$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft File: 0qCc5CgJ9NqdexxEc93y9DalmcQ.mft (raw, json) Hash identifier: L8fBW4oWVMTzZKyV/8/ut2nIxYlgzyshTV5XuJcEkcU= Subject key identifier: 35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07 Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4 Certificate issuer: /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4 Certificate serial: 0452 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft Manifest number: 0431 Signing time: Fri 04 Jul 2025 23:02:43 +0000 Manifest this update: Fri 04 Jul 2025 23:02:43 +0000 Manifest next update: Sun 06 Jul 2025 23:02:43 +0000 Files and hashes: 1: 0OdSpSYJeiaEOW_rz8gN0UrVQFc.roa (hash: HaTMLBq2iToqBAT8fxEB7rmwA7Qe/jbVlmJH4yhTaJ8=) 2: 0qCc5CgJ9NqdexxEc93y9DalmcQ.crl (hash: 87HSAO8rs7gnBYLYsxmbVeZwXu28K0gYg6EttP/ABIQ=) 3: UWE6Y-Z-FmnPUHd0TgMgjUf6HCE.roa (hash: xMB587U8kNzkblGnwvJ4ziMyvQIpLmqwOvNgYFgT6rI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 05:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4 Validity Not Before: Jul 4 23:02:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=356D1D56D2B0912C2D9009BA80830157976AD707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:71:bf:79:31:ed:f4:6e:63:62:3a:5a:3d: ce:42:9f:26:ff:48:e9:72:2d:c3:6b:6f:c2:14:7e: f3:05:6d:d5:bc:75:b1:a7:f3:1f:f8:3c:3a:c6:f5: 8f:e9:f8:89:b5:fb:14:bc:09:98:4e:c0:ce:aa:93: 33:37:b7:79:7a:fd:cd:95:1a:cf:d3:01:3f:25:c3: 2f:d9:8a:02:05:81:b8:e9:d5:9a:02:2c:04:02:dc: cd:a2:71:f7:c9:06:ad:73:dc:2f:0e:de:27:9f:84: 85:ff:0d:a8:b9:94:10:cb:69:e6:f7:48:e7:39:9e: c6:c0:32:d5:65:98:d4:78:0c:7c:ff:5a:dd:8b:10: a4:21:28:73:24:15:d6:74:5f:ab:c6:38:20:1a:cb: bc:a5:21:dc:4e:91:11:d4:8b:9f:16:bf:a7:ad:36: 88:39:95:b2:86:bb:d1:91:80:82:2b:64:11:d2:00: 37:96:c8:3f:7b:dc:db:f4:0d:15:24:5e:21:76:14: 92:6a:c3:fd:94:a1:ce:a5:c4:5a:ee:35:f7:d0:08: 03:9c:b0:1f:14:69:e5:4e:c8:84:11:ac:64:44:32: 4d:32:fb:ae:eb:a8:6c:c2:25:1c:e8:d9:99:4b:59: 31:82:56:09:ce:1a:b1:d2:d4:8e:bd:65:29:7d:bd: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07 X509v3 Authority Key Identifier: keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:94:21:df:23:14:cc:10:d6:60:00:c5:e1:1f:9b:1a:a8:ac: 11:9d:b7:75:45:d9:46:1a:db:9a:49:bc:45:7a:14:dd:0f:16: 58:28:89:61:e1:9e:71:6d:3f:77:d4:ea:7b:9b:3b:2d:5c:de: 22:59:13:b8:a0:a0:15:4c:ba:40:c1:d1:bc:20:f3:a3:85:2d: ed:18:26:6c:8b:af:26:cd:45:1b:77:00:f4:a7:da:1d:3b:f9: bd:a7:6a:d8:46:0a:5e:11:a3:34:fa:67:34:f5:c4:92:10:74: 4f:cc:c2:6a:73:bb:5e:11:9d:f4:11:ac:7e:87:c0:ba:b1:89: 6f:ab:05:07:68:d2:42:f3:c6:8b:b2:9c:25:5a:1d:f7:7a:6d: d5:ae:7c:48:2d:10:aa:e0:f4:07:45:b4:5b:09:72:1d:53:ee: 06:c3:5a:65:5d:57:62:3f:a7:95:0d:c9:1f:89:77:73:bd:9a: e7:d1:33:09:cc:a2:ce:4d:b4:56:99:e3:88:6f:49:bb:12:e9: 7b:57:27:f0:25:f7:28:51:8a:7b:79:8a:1c:44:dd:a3:57:5e: 8a:47:49:c6:29:a5:a1:b1:da:9d:46:7f:69:3c:19:99:4a:3e: f6:21:2e:72:f1:8f:60:13:c7:01:5b:9c:b5:1a:5f:54:b7:26: 99:80:5b:3f -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB MDlDRTQyODA5RjREQTlEN0IxQzQ0NzNEREYyRjQzNkE1OTlDNDAeFw0yNTA3MDQy MzAyNDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM1NkQxRDU2RDJCMDkx MkMyRDkwMDlCQTgwODMwMTU3OTc2QUQ3MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDanG/eTHt9G5jYjpaPc5Cnyb/SOlyLcNrb8IUfvMFbdW8dbGn 8x/4PDrG9Y/p+Im1+xS8CZhOwM6qkzM3t3l6/c2VGs/TAT8lwy/ZigIFgbjp1ZoC LAQC3M2icffJBq1z3C8O3iefhIX/Dai5lBDLaeb3SOc5nsbAMtVlmNR4DHz/Wt2L EKQhKHMkFdZ0X6vGOCAay7ylIdxOkRHUi58Wv6etNog5lbKGu9GRgIIrZBHSADeW yD973Nv0DRUkXiF2FJJqw/2Uoc6lxFruNffQCAOcsB8UaeVOyIQRrGREMk0y+67r qGzCJRzo2ZlLWTGCVgnOGrHS1I69ZSl9vcgjAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUNW0dVtKwkSwtkAm6gIMBV5dq1wcwHwYDVR0jBBgwFoAU0qCc5CgJ9NqdexxE c93y9DalmcQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUVSQ1lD QVQvMHFDYzVDZ0o5TnFkZXh4RWM5M3k5RGFsbWNRLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS8wcUNjNUNnSjlOcWRleHhFYzkzeTlEYWxtY1EuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRVJDWUNBVC8wcUNjNUNnSjlOcWRl eHhFYzkzeTlEYWxtY1EubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEpQh3yMUzBDWYADF4R+bGqisEZ23dUXZRhrbmkm8RXoU3Q8WWCiJYeGecW0/ d9Tqe5s7LVzeIlkTuKCgFUy6QMHRvCDzo4Ut7RgmbIuvJs1FG3cA9KfaHTv5vadq 2EYKXhGjNPpnNPXEkhB0T8zCanO7XhGd9BGsfofAurGJb6sFB2jSQvPGi7KcJVod 93pt1a58SC0QquD0B0W0WwlyHVPuBsNaZV1XYj+nlQ3JH4l3c72a59EzCcyizk20 VpnjiG9JuxLpe1cn8CX3KFGKe3mKHETdo1deikdJximlobHanUZ/aTwZmUo+9iEu cvGPYBPHAVuctRpfVLcmmYBbPw== -----END CERTIFICATE-----Generated at Sat Jul 5 00:32:43 2025 by rpki-client