$ rpki-client -vvf rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.mft File: F4B005E4852A124602E9F6D0512C95FD5BD83C1E.mft (raw, json) Hash identifier: hr/4RXnNyFWt26WpokgsDo42uStBlqoxnCPDMhtOoVU= Subject key identifier: 40:CF:9F:39:C7:93:B2:74:E1:F8:BB:A0:EF:6F:08:EB:72:F0:D3:E3 Authority key identifier: F4:B0:05:E4:85:2A:12:46:02:E9:F6:D0:51:2C:95:FD:5B:D8:3C:1E Certificate issuer: /CN=F4B005E4852A124602E9F6D0512C95FD5BD83C1E Certificate serial: 3F9D16C1858063A3533063C5690277BBD7B71A93 Authority info access: rsync://dev.tw/rpki/August/14/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.cer Subject info access: rsync://rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.mft Manifest number: 03E9 Signing time: Thu 25 Apr 2024 19:27:10 +0000 Manifest this update: Thu 25 Apr 2024 19:22:10 +0000 Manifest next update: Fri 26 Apr 2024 21:22:10 +0000 Files and hashes: 1: AS7719.asa (hash: c7QRDL49avzPhzvZYER7ZyzbMiEhmyx2U+E8j0YGPqQ=) 2: F4B005E4852A124602E9F6D0512C95FD5BD83C1E.crl (hash: lSnDWVA0g+HexNW+P+XGcYVSjEfmkTV9PvZkMZmqJCM=) Validation: OK Signature path: rsync://rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.crl rsync://rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.mft rsync://dev.tw/rpki/August/14/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.cer rsync://dev.tw/rpki/August/14/EE962658B1226680140B4EA86F7D68CF498158D9.crl rsync://dev.tw/rpki/August/14/EE962658B1226680140B4EA86F7D68CF498158D9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/EE962658B1226680140B4EA86F7D68CF498158D9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 05:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9d:16:c1:85:80:63:a3:53:30:63:c5:69:02:77:bb:d7:b7:1a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4B005E4852A124602E9F6D0512C95FD5BD83C1E Validity Not Before: Apr 25 19:22:10 2024 GMT Not After : Apr 26 21:22:10 2024 GMT Subject: CN=40CF9F39C793B274E1F8BBA0EF6F08EB72F0D3E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:b8:6c:13:aa:2e:db:d0:52:9d:f9:8f:57: 25:f8:92:d1:e4:4a:96:34:87:c6:c9:18:7a:66:81: 18:9f:57:04:27:30:e7:3b:94:8a:d7:c1:a4:41:53: 07:b9:d4:6b:64:39:78:08:6c:b3:3d:6c:27:c4:af: 56:9e:e5:0d:e1:95:54:f5:36:41:39:2d:88:02:f8: 4e:de:bb:8b:83:6a:af:07:eb:b6:7c:5e:fe:4e:f1: 40:1b:53:d6:b6:50:fe:90:fc:58:01:95:43:8c:9f: 2b:10:a9:08:cd:ff:d4:bd:01:e4:35:94:8c:9f:ac: bd:9d:a3:fb:fc:5e:12:69:ff:03:d9:43:a2:b0:10: 03:ef:fc:15:63:3a:4b:2e:47:26:ac:60:e7:b0:82: ae:28:6e:69:88:bc:6e:1e:fa:a1:6a:f5:f8:60:91: 63:af:a5:fa:5d:6f:1f:d0:90:8b:cd:71:15:4e:e4: d4:93:5d:c7:0d:6b:17:92:c2:ac:b5:52:a5:8a:9a: 29:f3:8d:6b:ed:69:fe:b9:88:a3:5c:85:15:58:9a: 64:47:a9:c5:cf:9b:c9:57:8b:fa:55:6c:bb:cf:4b: 43:80:1c:b6:99:00:df:d2:d7:cb:85:0e:ef:57:f6: 0f:ea:52:c8:e1:42:c6:f9:75:e1:b2:88:99:eb:e2: f4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CF:9F:39:C7:93:B2:74:E1:F8:BB:A0:EF:6F:08:EB:72:F0:D3:E3 X509v3 Authority Key Identifier: keyid:F4:B0:05:E4:85:2A:12:46:02:E9:F6:D0:51:2C:95:FD:5B:D8:3C:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.crl Authority Information Access: CA Issuers - URI:rsync://dev.tw/rpki/August/14/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.co/repo/AS945/13/F4B005E4852A124602E9F6D0512C95FD5BD83C1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ff:ce:6c:a5:9d:39:38:ea:cb:3e:a1:7e:95:a8:09:31:c1: c9:55:2f:b9:48:9a:f3:46:f6:84:c5:fb:6d:71:be:10:9c:04: 98:74:ba:4a:a9:2e:7f:4d:b3:e3:e1:83:c0:09:5b:ef:75:ea: 67:32:02:4d:3d:55:c9:d6:65:d3:67:c7:33:97:03:8d:51:2e: 9d:9f:d9:c5:4b:22:6c:d2:c9:8d:2a:a5:50:08:6e:f5:f3:23: 02:8f:eb:81:e7:b8:73:93:d0:70:04:26:95:86:85:01:dd:ca: d4:58:98:33:13:f2:1a:f1:7d:3c:85:45:e3:d4:53:e0:39:d9: c3:4a:81:7a:ee:b9:9b:c2:c9:66:1e:24:bf:09:e4:d7:db:4c: 98:12:4e:1f:64:33:66:ab:73:95:bd:b1:41:8f:2f:bf:70:8d: e9:74:62:11:16:4c:2a:9a:e7:24:f3:d3:43:97:6d:26:68:a1: 39:cc:ca:ee:d4:e3:52:8b:49:22:b4:e4:83:3f:40:c4:02:e0: 7d:a1:83:7f:22:09:15:44:ac:53:d9:39:50:59:72:a0:ad:1d: 5b:f1:5f:cc:ca:8a:08:78:02:dd:06:59:62:9f:10:74:a1:7a: d0:41:48:25:8e:f6:94:4f:b1:fb:5b:96:bd:2e:da:ec:68:a0: f0:17:8c:9a -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgIUP50WwYWAY6NTMGPFaQJ3u9e3GpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjRCMDA1RTQ4NTJBMTI0NjAyRTlGNkQwNTEyQzk1RkQ1 QkQ4M0MxRTAeFw0yNDA0MjUxOTIyMTBaFw0yNDA0MjYyMTIyMTBaMDMxMTAvBgNV BAMTKDQwQ0Y5RjM5Qzc5M0IyNzRFMUY4QkJBMEVGNkYwOEVCNzJGMEQzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfLhsE6ou29BSnfmPVyX4ktHk SpY0h8bJGHpmgRifVwQnMOc7lIrXwaRBUwe51GtkOXgIbLM9bCfEr1ae5Q3hlVT1 NkE5LYgC+E7eu4uDaq8H67Z8Xv5O8UAbU9a2UP6Q/FgBlUOMnysQqQjN/9S9AeQ1 lIyfrL2do/v8XhJp/wPZQ6KwEAPv/BVjOksuRyasYOewgq4obmmIvG4e+qFq9fhg kWOvpfpdbx/QkIvNcRVO5NSTXccNaxeSwqy1UqWKminzjWvtaf65iKNchRVYmmRH qcXPm8lXi/pVbLvPS0OAHLaZAN/S18uFDu9X9g/qUsjhQsb5deGyiJnr4vSvAgMB AAGjggHVMIIB0TAdBgNVHQ4EFgQUQM+fOceTsnTh+Lug728I63Lw0+MwHwYDVR0j BBgwFoAU9LAF5IUqEkYC6fbQUSyV/VvYPB4wDgYDVR0PAQH/BAQDAgeAMFsGA1Ud HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEzL0Y0QjAw NUU0ODUyQTEyNDYwMkU5RjZEMDUxMkM5NUZENUJEODNDMUUuY3JsMGYGCCsGAQUF BwEBBFowWDBWBggrBgEFBQcwAoZKcnN5bmM6Ly9kZXYudHcvcnBraS9BdWd1c3Qv MTQvRjRCMDA1RTQ4NTJBMTI0NjAyRTlGNkQwNTEyQzk1RkQ1QkQ4M0MxRS5jZXIw ZgYIKwYBBQUHAQsEWjBYMFYGCCsGAQUFBzALhkpyc3luYzovL3Jwa2kuY28vcmVw by9BUzk0NS8xMy9GNEIwMDVFNDg1MkExMjQ2MDJFOUY2RDA1MTJDOTVGRDVCRDgz QzFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkq hkiG9w0BAQsFAAOCAQEAKf/ObKWdOTjqyz6hfpWoCTHByVUvuUia80b2hMX7bXG+ EJwEmHS6Sqkuf02z4+GDwAlb73XqZzICTT1VydZl02fHM5cDjVEunZ/ZxUsibNLJ jSqlUAhu9fMjAo/rgee4c5PQcAQmlYaFAd3K1FiYMxPyGvF9PIVF49RT4DnZw0qB eu65m8LJZh4kvwnk19tMmBJOH2QzZqtzlb2xQY8vv3CN6XRiERZMKprnJPPTQ5dt JmihOczK7tTjUotJIrTkgz9AxALgfaGDfyIJFUSsU9k5UFlyoK0dW/FfzMqKCHgC 3QZZYp8QdKF60EFIJY72lE+x+1uWvS7a7Gig8BeMmg== -----END CERTIFICATE-----Generated at Thu Apr 25 21:29:29 2024 by rpki-client on console-ams.rpki-client.org