$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.mft File: V4GDoP5dpKDzwFRvtuwmy9EjL5k.mft (raw, json) Hash identifier: 9yA+/Umruogh9E5+Jy1whlu8sLoPrRRv5Vgh/mXO1Es= Subject key identifier: 00:51:DA:18:39:1A:E4:0B:13:6B:79:4F:92:1E:52:EA:A0:C6:4A:D8 Authority key identifier: 57:81:83:A0:FE:5D:A4:A0:F3:C0:54:6F:B6:EC:26:CB:D1:23:2F:99 Certificate issuer: /CN=578183A0FE5DA4A0F3C0546FB6EC26CBD1232F99 Certificate serial: 03B3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.mft Manifest number: 03A6 Signing time: Thu 03 Jul 2025 09:31:58 +0000 Manifest this update: Thu 03 Jul 2025 09:31:58 +0000 Manifest next update: Sat 05 Jul 2025 09:31:58 +0000 Files and hashes: 1: V4GDoP5dpKDzwFRvtuwmy9EjL5k.crl (hash: 3MM8B+jb+P2/KRH9srELIaPpfrcHUSciZ3CYKsSzsHo=) 2: nB9DPaSAl4WWARVMno0IFv4VL0o.roa (hash: FtnXWQ45J4Kdz4ELabJLuKUuZAnWW9qzClU0cpxTd8s=) 3: y3oP7rnzSDHbvaCd6s1aqAIJBJs.roa (hash: Udr7ihlAgoDMlgUSFmNc2j7ibIPgZKQ5bvhGfjXw988=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578183A0FE5DA4A0F3C0546FB6EC26CBD1232F99 Validity Not Before: Jul 3 09:31:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0051DA18391AE40B136B794F921E52EAA0C64AD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:b4:84:75:82:c3:a5:fd:38:af:34:1d:b9: ec:59:c3:17:53:57:b5:a1:a5:05:0b:93:57:17:97: 2e:16:92:fd:20:d4:9d:36:4f:59:0a:18:70:b4:f3: ba:42:4e:cb:07:e7:4c:d0:76:8a:95:6b:5e:12:4b: 54:d2:cb:de:65:c9:a7:44:6e:75:08:da:bf:ac:f5: 63:83:5f:0c:22:01:8d:af:dc:18:8c:25:59:b4:2f: b3:1d:f0:cc:8f:e5:08:16:5e:a5:0c:16:33:d4:92: 07:a1:be:df:d0:ad:8f:95:22:55:fc:52:93:41:c1: 4a:da:0a:06:71:ae:9f:b5:76:6a:3a:aa:1e:76:c5: 7b:f5:dd:78:9e:49:a5:d0:2d:f7:f3:b5:4e:11:5a: 82:25:18:31:39:9f:b7:4a:37:4e:b2:6e:21:5b:b4: e9:4d:83:d4:36:d8:b0:bb:a6:ba:24:7e:d9:e6:a6: 85:13:27:87:ea:26:63:63:91:50:5e:4f:e4:14:e4: 23:62:95:03:61:42:3c:11:86:05:ea:d3:70:50:66: 11:55:a5:ed:dc:d7:8b:27:4a:06:86:86:bd:07:fd: 34:ec:5d:ad:39:c5:39:a1:04:cf:81:a2:a2:d4:ac: 1c:78:b0:a9:87:f1:5e:41:44:a2:99:70:4e:d9:54: 0d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:51:DA:18:39:1A:E4:0B:13:6B:79:4F:92:1E:52:EA:A0:C6:4A:D8 X509v3 Authority Key Identifier: keyid:57:81:83:A0:FE:5D:A4:A0:F3:C0:54:6F:B6:EC:26:CB:D1:23:2F:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:13:0e:f7:b4:1d:b2:5a:b3:cb:ba:1a:42:8b:22:9c:93:1d: 26:87:1e:ce:db:54:1a:ee:c2:8a:12:b1:50:26:9b:29:35:c0: cf:92:58:1c:be:e5:9f:48:d9:1f:1e:33:92:4f:9b:58:bd:5e: a8:1d:83:37:7a:f5:db:54:f3:d7:18:8e:54:d7:29:c2:5f:a0: 88:0c:37:39:9f:ee:bd:b0:e7:ab:fb:20:57:74:40:9a:84:0a: 7c:74:b6:3e:13:ab:fe:f3:2f:46:76:8e:a7:88:0d:1b:27:3a: ea:39:f2:d9:5e:13:a9:38:7d:ba:af:6a:61:48:87:01:46:08: fb:d4:b7:2c:8e:e1:61:47:da:9c:88:d7:6e:e7:12:e9:09:2f: ab:9e:71:ff:9e:14:2c:6b:30:17:74:c4:c3:d1:ab:d7:72:b0: 59:da:1b:6e:a7:7e:9d:e5:fe:2a:6e:10:75:c3:4f:ac:fd:3b: 2e:ca:f2:64:2b:f4:7d:01:af:3d:7f:0f:d4:bd:d4:78:8d:9e: d9:8c:6c:2c:b5:04:74:4a:25:95:a5:5a:40:3e:d9:72:a8:f6: 7d:03:a8:00:c7:72:d6:01:0b:af:da:ef:27:8e:3a:96:5c:ea: a2:39:a1:78:56:5f:0b:4c:22:ad:fc:12:72:60:32:bf:bb:40: ae:b1:6e:0c -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTc4 MTgzQTBGRTVEQTRBMEYzQzA1NDZGQjZFQzI2Q0JEMTIzMkY5OTAeFw0yNTA3MDMw OTMxNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAwNTFEQTE4MzkxQUU0 MEIxMzZCNzk0RjkyMUU1MkVBQTBDNjRBRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPQLSEdYLDpf04rzQduexZwxdTV7WhpQULk1cXly4Wkv0g1J02 T1kKGHC087pCTssH50zQdoqVa14SS1TSy95lyadEbnUI2r+s9WODXwwiAY2v3BiM JVm0L7Md8MyP5QgWXqUMFjPUkgehvt/QrY+VIlX8UpNBwUraCgZxrp+1dmo6qh52 xXv13XieSaXQLffztU4RWoIlGDE5n7dKN06ybiFbtOlNg9Q22LC7prokftnmpoUT J4fqJmNjkVBeT+QU5CNilQNhQjwRhgXq03BQZhFVpe3c14snSgaGhr0H/TTsXa05 xTmhBM+BoqLUrBx4sKmH8V5BRKKZcE7ZVA0BAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUAFHaGDka5AsTa3lPkh5S6qDGStgwHwYDVR0jBBgwFoAUV4GDoP5dpKDzwFRv tuwmy9EjL5kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEz ODQ3MC9WNEdEb1A1ZHBLRHp3RlJ2dHV3bXk5RWpMNWsuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1Y0R0RvUDVkcEtEendGUnZ0dXdteTlFakw1ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDUDExMzg0NzAvVjRHRG9QNWRw S0R6d0ZSdnR1d215OUVqTDVrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFQTDve0HbJas8u6GkKLIpyTHSaHHs7bVBruwooSsVAmmyk1wM+SWBy+ 5Z9I2R8eM5JPm1i9Xqgdgzd69dtU89cYjlTXKcJfoIgMNzmf7r2w56v7IFd0QJqE Cnx0tj4Tq/7zL0Z2jqeIDRsnOuo58tleE6k4fbqvamFIhwFGCPvUtyyO4WFH2pyI 127nEukJL6uecf+eFCxrMBd0xMPRq9dysFnaG26nfp3l/ipuEHXDT6z9Oy7K8mQr 9H0Brz1/D9S91HiNntmMbCy1BHRKJZWlWkA+2XKo9n0DqADHctYBC6/a7yeOOpZc 6qI5oXhWXwtMIq38EnJgMr+7QK6xbgw= -----END CERTIFICATE-----Generated at Fri Jul 4 14:46:56 2025 by rpki-client