$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft File: _u9qfUSgfrkJ7anFbFkwXloFXbc.mft (raw, json) Hash identifier: 1HUtF60+IllxUd6n2H2Ip7uQ3y3dDPcEOKNOh9yt4j0= Subject key identifier: EA:52:71:DC:95:DD:D2:AE:4A:FF:4D:1A:06:08:94:17:53:48:1B:84 Authority key identifier: FE:EF:6A:7D:44:A0:7E:B9:09:ED:A9:C5:6C:59:30:5E:5A:05:5D:B7 Certificate issuer: /CN=FEEF6A7D44A07EB909EDA9C56C59305E5A055DB7 Certificate serial: 0961 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft Manifest number: 0961 Signing time: Sat 23 Aug 2025 21:13:43 +0000 Manifest this update: Sat 23 Aug 2025 21:13:43 +0000 Manifest next update: Mon 25 Aug 2025 21:13:43 +0000 Files and hashes: 1: _u9qfUSgfrkJ7anFbFkwXloFXbc.crl (hash: URwIUGacA4TNei1pwhXSI5Jjx6cYthDgLcUK8fDnB5I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2401 (0x961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEEF6A7D44A07EB909EDA9C56C59305E5A055DB7 Validity Not Before: Aug 23 21:13:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EA5271DC95DDD2AE4AFF4D1A0608941753481B84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:05:6f:74:a8:6c:8d:d0:25:96:c0:db:dc: f2:d5:a0:4c:28:0f:8d:87:e7:cb:3b:d7:4e:ed:24: 92:9a:e4:f4:e4:e9:bf:fd:3e:cd:58:73:8e:d2:68: 54:6d:ff:e6:18:bc:fe:e6:7e:3e:50:77:fe:04:8d: ab:d6:5d:0f:78:c1:ae:78:6d:2a:8e:5e:b3:1f:ce: 74:bb:1d:ef:08:33:e4:c1:86:bd:cb:c9:0b:de:66: 16:3e:93:23:63:8a:f5:db:7b:63:88:d0:e7:19:81: c7:d6:be:29:1e:a5:70:36:e9:bc:38:22:ee:c9:96: 53:d1:d5:45:92:6c:d3:6b:ee:bc:81:fb:e4:ad:c5: aa:db:ba:73:69:16:6d:72:c9:63:b5:48:2e:6d:f8: 30:ee:de:7e:2e:cc:09:2e:bd:7b:7c:4a:ee:f5:91: d1:4b:6c:e4:2e:d7:9f:06:ab:59:7f:9e:5d:fe:2e: 82:f6:8e:a7:4a:2d:ae:ff:1f:f3:08:f3:5f:7a:b3: af:4a:78:2b:a2:73:1f:e4:13:07:f9:29:64:d4:22: 1e:75:2c:65:95:37:08:55:16:46:48:75:fe:dc:fe: 02:10:d0:80:92:68:00:46:c8:f4:b0:0f:7e:52:af: ee:5c:79:de:fe:04:7d:c1:63:92:d2:45:8f:d7:22: 23:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:52:71:DC:95:DD:D2:AE:4A:FF:4D:1A:06:08:94:17:53:48:1B:84 X509v3 Authority Key Identifier: keyid:FE:EF:6A:7D:44:A0:7E:B9:09:ED:A9:C5:6C:59:30:5E:5A:05:5D:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:28:5d:fe:b0:f1:e5:30:f8:29:a3:c1:80:dd:6b:b0:27:d0: 77:b1:61:51:b8:2b:71:1c:b9:71:d1:d6:1b:02:a5:02:b9:85: 6f:2a:7e:62:a9:70:ee:2e:8f:f6:78:ca:bb:85:43:ce:6b:b2: 44:2c:94:d7:f1:33:2d:fd:62:b2:c8:1e:9e:9e:ea:98:c8:49: e7:3d:e2:f4:32:96:18:56:ba:f4:56:83:37:1d:74:33:66:89: 91:02:78:da:c6:6e:97:86:85:bc:c4:fe:d7:c4:22:62:28:8b: de:b3:9a:6a:2f:71:51:e1:7f:8b:16:2d:8b:57:5d:00:d0:46: 5c:df:4f:0f:02:91:da:91:f2:33:91:df:2f:22:5a:e6:ae:3b: ed:ec:2c:32:e5:70:46:2f:df:c9:21:7e:b1:c9:ec:4e:d8:bd: c5:ff:ec:5a:d3:62:67:5d:d5:f0:77:49:00:68:88:4d:d3:45: c0:a1:31:33:28:e9:6c:df:8c:ac:a3:a6:55:c7:2e:2c:33:26: 3a:1d:10:4e:e7:e9:97:ec:cf:1c:53:bc:e2:7e:d2:2d:9d:d6: 2b:11:cf:68:f5:d1:76:1f:08:db:68:0a:bb:5f:d2:4c:cf:c6: 9a:45:05:bd:e1:1d:7b:89:86:32:a7:57:2e:3e:0f:13:0b:8c: ac:70:95:65 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkVF RjZBN0Q0NEEwN0VCOTA5RURBOUM1NkM1OTMwNUU1QTA1NURCNzAeFw0yNTA4MjMy MTEzNDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVBNTI3MURDOTVEREQy QUU0QUZGNEQxQTA2MDg5NDE3NTM0ODFCODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVbQVvdKhsjdAllsDb3PLVoEwoD42H58s7107tJJKa5PTk6b/9 Ps1Yc47SaFRt/+YYvP7mfj5Qd/4EjavWXQ94wa54bSqOXrMfznS7He8IM+TBhr3L yQveZhY+kyNjivXbe2OI0OcZgcfWvikepXA26bw4Iu7JllPR1UWSbNNr7ryB++St xarbunNpFm1yyWO1SC5t+DDu3n4uzAkuvXt8Su71kdFLbOQu158Gq1l/nl3+LoL2 jqdKLa7/H/MI8196s69KeCuicx/kEwf5KWTUIh51LGWVNwhVFkZIdf7c/gIQ0ICS aABGyPSwD35Sr+5ced7+BH3BY5LSRY/XIiMbAgMBAAGjggILMIICBzAdBgNVHQ4E FgQU6lJx3JXd0q5K/00aBgiUF1NIG4QwHwYDVR0jBBgwFoAU/u9qfUSgfrkJ7anF bFkwXloFXbcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1VBTlRJ TkcvX3U5cWZVU2dmcmtKN2FuRmJGa3dYbG9GWGJjLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9fdTlxZlVTZ2Zya0o3YW5GYkZrd1hsb0ZYYmMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HVUFOVElORy9fdTlxZlVTZ2Zya0o3 YW5GYkZrd1hsb0ZYYmMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtShd/rDx5TD4KaPBgN1rsCfQd7FhUbgrcRy5cdHWGwKlArmFbyp+Yqlw7i6P 9njKu4VDzmuyRCyU1/EzLf1issgenp7qmMhJ5z3i9DKWGFa69FaDNx10M2aJkQJ4 2sZul4aFvMT+18QiYiiL3rOaai9xUeF/ixYti1ddANBGXN9PDwKR2pHyM5HfLyJa 5q477ewsMuVwRi/fySF+scnsTti9xf/sWtNiZ13V8HdJAGiITdNFwKExMyjpbN+M rKOmVccuLDMmOh0QTufpl+zPHFO84n7SLZ3WKxHPaPXRdh8I22gKu1/STM/GmkUF veEde4mGMqdXLj4PEwuMrHCVZQ== -----END CERTIFICATE-----Generated at Sun Aug 24 07:17:30 2025 by rpki-client