$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft File: 1PDdD0-4AQJdWG75mcXu4C18IFk.mft (raw, json) Hash identifier: 9kM0jsuxbfYHEUbMQy8VgWE4DleZhv0TqqNMYoMtd4s= Subject key identifier: 36:66:64:52:32:0A:BA:DC:BA:A3:52:9D:6F:65:14:9C:19:94:8C:EB Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 0EBB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft Manifest number: 0E71 Signing time: Sat 18 May 2024 02:41:40 +0000 Manifest this update: Sat 18 May 2024 02:41:40 +0000 Manifest next update: Mon 20 May 2024 02:41:40 +0000 Files and hashes: 1: 1PDdD0-4AQJdWG75mcXu4C18IFk.crl (hash: 2nT16/wmZjcwx6nwYN194E984/3vgBfllae2RQOk2mc=) 2: 5TVwyXvr3CvLKSo10OaWNoXnPtQ.roa (hash: J6r8D3XDnMBwcWLKu4JN+IMOAsxn/+SQ0r8psX9iGFI=) 3: 7AaVmm8nDv9486neGvB4bjt-B8w.roa (hash: lHmPyQpgftmcqzUWzjw/wxU77o564avc0HdjLxv45jI=) 4: 9Bt0ypwxdIx4JetHAPYPJSsTMuo.roa (hash: rw2+SXGnL6fne6NdNWoRL2JYLHESJrkHPes0vBrYkRU=) 5: ITK9rzIBjFuSiNwSR569S0RNZD4.roa (hash: XywCrNQtb9upmtTDTPQGiRtg6AosnyRbaRqjxOpY3Ug=) 6: NHsvWOzPXyPZBCjRC5WhHS0NSwg.roa (hash: 8faZ6lCVl7Yszr0g4tLIE2m0+7yWPj1HBMMj7pi98bc=) 7: WHdraKqyvdtNOCxghNzgVfw8mxc.roa (hash: /aNnDt0S8ng1hkGFYQRTi/A2GWsm1uU9X6xx4u+ZZak=) 8: c0yiDKdsWsvnmkET03G4Si67Gt8.roa (hash: LJ1AdrSTobitmcHLJFU7Ldp6k+jb5DdIBmI6+FFk0Lk=) 9: dHFI8ElFcZB0N6pqISDi3DBDthQ.roa (hash: E5sT0Uo4FnWOzjo0WACYu2ls8HDJGuQPU4HgMNDPnjU=) 10: dS2Se_jQg02ts2VIhygfNqiwUhY.roa (hash: W1PDZneljxYP8+Nawg06SRIfFp0zz8E+mhwqq5B5hTU=) 11: eHlIerO5qbL5wy_P3OorN2Jurcs.roa (hash: 2FSE8G2snXCylCsSjMMtIjriw+gcd9fsv29+ETfD4Yw=) 12: iswC2QUr1QN9QcJ4y1w59oA2vhY.roa (hash: VhejUNH80eCZYyN37UE3IRm5NsWuxQ3BS56JhSr9INQ=) 13: pzSbRncdjKZ2dWoDzPwPfd18AH0.roa (hash: GlZyGY1q0Yo/pnAQ0dMnoMehDgAne7qWbzMx1qSyzGE=) 14: sDpCn0BZde0kescbXBRMZ3siLq0.roa (hash: 5JAfOUhHSbNp04dVzdj6PPMHOPDaz65piW00CABRWEM=) 15: uelP3iI6Il6Xoa_7Oej3zjdFyig.roa (hash: p4NEiuacKUXR6iugkqPKIbDCsUWGFWee/EeoJgWk/ew=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 07:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3771 (0xebb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: May 18 02:41:40 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=36666452320ABADCBAA3529D6F65149C19948CEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:3f:e0:8a:04:50:cd:e1:bd:8f:d1:d2:18: a7:fa:59:dc:58:40:b0:51:8e:7c:c4:b9:db:b4:75: 20:9f:0b:49:4e:ba:d6:9c:77:37:78:c6:19:f8:50: 87:2d:2c:10:c3:b1:5e:29:b4:b5:b6:3d:c6:a1:f1: e3:56:05:b7:ef:d3:b2:a3:dd:c0:db:27:86:74:dd: 5b:ad:28:4a:20:75:87:63:29:28:1a:42:ee:15:b0: 44:9c:11:e3:b6:43:6b:ec:56:c5:36:d5:5a:a8:56: 5b:64:e1:2f:b9:fe:13:75:ee:5a:5b:21:86:1c:21: d4:65:cd:c4:43:ed:80:e4:88:1c:ce:1f:80:7c:29: e3:fd:9b:a1:1a:f2:95:b9:8d:ba:31:c2:24:0e:da: f2:4d:d3:51:15:cd:bc:c0:3a:89:0d:10:2f:32:86: 46:e1:1e:6f:30:96:90:f8:52:63:1e:8e:6b:b3:e0: fd:61:d3:70:30:d6:5c:d7:99:57:eb:9f:34:bf:54: 02:af:ff:b5:ff:52:ff:d9:f7:d7:02:5b:31:b2:ea: 66:61:6c:fb:90:5e:55:4e:43:0b:dd:8c:d9:aa:77: 55:16:f5:7e:a8:8a:bf:6d:dd:52:db:77:e8:1a:1e: 75:31:2a:57:a9:da:6d:c7:4f:09:28:09:35:46:40: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:66:64:52:32:0A:BA:DC:BA:A3:52:9D:6F:65:14:9C:19:94:8C:EB X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b9:72:a5:68:e3:d0:a3:bc:e4:40:7f:07:79:af:93:76:42: 7e:b6:75:1f:10:5a:98:28:08:e9:e1:0e:48:37:47:bb:72:4e: f9:e1:d1:56:7f:db:28:50:21:7a:0d:15:55:49:d5:4d:a2:36: b8:a3:ab:fd:88:68:ea:13:42:bb:c3:4d:d8:07:85:4a:a4:e8: 33:f9:35:08:1d:24:48:79:66:93:dc:18:56:ae:21:12:10:01: 4c:5c:b9:25:71:6e:37:a9:97:6e:a7:ea:e5:c6:a0:54:29:de: 9e:1a:fb:fc:a4:33:38:30:78:15:8b:d4:f4:37:ef:ff:8c:22: 5f:f7:21:b8:f6:91:fc:32:36:71:84:07:aa:7b:dc:5b:da:55: ca:92:58:1d:e4:14:c8:28:14:5b:17:ff:d4:c7:18:4b:03:e2: ae:68:48:bb:54:1c:f8:b8:e1:9a:b1:8d:77:5b:47:80:e3:22: 44:ba:5e:36:a5:f3:3e:6d:a4:04:1b:e5:29:3b:3e:9b:07:c9: 9d:bc:dc:9d:45:c0:52:45:96:8d:85:e7:3f:b2:6b:a4:4b:bf: a3:39:64:7f:5f:0f:a4:93:8d:c9:f5:fa:3f:0e:75:19:24:22: d8:9c:ef:8b:27:1c:de:84:b1:13:5b:4f:2c:60:de:67:70:ac: a9:e8:8b:12 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICDrswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNDA1MTgw MjQxNDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM2NjY2NDUyMzIwQUJB RENCQUEzNTI5RDZGNjUxNDlDMTk5NDhDRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDItz/gigRQzeG9j9HSGKf6WdxYQLBRjnzEudu0dSCfC0lOutac dzd4xhn4UIctLBDDsV4ptLW2Pcah8eNWBbfv07Kj3cDbJ4Z03VutKEogdYdjKSga Qu4VsEScEeO2Q2vsVsU21VqoVltk4S+5/hN17lpbIYYcIdRlzcRD7YDkiBzOH4B8 KeP9m6Ea8pW5jboxwiQO2vJN01EVzbzAOokNEC8yhkbhHm8wlpD4UmMejmuz4P1h 03Aw1lzXmVfrnzS/VAKv/7X/Uv/Z99cCWzGy6mZhbPuQXlVOQwvdjNmqd1UW9X6o ir9t3VLbd+gaHnUxKlep2m3HTwkoCTVGQNVzAgMBAAGjggIBMIIB/TAdBgNVHQ4E FgQUNmZkUjIKuty6o1Kdb2UUnBmUjOswHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQRGREMC00QVFKZFdHNzVtY1h1NEMx OElGay5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTuXKlaOPQ o7zkQH8Hea+TdkJ+tnUfEFqYKAjp4Q5IN0e7ck754dFWf9soUCF6DRVVSdVNoja4 o6v9iGjqE0K7w03YB4VKpOgz+TUIHSRIeWaT3BhWriESEAFMXLklcW43qZdup+rl xqBUKd6eGvv8pDM4MHgVi9T0N+//jCJf9yG49pH8MjZxhAeqe9xb2lXKklgd5BTI KBRbF//UxxhLA+KuaEi7VBz4uOGasY13W0eA4yJEul42pfM+baQEG+UpOz6bB8md vNydRcBSRZaNhec/smukS7+jOWR/Xw+kk43J9fo/DnUZJCLYnO+LJxzehLETW08s YN5ncKyp6IsS -----END CERTIFICATE-----Generated at Sat May 18 07:49:58 2024 by rpki-client on console-ams.rpki-client.org