$ rpki-client -vvf rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft File: 95A38A1816A990804357FCAC49C09B0CA3A221E5.mft (raw, json) Hash identifier: d847OIzEsB+mTcKFgc1bEaM2ZgWaafC16c5jVxJF3TY= Subject key identifier: DF:4B:4E:79:26:1D:3A:BC:8B:AC:E9:DA:7E:F7:58:9B:EA:B0:52:C6 Authority key identifier: 95:A3:8A:18:16:A9:90:80:43:57:FC:AC:49:C0:9B:0C:A3:A2:21:E5 Certificate issuer: /CN=95A38A1816A990804357FCAC49C09B0CA3A221E5 Certificate serial: 0D5EE7C25529DF9CFCDA8D2A3086194437F6E910 Authority info access: rsync://dev.tw/rpki/AS945/1/95A38A1816A990804357FCAC49C09B0CA3A221E5.cer Subject info access: rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft Manifest number: 0190 Signing time: Fri 22 Nov 2024 07:56:16 +0000 Manifest this update: Fri 22 Nov 2024 07:51:16 +0000 Manifest next update: Sat 23 Nov 2024 10:47:16 +0000 Files and hashes: 1: 326131323a646434373a333032353a3a2f34382d3438203d3e20323135393933.roa (hash: SRNIFLyF9rgr2vNMs8WmXgoHH9zFtNi5/LN1J6pSj2s=) 2: 95A38A1816A990804357FCAC49C09B0CA3A221E5.crl (hash: I9gekI8ZQLdzslY/Eca0btqm+TTIGWXo5AVhvIM/sJw=) 3: 326131323a646434373a333030303a3a2f34302d3438203d3e20313939323033.roa (hash: ndY8u+f5ZeoU/wrnQe6KrCdnR015JiNd3AvxGKfZCv8=) 4: 326131323a646434373a333032363a3a2f34382d3438203d3e20323136313233.roa (hash: 53TgU1ECGMjBAXcrAQxaT4AgRhK2U19SQspOvCtzlL4=) 5: 326131323a646434373a333032353a3a2f34382d3438203d3e20313432303436.roa (hash: 2sJv+1JULybbDLom8ub71ZfP3GDzrCOP/58bomKD/GA=) Validation: OK Signature path: rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.crl rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft rsync://dev.tw/rpki/AS945/1/95A38A1816A990804357FCAC49C09B0CA3A221E5.cer rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:5e:e7:c2:55:29:df:9c:fc:da:8d:2a:30:86:19:44:37:f6:e9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95A38A1816A990804357FCAC49C09B0CA3A221E5 Validity Not Before: Nov 22 07:51:16 2024 GMT Not After : Nov 23 10:47:16 2024 GMT Subject: CN=DF4B4E79261D3ABC8BACE9DA7EF7589BEAB052C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:1e:83:57:70:59:6d:33:85:76:39:66:12:83: 3f:2b:cd:b5:ed:5a:bd:02:87:d0:af:fa:4d:ea:d9: ab:48:a2:85:5d:d8:d3:42:d1:e5:48:43:64:b0:49: 8a:26:40:ab:d8:1c:ca:c1:06:75:51:08:47:18:f9: d4:5a:49:c6:96:79:f8:52:d8:30:f8:5f:3b:c8:d0: 08:bd:3a:fe:50:cb:6d:3b:29:ae:11:c6:ea:86:95: ca:ca:bb:b1:8f:03:6d:ad:b7:5c:01:2b:98:5a:d9: e0:a3:3f:e9:1d:42:45:24:e0:79:72:3d:08:fb:0a: 59:26:ab:7a:e7:2e:7b:05:69:47:40:b9:fc:48:be: 74:2a:a3:45:91:59:37:03:05:fa:e1:00:be:84:66: 73:33:74:2f:3b:d1:8b:10:7e:54:55:51:3e:8d:20: c9:a4:1f:6d:5e:0b:a6:7c:2a:59:84:3c:59:e0:9c: 69:91:95:8c:73:53:d9:da:fb:bd:4f:26:20:27:bd: 74:5c:e2:c4:26:31:b9:41:80:b0:75:49:71:ab:d8: 9f:76:36:bd:a3:dc:f9:9f:65:1a:93:5d:ae:9d:4c: c9:83:1b:2d:39:2f:45:7c:15:a5:3e:82:e6:d9:13: 6d:a7:f7:56:d1:46:28:89:8c:e0:d5:bd:43:e3:31: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4B:4E:79:26:1D:3A:BC:8B:AC:E9:DA:7E:F7:58:9B:EA:B0:52:C6 X509v3 Authority Key Identifier: keyid:95:A3:8A:18:16:A9:90:80:43:57:FC:AC:49:C0:9B:0C:A3:A2:21:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.crl Authority Information Access: CA Issuers - URI:rsync://dev.tw/rpki/AS945/1/95A38A1816A990804357FCAC49C09B0CA3A221E5.cer Subject Information Access: Signed Object - URI:rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:11:0e:73:19:f5:c2:91:8f:04:a9:84:79:fc:df:30:b5:7d: 0a:ef:3e:6d:94:67:ee:97:c0:75:6f:5b:70:50:f3:b0:76:8e: c2:9c:93:38:cc:61:59:dc:3f:74:59:c4:c4:db:31:78:02:50: e2:82:45:38:22:7d:e9:08:b1:20:e8:7b:5f:c8:cc:0b:0b:b6: 2f:8e:38:ec:fd:f7:ee:97:4a:57:f0:68:be:bc:53:6d:e5:b8: e2:ea:86:6c:bd:72:a1:82:b3:37:aa:b4:9d:97:9a:36:ed:69: be:f6:97:98:a8:8d:aa:8e:8b:33:8c:39:73:ee:5c:df:7b:10: 0e:74:6f:ca:53:9b:3a:f0:aa:23:68:05:8c:a9:66:25:70:41: 88:69:dc:34:0c:46:88:9a:4f:31:76:a2:dd:de:b5:44:94:2e: 09:ae:8f:b6:2f:16:82:ff:ab:2a:37:4e:3a:fc:52:7a:f0:04: 85:ec:9b:07:b9:1d:84:e0:17:55:90:92:6b:1b:31:23:49:fc: 6e:4f:33:a1:5f:65:94:82:6a:5b:3e:ef:cb:5e:f0:38:82:ec: db:44:8a:1a:6d:cc:ae:01:ff:d8:6c:af:4c:29:14:0d:53:73: ba:e7:45:33:e2:8b:61:29:97:0c:88:14:f5:d4:ee:dc:68:33: 07:1c:d4:62 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIUDV7nwlUp35z82o0qMIYZRDf26RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBMzhBMTgxNkE5OTA4MDQzNTdGQ0FDNDlDMDlCMENB M0EyMjFFNTAeFw0yNDExMjIwNzUxMTZaFw0yNDExMjMxMDQ3MTZaMDMxMTAvBgNV BAMTKERGNEI0RTc5MjYxRDNBQkM4QkFDRTlEQTdFRjc1ODlCRUFCMDUyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7HoNXcFltM4V2OWYSgz8rzbXt Wr0Ch9Cv+k3q2atIooVd2NNC0eVIQ2SwSYomQKvYHMrBBnVRCEcY+dRaScaWefhS 2DD4XzvI0Ai9Ov5Qy207Ka4RxuqGlcrKu7GPA22tt1wBK5ha2eCjP+kdQkUk4Hly PQj7Clkmq3rnLnsFaUdAufxIvnQqo0WRWTcDBfrhAL6EZnMzdC870YsQflRVUT6N IMmkH21eC6Z8KlmEPFngnGmRlYxzU9na+71PJiAnvXRc4sQmMblBgLB1SXGr2J92 Nr2j3PmfZRqTXa6dTMmDGy05L0V8FaU+gubZE22n91bRRiiJjODVvUPjMW7JAgMB AAGjggHXMIIB0zAdBgNVHQ4EFgQU30tOeSYdOryLrOnafvdYm+qwUsYwHwYDVR0j BBgwFoAUlaOKGBapkIBDV/ysScCbDKOiIeUwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMTk5MjAzLzAvOTVB MzhBMTgxNkE5OTA4MDQzNTdGQ0FDNDlDMDlCMENBM0EyMjFFNS5jcmwwZAYIKwYB BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL2Rldi50dy9ycGtpL0FTOTQ1 LzEvOTVBMzhBMTgxNkE5OTA4MDQzNTdGQ0FDNDlDMDlCMENBM0EyMjFFNS5jZXIw aAYIKwYBBQUHAQsEXDBaMFgGCCsGAQUFBzALhkxyc3luYzovL3Jwa2kuY28vcmVw by9BUzE5OTIwMy8wLzk1QTM4QTE4MTZBOTkwODA0MzU3RkNBQzQ5QzA5QjBDQTNB MjIxRTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQBpEQ5zGfXCkY8EqYR5/N8wtX0K7z5tlGful8B1b1tw UPOwdo7CnJM4zGFZ3D90WcTE2zF4AlDigkU4In3pCLEg6HtfyMwLC7Yvjjjs/ffu l0pX8Gi+vFNt5bji6oZsvXKhgrM3qrSdl5o27Wm+9peYqI2qjoszjDlz7lzfexAO dG/KU5s68KojaAWMqWYlcEGIadw0DEaImk8xdqLd3rVElC4Jro+2LxaC/6sqN046 /FJ68ASF7JsHuR2E4BdVkJJrGzEjSfxuTzOhX2WUgmpbPu/LXvA4guzbRIoabcyu Af/YbK9MKRQNU3O650Uz4othKZcMiBT11O7caDMHHNRi -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:29 2024 by rpki-client on console-ams.rpki-client.org