Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
File: tDIP1437ak0ckjIveUlmuFJd_dI.mft (raw, json)
Hash identifier: cCfOTwjp5AZ1BBk1eys9Xwk9TJh0vxNWHTa/bJnaMtE=
Subject key identifier: 1F:A6:EC:AF:83:C3:9B:5F:FD:E3:AC:1D:AF:FC:A2:78:0F:9A:71:E9
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 5A1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
Manifest number: 59E4
Signing time: Mon 14 Apr 2025 21:08:31 +0000
Manifest this update: Mon 14 Apr 2025 21:08:31 +0000
Manifest next update: Wed 16 Apr 2025 21:08:31 +0000
Files and hashes: 1: 2h7bncWm1cFt8pw6plWLUnB4bTg.roa (hash: wC0iN0hosSSZAy2Ya0emp85y9RM8TFI6z2N0yPnfnNs=)
2: GC-rmuBJ36xvuPkBYqX55dC5aE8.roa (hash: OJc/vvB62sq1uw6fdLiSJBm2KZ+zo2o6NxQzKGME4KE=)
3: Ti9TxZj2Gr3xeSjreUoELY0B3hQ.roa (hash: Y3EIJH2GE/RyONsSkFt2oYbJmVKdVhXo2Lgil3yI+a0=)
4: ZRmciX8MRpTAtYbzSDPfG5ZjDn4.roa (hash: euyl50LrFdkpKXMRboByPMD/9TwxBomVzyRrxffkQMg=)
5: edZxaDnVSWbL208ynWNQnTIetnI.roa (hash: MP4DYl2YQ4GbtPyCpTgJNKys7VML1+rSUhs3+VEP5pY=)
6: lAl48-BQSuSkd7yjNqf77v-ww74.roa (hash: 6hNc1C+QfzBiddGSkftTqfA3tBu6Bp+kwIzTXmuETow=)
7: mFyCZzy6nYIiHa_znGrUFzWBYT8.roa (hash: r9xXDB1vheASiPuc/DToxgENtfPTdXv5DEVHjhuFSNY=)
8: tDIP1437ak0ckjIveUlmuFJd_dI.crl (hash: V3DJe0WsKqzGOcustGQRyEFCcKY6OeR2ofq1JCn4bgI=)
9: zfg162eOICKoMqsJFTDVcKJ7Gn4.roa (hash: 26fZaQZUXTWim23fSCffFkRscfr4JQRdUmnCKDbrsRE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 01:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23071 (0x5a1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Apr 14 21:08:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1FA6ECAF83C39B5FFDE3AC1DAFFCA2780F9A71E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:13:73:54:80:9b:39:15:8d:ff:0d:64:6a:
90:d9:41:d9:ad:16:31:95:96:25:c1:98:68:d7:a8:
b5:50:a9:f6:8a:81:4f:87:18:dc:40:89:24:8c:09:
cb:ab:94:b2:e0:a6:73:1c:3a:e4:e9:bc:45:69:95:
8d:61:db:a0:64:cc:68:b2:f5:d6:29:cd:96:51:fa:
8d:f9:64:84:f8:ce:06:d5:42:79:4e:f1:50:f4:91:
9d:69:6e:68:9b:46:08:4b:fd:46:73:c8:79:31:2b:
41:7a:fd:d7:c4:b5:e3:93:b2:6a:75:0f:16:76:ef:
7e:26:51:96:60:6d:48:c3:49:5c:17:68:a6:1a:b9:
f0:e3:7e:ac:c3:fd:7b:64:4d:ff:0d:f0:52:cb:fe:
bc:b7:9d:73:40:ac:32:ff:4b:64:b5:db:f7:f9:21:
25:30:6e:3b:61:23:0c:1c:5b:f1:f5:f2:86:ff:84:
59:30:21:6a:11:ac:17:fb:f7:d5:1b:6c:76:94:81:
d9:72:1d:b4:8a:a6:48:75:95:72:66:f1:25:41:c0:
75:82:45:8d:b6:ef:f7:07:a7:fd:e3:a6:e1:63:19:
29:d1:30:69:57:49:e3:36:07:c8:5e:ac:b0:12:3a:
64:35:fc:33:02:9f:c1:29:d7:c5:20:4e:eb:82:a2:
66:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:EC:AF:83:C3:9B:5F:FD:E3:AC:1D:AF:FC:A2:78:0F:9A:71:E9
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:51:cb:28:ed:93:11:36:83:4c:4b:4b:6f:ca:48:ad:01:d6:
9b:38:20:10:48:2f:c4:b3:4d:c8:94:83:ac:8a:17:bd:e5:b0:
9e:8e:37:81:b1:8f:6f:8c:89:4d:6c:39:7d:46:0f:9b:91:5d:
2c:4a:fb:15:90:69:c4:cd:40:6d:77:87:2f:e7:cb:15:14:4e:
92:4a:66:74:e4:5e:57:53:e2:2f:a3:cd:88:8d:88:35:99:e3:
00:fe:71:96:a8:de:bc:27:69:56:a8:0c:6c:f1:71:a4:92:b6:
99:f5:10:99:99:72:56:0d:0a:f1:70:08:7a:67:1c:e1:9f:2e:
5b:1e:69:6a:cb:56:12:0b:27:83:77:41:a3:ea:5b:b2:81:96:
1d:96:e4:28:88:f8:b1:f5:34:b1:52:45:05:e0:4f:93:cc:79:
c1:e5:9c:5f:81:44:9a:76:d3:39:5a:39:8b:42:cb:51:de:40:
73:ad:ab:6e:ae:a4:37:9c:9a:06:7a:df:92:d0:15:b3:c0:5a:
2c:2b:71:94:9d:c6:4e:30:38:e5:fd:04:f1:77:fb:ea:7d:81:
fd:39:b0:59:77:28:e3:70:66:d1:cd:10:13:ed:6f:8d:8c:38:
04:c6:ae:49:49:94:82:88:5b:64:2f:59:42:d2:af:59:16:c4:
9a:cc:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:01:24 2025 by rpki-client