$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BOT/Kn9vIkC0LSu8Df78l2yrIJHEfsc.mft File: Kn9vIkC0LSu8Df78l2yrIJHEfsc.mft (raw, json) Hash identifier: NCRWqgyqElR+IgYtZKr5HmtIVZjsUh2LR95IpSS6GY4= Subject key identifier: 89:FB:23:6E:3F:F8:97:93:22:55:DF:46:95:D4:15:E2:21:89:F5:A5 Authority key identifier: 2A:7F:6F:22:40:B4:2D:2B:BC:0D:FE:FC:97:6C:AB:20:91:C4:7E:C7 Certificate issuer: /CN=2A7F6F2240B42D2BBC0DFEFC976CAB2091C47EC7 Certificate serial: 0D05 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Kn9vIkC0LSu8Df78l2yrIJHEfsc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BOT/Kn9vIkC0LSu8Df78l2yrIJHEfsc.mft Manifest number: 0D05 Signing time: Sat 23 Aug 2025 21:15:44 +0000 Manifest this update: Sat 23 Aug 2025 21:15:44 +0000 Manifest next update: Mon 25 Aug 2025 21:15:44 +0000 Files and hashes: 1: Kn9vIkC0LSu8Df78l2yrIJHEfsc.crl (hash: D6HlYmobc94RTcEVfIjR+5WSFYppJw+QQZTtZtF/ZHM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BOT/Kn9vIkC0LSu8Df78l2yrIJHEfsc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BOT/Kn9vIkC0LSu8Df78l2yrIJHEfsc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Kn9vIkC0LSu8Df78l2yrIJHEfsc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3333 (0xd05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A7F6F2240B42D2BBC0DFEFC976CAB2091C47EC7 Validity Not Before: Aug 23 21:15:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=89FB236E3FF897932255DF4695D415E22189F5A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:17:fe:4b:23:05:0f:0e:b3:e6:9d:69:13: ed:c6:43:c0:62:8e:86:08:f8:11:fc:6e:30:76:d9: b0:a2:de:9d:e6:61:67:b7:7f:32:3e:ac:7c:78:b1: c4:50:6a:3d:20:2d:77:ad:45:ea:5a:ec:55:11:ce: ff:24:b7:ad:58:0d:7f:e7:ef:1b:2b:15:e5:8a:c5: 89:28:a4:25:da:7e:34:f1:68:51:b1:ad:5f:05:b7: 8d:70:15:3f:01:34:59:8e:7d:23:ff:7d:49:b5:4f: 12:64:59:eb:89:e2:92:e8:48:50:3a:96:f9:c9:e7: fd:79:e4:59:7a:a5:2f:60:8a:2f:93:92:6d:64:91: f3:a9:65:ac:ca:9f:47:52:de:55:32:77:d3:bb:1b: a4:9b:55:ca:9a:3c:b5:1d:e0:71:76:e6:e7:b5:12: 93:45:4c:4e:c0:ec:aa:2f:a3:d3:0c:36:fc:6d:62: 59:d4:e4:62:df:b0:3f:53:10:ee:4e:de:cb:5b:b3: 48:b3:12:22:7b:2a:9c:a3:b2:21:b4:48:06:bb:e8: f8:cb:ad:e6:93:37:f5:ac:41:5e:ca:66:fa:ef:8e: 25:4e:b5:f5:f8:0b:95:93:c9:57:f9:28:3a:d4:ee: ca:29:0e:c1:cf:8f:67:e0:1e:d8:06:02:8b:d6:b6: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FB:23:6E:3F:F8:97:93:22:55:DF:46:95:D4:15:E2:21:89:F5:A5 X509v3 Authority Key Identifier: keyid:2A:7F:6F:22:40:B4:2D:2B:BC:0D:FE:FC:97:6C:AB:20:91:C4:7E:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BOT/Kn9vIkC0LSu8Df78l2yrIJHEfsc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Kn9vIkC0LSu8Df78l2yrIJHEfsc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BOT/Kn9vIkC0LSu8Df78l2yrIJHEfsc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9f:69:ca:65:87:fe:9c:31:e6:0d:08:1b:4e:6e:28:78:6b: 85:3a:6d:de:36:a8:e0:84:dd:c2:37:62:8a:fd:b1:04:f2:ef: 1b:75:ea:b3:1e:7e:b7:86:8a:6d:1e:2c:d1:ba:d0:ba:0c:d8: 58:4f:57:4f:02:e8:2a:44:74:9f:43:22:19:6d:6f:67:5f:e4: 99:4b:1f:e9:9d:8f:94:f4:d0:af:40:2d:64:10:0f:8b:aa:44: d0:79:aa:6e:79:6c:67:1c:61:cc:48:9e:29:f8:01:e3:72:86: 40:cc:cf:fd:8e:2d:e2:dc:7e:51:2a:0a:a1:96:19:30:29:26: f1:90:f1:86:a3:51:69:73:06:6f:30:d5:eb:7e:41:6c:e4:8b: d8:99:8b:52:9c:be:20:ec:47:96:b8:c5:79:34:2c:e5:b7:6f: 97:28:9e:ae:61:9b:66:63:4e:32:f8:b3:ac:24:2d:b0:38:58: dc:e2:0a:00:fd:a5:6b:e2:d5:6a:5f:6e:8b:cd:24:72:5b:97: 92:27:d6:04:b5:44:11:11:25:50:25:1d:eb:1a:b9:fe:8a:c9: e7:bc:3d:bc:aa:30:2f:1c:99:f2:5a:06:b6:04:41:69:a5:07: cf:36:d2:c6:7c:d0:40:d0:8e:eb:40:03:ba:42:15:b1:00:2e: c6:70:70:56 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 RjZGMjI0MEI0MkQyQkJDMERGRUZDOTc2Q0FCMjA5MUM0N0VDNzAeFw0yNTA4MjMy MTE1NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg5RkIyMzZFM0ZGODk3 OTMyMjU1REY0Njk1RDQxNUUyMjE4OUY1QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCowBf+SyMFDw6z5p1pE+3GQ8BijoYI+BH8bjB22bCi3p3mYWe3 fzI+rHx4scRQaj0gLXetRepa7FURzv8kt61YDX/n7xsrFeWKxYkopCXafjTxaFGx rV8Ft41wFT8BNFmOfSP/fUm1TxJkWeuJ4pLoSFA6lvnJ5/155Fl6pS9gii+Tkm1k kfOpZazKn0dS3lUyd9O7G6SbVcqaPLUd4HF25ue1EpNFTE7A7Kovo9MMNvxtYlnU 5GLfsD9TEO5O3stbs0izEiJ7KpyjsiG0SAa76PjLreaTN/WsQV7KZvrvjiVOtfX4 C5WTyVf5KDrU7sopDsHPj2fgHtgGAovWti0rAgMBAAGjggIBMIIB/TAdBgNVHQ4E FgQUifsjbj/4l5MiVd9GldQV4iGJ9aUwHwYDVR0jBBgwFoAUKn9vIkC0LSu8Df78 l2yrIJHEfscwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQk9UL0tu OXZJa0MwTFN1OERmNzhsMnlySUpIRWZzYy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev S245dklrQzBMU3U4RGY3OGwyeXJJSkhFZnNjLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvQk9UL0tuOXZJa0MwTFN1OERmNzhsMnlySUpI RWZzYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfn2nKZYf+ nDHmDQgbTm4oeGuFOm3eNqjghN3CN2KK/bEE8u8bdeqzHn63hoptHizRutC6DNhY T1dPAugqRHSfQyIZbW9nX+SZSx/pnY+U9NCvQC1kEA+LqkTQeapueWxnHGHMSJ4p +AHjcoZAzM/9ji3i3H5RKgqhlhkwKSbxkPGGo1FpcwZvMNXrfkFs5IvYmYtSnL4g 7EeWuMV5NCzlt2+XKJ6uYZtmY04y+LOsJC2wOFjc4goA/aVr4tVqX26LzSRyW5eS J9YEtUQRESVQJR3rGrn+isnnvD28qjAvHJnyWga2BEFppQfPNtLGfNBA0I7rQAO6 QhWxAC7GcHBW -----END CERTIFICATE-----Generated at Sun Aug 24 01:27:21 2025 by rpki-client