$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/ma5DqX1RxaFOESh6mAJMNqWZN3s.mft File: ma5DqX1RxaFOESh6mAJMNqWZN3s.mft (raw, json) Hash identifier: c7bZsGfs/NDTWFFr+9MymyQVeW+3SNBeiIrJErYnoYs= Subject key identifier: 16:12:C5:FC:BD:EF:C3:5F:62:80:34:BC:D2:93:E4:49:B8:F5:FD:FF Authority key identifier: 99:AE:43:A9:7D:51:C5:A1:4E:11:28:7A:98:02:4C:36:A5:99:37:7B Certificate issuer: /CN=99AE43A97D51C5A14E11287A98024C36A599377B Certificate serial: 0258 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ma5DqX1RxaFOESh6mAJMNqWZN3s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/ma5DqX1RxaFOESh6mAJMNqWZN3s.mft Manifest number: 0256 Signing time: Sat 17 May 2025 21:53:23 +0000 Manifest this update: Sat 17 May 2025 21:53:23 +0000 Manifest next update: Mon 19 May 2025 21:53:23 +0000 Files and hashes: 1: Ri4EDmMU8hnITkeGSJh6Bfsklyc.roa (hash: 3e8cDVdQdP9DH/+zuYx+YgQLHjdmoY/V5+6TGb93H2M=) 2: ma5DqX1RxaFOESh6mAJMNqWZN3s.crl (hash: p5kqkCUgpP5kur+FPHyAcF7J0DxO+4gLci03Y6v4XZI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/ma5DqX1RxaFOESh6mAJMNqWZN3s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/ma5DqX1RxaFOESh6mAJMNqWZN3s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ma5DqX1RxaFOESh6mAJMNqWZN3s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 04:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99AE43A97D51C5A14E11287A98024C36A599377B Validity Not Before: May 17 21:53:23 2025 GMT Not After : Oct 8 15:30:19 2025 GMT Subject: CN=1612C5FCBDEFC35F628034BCD293E449B8F5FDFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a6:39:79:46:b9:74:65:4b:8b:c9:dc:7a:d8: b4:dc:e8:61:fe:fb:11:55:eb:60:a1:3b:73:b3:fa: 8e:b4:33:e3:0e:60:cb:b5:5d:40:48:50:f7:01:eb: 51:b6:ec:bd:ae:32:8f:7d:33:8b:ce:32:b7:2b:a5: 61:89:ad:49:19:d6:26:05:27:bc:5c:28:b6:42:17: 46:27:a7:16:f6:f0:6d:9a:bc:ab:da:01:74:33:69: 8b:bc:f7:67:2d:9f:ca:a3:aa:2c:1b:c0:db:8b:ff: 5c:56:8f:3a:10:5f:39:b2:d2:9c:74:76:c2:5c:43: fc:4d:03:1d:9b:00:57:b3:3b:cf:87:ef:a3:59:58: 10:fe:09:88:06:dc:e6:41:51:0d:d8:d8:13:11:68: 55:b7:53:10:aa:e8:ce:eb:f5:5d:4f:bb:b2:e2:66: c3:83:5a:c7:1c:dc:33:76:66:c4:0e:9e:31:12:a1: 5e:42:23:18:c9:95:e3:1d:81:ee:c1:fe:83:50:14: 46:d8:23:ba:4d:18:39:8d:1f:ee:42:fd:1b:05:fe: a6:24:93:b9:0f:8f:02:25:0c:ed:1b:4c:d5:d5:28: cc:d6:46:40:13:f3:48:96:ec:fc:50:dc:57:c9:da: b4:eb:a3:6b:e1:91:57:fa:bc:ee:70:4e:02:d4:44: 40:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:12:C5:FC:BD:EF:C3:5F:62:80:34:BC:D2:93:E4:49:B8:F5:FD:FF X509v3 Authority Key Identifier: keyid:99:AE:43:A9:7D:51:C5:A1:4E:11:28:7A:98:02:4C:36:A5:99:37:7B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/ma5DqX1RxaFOESh6mAJMNqWZN3s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ma5DqX1RxaFOESh6mAJMNqWZN3s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/ma5DqX1RxaFOESh6mAJMNqWZN3s.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:6b:f5:fe:b1:f9:48:ba:ce:4c:fe:de:7b:55:68:62:d9:db: 56:6a:e7:8d:85:35:b4:94:5e:11:db:7b:13:49:37:43:14:bf: 30:24:b4:4c:c5:cd:c8:a1:4b:09:55:3d:45:b4:4b:a4:c5:a2: 9b:23:be:d0:4e:35:5b:8c:7c:a2:c4:3f:d3:06:90:5d:b9:50: da:06:19:d5:2c:84:71:e3:2f:d6:24:d6:2f:4c:2d:ea:15:f8: b5:0a:f0:1c:57:47:d4:fe:1b:b1:e5:df:21:c3:78:69:6c:a8: d2:e8:b9:f2:f9:08:b2:ed:d6:fa:b6:3f:ba:81:58:ea:df:12: d5:c6:12:be:df:de:36:39:c3:e7:93:ce:0a:6d:59:65:db:42: 72:c2:44:49:5b:20:fe:b5:f0:1e:c2:3a:12:e6:e7:19:bc:7a: ef:8e:e8:a0:2f:b7:81:2b:f0:3c:1e:ce:72:81:b0:d2:bf:be: ae:80:43:d4:e8:c4:0a:96:86:9c:d2:12:29:a7:15:83:7d:6b: fc:c9:d8:31:63:30:05:2a:ac:c5:b7:15:fe:43:cd:e1:f6:4c: 8b:52:64:04:54:87:14:43:c0:5f:37:9e:a5:01:f8:3c:91:9c: 66:be:19:e6:c5:ee:58:94:52:f4:48:4d:3e:7e:51:e5:2f:98: 38:12:60:93 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTlB RTQzQTk3RDUxQzVBMTRFMTEyODdBOTgwMjRDMzZBNTk5Mzc3QjAeFw0yNTA1MTcy MTUzMjNaFw0yNTEwMDgxNTMwMTlaMDMxMTAvBgNVBAMTKDE2MTJDNUZDQkRFRkMz NUY2MjgwMzRCQ0QyOTNFNDQ5QjhGNUZERkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3pjl5Rrl0ZUuLydx62LTc6GH++xFV62ChO3Oz+o60M+MOYMu1 XUBIUPcB61G27L2uMo99M4vOMrcrpWGJrUkZ1iYFJ7xcKLZCF0Ynpxb28G2avKva AXQzaYu892ctn8qjqiwbwNuL/1xWjzoQXzmy0px0dsJcQ/xNAx2bAFezO8+H76NZ WBD+CYgG3OZBUQ3Y2BMRaFW3UxCq6M7r9V1Pu7LiZsODWscc3DN2ZsQOnjESoV5C IxjJleMdge7B/oNQFEbYI7pNGDmNH+5C/RsF/qYkk7kPjwIlDO0bTNXVKMzWRkAT 80iW7PxQ3FfJ2rTro2vhkVf6vO5wTgLURED3AgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUFhLF/L3vw19igDS80pPkSbj1/f8wHwYDVR0jBBgwFoAUma5DqX1RxaFOESh6 mAJMNqWZN3swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVTU1Z VEVDSC9tYTVEcVgxUnhhRk9FU2g2bUFKTU5xV1pOM3MuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL21hNURxWDFSeGFGT0VTaDZtQUpNTnFXWk4zcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVU1NWVRFQ0gvbWE1RHFYMVJ4 YUZPRVNoNm1BSk1OcVdaTjNzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC9r9f6x+Ui6zkz+3ntVaGLZ21Zq542FNbSUXhHbexNJN0MUvzAktEzF zcihSwlVPUW0S6TFopsjvtBONVuMfKLEP9MGkF25UNoGGdUshHHjL9Yk1i9MLeoV +LUK8BxXR9T+G7Hl3yHDeGlsqNLoufL5CLLt1vq2P7qBWOrfEtXGEr7f3jY5w+eT zgptWWXbQnLCRElbIP618B7COhLm5xm8eu+O6KAvt4Er8DweznKBsNK/vq6AQ9To xAqWhpzSEimnFYN9a/zJ2DFjMAUqrMW3Ff5DzeH2TItSZARUhxRDwF83nqUB+DyR nGa+GebF7liUUvRITT5+UeUvmDgSYJM= -----END CERTIFICATE-----Generated at Mon May 19 00:58:49 2025 by rpki-client