$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft File: rf5uVtr4SS7H3oizqQazE5tVuGQ.mft (raw, json) Hash identifier: MY24ElO1EieM+sM76BkURL80XOf5QmXYnSTbPXgMvWU= Subject key identifier: 88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9 Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 0801 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft Manifest number: 07A7 Signing time: Mon 28 Apr 2025 09:18:40 +0000 Manifest this update: Mon 28 Apr 2025 09:18:40 +0000 Manifest next update: Wed 30 Apr 2025 09:18:40 +0000 Files and hashes: 1: -y7v_Trn1n9Rb7_SPRRMT5L9ZjA.roa (hash: 3CaOKR/dyPZmxV7BOmD0hv7kcrJu1fKYxnAbCWUC1KE=) 2: 1njHPFIRqhgvdinSLQVdNZIp2lU.roa (hash: 6z62nz3oWYoSwlO10JIZe/7ts14MOb0XAI517WYJQys=) 3: 9zlG9Dhm15ge2BnwmKfX4v7kC-w.roa (hash: OpIxSsN+rPTudlFjDz05ES1dtcc55jbmsiOOCuEfAAI=) 4: JyCJhX6jS_XawEOk2jWY3vXdgVA.roa (hash: LB0XJ/o3UlYnuvwGV+diH9TVqgLnv0l/elpBRSxXnqM=) 5: XD0_u-GTFO6kzuoGMzI_5agq-Us.roa (hash: CPeqRHO7bLwmT1GZ99GfDU+FdIp2CYlv+LkPioY7Bzc=) 6: YG9PhQB75qOMZxI2-Oska8y7tvo.roa (hash: zAmQ1Z4Ow60RzNmpRXyzAI4TYTyPH7QUo9DQPNvNpM0=) 7: eH1OgS0Xfl4WF14JcdPDEY1iRdU.roa (hash: Qjii/aigzao5TZE5nMcOCEpML0knpFsHY4Jkk6TTIgc=) 8: qOeto0kUbQF8PRIEC39n3wsYKpI.roa (hash: yfHto0bWQTAWXsLIpjCjVphehJXZfxXNksOFQ26KhFQ=) 9: rf5uVtr4SS7H3oizqQazE5tVuGQ.crl (hash: PJbPPLlBsOrVFb8a0C0/AwpwzNcK16QwTQeta8lLWLI=) 10: x9t3qRJsQjRuusJVQDkSE2Hx6hk.roa (hash: 7RMR+5lRuvnBU+4Uy79pr+ZxLgjRuwxX0BKJTmR35ko=) 11: yLsCnJ0t-eFoZLoC4G3TYxK7Wk0.roa (hash: 2HgapwDJ3J1awEOgTYUTBVzu2Ubx5aFJ/+Hqtfr9zx4=) 12: zumu9GPTtAJ930_LtNa91sZRWRE.roa (hash: emV/hZUqGV44POn/SacyQh2pElyGfwr9ji9JuVU+n1g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Apr 28 09:18:40 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8854C401A81FA535EF84FCFF6D06C5F99F64EEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:1a:e9:4e:9f:e7:ed:30:87:19:fe:94:0e: 71:c2:dd:a0:b0:a2:52:3e:71:b9:2b:4a:0d:fc:88: 6e:aa:92:1b:5e:d7:5e:10:57:37:85:9d:f5:0c:ef: 14:d1:25:42:70:8e:ee:6a:87:f8:20:85:4f:58:31: 31:e4:87:18:67:09:2b:ae:8e:f0:69:d3:7d:0a:5b: bd:92:89:e2:40:f2:68:bf:c7:b7:bb:4b:18:7e:24: 7a:24:19:4f:80:95:56:c3:be:d3:e9:96:40:6f:46: 7b:61:09:87:c0:1d:5a:03:32:b7:a5:76:4a:6f:b4: f7:b8:52:01:63:6f:2c:e3:67:a8:7c:13:1f:37:66: de:c5:9d:9d:89:d8:02:04:a0:fd:e2:19:cf:c9:dd: d5:5b:84:b0:c9:4f:b2:59:25:e1:36:4b:0b:f8:16: 2f:55:9d:6e:c2:74:a8:6b:f5:95:98:f2:d1:11:0d: d5:9a:0a:42:fd:fa:3c:b2:fd:7f:a9:28:86:6a:4d: 35:29:c2:c1:b0:cf:70:b8:e3:53:02:c7:72:23:02: 0c:16:3a:9f:a1:cd:ea:4b:22:d8:b3:44:5b:1d:21: a6:55:ab:52:bf:97:5e:02:f3:75:8d:76:d2:bb:1b: 7f:67:0c:8e:e2:04:37:7a:06:98:80:4e:15:7d:4c: 61:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9 X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:91:81:ce:ec:a1:69:e8:c6:a6:f9:79:a8:a5:69:85:75:ae: ad:95:fc:16:b5:7d:5f:a8:bc:56:b3:ef:c6:0b:48:f2:5f:8c: f3:53:70:29:ad:f6:e0:5b:a1:3b:fe:aa:10:2a:ff:bb:da:f6: f7:85:5c:c8:8c:57:9d:86:14:6a:30:21:fb:fc:b9:c2:2b:0f: f5:b5:0b:69:0b:0e:24:d4:16:2a:bc:b8:84:72:6a:87:30:b7: e6:73:74:4b:9b:0f:76:1c:2f:23:ef:e2:e7:a0:79:93:27:63: 32:6f:24:3d:1c:b4:fc:ec:dd:e0:0c:34:b9:73:da:4e:31:44: 8c:33:1c:c3:a5:b4:89:75:7a:9a:7c:2a:03:ef:62:38:9c:8f: 62:0c:a5:41:e4:a4:16:ed:69:35:3b:58:b7:5d:82:21:73:be: 7c:c5:dc:b7:5d:c2:3c:9b:ea:fd:41:30:3b:bf:6c:3b:a1:7c: bb:c7:b0:36:41:da:1b:8a:ae:38:60:1f:cd:df:39:cd:cf:60: 0f:f3:1b:9c:52:df:94:ca:3b:8b:9a:46:46:b6:db:62:a6:09: 9c:2b:19:74:37:02:ce:cc:95:7f:f4:03:a6:4c:80:ca:12:06: 01:a5:95:96:b1:a4:99:f1:45:4e:f4:9c:27:46:5c:78:a5:6f: 68:d1:9b:84 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTA0Mjgw OTE4NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4NTRDNDAxQTgxRkE1 MzVFRjg0RkNGRjZEMDZDNUY5OUY2NEVFRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr3xrpTp/n7TCHGf6UDnHC3aCwolI+cbkrSg38iG6qkhte114Q VzeFnfUM7xTRJUJwju5qh/gghU9YMTHkhxhnCSuujvBp030KW72SieJA8mi/x7e7 Sxh+JHokGU+AlVbDvtPplkBvRnthCYfAHVoDMreldkpvtPe4UgFjbyzjZ6h8Ex83 Zt7FnZ2J2AIEoP3iGc/J3dVbhLDJT7JZJeE2Swv4Fi9VnW7CdKhr9ZWY8tERDdWa CkL9+jyy/X+pKIZqTTUpwsGwz3C441MCx3IjAgwWOp+hzepLItizRFsdIaZVq1K/ l14C83WNdtK7G39nDI7iBDd6BpiAThV9TGHPAgMBAAGjggINMIICCTAdBgNVHQ4E FgQUiFTEAagfpTXvhPz/bQbF+Z9k7vkwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL3JmNXVWdHI0U1M3 SDNvaXpxUWF6RTV0VnVHUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCVkYHO7KFp6Mam+XmopWmFda6tlfwWtX1fqLxWs+/GC0jyX4zzU3Aprfbg W6E7/qoQKv+72vb3hVzIjFedhhRqMCH7/LnCKw/1tQtpCw4k1BYqvLiEcmqHMLfm c3RLmw92HC8j7+LnoHmTJ2MybyQ9HLT87N3gDDS5c9pOMUSMMxzDpbSJdXqafCoD 72I4nI9iDKVB5KQW7Wk1O1i3XYIhc758xdy3XcI8m+r9QTA7v2w7oXy7x7A2Qdob iq44YB/N3znNz2AP8xucUt+UyjuLmkZGtttipgmcKxl0NwLOzJV/9AOmTIDKEgYB pZWWsaSZ8UVO9JwnRlx4pW9o0ZuE -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net