$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft File: oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft (raw, json) Hash identifier: rG77HfQnQvIpqk0cpgFLFKswczyB6Pz2C2/Mg1KVqk4= Subject key identifier: EC:8C:18:10:7F:FB:4A:61:65:6D:4A:EC:DB:2B:BC:90:D5:1F:42:7B Authority key identifier: A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58 Certificate issuer: /CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158 Certificate serial: 1106 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft Manifest number: 10FD Signing time: Fri 31 May 2024 15:46:12 +0000 Manifest this update: Fri 31 May 2024 15:46:12 +0000 Manifest next update: Sun 02 Jun 2024 15:46:12 +0000 Files and hashes: 1: llSVsBdLtltxdZ84YixhyW0GcXA.roa (hash: TxLeug+2x9qurrOpwFbk9E211o5hSiYiTPiFqw6gclE=) 2: oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl (hash: 3EKA0CPzJa+mLB/gnWEIsVyYVySu7Mt29NIMqPZ3xzk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 15:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4358 (0x1106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158 Validity Not Before: May 31 15:46:12 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EC8C18107FFB4A61656D4AECDB2BBC90D51F427B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:e8:95:e6:7b:44:fb:80:37:b4:eb:cd:8c: a8:2e:cf:1f:c4:2d:b4:e9:08:58:7f:c7:b2:33:e7: 24:ff:70:01:26:64:f0:ca:02:7e:f9:0e:78:5e:e1: 31:f3:0f:c2:f3:50:a6:b8:c6:df:1f:35:60:6a:5e: 36:12:38:3e:0b:7b:02:10:53:c8:85:dc:18:b4:be: 53:13:00:75:a6:b8:b2:6b:85:54:cd:a1:b3:bb:97: b5:72:7b:45:d5:e8:3b:15:bc:5e:c3:32:87:0c:c0: 46:f7:a7:9c:74:47:5e:c6:33:c0:69:fc:1a:8d:c0: 06:02:09:c0:8b:4a:2b:f3:76:19:fa:23:93:f6:56: 00:28:5b:e5:a3:5b:d2:2a:1e:6e:96:98:9f:aa:f3: 10:d8:00:ae:c2:6a:f2:9a:d6:a6:f8:a1:04:98:f4: ad:a5:e3:5b:00:12:21:51:40:c9:47:12:97:da:4c: bf:78:44:cb:73:2d:ad:40:7d:44:74:0d:52:13:73: b1:00:cb:0e:f5:0f:b1:57:2c:09:10:01:3e:b5:ef: 63:f6:54:07:a3:aa:30:7a:ca:e6:19:fa:55:a0:58: e9:da:9b:51:9f:3d:e0:82:c4:46:d6:67:1d:3f:dd: 85:c4:b4:43:30:6f:b0:95:80:e7:99:bb:45:89:af: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8C:18:10:7F:FB:4A:61:65:6D:4A:EC:DB:2B:BC:90:D5:1F:42:7B X509v3 Authority Key Identifier: keyid:A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:1f:7c:c8:c7:fb:a1:12:54:fe:68:69:b3:ce:f4:c8:0b:ca: ba:d8:ad:bc:0c:a9:33:49:86:0b:b7:09:c6:be:ab:98:37:f1: c9:c5:bd:c3:38:06:8d:31:b7:0b:c2:4c:f5:a0:8b:45:77:3a: 7d:c2:61:d5:4f:9b:e2:07:88:8b:b8:50:02:f7:5a:a7:81:dd: 41:d1:2f:30:65:8c:7e:97:9d:51:69:fb:13:1a:84:e3:37:d4: bb:35:b3:1a:0b:7a:9a:48:4c:6c:1d:0d:c1:13:d9:e0:c9:f9: d2:16:16:23:90:00:44:94:18:32:d2:71:f7:44:5e:54:89:55: 02:79:90:e4:88:cf:2d:3f:a3:3b:73:c1:27:88:13:78:37:3b: bf:f9:16:be:c5:65:27:dc:cd:be:4b:8e:3e:3b:e8:8c:a4:45: 76:06:96:65:57:31:28:3f:c5:7e:77:ac:5e:8f:04:ea:cc:8f: 40:85:e0:da:76:d0:71:db:57:e0:98:b5:87:64:c3:a2:88:40: 9b:6d:53:ba:8a:a3:9b:6c:51:8f:1f:e3:92:2a:c2:0c:2f:c2: 44:93:98:23:a8:d1:26:71:1a:a8:22:ce:92:b4:fa:47:98:dc: 93:d4:5a:88:ac:c5:39:e1:68:8c:7a:34:19:77:70:b1:aa:f0: b1:38:60:e6 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICEQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA1 RTY2Q0ZBNkY4QzBEQUFCRkIxQUY2RkEzMjE4NDI2MDQ0RjE1ODAeFw0yNDA1MzEx NTQ2MTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVDOEMxODEwN0ZGQjRB NjE2NTZENEFFQ0RCMkJCQzkwRDUxRjQyN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuC+iV5ntE+4A3tOvNjKguzx/ELbTpCFh/x7Iz5yT/cAEmZPDK An75Dnhe4THzD8LzUKa4xt8fNWBqXjYSOD4LewIQU8iF3Bi0vlMTAHWmuLJrhVTN obO7l7Vye0XV6DsVvF7DMocMwEb3p5x0R17GM8Bp/BqNwAYCCcCLSivzdhn6I5P2 VgAoW+WjW9IqHm6WmJ+q8xDYAK7CavKa1qb4oQSY9K2l41sAEiFRQMlHEpfaTL94 RMtzLa1AfUR0DVITc7EAyw71D7FXLAkQAT6172P2VAejqjB6yuYZ+lWgWOnam1Gf PeCCxEbWZx0/3YXEtEMwb7CVgOeZu0WJrw0vAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQU7IwYEH/7SmFlbUrs2yu8kNUfQnswHwYDVR0jBBgwFoAUoF5mz6b4wNqr+xr2 +jIYQmBE8VgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRX L29GNW16NmI0d05xci14cjItaklZUW1CRThWZy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0Evb0Y1bXo2YjR3TnFyLXhyMi1qSVlRbUJFOFZnLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRXL29GNW16NmI0d05xci14cjIt aklZUW1CRThWZy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2 H3zIx/uhElT+aGmzzvTIC8q62K28DKkzSYYLtwnGvquYN/HJxb3DOAaNMbcLwkz1 oItFdzp9wmHVT5viB4iLuFAC91qngd1B0S8wZYx+l51RafsTGoTjN9S7NbMaC3qa SExsHQ3BE9ngyfnSFhYjkABElBgy0nH3RF5UiVUCeZDkiM8tP6M7c8EniBN4Nzu/ +Ra+xWUn3M2+S44+O+iMpEV2BpZlVzEoP8V+d6xejwTqzI9AheDadtBx21fgmLWH ZMOiiECbbVO6iqObbFGPH+OSKsIML8JEk5gjqNEmcRqoIs6StPpHmNyT1FqIrMU5 4WiMejQZd3CxqvCxOGDm -----END CERTIFICATE-----Generated at Sat Jun 1 15:05:00 2024 by rpki-client on console-fra.rpki-client.org