$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft File: v7t_e1xYMjSQh1hJuO3aSV7xexs.mft (raw, json) Hash identifier: s51lIpjthu+VBJ4fCQLtVUeZAYjaJtKdY42jcMZEY0Q= Subject key identifier: EB:9F:C0:C7:05:C1:F8:69:06:83:28:68:90:C1:29:62:0C:C6:AD:C1 Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B Certificate serial: 0449 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft Manifest number: 042C Signing time: Sun 02 Jun 2024 04:43:09 +0000 Manifest this update: Sun 02 Jun 2024 04:43:09 +0000 Manifest next update: Tue 04 Jun 2024 04:43:09 +0000 Files and hashes: 1: DaLynGVT0tqmGvxW4TLGTWMHMNM.roa (hash: IOX0x2AKuPaRIu/3tNk9tZi/8/LAZH1LmCvvEmPm4Uw=) 2: QuYR4x9mrMnHwL0n0UOKF6oiMPU.roa (hash: KCctCGNzXlTR5QK8ztN6GaHds7YbMpQiGxsbfkvZax8=) 3: S-5haFp8wkAygh0SRxedQq7qahs.roa (hash: ChwbfZ89FQ4rM5VYhIi3lGZ1oSqm+6JiV6Bt69ujA3A=) 4: e3wrnYmY4K-abUHTRsxZL5Doooo.roa (hash: DBKnm1QAMNziaZPYLuqn2JnI1GKJLxh3Amv2IixWQjc=) 5: e8a_JUiZ3U8chHX_lV6Uz74kwYU.roa (hash: E6SBkMGQWkCPEC7S2C56ol4qQnny1amALz0wx44sqyM=) 6: kVYEAxfMpAW6iPwJT9one9TViOc.roa (hash: AOuO/TpTDb9mtVsXigEOAs0wpxxZsbogYAkZXp9zVs0=) 7: v7t_e1xYMjSQh1hJuO3aSV7xexs.crl (hash: 6+QJTG/UNNaFrz/R7DO8yRsoUzLvqZNNWFD8tTTi4+4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B Validity Not Before: Jun 2 04:43:09 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EB9FC0C705C1F8690683286890C129620CC6ADC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f7:29:bc:05:87:a3:da:ad:ea:44:56:1b:6e: e3:b1:b8:0d:62:64:10:e9:b6:98:e8:9c:31:0a:2b: b1:99:e8:a5:ad:2f:98:a7:8c:f4:ed:0e:98:ce:fc: 96:67:0f:72:76:be:90:5a:c3:33:3e:76:fe:b4:55: 19:fc:c2:36:ab:55:3d:ba:ea:c8:28:bd:56:1e:1c: 44:dc:73:78:20:cd:ed:13:e2:b3:b8:10:5d:10:7a: b8:39:ec:74:f2:08:76:ac:d1:91:a1:a8:8a:28:5e: f8:06:f6:e1:d1:96:15:2a:b2:cc:e6:36:db:03:44: 3b:34:33:94:8e:d9:ea:db:0d:62:2e:8e:20:be:81: 2e:ec:9a:a4:8d:d5:02:99:02:d2:80:d8:77:4e:08: 48:09:c9:74:aa:c7:25:28:b1:56:e0:94:78:6f:07: 50:52:00:8c:bb:c1:52:13:1d:13:56:35:d1:c3:90: 98:7e:97:24:5a:42:75:a9:59:6a:b5:da:cd:a4:18: dd:ba:5d:1d:10:35:88:56:65:5a:62:79:04:77:7a: 85:eb:9b:b5:83:14:d7:1b:e2:dc:9e:04:82:32:7d: 2e:36:38:a1:0d:78:1a:d2:6e:53:ff:89:02:52:d0: 46:fd:c5:a4:b5:54:c1:08:60:c9:ba:24:71:dd:c6: b7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9F:C0:C7:05:C1:F8:69:06:83:28:68:90:C1:29:62:0C:C6:AD:C1 X509v3 Authority Key Identifier: keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:94:1f:f9:47:13:76:d7:1c:84:4a:b8:0b:3f:9b:64:5a:5a: cc:54:af:29:21:8d:33:fc:01:de:36:7d:2d:3a:95:f1:ab:21: 26:c8:25:62:79:6b:80:61:8d:de:d4:15:f9:70:48:4a:20:a8: de:5d:a1:56:8a:b1:62:08:11:28:27:8a:81:b7:4f:c7:bd:97: 5d:19:d6:58:a8:db:54:36:af:bb:a0:50:62:59:b1:f3:e6:4c: dd:ff:55:db:ae:15:06:18:20:21:1d:16:cb:f8:25:50:06:ac: 57:90:ff:ae:54:aa:d0:72:81:3e:ca:f4:5c:21:fd:6e:81:73: 7a:76:f5:86:bf:4c:56:ec:65:e5:79:7d:dc:a4:96:74:6c:67: eb:0e:36:85:9d:f3:bf:ef:6a:7a:53:05:85:31:b1:eb:1c:80: 41:36:ee:b7:45:29:46:05:1f:d9:6d:34:12:25:c4:eb:04:6d: 30:d2:a0:00:af:bc:39:3c:2a:ba:75:fa:5d:0b:33:32:05:57: 37:dd:0c:52:4d:c0:37:ce:c9:f5:47:31:8e:9a:53:8e:53:cd: 3a:7b:3e:ce:83:d9:ce:03:ff:5a:d1:0e:d8:eb:07:81:8d:e3: cf:75:d5:f8:d7:e9:83:98:48:8f:28:f3:34:77:f3:51:61:43: 14:bd:f4:7d -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkZC QjdGN0I1QzU4MzIzNDkwODc1ODQ5QjhFRERBNDk1RUYxN0IxQjAeFw0yNDA2MDIw NDQzMDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVCOUZDMEM3MDVDMUY4 NjkwNjgzMjg2ODkwQzEyOTYyMENDNkFEQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM9ym8BYej2q3qRFYbbuOxuA1iZBDptpjonDEKK7GZ6KWtL5in jPTtDpjO/JZnD3J2vpBawzM+dv60VRn8wjarVT266sgovVYeHETcc3ggze0T4rO4 EF0Qerg57HTyCHas0ZGhqIooXvgG9uHRlhUqsszmNtsDRDs0M5SO2erbDWIujiC+ gS7smqSN1QKZAtKA2HdOCEgJyXSqxyUosVbglHhvB1BSAIy7wVITHRNWNdHDkJh+ lyRaQnWpWWq12s2kGN26XR0QNYhWZVpieQR3eoXrm7WDFNcb4tyeBIIyfS42OKEN eBrSblP/iQJS0Eb9xaS1VMEIYMm6JHHdxrdtAgMBAAGjggIBMIIB/TAdBgNVHQ4E FgQU65/AxwXB+GkGgyhokMEpYgzGrcEwHwYDVR0jBBgwFoAUv7t/e1xYMjSQh1hJ uO3aSV7xexswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL3Y3 dF9lMXhZTWpTUWgxaEp1TzNhU1Y3eGV4cy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev djd0X2UxeFlNalNRaDFoSnVPM2FTVjd4ZXhzLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL3Y3dF9lMXhZTWpTUWgxaEp1TzNhU1Y3 eGV4cy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDClB/5RxN2 1xyESrgLP5tkWlrMVK8pIY0z/AHeNn0tOpXxqyEmyCVieWuAYY3e1BX5cEhKIKje XaFWirFiCBEoJ4qBt0/HvZddGdZYqNtUNq+7oFBiWbHz5kzd/1XbrhUGGCAhHRbL +CVQBqxXkP+uVKrQcoE+yvRcIf1ugXN6dvWGv0xW7GXleX3cpJZ0bGfrDjaFnfO/ 72p6UwWFMbHrHIBBNu63RSlGBR/ZbTQSJcTrBG0w0qAAr7w5PCq6dfpdCzMyBVc3 3QxSTcA3zsn1RzGOmlOOU806ez7Og9nOA/9a0Q7Y6weBjePPddX41+mDmEiPKPM0 d/NRYUMUvfR9 -----END CERTIFICATE-----Generated at Mon Jun 3 04:22:04 2024 by rpki-client on console-ams.rpki-client.org