$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft File: rf5uVtr4SS7H3oizqQazE5tVuGQ.mft (raw, json) Hash identifier: sCCLY7UOdIkHLzDebu1g3ysI7yGaDZMdjiGJ+OS4J6s= Subject key identifier: 88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9 Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 0696 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft Manifest number: 065D Signing time: Fri 31 May 2024 15:46:02 +0000 Manifest this update: Fri 31 May 2024 15:46:02 +0000 Manifest next update: Sun 02 Jun 2024 15:46:02 +0000 Files and hashes: 1: 7ATiKiaFdhJT3khTE3XQ4dcoC_g.roa (hash: pqpbYgvhIn7FirQzpxraBvfCh+rd/iVurU7xHkCezjw=) 2: B0_N3HS_QcmEcgXJyjvh8WnPtjg.roa (hash: miPpWJGwgSKk67C73WCHEONHN7hKcIpE/PZWX4e/dH0=) 3: BI_udLwF1PFWHg-FTbNfZrzv5Qc.roa (hash: QwoBUJ9cCOHNzUogaeibZH9rBVK6JrGGYTXk5AIdw3E=) 4: DNA7-SG3rT7Z9tSJQVMSwltfWcg.roa (hash: lWjuRQIxzQBd3r9iREV+d2m00QdbX/xtmpSOn+Btpss=) 5: Fbrz8O-TJCjSxgvZ_3JTQlZCV2s.roa (hash: syb8YoCtR8gve17iVIb/uEqoIZCZUOiBkFO/zKiL4Fg=) 6: H-ts5DlpTMBCmRmtBfQNyV9tnjc.roa (hash: M+TXDQRI9dmANttwkI0OA93T5PFyarfGIbdDtWtzx+I=) 7: Ijvd7AeWeGZw5-odmfg9Wp-FbOI.roa (hash: nLg/U31dkoWAEFIBb6KyXs3/ETv161AcmIdrcNo84oE=) 8: KllWuaW2zhBbCCe4es8iG6aDNuk.roa (hash: IVH1rngb/0bqQc/O8/K9Yr3sP/RoqWq0kXniFEPYRLk=) 9: LAZYb7CyqHPq0qy0zPT4EM2CiAg.roa (hash: flMX65FoQYFJo8WDXrTi9GxUyYM2rUTH0B5bN4Rkfz0=) 10: Sire68ZMSuz49UtU4ex0SbO81Bg.roa (hash: bMLQI7MprxmFO63dUkUMHb/fenN09MTjrpoNFxK1+hw=) 11: fqdCH72mqJw0Kzba8vM4ZPV--3I.roa (hash: mxxID5zs0bsvxfcE8YhvWY3wqmUBpEgfQvjSg1teW1U=) 12: rf5uVtr4SS7H3oizqQazE5tVuGQ.crl (hash: /9rygupJ5xQp2TNpV4iE7pGgS473Tz9d3cj9wHKagiQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 15:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: May 31 15:46:02 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8854C401A81FA535EF84FCFF6D06C5F99F64EEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:1a:e9:4e:9f:e7:ed:30:87:19:fe:94:0e: 71:c2:dd:a0:b0:a2:52:3e:71:b9:2b:4a:0d:fc:88: 6e:aa:92:1b:5e:d7:5e:10:57:37:85:9d:f5:0c:ef: 14:d1:25:42:70:8e:ee:6a:87:f8:20:85:4f:58:31: 31:e4:87:18:67:09:2b:ae:8e:f0:69:d3:7d:0a:5b: bd:92:89:e2:40:f2:68:bf:c7:b7:bb:4b:18:7e:24: 7a:24:19:4f:80:95:56:c3:be:d3:e9:96:40:6f:46: 7b:61:09:87:c0:1d:5a:03:32:b7:a5:76:4a:6f:b4: f7:b8:52:01:63:6f:2c:e3:67:a8:7c:13:1f:37:66: de:c5:9d:9d:89:d8:02:04:a0:fd:e2:19:cf:c9:dd: d5:5b:84:b0:c9:4f:b2:59:25:e1:36:4b:0b:f8:16: 2f:55:9d:6e:c2:74:a8:6b:f5:95:98:f2:d1:11:0d: d5:9a:0a:42:fd:fa:3c:b2:fd:7f:a9:28:86:6a:4d: 35:29:c2:c1:b0:cf:70:b8:e3:53:02:c7:72:23:02: 0c:16:3a:9f:a1:cd:ea:4b:22:d8:b3:44:5b:1d:21: a6:55:ab:52:bf:97:5e:02:f3:75:8d:76:d2:bb:1b: 7f:67:0c:8e:e2:04:37:7a:06:98:80:4e:15:7d:4c: 61:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9 X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:fc:8c:54:84:2e:85:df:95:12:97:53:ca:7b:a9:36:62:fa: f1:0d:a6:c7:33:eb:8d:80:62:f8:db:b5:01:86:c2:6a:93:b8: f5:32:85:31:07:fc:0a:19:a9:5e:22:ea:82:44:d1:81:0d:5b: 2a:eb:63:d2:0b:23:c5:e0:a4:fc:41:33:61:ab:ab:b2:ef:be: 9d:43:16:c9:dc:fa:d0:26:8c:f0:6a:89:9d:7c:d0:59:29:3e: b1:d5:7a:5c:f4:9c:1c:93:6e:47:e0:7c:d3:d4:10:2b:09:89: 27:8c:18:45:f0:be:26:24:37:eb:4f:32:0f:2b:2e:c2:61:18: 4b:af:16:b1:76:f4:bd:8f:cd:92:db:59:df:57:73:b6:6b:8b: d2:1d:2c:94:8f:0c:e8:02:0d:f9:a7:54:c3:0a:ee:16:45:48: c5:66:30:d1:f4:b2:b8:f3:78:64:cf:45:5a:16:90:a3:9d:b0: b6:ea:8f:a0:b2:ab:3b:fe:ea:62:bf:f2:7e:66:64:5f:17:53: 65:94:b4:83:79:83:6b:e1:56:16:24:1c:d2:2e:9a:bc:e6:5d: f6:ac:64:fd:f1:6e:2b:42:72:6a:f4:3d:17:e6:cd:c8:85:36: 2e:85:d4:2d:55:29:bf:b1:66:25:76:d2:ee:4b:42:5f:e0:0e: 4a:3a:aa:0a -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNDA1MzEx NTQ2MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg4NTRDNDAxQTgxRkE1 MzVFRjg0RkNGRjZEMDZDNUY5OUY2NEVFRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr3xrpTp/n7TCHGf6UDnHC3aCwolI+cbkrSg38iG6qkhte114Q VzeFnfUM7xTRJUJwju5qh/gghU9YMTHkhxhnCSuujvBp030KW72SieJA8mi/x7e7 Sxh+JHokGU+AlVbDvtPplkBvRnthCYfAHVoDMreldkpvtPe4UgFjbyzjZ6h8Ex83 Zt7FnZ2J2AIEoP3iGc/J3dVbhLDJT7JZJeE2Swv4Fi9VnW7CdKhr9ZWY8tERDdWa CkL9+jyy/X+pKIZqTTUpwsGwz3C441MCx3IjAgwWOp+hzepLItizRFsdIaZVq1K/ l14C83WNdtK7G39nDI7iBDd6BpiAThV9TGHPAgMBAAGjggINMIICCTAdBgNVHQ4E FgQUiFTEAagfpTXvhPz/bQbF+Z9k7vkwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL3JmNXVWdHI0U1M3 SDNvaXpxUWF6RTV0VnVHUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAx/IxUhC6F35USl1PKe6k2YvrxDabHM+uNgGL427UBhsJqk7j1MoUxB/wK GaleIuqCRNGBDVsq62PSCyPF4KT8QTNhq6uy776dQxbJ3PrQJozwaomdfNBZKT6x 1Xpc9Jwck25H4HzT1BArCYknjBhF8L4mJDfrTzIPKy7CYRhLrxaxdvS9j82S21nf V3O2a4vSHSyUjwzoAg35p1TDCu4WRUjFZjDR9LK483hkz0VaFpCjnbC26o+gsqs7 /upiv/J+ZmRfF1NllLSDeYNr4VYWJBzSLpq85l32rGT98W4rQnJq9D0X5s3IhTYu hdQtVSm/sWYldtLuS0Jf4A5KOqoK -----END CERTIFICATE-----Generated at Sat Jun 1 15:05:00 2024 by rpki-client on console-fra.rpki-client.org