$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft File: CcNLispiD2KMeh5oIUQO7mgOTNg.mft (raw, json) Hash identifier: 81RfuZ9/5cUC+i3ksHEpVKg+0gvb7Smy/LRLAqHbRZc= Subject key identifier: 1C:BA:7D:EC:BE:64:D6:CB:9C:5C:26:38:EC:FB:96:7C:1E:A4:FC:8E Authority key identifier: 09:C3:4B:8A:CA:62:0F:62:8C:7A:1E:68:21:44:0E:EE:68:0E:4C:D8 Certificate issuer: /CN=09C34B8ACA620F628C7A1E6821440EEE680E4CD8 Certificate serial: F0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft Manifest number: EE Signing time: Thu 03 Jul 2025 11:03:17 +0000 Manifest this update: Thu 03 Jul 2025 11:03:17 +0000 Manifest next update: Sat 05 Jul 2025 11:03:17 +0000 Files and hashes: 1: CcNLispiD2KMeh5oIUQO7mgOTNg.crl (hash: UI575aoW2N6hqSuWQzylWRAvLrZFBAR2rhTYFGe6muU=) 2: GnyyDpm3mmdAbCCQVhzVRnw6x0M.roa (hash: APtmjKoACUfAq/x3gki3kLBJ0COWTpLHdikKUYku2G8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09C34B8ACA620F628C7A1E6821440EEE680E4CD8 Validity Not Before: Jul 3 11:03:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1CBA7DECBE64D6CB9C5C2638ECFB967C1EA4FC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:5a:86:b7:69:3b:e2:d1:5b:00:7a:fd:5a: b2:84:8c:da:34:5c:8d:6b:38:f6:f6:5a:d3:39:0d: 8f:b8:7f:07:7b:15:94:14:3b:b3:cc:83:fd:cc:c5: d6:ce:87:9d:f1:60:77:96:05:33:7e:c4:55:c5:b4: c0:83:a9:64:4d:42:e6:01:0e:e8:fb:f8:9a:97:ad: 5e:06:5a:07:4a:b0:6b:60:0e:4b:be:7f:e8:03:0f: 68:5a:1d:e9:44:f8:bd:49:4d:ea:36:e8:4d:77:c5: 7a:3d:bc:d2:a4:a0:d0:60:01:61:5e:97:87:49:df: db:71:3a:0c:2a:e2:b9:8d:8d:7c:73:af:f6:33:fc: be:9d:f6:5f:f0:19:ef:8a:2e:0e:39:2d:74:a4:9d: 23:b2:b6:50:f0:94:18:fa:e2:d3:96:67:d0:3f:84: 8e:54:2c:55:14:83:c9:9c:fd:1e:be:1e:87:7c:fe: 59:56:de:04:51:15:38:ae:8a:37:6b:ca:b5:da:39: 3f:fc:ba:a0:e8:91:d3:a3:0d:19:72:9e:12:51:98: 31:c9:c4:b0:54:2c:c4:6c:cf:6a:aa:97:c5:b2:39: a3:6d:bb:2b:72:56:e4:88:bc:7f:8f:cd:e5:95:14: 5c:d4:3e:ea:4b:5b:2d:10:5d:e2:1b:b0:0c:61:bc: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BA:7D:EC:BE:64:D6:CB:9C:5C:26:38:EC:FB:96:7C:1E:A4:FC:8E X509v3 Authority Key Identifier: keyid:09:C3:4B:8A:CA:62:0F:62:8C:7A:1E:68:21:44:0E:EE:68:0E:4C:D8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:b8:4c:49:d6:8d:11:11:a6:73:62:ea:2a:07:ee:cd:62:bd: 52:59:b6:32:1c:30:4c:c0:b4:8d:d0:ef:86:bf:31:5e:f5:3e: 22:0f:78:36:93:b0:ac:7a:d5:88:3c:c8:ab:e0:9f:c1:8d:7d: 5b:6c:f5:d5:fe:7c:df:e2:25:10:cb:a3:d0:0d:a8:ba:2b:fc: ab:da:25:fc:39:d1:23:0a:50:00:d0:08:28:a2:72:16:9f:84: 22:ae:52:4d:bd:97:d1:bd:dc:4d:6a:dd:e1:dd:2a:8f:a7:90: 82:d4:cd:d2:10:d3:65:14:55:6a:c6:bd:40:08:40:b6:1f:7e: 01:cc:8b:41:95:3b:35:ba:36:c5:5f:12:75:b2:b3:73:79:4e: a8:50:2e:79:30:12:61:d1:83:be:12:96:a0:fc:42:c0:9d:f1: 57:a5:2b:f8:ea:97:5b:74:1a:2f:ee:10:1a:6c:9c:ce:17:5a: 71:5f:23:16:a9:36:eb:c1:4b:ad:e5:68:ce:0b:81:8d:d8:17: ad:aa:69:dc:bc:f0:85:0c:68:51:0c:53:ae:8d:07:c3:4c:3c: e2:e0:c5:12:a6:43:bc:e9:bb:28:63:1d:b9:1a:fd:ab:30:a3: ff:6b:39:f9:59:dc:a0:0a:9b:29:96:f1:51:c3:3e:f7:03:9a: aa:97:68:5d -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDlD MzRCOEFDQTYyMEY2MjhDN0ExRTY4MjE0NDBFRUU2ODBFNENEODAeFw0yNTA3MDMx MTAzMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFDQkE3REVDQkU2NEQ2 Q0I5QzVDMjYzOEVDRkI5NjdDMUVBNEZDOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGTFqGt2k74tFbAHr9WrKEjNo0XI1rOPb2WtM5DY+4fwd7FZQU O7PMg/3MxdbOh53xYHeWBTN+xFXFtMCDqWRNQuYBDuj7+JqXrV4GWgdKsGtgDku+ f+gDD2haHelE+L1JTeo26E13xXo9vNKkoNBgAWFel4dJ39txOgwq4rmNjXxzr/Yz /L6d9l/wGe+KLg45LXSknSOytlDwlBj64tOWZ9A/hI5ULFUUg8mc/R6+Hod8/llW 3gRRFTiuijdryrXaOT/8uqDokdOjDRlynhJRmDHJxLBULMRsz2qql8WyOaNtuyty VuSIvH+PzeWVFFzUPupLWy0QXeIbsAxhvOsrAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUHLp97L5k1sucXCY47PuWfB6k/I4wHwYDVR0jBBgwFoAUCcNLispiD2KMeh5o IUQO7mgOTNgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU5OT0xV WC9DY05MaXNwaUQyS01laDVvSVVRTzdtZ09UTmcuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0NjTkxpc3BpRDJLTWVoNW9JVVFPN21nT1ROZy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lOTk9MVVgvQ2NOTGlzcGlEMktNZWg1 b0lVUU83bWdPVE5nLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AGG4TEnWjRERpnNi6ioH7s1ivVJZtjIcMEzAtI3Q74a/MV71PiIPeDaTsKx61Yg8 yKvgn8GNfVts9dX+fN/iJRDLo9ANqLor/KvaJfw50SMKUADQCCiichafhCKuUk29 l9G93E1q3eHdKo+nkILUzdIQ02UUVWrGvUAIQLYffgHMi0GVOzW6NsVfEnWys3N5 TqhQLnkwEmHRg74SlqD8QsCd8VelK/jql1t0Gi/uEBpsnM4XWnFfIxapNuvBS63l aM4LgY3YF62qady88IUMaFEMU66NB8NMPOLgxRKmQ7zpuyhjHbka/aswo/9rOflZ 3KAKmymW8VHDPvcDmqqXaF0= -----END CERTIFICATE-----Generated at Fri Jul 4 14:39:05 2025 by rpki-client