:d3:10: 2a:8e:b2:50:75:6e:10:c9:b2:37:4f:de:ed:ad:a4:52:07:ad: fd:93:84:60:e3:2f:76:a1:45:a4:f9:3d:cd:db:f2:c4:22:63: d4:a3:a0:0e -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICAScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzRB RjA0MDJGRUY1NkMzNEExOTJEMUQyMTg1RTZGQjU0NkFBNzAyQzAeFw0yNDA1MzEx NzExMjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNDQ0M3MEE5NzU0NDY4 MDFFMEZFODE2OEE2MDhDMTQ2Q0U2NzJBQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHoOSITakacUYWr7MV49TcCJWPz0D7ZFg5P6anUz2Qe9P+jGYp zqMH+P2NgkCfL51Ceoj1knUgTmDf8noL2KLjX8lglZs0aZ6nzKu0hZnu1WOosHqw eJ7dX50k/C3O8i/sqBSKGVXcKQmSu/gGp6m1IsX+MMLjT2bNf2Iw3XZ/9R02Io9s M4qgQaS1Q4+038Z94eqoSYoH1l/bsszbSAXE+VVpxLSUue5UXX8TRvMf+ZCQEbQf rMIdHLMmUpkmiRro77RHkFwVi2xkktFwW0lEzDIjGYpOCASm/WQ4P2uoow99maTy IFO7IGKWO7U5kGKQMAzdWevlxFNI4LoT/azbAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUPMxwqXVEaAHg/oFopgjBRs5nKqgwHwYDVR0jBBgwFoAUdK8EAv71bDShktHS GF5vtUaqcCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xBUksv ZEs4RUF2NzFiRFNoa3RIU0dGNXZ0VWFxY0N3LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9kSzhFQXY3MWJEU2hrdEhTR0Y1dnRVYXFjQ3cuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DTEFSSy9kSzhFQXY3MWJEU2hrdEhTR0Y1 dnRVYXFjQ3cubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/aW I/KCDrpGgs+fAqviep9Q6pYf+R+WEpotH8UOJ3QsMlvgwMB2R4HcJRq6lGp4puGe zpMrswy8QNOM+PMXMZGA4bRPXR4AzZlNjRIOJT+4sdbYhOhqmg434Uq1IicZBgQC fKXLm0h2lQBewaP4fEq9xMtjNnqYmDfjR4KPMaTnkWpUwDGsVGhQF10WoATgQKPt HP7n7tXvtJkFhm08VaM0XaCm0Qx4+Bnsv+fqMxuhQZtbiHttFvVgmhHfXUyshTSr +AMSSd7xLQfe4NevMaxoA8+3SdMQKo6yUHVuEMmyN0/e7a2kUget/ZOEYOMvdqFF pPk9zdvyxCJj1KOgDg== -----END CERTIFICATE-----Generated at Sat Jun 1 15:04:57 2024 by rpki-client on console-fra.rpki-client.org