$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft File: T7OmmWT36W2ws1gTKPAG28oaupc.mft (raw, json) Hash identifier: hdaGpy3AKr7vgi+TZYNy8j0Qej00EfMR4ceQG6Ztzg0= Subject key identifier: 85:71:F1:A9:69:10:DF:3A:50:E8:C7:1C:3B:F0:35:48:02:A5:5D:8E Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0D3D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft Manifest number: 0C82 Signing time: Sun 24 Nov 2024 06:25:12 +0000 Manifest this update: Sun 24 Nov 2024 06:25:12 +0000 Manifest next update: Tue 26 Nov 2024 06:25:12 +0000 Files and hashes: 1: 2iihCKpqtQCNwNlSJgwGX9q6oX8.roa (hash: JmuTAl/k//0oEOiB90v+8SxTjp9NuvLtiQwjHDnfhf4=) 2: 5obxZUTJbtuYwrVy7UzMGQ7QDac.roa (hash: M6OgJMH3uEMWruxSoN7KTTA4zIiRJB09LUkHJ4H7wyU=) 3: 9UhAWxS7znVK_xB6h9qTy1p0QQI.roa (hash: gYNnKtN5FX+E112NTOgtU+DlFvJILF6baVJv7HHIsvA=) 4: Bi5U7TkTzmhWrdiQ0IkASmTvpMw.roa (hash: H3GCkmhNiPYdzzyf58fksIj9dRStpbQuuUfachhBlWI=) 5: CbVx7cw-XUvoQ3-Cy8k_1BFw3HU.roa (hash: VJ860NDuHNVk0+ZMb4kdZMe1efeGkx6N4k6JY5aTeRc=) 6: CcQQ4Yrd3FrWwHTMKPx-7v9kqx0.roa (hash: vhSPznk1aX77A+iCHB5V3s1itj/XUmMqCmWtoGRJabE=) 7: DgSwc3XqeCp18e8MxqdEQQvgF0o.roa (hash: bBmf6jSde8tX7bDjMFRIXU1JK0r3EImnBqCvN05KttE=) 8: GpLNOgcOmxMXds57paQhPrUUITk.roa (hash: 4QjSlgiKtmrzyaWCB+7kI9hGQ3nX5pIK2a/cynrtD4c=) 9: H-XSrV8TIWEwfZt1mPa4JuKYYCQ.roa (hash: /msIDDjE12vYER0n1/VEFT2OngRWB0pVqIc/M2LxJsQ=) 10: KfrHPh4Yhvfn4WWy9lcgmmSluTo.roa (hash: cdBIvBsG/PyM+behzm0COB0Q7dn2qUVEheFyRkMVMCo=) 11: Mpuc1B6sXzFh-D_cR4nVnz0yOAU.roa (hash: ly0FzqUP/2SojsxYs9ZksvgqdVuY6HNQsl80dB+ML6E=) 12: SAsysG4NNg_0aH166NhSGDJxbpk.roa (hash: PGYNg7TGHsIp1IVZjDe6dWxfbti0HJVVjm9wnaTEjYE=) 13: Swy6UoCpTPx3LMz8pMtIH8hlutY.roa (hash: dMp3eW/Dn1TZnCpJLJEeF6gLN7vaYGI/TuBLj6uG1so=) 14: T7OmmWT36W2ws1gTKPAG28oaupc.crl (hash: p57n6DWQQsK/0wFPPtCi+UVyq/uWpYWxJx5hSWW9JUY=) 15: UGaQETIOpWSpuqKZL4Bb_mH3Sjk.roa (hash: GLCbM0700skfoa1o/AyMZpJm9+T0wSMc/jxAtyHus0E=) 16: Waulo8EnQkCU7W25sN7bEIaF3Ow.roa (hash: 0LsM06WUFUy/OTSJO5FnX0zgGOQ0FV+oUIlwuwe4gYg=) 17: XRwW7c3KYMLd0pTbd1Y6IvHf4CE.roa (hash: T1WkXZpAz++n0GQMQJubo7c+BWlBVZ+Yw4o4ExSot4A=) 18: ZC9BrkJnEFibMERsq_VASd1pPKE.roa (hash: 2j0oUp4lfZpjkbS3ZNRzHUcTeeVDJGLjMZ61MmCPK1Q=) 19: dbZvlVAcTZQkhg6ZLTecopWveJA.roa (hash: X+Ekl1LMySwE9GC6Q4lfYBU3taJffhsmZraMnTJbKXs=) 20: fHE0qHw7KMzc-yC2lz5L699xwwI.roa (hash: gIMHL/iUjSzBOifNxYVxxWje84P8eUPXJyMdUGR7V7g=) 21: iKiN4J8IKOUKVUDBPcqhI9XQKhE.roa (hash: pVRaL77OpbaHzR2wU63rIKaGEcpvHcUpk6MMqPWAT3k=) 22: iP6B8L9Kf_dJl7AVDTUa17Q2AZg.roa (hash: 9KXKRYZvmqJiumZsSuehcWU/ku2n4NRXfFbyB0y5acU=) 23: ngrSbhyP3swdAairvc46qLuPBVk.roa (hash: boNKZnbG+7qADnReI+iRRMde1VAwIqSxm1Yg+J9hKwY=) 24: owK_ERARsY9GIW5dk32Zp23qPvA.roa (hash: d+rex+/GUvHrwVXCbYnjLrw+gb3qfTUXNdDaBN85N6M=) 25: p-poyConFHMAHc5z1kRiguzsMXM.roa (hash: aCNKZGslXAbUi6slVXdlWv2S87H5WeJi7wbZYBs/3X4=) 26: pDg1yuo567bfJRQBvtAnVlZ8GOM.roa (hash: gwdh55R/wDEAggm2bDpxARN2j3HhOmKwPmVQ5JXgc08=) 27: toVoKjhealIXQFnrd8e0iH5m16Q.roa (hash: ZR+LApjKyIw+KHjioLZA6POVkjZEPKskn576Nlp/VvY=) 28: yPlkF-0YRRmjv4y76S8gjsqzKyI.roa (hash: zpH/cLSpZnYPn/inSnoSLg69/1NdWygqf3pb/jeyki8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3389 (0xd3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Nov 24 06:25:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8571F1A96910DF3A50E8C71C3BF0354802A55D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:92:87:cc:56:73:bd:62:44:5b:02:1c:3a: 91:6c:b1:b6:7b:a3:60:bc:00:6f:ee:23:35:ce:4b: 53:03:ed:e2:5c:15:7d:99:82:1b:ba:bc:a6:29:84: e6:a5:62:a3:ab:49:7f:a4:19:a8:d1:d5:90:ee:6b: e6:ec:b8:39:d3:19:e7:17:08:50:b8:83:00:4d:f3: 88:12:87:41:0e:76:34:3f:b0:aa:99:e5:57:a2:77: f6:7f:a6:30:b0:ca:60:04:d6:be:10:e1:7a:57:33: 8c:1c:46:4c:a4:b4:64:9b:df:d6:f3:b2:79:bc:fb: 33:2a:39:53:a2:9d:b2:8d:90:84:bb:81:6d:a2:ea: 3d:c5:23:b2:1a:62:c8:04:64:4d:c7:38:fe:af:f8: 9a:a6:36:12:d1:15:c2:8b:e7:e9:f2:71:d2:78:e5: 01:dc:73:06:ce:9e:58:07:22:fa:e7:61:f8:a1:da: ad:8b:4c:bc:a9:f4:d6:30:45:8a:b7:2d:3f:05:cc: 9d:c2:10:88:fe:fa:0f:b7:91:2f:b9:54:ba:c6:14: b0:cd:76:d2:09:56:dd:f4:21:80:0b:ee:a0:a3:1e: 15:b1:d5:97:64:4d:68:57:cb:37:ad:91:45:c0:37: fc:27:56:9d:4c:0c:40:f5:d6:b3:16:cc:4d:97:94: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:71:F1:A9:69:10:DF:3A:50:E8:C7:1C:3B:F0:35:48:02:A5:5D:8E X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:78:34:f4:ef:94:27:0b:9e:d0:ff:ba:fd:6d:aa:c7:27:ee: 1b:99:9c:e6:ae:b7:16:5f:5f:3b:5e:56:6e:02:4e:7b:3d:2e: 50:9e:fd:a3:f6:d9:a0:1d:80:1c:3c:21:a4:3d:e8:f0:73:51: 8f:fe:64:40:0c:89:88:8d:1e:88:05:de:d0:b4:ae:fa:cf:d7: 5c:3e:1a:0e:ce:ce:e9:3d:44:f9:da:2c:44:41:88:8f:f1:99: e5:71:68:d1:ef:8e:07:48:52:08:c1:02:01:e6:ea:0d:19:05: aa:88:7b:d4:92:e9:98:68:dd:61:44:11:0a:1d:b4:86:56:54: 16:58:a0:d9:16:d3:67:65:44:7a:f0:65:9e:79:31:e8:52:26: a8:00:ec:b5:d1:15:24:9e:45:56:ef:46:8f:bd:f8:36:1e:fb: 3c:81:98:d6:91:bf:93:42:5f:22:84:34:9d:ea:5e:a0:d0:5e: 29:96:39:58:45:0a:44:e4:b2:4f:94:6a:56:74:8d:8b:fa:34: eb:5d:e7:d1:47:01:49:48:27:3b:3b:e7:3c:3f:72:fc:67:6d: eb:24:68:3d:de:82:e0:76:fc:b8:9a:12:ef:9f:f8:72:df:1d: a7:f2:7f:13:28:20:2f:47:65:00:72:0e:8b:c3:e7:cf:a0:70: da:df:5f:dd -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNDExMjQw NjI1MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg1NzFGMUE5NjkxMERG M0E1MEU4QzcxQzNCRjAzNTQ4MDJBNTVEOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPu5KHzFZzvWJEWwIcOpFssbZ7o2C8AG/uIzXOS1MD7eJcFX2Z ghu6vKYphOalYqOrSX+kGajR1ZDua+bsuDnTGecXCFC4gwBN84gSh0EOdjQ/sKqZ 5Veid/Z/pjCwymAE1r4Q4XpXM4wcRkyktGSb39bzsnm8+zMqOVOinbKNkIS7gW2i 6j3FI7IaYsgEZE3HOP6v+JqmNhLRFcKL5+nycdJ45QHccwbOnlgHIvrnYfih2q2L TLyp9NYwRYq3LT8FzJ3CEIj++g+3kS+5VLrGFLDNdtIJVt30IYAL7qCjHhWx1Zdk TWhXyzetkUXAN/wnVp1MDED11rMWzE2XlKf1AgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUhXHxqWkQ3zpQ6MccO/A1SAKlXY4wHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL1Q3T21tV1QzNlcyd3MxZ1RL UEFHMjhvYXVwYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCy eDT075QnC57Q/7r9barHJ+4bmZzmrrcWX187XlZuAk57PS5Qnv2j9tmgHYAcPCGk Pejwc1GP/mRADImIjR6IBd7QtK76z9dcPhoOzs7pPUT52ixEQYiP8ZnlcWjR744H SFIIwQIB5uoNGQWqiHvUkumYaN1hRBEKHbSGVlQWWKDZFtNnZUR68GWeeTHoUiao AOy10RUknkVW70aPvfg2Hvs8gZjWkb+TQl8ihDSd6l6g0F4pljlYRQpE5LJPlGpW dI2L+jTrXefRRwFJSCc7O+c8P3L8Z23rJGg93oLgdvy4mhLvn/hy3x2n8n8TKCAv R2UAcg6Lw+fPoHDa31/d -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:36 2024 by rpki-client on console-fra.rpki-client.org