$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft File: Nf-QMGtHp94DB_DjNbTcfyfepPs.mft (raw, json) Hash identifier: +a45jEIt9T5xcEqf0UUl8gB1OF1QK+B242FGZNTwblk= Subject key identifier: E4:55:32:86:16:49:BC:A1:C6:7E:75:45:CE:B5:F8:94:BD:FF:D0:91 Authority key identifier: 35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB Certificate issuer: /CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB Certificate serial: 7B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft Manifest number: 72 Signing time: Thu 06 Jun 2024 21:04:34 +0000 Manifest this update: Thu 06 Jun 2024 21:04:34 +0000 Manifest next update: Sat 08 Jun 2024 21:04:34 +0000 Files and hashes: 1: 5sCA5zltGy9Q4IIEs8hLptoF_yA.roa (hash: c3QzH4gnHLQBq/PgjRbMyWRWzyK/xH7oNHRjPLxXHJ4=) 2: 74wj6yoZ1QGLVKM9iwkhP0XPeBI.roa (hash: KHKb0AqO7ONwNHBUjYFTG97wvHzm+i5FVL/aOKo1Gjg=) 3: I32tMCKLTWsBeTdnspR92dT3Gd8.roa (hash: nM7qEhat2tNXzV8D/3nhyhQPr/E36osHhb3v1ZtJsgY=) 4: Nf-QMGtHp94DB_DjNbTcfyfepPs.crl (hash: XhjcYfziDFwSGNj5V9amGDQ0thh9pYzmpeKBDeUouak=) 5: SAasLbgGJkUkYWsyYQ7gMX_ko7s.roa (hash: UllKP7AGv2kidev5LJWeF4l5hXqZHFOwAeVJg7U/xGI=) 6: YckWY8X5UP9nXepmNmn4MZXZNoo.roa (hash: bMPgwav1mb7z2xYeU6eu2QayLmCmKQCfMwqqGK/WlZg=) 7: jt7kyPGRnAFpm3e2Q7T8AK3oFcA.roa (hash: INyUsuftpjkWaYgboBl4+WFIhFPl7ep1N6P/BiWH3rk=) 8: mIAfrXOdUkXxt0le1Du3prhbsA0.roa (hash: W6AqZsvx6eN05A75PDrAkBO3yLJ+7zObeE3F6ZiJ+co=) 9: q3KXYwlZOTAo3O-cAwSI3FZ1mkc.roa (hash: afDjRnyRqA3TpZuZheEQS7kjLJ2MpZPoqxw+KcgqNek=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB Validity Not Before: Jun 6 21:04:34 2024 GMT Not After : Dec 25 15:30:21 2024 GMT Subject: CN=E45532861649BCA1C67E7545CEB5F894BDFFD091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9a:e2:59:25:3a:65:d3:1b:58:67:35:c6:95: 6d:d9:b4:cf:c6:2d:2f:a9:6f:b5:c0:e1:57:79:27: dc:7f:bf:58:a4:09:08:98:40:53:e2:93:cb:e8:a7: a8:27:c3:a2:99:fc:94:69:37:5d:bb:21:29:27:db: 10:55:98:76:0e:de:ac:05:5b:12:02:61:1b:cb:7a: 3f:9c:e7:6d:24:03:01:56:56:ac:04:e5:f9:07:0f: ce:fb:c2:e5:e2:12:ba:e4:37:24:3c:f3:44:b8:94: a1:9d:c1:dd:5e:fb:93:93:60:3a:96:f0:1a:52:0e: 02:f3:6e:02:41:97:1f:e6:75:89:fa:81:91:fa:15: 2c:f3:6d:39:ff:17:d5:7d:4f:60:54:2d:92:9e:d3: 5f:a6:e3:a9:73:9d:7f:33:ae:1a:09:4f:8d:3b:9f: 96:bb:bc:b3:ff:ba:42:09:27:cf:ff:85:56:19:e3: 31:5b:99:6a:ca:61:0a:2e:64:94:9d:8b:a5:fa:58: 50:b5:46:51:d2:e7:01:3e:1b:04:fc:4b:37:ff:3e: 16:d3:02:e5:e6:24:e7:b1:47:b2:d1:0d:ec:50:ff: 13:d7:66:76:a9:fb:5b:a1:00:cc:0d:16:5a:dc:77: d2:e6:d3:a3:1e:1a:8e:7a:b3:f3:69:24:fb:e0:0c: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:55:32:86:16:49:BC:A1:C6:7E:75:45:CE:B5:F8:94:BD:FF:D0:91 X509v3 Authority Key Identifier: keyid:35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:63:ee:25:6b:1b:d9:fa:5f:4b:44:cc:cd:59:a5:58:f1:c8: 6a:d1:6e:cf:be:ff:14:4d:93:42:4c:9e:cb:9c:d6:ae:c3:3b: 23:21:5d:3a:29:37:ac:cd:74:a8:96:ef:18:2d:60:25:41:ac: de:9b:39:95:78:1b:5d:37:bb:4b:33:c9:4c:f9:ef:26:95:88: 92:1a:d2:b0:d0:99:d6:63:cc:7f:63:79:92:69:e9:2f:02:ba: e3:bd:a1:ca:2f:f2:56:25:0d:1d:1d:ae:5e:b4:a7:be:b7:58: 1e:52:b2:f2:c7:4e:e8:b8:ad:8a:d8:bb:4f:1c:cd:3d:f7:1f: 83:81:e7:1f:4a:4c:18:71:3e:cb:a5:c0:f8:5a:90:39:04:cc: 0c:63:6d:cc:e8:73:e9:3a:3f:d2:96:14:2f:b6:6d:5e:fe:de: cc:7e:f4:a0:19:2f:e8:3d:93:3b:2b:5c:f5:c8:1c:2c:95:b5: 64:e9:8a:1c:48:71:eb:30:92:73:f7:6c:39:97:45:36:a3:35: ba:6c:d8:60:ba:78:26:1c:a8:df:6f:08:f3:6e:74:c7:d4:28: 8f:9f:33:18:29:e6:a5:6c:74:fe:ce:93:e7:7e:70:e6:c8:70: a8:69:74:9a:66:25:fb:20:05:96:83:2f:d1:38:96:22:aa:93: 86:d2:31:77 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNUZG OTAzMDZCNDdBN0RFMDMwN0YwRTMzNUI0REM3RjI3REVBNEZCMB4XDTI0MDYwNjIx MDQzNFoXDTI0MTIyNTE1MzAyMVowMzExMC8GA1UEAxMoRTQ1NTMyODYxNjQ5QkNB MUM2N0U3NTQ1Q0VCNUY4OTRCREZGRDA5MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANua4lklOmXTG1hnNcaVbdm0z8YtL6lvtcDhV3kn3H+/WKQJCJhA U+KTy+inqCfDopn8lGk3XbshKSfbEFWYdg7erAVbEgJhG8t6P5znbSQDAVZWrATl +QcPzvvC5eISuuQ3JDzzRLiUoZ3B3V77k5NgOpbwGlIOAvNuAkGXH+Z1ifqBkfoV LPNtOf8X1X1PYFQtkp7TX6bjqXOdfzOuGglPjTuflru8s/+6Qgknz/+FVhnjMVuZ asphCi5klJ2LpfpYULVGUdLnAT4bBPxLN/8+FtMC5eYk57FHstEN7FD/E9dmdqn7 W6EAzA0WWtx30ubTox4ajnqz82kk++AMpB8CAwEAAaOCAg8wggILMB0GA1UdDgQW BBTkVTKGFkm8ocZ+dUXOtfiUvf/QkTAfBgNVHSMEGDAWgBQ1/5Awa0en3gMH8OM1 tNx/J96k+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSElKSUNP TFREL05mLVFNR3RIcDk0REJfRGpOYlRjZnlmZXBQcy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTmYtUU1HdEhwOTREQl9Eak5iVGNmeWZlcFBzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJSklDT0xURC9OZi1RTUd0SHA5 NERCX0RqTmJUY2Z5ZmVwUHMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAWWPuJWsb2fpfS0TMzVmlWPHIatFuz77/FE2TQkyey5zWrsM7IyFdOik3 rM10qJbvGC1gJUGs3ps5lXgbXTe7SzPJTPnvJpWIkhrSsNCZ1mPMf2N5kmnpLwK6 472hyi/yViUNHR2uXrSnvrdYHlKy8sdO6Lititi7TxzNPfcfg4HnH0pMGHE+y6XA +FqQOQTMDGNtzOhz6To/0pYUL7ZtXv7ezH70oBkv6D2TOytc9cgcLJW1ZOmKHEhx 6zCSc/dsOZdFNqM1umzYYLp4Jhyo328I8250x9Qoj58zGCnmpWx0/s6T535w5shw qGl0mmYl+yAFloMv0TiWIqqThtIxdw== -----END CERTIFICATE-----Generated at Thu Jun 6 21:56:09 2024 by rpki-client on console-fra.rpki-client.org