$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft File: P4T67Wy0fhEvJMawJ3pIYicGcso.mft (raw, json) Hash identifier: LFqUZosEXClN6bMiDRfrdRHWdreAhKA3+/pwbkEtJg8= Subject key identifier: C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0 Authority key identifier: 3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA Certificate issuer: /CN=3F84FAED6CB47E112F24C6B0277A4862270672CA Certificate serial: 76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft Manifest number: 72 Signing time: Wed 15 May 2024 18:19:52 +0000 Manifest this update: Wed 15 May 2024 18:19:52 +0000 Manifest next update: Fri 17 May 2024 18:19:52 +0000 Files and hashes: 1: Ero1zU7ZBHakAC_ocRNMCweSDxc.roa (hash: OzUIrWkLWkbadLjD6wtZYtZkLBnLUTzPWfrbGURymm0=) 2: P4T67Wy0fhEvJMawJ3pIYicGcso.crl (hash: FiQxTUBfyK6DHwTQ8cJ4f3eZ27PUJMPI+9vnU8971Iw=) 3: ftJDo8JGDtKveudWbZjJkTNApXY.roa (hash: CHM0EsgeDUuGWgtSW1IqBOjDalEzh6KdgkawImPEOKs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 May 2024 18:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F84FAED6CB47E112F24C6B0277A4862270672CA Validity Not Before: May 15 18:19:52 2024 GMT Not After : Dec 6 15:30:22 2024 GMT Subject: CN=C62935BDEE28689F47A37A776EF691F2FD9522A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:6f:5a:29:d0:9d:14:37:3b:94:31:e9:b6:39: 92:35:1b:25:de:6b:91:ab:a9:75:3c:3a:c5:73:71: d9:47:b9:21:fe:14:2a:4e:f9:c4:bf:d2:1f:4b:04: f9:1e:c5:38:e5:81:2f:61:65:d8:35:f4:55:ba:17: 6f:1d:ab:ee:60:36:f9:ab:f3:b9:46:42:56:a0:65: ce:68:17:4f:76:de:bb:2e:cc:6f:c9:00:dd:3a:ad: 41:1d:af:bf:5b:78:ef:29:5f:15:79:49:d7:53:ac: 56:6d:9c:b8:37:25:8f:f6:27:4e:54:d9:ca:ab:46: 36:ae:ea:ad:b4:d6:1b:b2:44:0e:61:84:a9:2d:fe: 29:47:38:ff:04:e3:8c:d1:e7:85:cf:8e:cc:d7:86: 0d:4b:5b:86:48:d6:fc:cd:21:96:e4:34:09:8c:a2: 66:b9:3a:6e:9a:9d:c9:a9:a8:66:e9:bf:94:e1:77: d0:b8:ad:d3:08:b5:2b:73:71:01:06:49:f1:40:52: a3:f3:c0:45:40:d4:4a:a0:a5:71:8a:19:d1:e1:a5: 7e:15:78:66:7a:06:fc:98:15:c8:a8:8d:af:d2:4c: eb:83:e3:ae:3a:dc:81:f8:ac:ce:3a:8c:c6:74:11: 7d:99:c3:56:c8:8e:af:62:3a:af:a8:fd:14:09:4c: bb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0 X509v3 Authority Key Identifier: keyid:3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:7f:9c:2d:f0:3a:58:2f:da:00:16:20:3d:6b:5a:39:29:a3: a4:90:f8:67:32:07:6d:7a:d7:fd:15:26:06:1e:4a:47:57:03: 81:ef:66:87:52:57:af:ba:f8:4a:13:5b:ca:98:0b:45:f6:d1: b5:7b:43:43:92:72:de:4a:9d:9c:a2:bb:51:4d:85:4a:a9:d6: 29:24:47:f6:d0:91:6f:a7:fa:46:81:81:0e:f3:8a:37:67:97: 2a:0b:ce:0c:b4:38:40:ef:22:bb:da:62:8b:99:86:63:fb:4b: 85:f3:8b:80:f7:b4:4e:f4:f5:c5:b2:ee:cc:d4:5c:1a:28:5c: c8:8b:3d:8c:16:a1:23:b6:e6:d5:5d:fc:b6:ab:96:0f:21:be: fd:0e:84:a6:8a:70:91:a2:8f:2a:61:9c:d3:42:39:d9:49:71: 37:03:df:2e:c4:a5:6b:d9:fb:ea:47:6c:97:26:27:f5:ce:c6: 53:5f:a8:64:ac:2d:fe:97:2c:ef:e6:03:58:5d:9a:e7:30:af: f5:21:ab:34:ef:e4:cf:16:80:8e:0e:6b:00:7e:99:5a:07:79: 79:b2:ce:25:a7:06:d1:29:79:fd:f8:6d:cc:37:22:47:1d:3f: 5e:94:90:93:28:e8:69:c7:2d:c3:39:44:87:f3:89:a6:b7:47: f5:49:cf:3d -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjg0 RkFFRDZDQjQ3RTExMkYyNEM2QjAyNzdBNDg2MjI3MDY3MkNBMB4XDTI0MDUxNTE4 MTk1MloXDTI0MTIwNjE1MzAyMlowMzExMC8GA1UEAxMoQzYyOTM1QkRFRTI4Njg5 RjQ3QTM3QTc3NkVGNjkxRjJGRDk1MjJBMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPlvWinQnRQ3O5Qx6bY5kjUbJd5rkaupdTw6xXNx2Ue5If4UKk75 xL/SH0sE+R7FOOWBL2Fl2DX0VboXbx2r7mA2+avzuUZCVqBlzmgXT3beuy7Mb8kA 3TqtQR2vv1t47ylfFXlJ11OsVm2cuDclj/YnTlTZyqtGNq7qrbTWG7JEDmGEqS3+ KUc4/wTjjNHnhc+OzNeGDUtbhkjW/M0hluQ0CYyiZrk6bpqdyamoZum/lOF30Lit 0wi1K3NxAQZJ8UBSo/PARUDUSqClcYoZ0eGlfhV4ZnoG/JgVyKiNr9JM64Pjrjrc gfiszjqMxnQRfZnDVsiOr2I6r6j9FAlMuxMCAwEAAaOCAg8wggILMB0GA1UdDgQW BBTGKTW97ihon0ejendu9pHy/ZUioDAfBgNVHSMEGDAWgBQ/hPrtbLR+ES8kxrAn ekhiJwZyyjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LUk9OT1NU RUNIL1A0VDY3V3kwZmhFdkpNYXdKM3BJWWljR2Nzby5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvUDRUNjdXeTBmaEV2Sk1hd0ozcElZaWNHY3NvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1JPTk9TVEVDSC9QNFQ2N1d5MGZo RXZKTWF3SjNwSVlpY0djc28ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAt3+cLfA6WC/aABYgPWtaOSmjpJD4ZzIHbXrX/RUmBh5KR1cDge9mh1JX r7r4ShNbypgLRfbRtXtDQ5Jy3kqdnKK7UU2FSqnWKSRH9tCRb6f6RoGBDvOKN2eX KgvODLQ4QO8iu9pii5mGY/tLhfOLgPe0TvT1xbLuzNRcGihcyIs9jBahI7bm1V38 tquWDyG+/Q6EpopwkaKPKmGc00I52UlxNwPfLsSla9n76kdslyYn9c7GU1+oZKwt /pcs7+YDWF2a5zCv9SGrNO/kzxaAjg5rAH6ZWgd5ebLOJacG0Sl5/fhtzDciRx0/ XpSQkyjoacctwzlEh/OJprdH9UnPPQ== -----END CERTIFICATE-----Generated at Thu May 16 21:49:02 2024 by rpki-client on console-ams.rpki-client.org