$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft File: gwvEQQFipY0NsX4KNRVR-7PXUaE.mft (raw, json) Hash identifier: 73+sPyd5Rt4RtPVAuF2iw/Qk+8ijycXCid2amo6ELVw= Subject key identifier: 01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83 Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Certificate serial: 0C06 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft Manifest number: 0BE5 Signing time: Thu 06 Jun 2024 15:44:43 +0000 Manifest this update: Thu 06 Jun 2024 15:44:43 +0000 Manifest next update: Sat 08 Jun 2024 15:44:43 +0000 Files and hashes: 1: ApRey3P7bennjaSyYpza5krTo1E.roa (hash: JMLJsJQBsqtR2aEkE9bbKTFhnKc/hpVmm4YAV+Bzsjw=) 2: J4fmb7kHQ_3ylT7qz8inAD-XVhg.roa (hash: BM+tw/2yi2TbfiFWmHpUvZ6AEFJLUH7YoZmUJiTnRQc=) 3: bC6x169chy2Otc4Sx9KruVNr2rI.roa (hash: 3EIDC6PNGWYBqVyyy//E97fAh0t8T+9cbeMFlfqb57w=) 4: gwvEQQFipY0NsX4KNRVR-7PXUaE.crl (hash: 3T3zSfclAKgd1Iy3csGEDIkWvCrkx3uz0+6tmcB0YZA=) 5: iIRCdDEdm0abflLw8X4bH5nG4iM.roa (hash: dTXDoYygih3eSe05W5MMd8fnk8sh6VI8ygZMB9OTe08=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 15:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3078 (0xc06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Validity Not Before: Jun 6 15:44:43 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=01CF58E390EF3AF26464E9734E6C92234FDAA683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:ca:58:28:32:52:b4:ca:c3:69:88:0a:6f: 1e:ba:61:57:db:f6:9a:2c:5c:e0:8e:a8:7f:29:98: 8d:f3:a3:e3:80:8b:fa:31:7a:f0:89:28:84:2a:80: 52:1a:87:ad:db:b9:9e:61:9b:2b:60:ca:1b:a7:80: c9:5e:d9:8c:73:58:37:be:51:ff:f1:ed:fd:11:ef: d1:7d:f5:2a:87:fe:e4:42:e4:db:e2:8c:fd:7e:61: ed:f0:83:c9:d6:a7:bb:2c:8e:e7:8d:11:74:ba:ad: ea:8f:15:43:91:e5:8f:d3:f3:7b:5e:4f:64:dc:38: 04:1b:28:c5:9f:e2:cf:f2:2d:ef:9d:e4:3f:76:13: b2:52:21:c4:11:af:7c:b6:43:96:16:15:f8:fe:4f: 70:44:02:03:f6:dc:4f:c7:7c:91:b7:44:63:73:a9: d6:08:18:ff:64:65:db:3c:be:32:8c:5a:91:1a:d3: f6:88:45:55:17:e1:e8:ac:7d:e8:4c:e8:f1:4e:ef: 84:38:f2:cf:e0:ed:81:60:ec:77:17:3c:62:b9:e7: 8a:e6:38:ea:f6:40:45:86:8a:50:0e:a3:84:cf:cb: 26:da:c5:34:b9:4d:0d:28:c4:2c:11:c8:76:ae:bd: 15:52:b3:8d:35:45:ca:26:87:73:41:cf:17:2f:7d: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83 X509v3 Authority Key Identifier: keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a0:f6:b1:d2:63:aa:bf:15:63:83:32:ce:3e:d6:9c:9d:ba: 5d:93:f2:33:63:a3:5c:60:48:57:a6:4b:22:26:0c:3f:5c:93: 60:5b:43:4e:49:fb:89:2a:f8:db:b5:af:5b:c3:c2:25:7e:3c: 46:cb:e0:f7:34:4f:90:34:58:04:17:e0:2f:5c:15:08:3a:68: 24:49:06:86:43:88:6d:d7:aa:9d:c0:3c:37:7a:d9:b4:16:fc: 4b:aa:c5:e8:a6:c8:7a:ce:85:a1:46:4b:28:ca:3b:a1:53:51: 13:a3:dd:c6:41:4f:6a:6d:58:a1:f1:5d:1b:b2:54:d6:10:21: 7c:84:5f:4c:4e:16:a9:1c:58:c8:3e:9b:07:c6:52:bd:e9:ed: 46:69:b2:7f:52:4f:3b:ad:c9:97:09:81:12:c2:89:0e:b0:57: 53:12:46:05:82:a5:b0:5d:b4:2c:fa:e4:ab:8c:70:64:a7:fa: 98:99:3e:52:1f:10:61:53:42:08:d0:23:db:49:c5:e7:f0:ff: 36:0e:8b:74:18:2e:03:47:ad:24:65:3c:84:67:5c:5c:f2:a4: c3:e6:ef:24:09:97:07:17:89:dd:db:df:23:b7:36:0d:87:88: d3:1b:11:9e:08:1b:34:a3:69:b3:f1:55:44:0a:36:8b:27:9d: 3c:bd:fa:05 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNDA2MDYx NTQ0NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAxQ0Y1OEUzOTBFRjNB RjI2NDY0RTk3MzRFNkM5MjIzNEZEQUE2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY6spYKDJStMrDaYgKbx66YVfb9posXOCOqH8pmI3zo+OAi/ox evCJKIQqgFIah63buZ5hmytgyhungMle2YxzWDe+Uf/x7f0R79F99SqH/uRC5Nvi jP1+Ye3wg8nWp7ssjueNEXS6reqPFUOR5Y/T83teT2TcOAQbKMWf4s/yLe+d5D92 E7JSIcQRr3y2Q5YWFfj+T3BEAgP23E/HfJG3RGNzqdYIGP9kZds8vjKMWpEa0/aI RVUX4eisfehM6PFO74Q48s/g7YFg7HcXPGK554rmOOr2QEWGilAOo4TPyybaxTS5 TQ0oxCwRyHauvRVSs401Rcomh3NBzxcvfbf7AgMBAAGjggILMIICBzAdBgNVHQ4E FgQUAc9Y45DvOvJkZOlzTmySI0/apoMwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy9nd3ZFUVFGaXBZME5z WDRLTlJWUi03UFhVYUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsaD2sdJjqr8VY4Myzj7WnJ26XZPyM2OjXGBIV6ZLIiYMP1yTYFtDTkn7iSr4 27WvW8PCJX48Rsvg9zRPkDRYBBfgL1wVCDpoJEkGhkOIbdeqncA8N3rZtBb8S6rF 6KbIes6FoUZLKMo7oVNRE6PdxkFPam1YofFdG7JU1hAhfIRfTE4WqRxYyD6bB8ZS ventRmmyf1JPO63JlwmBEsKJDrBXUxJGBYKlsF20LPrkq4xwZKf6mJk+Uh8QYVNC CNAj20nF5/D/Ng6LdBguA0etJGU8hGdcXPKkw+bvJAmXBxeJ3dvfI7c2DYeI0xsR nggbNKNps/FVRAo2iyedPL36BQ== -----END CERTIFICATE-----Generated at Sat Jun 8 01:21:44 2024 by rpki-client on console-ams.rpki-client.org