$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft File: Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft (raw, json) Hash identifier: BatRj+V96yK3rHHkxOAq9rF8knqbZLLwG0vZ7gNLM6Q= Subject key identifier: 76:E7:A0:8E:8E:67:F4:BA:25:AF:A8:0D:69:2B:38:0C:B1:C7:01:9A Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C Certificate serial: 0981 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft Manifest number: 0966 Signing time: Mon 17 Jun 2024 03:39:34 +0000 Manifest this update: Mon 17 Jun 2024 03:39:34 +0000 Manifest next update: Wed 19 Jun 2024 03:39:34 +0000 Files and hashes: 1: 1GrjY_SVKrwBmc5AS6Xa-7i2N5g.roa (hash: IqRIsa9zwgem7JWx5xtIeKCiXKSuwXH7pa3hl7WYKZQ=) 2: 3pRvj3GebysOIHVYFGmH8flyiIA.roa (hash: 9IqL1nKCqPA7Z/Lwqyvh32eNASz+4u+beYJfEB7toQ0=) 3: Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl (hash: Vmz15vtTvJtMLJdCd8K7iWGbwAFzWlhU7yKkkzgm3kA=) 4: XInZT1vi8KI79tft1eSI4KLTPd4.roa (hash: +VrNkbHj3zT5eHK3nLu9D7VMvn5bcNo4H2yKj41zmaE=) 5: zmOuG3h-67ivAsCMMgwFMwnSWLo.roa (hash: LVZiL/rSgwnjUANhPoGHi2SlTqx4MLzjPLFqLojJ7Ag=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 03:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2433 (0x981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C Validity Not Before: Jun 17 03:39:34 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=76E7A08E8E67F4BA25AFA80D692B380CB1C7019A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dc:bb:0e:03:91:e0:51:5e:54:04:35:13:d6: 1c:90:13:e7:54:b0:c3:f3:41:11:e9:65:59:cd:3a: a2:d9:ca:61:07:10:e9:c2:6c:45:b0:08:f8:12:3a: b9:39:3e:aa:80:96:99:58:92:b2:aa:84:f0:9a:8b: 23:cb:98:0c:6e:a2:bd:67:e5:7f:d9:51:d8:8a:e7: dd:56:ed:71:47:88:4f:fa:88:ae:ca:3b:e8:88:35: b9:85:8c:c6:26:be:f7:5d:eb:39:1c:d4:a0:1e:2a: d8:e2:8b:df:81:b3:cc:be:16:d3:5d:a5:c7:9a:0e: 4c:44:d6:8a:ad:2b:ad:42:6b:ce:8f:44:74:7a:94: e1:b5:53:ee:69:53:73:c6:21:26:a8:da:00:51:51: f6:f4:35:4c:0d:9f:cc:d5:f1:24:5c:19:c2:99:76: e6:1e:06:80:f8:f6:1c:5a:8d:93:0b:eb:52:68:d4: c1:d4:e5:b3:d1:d1:ca:e0:8c:a8:1f:fb:9f:6e:fc: 7c:40:1d:e9:60:1f:0e:fd:ee:2f:ea:d9:54:ac:a3: a5:cd:27:c9:c5:84:8b:53:7f:c1:17:7e:2c:e6:1e: 92:3b:f7:0b:39:35:7b:c1:41:91:16:10:0d:ed:de: 06:81:40:15:32:cf:bc:37:85:16:2c:de:09:5c:7d: 07:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E7:A0:8E:8E:67:F4:BA:25:AF:A8:0D:69:2B:38:0C:B1:C7:01:9A X509v3 Authority Key Identifier: keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a3:c7:b4:eb:36:0c:60:48:27:8e:42:2e:27:a6:80:60:21: 90:87:c0:1f:0a:1c:cb:a2:39:fe:3c:a5:91:a4:c3:a6:6b:b0: 1d:6a:ba:fb:ab:3f:5e:69:cc:dc:e4:d1:39:ca:e8:a3:26:f9: 50:dc:39:35:4f:00:99:40:2d:88:67:71:98:11:b0:9b:14:6f: 6f:93:bb:cc:61:3e:a1:8f:d0:df:9b:a8:c5:6a:87:9b:fa:bb: cb:46:17:fb:87:e3:96:33:46:0e:b0:7c:f9:20:ac:7e:32:d0: 95:45:04:da:52:68:5a:8a:20:3b:1d:83:a9:03:8c:af:45:27: b3:99:79:a3:f3:d4:c4:2c:3f:34:b1:d9:8e:62:db:b1:d5:f5: ba:04:37:9f:fd:6e:7b:ee:81:80:2d:be:b8:cf:40:e3:d4:dd: 0d:64:7c:20:85:2a:bf:dc:f8:64:bc:03:d6:5d:60:b5:fb:4d: f3:18:ff:ad:a2:10:fb:8d:9b:cd:c0:29:7b:8e:35:87:28:24: 92:b6:c3:4f:51:ca:a1:6f:19:c1:18:85:99:bb:41:04:ec:8f: 79:88:68:b1:c8:30:56:eb:4e:3c:65:8f:7a:f3:8d:05:42:6f: 07:9b:0d:27:da:45:ec:16:bd:e9:3a:b4:41:c2:c4:68:cf:38: d7:e0:d0:ae -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTlE RUYyQ0Y4MjhGMEQ5QUI2QUQ5NEY0MjYxMzE3NjREMjU0Q0M1QzAeFw0yNDA2MTcw MzM5MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc2RTdBMDhFOEU2N0Y0 QkEyNUFGQTgwRDY5MkIzODBDQjFDNzAxOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDP3LsOA5HgUV5UBDUT1hyQE+dUsMPzQRHpZVnNOqLZymEHEOnC bEWwCPgSOrk5PqqAlplYkrKqhPCaiyPLmAxuor1n5X/ZUdiK591W7XFHiE/6iK7K O+iINbmFjMYmvvdd6zkc1KAeKtjii9+Bs8y+FtNdpceaDkxE1oqtK61Ca86PRHR6 lOG1U+5pU3PGISao2gBRUfb0NUwNn8zV8SRcGcKZduYeBoD49hxajZML61Jo1MHU 5bPR0crgjKgf+59u/HxAHelgHw797i/q2VSso6XNJ8nFhItTf8EXfizmHpI79ws5 NXvBQZEWEA3t3gaBQBUyz7w3hRYs3glcfQchAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUduegjo5n9Lolr6gNaSs4DLHHAZowHwYDVR0jBBgwFoAUWd7yz4KPDZq2rZT0 JhMXZNJUzFwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT WS9XZDd5ejRLUERacTJyWlQwSmhNWFpOSlV6RncuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1dkN3l6NEtQRFpxMnJaVDBKaE1YWk5KVXpGdy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU1kvV2Q3eXo0S1BEWnEyclpU MEpoTVhaTkpVekZ3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AHajx7TrNgxgSCeOQi4npoBgIZCHwB8KHMuiOf48pZGkw6ZrsB1quvurP15pzNzk 0TnK6KMm+VDcOTVPAJlALYhncZgRsJsUb2+Tu8xhPqGP0N+bqMVqh5v6u8tGF/uH 45YzRg6wfPkgrH4y0JVFBNpSaFqKIDsdg6kDjK9FJ7OZeaPz1MQsPzSx2Y5i27HV 9boEN5/9bnvugYAtvrjPQOPU3Q1kfCCFKr/c+GS8A9ZdYLX7TfMY/62iEPuNm83A KXuONYcoJJK2w09RyqFvGcEYhZm7QQTsj3mIaLHIMFbrTjxlj3rzjQVCbwebDSfa RewWvek6tEHCxGjPONfg0K4= -----END CERTIFICATE-----Generated at Tue Jun 18 13:13:37 2024 by rpki-client on console-fra.rpki-client.org