$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEOLCY/PWhRk7j68lN-WhOF4D0Z_ol0Kos.mft File: PWhRk7j68lN-WhOF4D0Z_ol0Kos.mft (raw, json) Hash identifier: ErbS4Q8G5+Wxtb4R5NFQu7Rsj2NSVzw7BYXrEAlW2ac= Subject key identifier: FA:80:21:CC:C9:44:C8:F6:D6:9A:E9:D5:23:A2:10:4A:60:41:58:99 Authority key identifier: 3D:68:51:93:B8:FA:F2:53:7E:5A:13:85:E0:3D:19:FE:89:74:2A:8B Certificate issuer: /CN=3D685193B8FAF2537E5A1385E03D19FE89742A8B Certificate serial: 0CF4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PWhRk7j68lN-WhOF4D0Z_ol0Kos.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEOLCY/PWhRk7j68lN-WhOF4D0Z_ol0Kos.mft Manifest number: 0CEE Signing time: Thu 03 Jul 2025 11:02:13 +0000 Manifest this update: Thu 03 Jul 2025 11:02:13 +0000 Manifest next update: Sat 05 Jul 2025 11:02:13 +0000 Files and hashes: 1: PNfLD_RAnDBqQfuIVb9AWf90_vg.roa (hash: tzKTqPFct6t0ceXQJhRDvpaj+ec1b9oQW3JxGu/oL9k=) 2: PWhRk7j68lN-WhOF4D0Z_ol0Kos.crl (hash: 6A7OARcaap/LKQauTGqSYhww21l6G96ExymuAPVRL1g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEOLCY/PWhRk7j68lN-WhOF4D0Z_ol0Kos.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LEOLCY/PWhRk7j68lN-WhOF4D0Z_ol0Kos.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PWhRk7j68lN-WhOF4D0Z_ol0Kos.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 00:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D685193B8FAF2537E5A1385E03D19FE89742A8B Validity Not Before: Jul 3 11:02:13 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FA8021CCC944C8F6D69AE9D523A2104A60415899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:14:39:91:f9:bf:af:da:06:f6:37:bd:7e: 3d:17:e2:09:39:19:0b:b1:2c:cb:51:bc:2c:e4:99: 3b:50:12:ee:d3:7d:f1:19:31:26:90:2b:4e:93:09: c6:ac:9e:fb:ca:a9:0f:01:36:1a:6d:32:80:93:5e: 4f:a9:b5:7c:2f:60:fc:5b:d9:fd:57:61:99:bf:73: e0:0a:d5:e5:cc:d4:3e:03:35:ac:8c:6a:14:33:a5: 17:7d:c8:63:b1:79:10:45:45:2a:3e:f6:47:39:4c: 09:37:92:61:08:7a:53:74:fd:59:71:62:7a:65:01: 9c:77:b6:cc:4f:e2:97:12:fe:af:a4:57:e0:a6:ff: e0:04:b3:27:6d:97:2b:17:75:f8:4f:0b:8e:9c:0a: d8:0f:a0:b1:1b:76:e2:8d:05:41:be:49:43:86:dd: f3:48:5e:74:12:07:05:ad:0a:2b:49:61:12:e6:7f: a8:61:5b:e8:08:8e:53:e7:0d:21:92:14:da:0c:5b: fe:8e:f7:c4:27:18:c0:79:86:e1:35:b9:c1:bb:41: 05:91:53:a1:90:9a:a3:5a:85:f2:3f:1c:cd:36:30: 6f:a3:e5:f9:47:44:f7:47:f6:8c:79:a1:ac:fa:eb: 32:a8:5b:13:ab:45:cd:4e:46:0e:64:76:a6:60:31: c5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:80:21:CC:C9:44:C8:F6:D6:9A:E9:D5:23:A2:10:4A:60:41:58:99 X509v3 Authority Key Identifier: keyid:3D:68:51:93:B8:FA:F2:53:7E:5A:13:85:E0:3D:19:FE:89:74:2A:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEOLCY/PWhRk7j68lN-WhOF4D0Z_ol0Kos.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PWhRk7j68lN-WhOF4D0Z_ol0Kos.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEOLCY/PWhRk7j68lN-WhOF4D0Z_ol0Kos.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c7:76:43:5b:d5:f5:15:0c:cd:57:e7:05:cc:09:d4:3d:d6: ea:2b:86:5f:b3:6e:27:74:2b:c0:98:aa:ff:75:0c:47:74:bb: aa:d1:73:af:be:a4:94:cb:40:d2:9b:16:d3:da:81:df:62:4b: 09:1a:95:29:13:b4:aa:a5:ce:46:e5:0e:8f:c9:87:43:09:1e: 3c:6a:c0:f1:53:2a:8b:62:30:a7:85:31:bd:9b:de:db:bc:d7: 43:e7:ce:14:3a:61:d2:23:79:0c:2f:b2:c1:8f:e8:50:ec:fc: c2:69:ce:7e:bc:c2:52:b1:d7:5b:09:5e:1b:09:ec:25:98:14: e7:20:e6:89:23:86:24:ef:84:af:51:f9:b8:ec:aa:e4:05:62: 1d:fe:e7:91:74:da:93:de:09:18:b9:d2:ca:a9:8c:41:20:53: f3:65:e0:a1:a8:ae:e5:38:94:82:7e:54:90:1a:5e:3c:af:16: d5:1e:91:bc:ef:67:72:c3:00:02:3b:f4:4b:b1:03:0a:d1:64: 17:76:e0:45:12:77:53:db:10:a0:76:6c:c0:05:32:39:bf:ee: 43:3b:8c:06:2e:3d:d9:2c:39:13:a6:96:67:37:42:6e:56:52: 9c:2b:0d:94:84:8a:4d:df:b2:b7:94:92:65:ec:84:8d:db:c4: 2f:0b:55:e2 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Q2 ODUxOTNCOEZBRjI1MzdFNUExMzg1RTAzRDE5RkU4OTc0MkE4QjAeFw0yNTA3MDMx MTAyMTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZBODAyMUNDQzk0NEM4 RjZENjlBRTlENTIzQTIxMDRBNjA0MTU4OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3iBQ5kfm/r9oG9je9fj0X4gk5GQuxLMtRvCzkmTtQEu7TffEZ MSaQK06TCcasnvvKqQ8BNhptMoCTXk+ptXwvYPxb2f1XYZm/c+AK1eXM1D4DNayM ahQzpRd9yGOxeRBFRSo+9kc5TAk3kmEIelN0/VlxYnplAZx3tsxP4pcS/q+kV+Cm /+AEsydtlysXdfhPC46cCtgPoLEbduKNBUG+SUOG3fNIXnQSBwWtCitJYRLmf6hh W+gIjlPnDSGSFNoMW/6O98QnGMB5huE1ucG7QQWRU6GQmqNahfI/HM02MG+j5flH RPdH9ox5oaz66zKoWxOrRc1ORg5kdqZgMcWfAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQU+oAhzMlEyPbWmunVI6IQSmBBWJkwHwYDVR0jBBgwFoAUPWhRk7j68lN+WhOF 4D0Z/ol0KoswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVPTENZ L1BXaFJrN2o2OGxOLVdoT0Y0RDBaX29sMEtvcy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvUFdoUms3ajY4bE4tV2hPRjREMFpfb2wwS29zLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVPTENZL1BXaFJrN2o2OGxOLVdoT0Y0 RDBaX29sMEtvcy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCA x3ZDW9X1FQzNV+cFzAnUPdbqK4Zfs24ndCvAmKr/dQxHdLuq0XOvvqSUy0DSmxbT 2oHfYksJGpUpE7Sqpc5G5Q6PyYdDCR48asDxUyqLYjCnhTG9m97bvNdD584UOmHS I3kML7LBj+hQ7PzCac5+vMJSsddbCV4bCewlmBTnIOaJI4Yk74SvUfm47KrkBWId /ueRdNqT3gkYudLKqYxBIFPzZeChqK7lOJSCflSQGl48rxbVHpG872dywwACO/RL sQMK0WQXduBFEndT2xCgdmzABTI5v+5DO4wGLj3ZLDkTppZnN0JuVlKcKw2UhIpN 37K3lJJl7ISN28QvC1Xi -----END CERTIFICATE-----Generated at Fri Jul 4 23:17:56 2025 by rpki-client