$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft File: rf5uVtr4SS7H3oizqQazE5tVuGQ.mft (raw, json) Hash identifier: PN5mK3rnVmfh1NSAu1cJWVuV3+fZyZB7XKzK8eHQ/24= Subject key identifier: 88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9 Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 0722 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft Manifest number: 06D3 Signing time: Thu 21 Nov 2024 06:54:51 +0000 Manifest this update: Thu 21 Nov 2024 06:54:51 +0000 Manifest next update: Sat 23 Nov 2024 06:54:51 +0000 Files and hashes: 1: I_RNZnv7q6wqNyMmWuWt4VHCpLU.roa (hash: nX6MYGVyeFZS/jxqUKChdFzcYsnWfLfB3iUCBaBbjs4=) 2: LhiKgq7HkXZWDAUpPP_JtMq1Wyw.roa (hash: txY9gqdwuAloWwR0WhX/ViQS918LedhUcGYYN4ptOKE=) 3: NcKVCfbc3jChVDmflblYSuJPMO4.roa (hash: 2DWqyOAxtIiBg6e9UwcdcPnNpvdPFtF6sV5BbWgSqII=) 4: W2PW0159D49vnY1X6YuK8pcD_Yw.roa (hash: /K6uRnNubqLn1MMz6oppqYwTca/MQs5kN8TSk1Qieho=) 5: awIZh6KzSYKgVU1YGX__k8Rc-fI.roa (hash: 8kCJcp3prAEXxvcP7fI5TZMUkspzTMPqPVBPeYMh+Xs=) 6: kzr56hc8w8azGyeKRed38hOzU3M.roa (hash: 8pIZLgqojsBcrwV4IKUaww1GYdOjwoRld8CP6jf+mtw=) 7: qnHYj_7E-lm8G2EAmiL2M04c_xc.roa (hash: EZeD4g8OAuXBalNqwWjAJfGgdIE4wKe3B7wlmah5plA=) 8: r3L6yttM2uauctbjHfvEYX9apYE.roa (hash: qG0l5l8cBI/D1C2Z5zmTXnVral3zEsIqcEiBhf78lvk=) 9: r6WztecU-ZvhccaqvMNaapB4oJc.roa (hash: jlGwuJYXc9UL3F3INlrT6YqnAverCCdROO9so5QYFRw=) 10: rf5uVtr4SS7H3oizqQazE5tVuGQ.crl (hash: xPo6QQhpwkgNfC6QyX3noNMaaUocAGr8kfoJ7lWHTZQ=) 11: t7Cjyp179kJ-HnkXphUUmqKmHwA.roa (hash: 09tHvN8+zK6qBN96JkC4bSWNi9a1l/1PdOT5GmrSuFk=) 12: vevhoNKm6ousZhBw2sSYxeL3-i4.roa (hash: DPK2JVuvOH5YHtFjYZilP6n+RKOi3qJZpnyq5c/xujI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Nov 21 06:54:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8854C401A81FA535EF84FCFF6D06C5F99F64EEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:1a:e9:4e:9f:e7:ed:30:87:19:fe:94:0e: 71:c2:dd:a0:b0:a2:52:3e:71:b9:2b:4a:0d:fc:88: 6e:aa:92:1b:5e:d7:5e:10:57:37:85:9d:f5:0c:ef: 14:d1:25:42:70:8e:ee:6a:87:f8:20:85:4f:58:31: 31:e4:87:18:67:09:2b:ae:8e:f0:69:d3:7d:0a:5b: bd:92:89:e2:40:f2:68:bf:c7:b7:bb:4b:18:7e:24: 7a:24:19:4f:80:95:56:c3:be:d3:e9:96:40:6f:46: 7b:61:09:87:c0:1d:5a:03:32:b7:a5:76:4a:6f:b4: f7:b8:52:01:63:6f:2c:e3:67:a8:7c:13:1f:37:66: de:c5:9d:9d:89:d8:02:04:a0:fd:e2:19:cf:c9:dd: d5:5b:84:b0:c9:4f:b2:59:25:e1:36:4b:0b:f8:16: 2f:55:9d:6e:c2:74:a8:6b:f5:95:98:f2:d1:11:0d: d5:9a:0a:42:fd:fa:3c:b2:fd:7f:a9:28:86:6a:4d: 35:29:c2:c1:b0:cf:70:b8:e3:53:02:c7:72:23:02: 0c:16:3a:9f:a1:cd:ea:4b:22:d8:b3:44:5b:1d:21: a6:55:ab:52:bf:97:5e:02:f3:75:8d:76:d2:bb:1b: 7f:67:0c:8e:e2:04:37:7a:06:98:80:4e:15:7d:4c: 61:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9 X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:5b:2b:65:cd:82:d3:8e:28:8f:4d:76:7b:d2:5d:30:66:26: ac:66:b5:83:e1:13:77:ab:6a:08:be:7c:41:ab:15:a1:8d:ad: 2b:ea:9d:b0:16:b0:bd:35:a6:e4:15:d8:b4:e0:b8:bd:e8:01: 29:39:2f:c5:fe:0b:f1:44:a8:a0:11:fc:67:3c:d5:d7:0e:47: 5e:5b:5f:ed:8b:2c:79:c2:53:4f:f4:09:99:c7:24:7e:74:4b: e3:e1:7c:c6:d6:e0:8c:da:d8:e5:88:02:8e:61:32:3a:61:32: 02:57:a0:0a:be:79:ab:21:08:36:53:43:aa:40:94:43:8d:09: b9:cd:24:0a:34:4a:9d:cf:72:0e:a0:82:44:09:f5:8b:e5:47: cc:0d:5f:9b:42:11:01:f1:e2:3d:54:e3:6c:08:70:57:10:4a: 38:bd:48:c0:1f:e5:1d:cf:f9:8d:18:d5:1d:01:ba:78:5f:80: 3d:81:78:91:1e:88:c3:80:40:e6:f0:9c:2a:99:45:0b:4d:d2: f1:11:96:6c:c4:90:ea:f5:6a:bc:8e:83:16:0b:7f:69:2d:af: 54:ad:30:06:4b:c1:4e:3c:73:b4:d2:4d:d8:a3:e5:da:82:e9: 31:8b:7c:86:ee:1d:0f:bb:2c:4f:a0:24:9e:27:fb:df:1c:67: 92:ce:d1:87 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgICByIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNDExMjEw NjU0NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4NTRDNDAxQTgxRkE1 MzVFRjg0RkNGRjZEMDZDNUY5OUY2NEVFRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr3xrpTp/n7TCHGf6UDnHC3aCwolI+cbkrSg38iG6qkhte114Q VzeFnfUM7xTRJUJwju5qh/gghU9YMTHkhxhnCSuujvBp030KW72SieJA8mi/x7e7 Sxh+JHokGU+AlVbDvtPplkBvRnthCYfAHVoDMreldkpvtPe4UgFjbyzjZ6h8Ex83 Zt7FnZ2J2AIEoP3iGc/J3dVbhLDJT7JZJeE2Swv4Fi9VnW7CdKhr9ZWY8tERDdWa CkL9+jyy/X+pKIZqTTUpwsGwz3C441MCx3IjAgwWOp+hzepLItizRFsdIaZVq1K/ l14C83WNdtK7G39nDI7iBDd6BpiAThV9TGHPAgMBAAGjggINMIICCTAdBgNVHQ4E FgQUiFTEAagfpTXvhPz/bQbF+Z9k7vkwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL3JmNXVWdHI0U1M3 SDNvaXpxUWF6RTV0VnVHUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQB4WytlzYLTjiiPTXZ70l0wZiasZrWD4RN3q2oIvnxBqxWhja0r6p2wFrC9 NabkFdi04Li96AEpOS/F/gvxRKigEfxnPNXXDkdeW1/tiyx5wlNP9AmZxyR+dEvj 4XzG1uCM2tjliAKOYTI6YTICV6AKvnmrIQg2U0OqQJRDjQm5zSQKNEqdz3IOoIJE CfWL5UfMDV+bQhEB8eI9VONsCHBXEEo4vUjAH+Udz/mNGNUdAbp4X4A9gXiRHojD gEDm8JwqmUULTdLxEZZsxJDq9Wq8joMWC39pLa9UrTAGS8FOPHO00k3Yo+Xagukx i3yG7h0PuyxPoCSeJ/vfHGeSztGH -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org