$ rpki-client -vvf dev.tw/rpki/AS945/13/AA420917C3851913FC93E34898A294B9CA2505F2.mft File: AA420917C3851913FC93E34898A294B9CA2505F2.mft (raw, json) Hash identifier: rozn5JCaRJ3iwjYtJ7/ZEZnPeAAw4BDCJzVmzZmAkFM= Subject key identifier: FF:9A:62:42:51:E6:09:95:C2:74:E0:34:AC:6C:D5:45:02:CF:C7:52 Authority key identifier: AA:42:09:17:C3:85:19:13:FC:93:E3:48:98:A2:94:B9:CA:25:05:F2 Certificate issuer: /CN=AA420917C3851913FC93E34898A294B9CA2505F2 Certificate serial: 330865AF3D149A0861A7C281A414B909F7FA6D55 Authority info access: rsync://dev.tw/rpki/August/14/AA420917C3851913FC93E34898A294B9CA2505F2.cer Subject info access: rsync://dev.tw/rpki/AS945/13/AA420917C3851913FC93E34898A294B9CA2505F2.mft Manifest number: 22 Signing time: Wed 23 Oct 2024 02:42:39 +0000 Manifest this update: Wed 23 Oct 2024 02:37:39 +0000 Manifest next update: Thu 24 Oct 2024 03:39:39 +0000 Files and hashes: 1: AA420917C3851913FC93E34898A294B9CA2505F2.crl (hash: oScEF9/K72lSyh2cZ1w3yySrdVdYKdEQQADfhiCJiQk=) Validation: OK Signature path: rsync://dev.tw/rpki/AS945/13/AA420917C3851913FC93E34898A294B9CA2505F2.crl rsync://dev.tw/rpki/AS945/13/AA420917C3851913FC93E34898A294B9CA2505F2.mft rsync://dev.tw/rpki/August/14/AA420917C3851913FC93E34898A294B9CA2505F2.cer rsync://dev.tw/rpki/August/14/EE962658B1226680140B4EA86F7D68CF498158D9.crl rsync://dev.tw/rpki/August/14/EE962658B1226680140B4EA86F7D68CF498158D9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/EE962658B1226680140B4EA86F7D68CF498158D9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Oct 2024 12:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:08:65:af:3d:14:9a:08:61:a7:c2:81:a4:14:b9:09:f7:fa:6d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA420917C3851913FC93E34898A294B9CA2505F2 Validity Not Before: Oct 23 02:37:39 2024 GMT Not After : Oct 24 03:39:39 2024 GMT Subject: CN=FF9A624251E60995C274E034AC6CD54502CFC752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:af:d0:6a:ec:1c:a9:d0:35:63:d8:47:11:a4: 5c:0e:e7:6f:e2:b1:99:2f:9b:6c:8f:0b:9a:1c:43: ab:62:c9:54:46:03:d0:6b:1c:d5:aa:93:30:12:4c: c6:16:b0:4b:4f:bf:30:e3:5d:44:54:78:dd:4f:bf: df:3d:19:c9:98:5e:25:f3:5c:a4:d4:d5:fa:45:b8: fb:44:28:a4:49:7c:22:5b:98:ed:6c:f5:c1:f8:bb: ee:e3:dc:8f:3b:0e:3c:51:e2:45:25:4b:a6:f0:2d: 55:9d:8d:50:5c:fb:8e:39:e3:b8:40:e1:5e:70:ea: d3:77:a6:d0:33:ac:76:42:3a:8e:ee:9b:87:a3:4e: 33:ef:d5:ec:2f:54:52:f6:77:a1:60:9f:53:22:1f: 4a:63:a1:36:c8:f5:68:47:20:33:bd:1d:a2:aa:b7: d1:66:cb:e2:92:54:f1:96:8a:c5:ab:bc:71:1a:70: 2c:48:b4:63:94:0b:18:2a:fb:ea:ec:47:fe:82:e7: 07:11:23:52:95:6f:ca:8d:4d:3a:51:e4:f5:8f:4e: 8c:ae:71:5c:c7:ea:3e:d4:b9:d6:89:0f:b9:65:db: 9c:f8:0f:36:bc:63:d9:52:75:46:7c:54:a1:0f:b8: 5a:f2:64:3e:46:0c:61:d5:be:19:99:83:c3:60:f3: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9A:62:42:51:E6:09:95:C2:74:E0:34:AC:6C:D5:45:02:CF:C7:52 X509v3 Authority Key Identifier: keyid:AA:42:09:17:C3:85:19:13:FC:93:E3:48:98:A2:94:B9:CA:25:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://dev.tw/rpki/AS945/13/AA420917C3851913FC93E34898A294B9CA2505F2.crl Authority Information Access: CA Issuers - URI:rsync://dev.tw/rpki/August/14/AA420917C3851913FC93E34898A294B9CA2505F2.cer Subject Information Access: Signed Object - URI:rsync://dev.tw/rpki/AS945/13/AA420917C3851913FC93E34898A294B9CA2505F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fe:6e:34:5b:4a:66:7c:b4:b3:48:20:c0:11:42:72:89:38: 3c:82:15:14:e1:1c:89:3d:0a:86:8e:8f:bf:05:cc:1a:7e:c1: 2d:1a:f4:24:7b:91:34:20:1e:eb:96:eb:e1:35:0b:ea:2e:8e: 93:f2:eb:8c:02:77:13:76:44:d6:07:a8:60:c6:2f:e8:ec:be: b1:49:17:ff:a5:dc:5b:33:d8:9a:a5:4b:6c:1b:bb:73:90:f4: 8f:86:ba:90:3e:16:05:db:3d:3a:69:b1:c5:7e:d4:d2:81:e6: c5:20:b5:14:8b:46:e3:52:aa:96:f6:a7:54:3a:9c:ac:03:64: 82:f1:02:07:d1:5b:3e:4b:58:59:60:9a:b8:9e:a2:f4:d4:46: 87:f5:19:9b:60:47:97:e6:13:19:4c:5f:8b:4a:c7:ff:a0:b8: e4:e9:6a:d4:32:f7:66:f4:af:c5:f7:83:c2:1c:32:1f:6c:8e: f6:0c:23:2f:20:c8:17:2f:a4:a4:02:a4:47:37:ce:38:40:33: e8:3e:98:5a:a1:14:f8:b2:2b:e9:4c:01:51:27:47:3f:d2:cb: 8b:47:7e:75:61:44:f6:e4:43:17:9a:93:39:6d:21:9e:dc:4f: 70:25:e3:f0:ea:51:db:9e:89:59:11:1a:da:f4:c9:d0:18:e1: 19:ba:1b:d7 -----BEGIN CERTIFICATE----- MIIEyTCCA7GgAwIBAgIUMwhlrz0Umghhp8KBpBS5Cff6bVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0MjA5MTdDMzg1MTkxM0ZDOTNFMzQ4OThBMjk0QjlD QTI1MDVGMjAeFw0yNDEwMjMwMjM3MzlaFw0yNDEwMjQwMzM5MzlaMDMxMTAvBgNV BAMTKEZGOUE2MjQyNTFFNjA5OTVDMjc0RTAzNEFDNkNENTQ1MDJDRkM3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvr9Bq7Byp0DVj2EcRpFwO52/i sZkvm2yPC5ocQ6tiyVRGA9BrHNWqkzASTMYWsEtPvzDjXURUeN1Pv989GcmYXiXz XKTU1fpFuPtEKKRJfCJbmO1s9cH4u+7j3I87DjxR4kUlS6bwLVWdjVBc+44547hA 4V5w6tN3ptAzrHZCOo7um4ejTjPv1ewvVFL2d6Fgn1MiH0pjoTbI9WhHIDO9HaKq t9Fmy+KSVPGWisWrvHEacCxItGOUCxgq++rsR/6C5wcRI1KVb8qNTTpR5PWPToyu cVzH6j7UudaJD7ll25z4Dza8Y9lSdUZ8VKEPuFryZD5GDGHVvhmZg8Ng8yH7AgMB AAGjggHTMIIBzzAdBgNVHQ4EFgQU/5piQlHmCZXCdOA0rGzVRQLPx1IwHwYDVR0j BBgwFoAUqkIJF8OFGRP8k+NImKKUucolBfIwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud HwRTMFEwT6BNoEuGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQVM5NDUvMTMvQUE0MjA5 MTdDMzg1MTkxM0ZDOTNFMzQ4OThBMjk0QjlDQTI1MDVGMi5jcmwwZgYIKwYBBQUH AQEEWjBYMFYGCCsGAQUFBzAChkpyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC8x NC9BQTQyMDkxN0MzODUxOTEzRkM5M0UzNDg5OEEyOTRCOUNBMjUwNUYyLmNlcjBl BggrBgEFBQcBCwRZMFcwVQYIKwYBBQUHMAuGSXJzeW5jOi8vZGV2LnR3L3Jwa2kv QVM5NDUvMTMvQUE0MjA5MTdDMzg1MTkxM0ZDOTNFMzQ4OThBMjk0QjlDQTI1MDVG Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAGv+bjRbSmZ8tLNIIMARQnKJODyCFRThHIk9CoaOj78FzBp+ wS0a9CR7kTQgHuuW6+E1C+oujpPy64wCdxN2RNYHqGDGL+jsvrFJF/+l3Fsz2Jql S2wbu3OQ9I+GupA+FgXbPTppscV+1NKB5sUgtRSLRuNSqpb2p1Q6nKwDZILxAgfR Wz5LWFlgmrieovTURof1GZtgR5fmExlMX4tKx/+guOTpatQy92b0r8X3g8IcMh9s jvYMIy8gyBcvpKQCpEc3zjhAM+g+mFqhFPiyK+lMAVEnRz/Sy4tHfnVhRPbkQxea kzltIZ7cT3Al4/DqUdueiVkRGtr0ydAY4Rm6G9c= -----END CERTIFICATE-----Generated at Wed Oct 23 04:38:58 2024 by rpki-client on console-ams.rpki-client.org