$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft File: Uptgbbhig71KCK9-sz7ziiVmMbs.mft (raw, json) Hash identifier: 8wulC3LVs67OA+tuOizm8XI8r2tzV0knPD0M3Fm106M= Subject key identifier: FE:AD:35:29:A5:99:ED:7B:16:CF:C4:44:3C:03:E1:43:93:77:56:1F Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0D67 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft Manifest number: 0CEF Signing time: Mon 28 Apr 2025 09:48:45 +0000 Manifest this update: Mon 28 Apr 2025 09:48:45 +0000 Manifest next update: Wed 30 Apr 2025 09:48:45 +0000 Files and hashes: 1: 7jkb-qiId542WFjMjFeCzShoCsU.roa (hash: v6F38azfqv6ngUvB3voCsiMTzNniwh26albKevr0xqk=) 2: 9XRt41blNePr5YhFGCZqfZojQqk.roa (hash: lTnK1TntsxV/PDMQhwSe8kvZNw8OO/W1qFXO4Xkv/vU=) 3: EQcTko4ZSBSFYOIYA4vRhsbkspo.roa (hash: v12oN9ik2bMxdrVcIJleYHCUPMHOyaVEHoj8fRa5uG0=) 4: F0hEG-Z8t4GrzNMoG5mOzIlvzLM.roa (hash: lrEYTeG35UK0y+HOoxv0o+gr+isfw3vVK4yhkeLwPII=) 5: JLqpo-JO2qKLUyN8fO9dQXnCpw4.roa (hash: ur/3v/H4FQMVJ1xFf+8IloTMZ+P5TknWGs3MAK+xu+M=) 6: OE6d0gfHOWNHjzeI-AcjYhHth7c.roa (hash: iBGFTaVS49pc+yfkaDBzQcOUjdYTJpz2lLaUJtgLd+U=) 7: T0-4OsbzDODDmQAvej-o-7oiGo4.roa (hash: 4qveo6fs12K/GTQ8LvFEO4HDQ+QKgkGggDZcNCfj32E=) 8: TEX5iHZOv1sEtWItlKM5QqU9cs8.roa (hash: KRMEYnYuQ6sz6J5E3y5O6KvuRJRegShC7z37S7gzDeI=) 9: TbTKJdlEVtUaIWi6LIISCuCh49s.roa (hash: 4oGJfMUB6dDeAr4ucBnBad65vcRingVvoqfqZXP2JPI=) 10: Uptgbbhig71KCK9-sz7ziiVmMbs.crl (hash: Rnj+f3hi4eQCqNJjXhr0Ms0iIVzG+fTaKfa/3SzOUj0=) 11: sGPtGlpFcIsz7r3UaPXra1bbjtQ.roa (hash: yIkE4iASlrLz5lfiq7zJuU62fUSiKIkuZFwNHrYjH1E=) 12: tmglbtPFD74N3wh3zRlzSfL7MFc.roa (hash: zS8nTYFLzdXIyKJHuyzzUJONZdixhGlL985MniBI5RE=) 13: uraxH9xjm7jxTO_7nX8dTBAwZfo.roa (hash: upqsyOY/01e7DyP3vBaEyIGHhjzN69Ce+LIajMVTzWU=) 14: whTzVAp3GmNkhn8stzQGz-0es48.roa (hash: q6KjinddlUW/GxutVfxJ5USBn0zKEc+Y5hgIl89ARrc=) 15: yurZnfV8GalIvW7pP9xN0gOO3FE.roa (hash: kB06K0PDVbQRohaGSjPZAqVnyFdiMfaNFekXyLcn65Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3431 (0xd67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Apr 28 09:48:45 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FEAD3529A599ED7B16CFC4443C03E1439377561F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:72:70:3c:c0:6e:bb:a7:f6:b9:c6:30:2e: 3c:ba:79:5c:0b:c2:60:e1:c4:21:51:16:88:8c:50: 6d:d1:e3:11:b6:cf:d1:3a:e7:ff:7a:6e:56:d2:65: cb:9c:f0:15:33:83:a3:e9:7f:b5:13:33:43:f8:8b: 54:92:3c:8d:b8:0f:a9:47:01:39:7e:3e:10:92:1a: 88:5e:72:c4:fd:ab:8a:3d:1e:7c:07:44:fc:bd:f9: 8a:b3:45:12:2f:57:a4:6b:ca:e4:f9:f6:30:a2:ce: ec:2b:42:ed:11:77:53:1c:f0:e0:5e:1e:0c:2c:b2: 6c:d7:01:87:3b:69:08:02:bb:f2:8b:88:e3:19:a3: 4e:6c:ab:b9:33:85:5d:e7:9a:98:d4:08:95:5b:35: d2:30:37:30:f7:9b:ab:46:1a:e1:4f:2f:2d:1a:b9: 5e:ef:18:b1:61:2f:43:91:1d:0e:7a:ac:a6:38:4f: 42:ff:be:65:de:bd:fc:91:c7:6c:a0:32:ea:d9:6f: ec:7b:b9:8c:a3:25:b5:0d:a8:04:a4:ba:ba:35:30: d8:be:99:20:d2:89:9f:24:69:23:7f:f3:de:77:71: 72:15:e8:97:a5:3b:3a:69:84:00:92:28:08:ed:ad: b4:cb:ef:3c:fe:1a:4a:90:99:6b:2a:1f:97:59:c0: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AD:35:29:A5:99:ED:7B:16:CF:C4:44:3C:03:E1:43:93:77:56:1F X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:e8:bd:b8:9b:c2:f4:0f:39:7a:78:d4:0f:68:76:26:40:57: 84:ca:e2:c6:37:13:5f:13:66:76:4a:10:e3:f0:09:a7:64:d9: 70:5c:a8:a7:72:74:c7:d6:03:5e:84:a3:42:3b:e5:27:a2:e2: aa:82:04:73:97:4b:49:1a:39:e9:e5:49:fd:15:49:00:1b:92: b7:0f:f9:9f:da:48:2c:68:8d:82:2f:7d:fa:e5:b8:68:a1:55: 66:e4:73:3b:d0:e5:67:21:0c:59:04:77:50:ed:15:c0:34:ab: 9f:e0:14:02:1d:35:d8:42:f7:a8:47:38:62:52:e7:5b:93:af: 3b:04:a4:92:fc:ca:39:1e:58:d3:46:73:af:50:6d:78:0b:81: 04:22:e2:df:38:67:65:a0:dd:39:9c:0e:d2:71:2e:88:c5:fc: 32:d5:91:ef:8b:38:ff:0e:99:7e:bf:53:fd:b3:99:f8:2a:8a: 93:48:a8:da:60:11:95:df:0b:8c:49:61:13:bb:fa:4f:39:7c: 7e:35:87:86:2c:0e:d8:0e:86:06:e8:e7:46:e4:0b:4e:97:d0: e4:4d:e6:ae:63:58:97:39:b3:90:a6:fa:b6:5a:e4:57:ac:5a: 65:b9:b8:6b:d1:46:13:23:b7:06:d6:9d:b5:0d:b3:49:22:70: d0:38:7a:1e -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNTA0Mjgw OTQ4NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZFQUQzNTI5QTU5OUVE N0IxNkNGQzQ0NDNDMDNFMTQzOTM3NzU2MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/qXJwPMBuu6f2ucYwLjy6eVwLwmDhxCFRFoiMUG3R4xG2z9E6 5/96blbSZcuc8BUzg6Ppf7UTM0P4i1SSPI24D6lHATl+PhCSGohecsT9q4o9HnwH RPy9+YqzRRIvV6RryuT59jCizuwrQu0Rd1Mc8OBeHgwssmzXAYc7aQgCu/KLiOMZ o05sq7kzhV3nmpjUCJVbNdIwNzD3m6tGGuFPLy0auV7vGLFhL0ORHQ56rKY4T0L/ vmXevfyRx2ygMurZb+x7uYyjJbUNqASkuro1MNi+mSDSiZ8kaSN/8953cXIV6Jel OzpphACSKAjtrbTL7zz+GkqQmWsqH5dZwCpPAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU/q01KaWZ7XsWz8REPAPhQ5N3Vh8wHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9VcHRnYmJoaWc3MUtDSzktc3o3 emlpVm1NYnMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOi9 uJvC9A85enjUD2h2JkBXhMrixjcTXxNmdkoQ4/AJp2TZcFyop3J0x9YDXoSjQjvl J6LiqoIEc5dLSRo56eVJ/RVJABuStw/5n9pILGiNgi99+uW4aKFVZuRzO9DlZyEM WQR3UO0VwDSrn+AUAh012EL3qEc4YlLnW5OvOwSkkvzKOR5Y00Zzr1BteAuBBCLi 3zhnZaDdOZwO0nEuiMX8MtWR74s4/w6Zfr9T/bOZ+CqKk0io2mARld8LjElhE7v6 Tzl8fjWHhiwO2A6GBujnRuQLTpfQ5E3mrmNYlzmzkKb6tlrkV6xaZbm4a9FGEyO3 BtadtQ2zSSJw0Dh6Hg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:42 2025 by rpki-client on console.sobornost.net