$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft File: 0qCc5CgJ9NqdexxEc93y9DalmcQ.mft (raw, json) Hash identifier: 3NA1lc+3TqoOwT86lAua0IOlF4FlMf1lQdH5aHoIpbA= Subject key identifier: 35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07 Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4 Certificate issuer: /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4 Certificate serial: 049C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft Manifest number: 0479 Signing time: Sun 19 Oct 2025 21:55:24 +0000 Manifest this update: Sun 19 Oct 2025 21:55:24 +0000 Manifest next update: Tue 21 Oct 2025 21:55:24 +0000 Files and hashes: 1: 0qCc5CgJ9NqdexxEc93y9DalmcQ.crl (hash: xPMtR/45m+5OEaSM4tNQZ2fATDTrDqGQFXKZHEfTp54=) 2: H76Yqjd_qsLu02XHlrkdTb6cO4g.roa (hash: 8R3MORDwytvIMNic9SLQgH9B3ARyUty0xVBqwyW73ZU=) 3: QWvOVWT5zZy3lUWUnGvHWDKxgnc.roa (hash: 0lcn7A1+ZL5XJgqQCmzarNJs8CwPigObmEAryjQ0dO8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4 Validity Not Before: Oct 19 21:55:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=356D1D56D2B0912C2D9009BA80830157976AD707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:71:bf:79:31:ed:f4:6e:63:62:3a:5a:3d: ce:42:9f:26:ff:48:e9:72:2d:c3:6b:6f:c2:14:7e: f3:05:6d:d5:bc:75:b1:a7:f3:1f:f8:3c:3a:c6:f5: 8f:e9:f8:89:b5:fb:14:bc:09:98:4e:c0:ce:aa:93: 33:37:b7:79:7a:fd:cd:95:1a:cf:d3:01:3f:25:c3: 2f:d9:8a:02:05:81:b8:e9:d5:9a:02:2c:04:02:dc: cd:a2:71:f7:c9:06:ad:73:dc:2f:0e:de:27:9f:84: 85:ff:0d:a8:b9:94:10:cb:69:e6:f7:48:e7:39:9e: c6:c0:32:d5:65:98:d4:78:0c:7c:ff:5a:dd:8b:10: a4:21:28:73:24:15:d6:74:5f:ab:c6:38:20:1a:cb: bc:a5:21:dc:4e:91:11:d4:8b:9f:16:bf:a7:ad:36: 88:39:95:b2:86:bb:d1:91:80:82:2b:64:11:d2:00: 37:96:c8:3f:7b:dc:db:f4:0d:15:24:5e:21:76:14: 92:6a:c3:fd:94:a1:ce:a5:c4:5a:ee:35:f7:d0:08: 03:9c:b0:1f:14:69:e5:4e:c8:84:11:ac:64:44:32: 4d:32:fb:ae:eb:a8:6c:c2:25:1c:e8:d9:99:4b:59: 31:82:56:09:ce:1a:b1:d2:d4:8e:bd:65:29:7d:bd: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07 X509v3 Authority Key Identifier: keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:74:46:37:40:fe:5f:ed:1b:a3:9a:59:da:19:e4:ae:89:25: 8c:e9:fc:28:34:bb:9b:7b:d3:54:fa:3b:74:4e:ee:d4:1f:72: 2d:44:bf:49:45:51:e5:c1:62:b6:e2:3c:e1:4b:cf:df:e9:91: 2e:be:8b:49:76:41:2f:75:77:d9:8a:3a:2f:9a:e9:96:98:74: 91:c2:5c:7f:50:4e:4d:bb:8c:35:ef:86:55:f5:92:73:7b:d5: e0:df:8e:e0:96:b3:55:f3:44:74:e7:24:4a:1c:53:36:9d:e1: a0:37:40:78:49:83:f2:fe:30:93:64:35:5c:79:81:07:66:3e: 63:03:5c:e0:4d:37:c9:93:b1:d9:4f:e4:81:a3:2a:b1:07:aa: 14:67:81:ad:f2:87:aa:1d:e0:8f:62:91:bd:46:11:14:42:a1: 1d:d5:b0:91:32:6d:b3:5c:24:d9:df:57:79:cf:03:05:2f:fc: e8:01:0f:05:b9:13:c3:47:34:d2:71:ef:20:55:37:d5:f5:28: 3d:0e:6d:8e:36:4c:4e:17:3e:a2:eb:15:39:6c:f2:c6:f3:21: 70:b1:df:b5:07:d7:86:e6:1e:e5:76:c7:26:37:5c:62:de:b1: f7:dc:97:f1:b0:bd:c8:ec:38:ab:38:43:cb:51:f5:9e:df:e5: b4:3d:71:ae -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB MDlDRTQyODA5RjREQTlEN0IxQzQ0NzNEREYyRjQzNkE1OTlDNDAeFw0yNTEwMTky MTU1MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM1NkQxRDU2RDJCMDkx MkMyRDkwMDlCQTgwODMwMTU3OTc2QUQ3MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDanG/eTHt9G5jYjpaPc5Cnyb/SOlyLcNrb8IUfvMFbdW8dbGn 8x/4PDrG9Y/p+Im1+xS8CZhOwM6qkzM3t3l6/c2VGs/TAT8lwy/ZigIFgbjp1ZoC LAQC3M2icffJBq1z3C8O3iefhIX/Dai5lBDLaeb3SOc5nsbAMtVlmNR4DHz/Wt2L EKQhKHMkFdZ0X6vGOCAay7ylIdxOkRHUi58Wv6etNog5lbKGu9GRgIIrZBHSADeW yD973Nv0DRUkXiF2FJJqw/2Uoc6lxFruNffQCAOcsB8UaeVOyIQRrGREMk0y+67r qGzCJRzo2ZlLWTGCVgnOGrHS1I69ZSl9vcgjAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUNW0dVtKwkSwtkAm6gIMBV5dq1wcwHwYDVR0jBBgwFoAU0qCc5CgJ9NqdexxE c93y9DalmcQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUVSQ1lD QVQvMHFDYzVDZ0o5TnFkZXh4RWM5M3k5RGFsbWNRLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS8wcUNjNUNnSjlOcWRleHhFYzkzeTlEYWxtY1EuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRVJDWUNBVC8wcUNjNUNnSjlOcWRl eHhFYzkzeTlEYWxtY1EubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq3RGN0D+X+0bo5pZ2hnkrokljOn8KDS7m3vTVPo7dE7u1B9yLUS/SUVR5cFi tuI84UvP3+mRLr6LSXZBL3V32Yo6L5rplph0kcJcf1BOTbuMNe+GVfWSc3vV4N+O 4JazVfNEdOckShxTNp3hoDdAeEmD8v4wk2Q1XHmBB2Y+YwNc4E03yZOx2U/kgaMq sQeqFGeBrfKHqh3gj2KRvUYRFEKhHdWwkTJts1wk2d9Xec8DBS/86AEPBbkTw0c0 0nHvIFU31fUoPQ5tjjZMThc+ousVOWzyxvMhcLHftQfXhuYe5XbHJjdcYt6x99yX 8bC9yOw4qzhDy1H1nt/ltD1xrg== -----END CERTIFICATE-----Generated at Mon Oct 20 14:23:11 2025 by rpki-client