$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGDING/rDLTT78BAXweZ__iZz-qYiXEQSI.mft File: rDLTT78BAXweZ__iZz-qYiXEQSI.mft (raw, json) Hash identifier: Hkegtm/s8HRW7twsMh+VGFXZuAkQC4iSmVgGGsPrI0A= Subject key identifier: 48:42:5C:6E:D3:CC:F1:90:05:22:31:4C:BC:23:9E:E9:92:78:86:07 Authority key identifier: AC:32:D3:4F:BF:01:01:7C:1E:67:FF:E2:67:3F:AA:62:25:C4:41:22 Certificate issuer: /CN=AC32D34FBF01017C1E67FFE2673FAA6225C44122 Certificate serial: 0121 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rDLTT78BAXweZ__iZz-qYiXEQSI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/rDLTT78BAXweZ__iZz-qYiXEQSI.mft Manifest number: 0121 Signing time: Sun 24 Aug 2025 02:13:12 +0000 Manifest this update: Sun 24 Aug 2025 02:13:12 +0000 Manifest next update: Sun 24 Aug 2025 08:13:12 +0000 Files and hashes: 1: rDLTT78BAXweZ__iZz-qYiXEQSI.crl (hash: WnvTNeJGSJsPC7TWfdrJHkvEzNfQGzgvK5epxgsoxvQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/rDLTT78BAXweZ__iZz-qYiXEQSI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/rDLTT78BAXweZ__iZz-qYiXEQSI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rDLTT78BAXweZ__iZz-qYiXEQSI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC32D34FBF01017C1E67FFE2673FAA6225C44122 Validity Not Before: Aug 24 02:13:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=48425C6ED3CCF1900522314CBC239EE992788607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:09:5b:c9:1c:1e:c7:65:d8:5e:d5:12:9d:1b: 09:a7:5e:13:15:13:e8:ba:45:22:66:27:30:1f:c7: 6b:7e:a5:14:aa:e5:ec:20:f7:0c:85:6c:60:48:60: 2a:fc:3b:83:8a:92:79:45:2f:12:6c:0c:0f:15:a5: 0a:35:dd:d2:19:d4:70:71:04:67:4c:5a:cb:f3:8e: f0:d4:f6:f3:2a:57:79:49:49:c1:d2:4c:f7:03:1b: 6a:d5:aa:9d:f8:5b:5d:51:f6:2f:3d:f1:82:86:fe: f5:7c:23:90:99:c7:6e:79:f3:5f:ae:0b:cb:8c:a5: 88:44:cd:33:ac:df:0c:2e:ab:2c:db:4b:74:ea:58: 42:64:07:d0:64:fc:54:c1:6c:c2:17:50:78:02:c6: 74:bf:ad:ba:4e:d4:e6:7a:5d:f7:b6:17:51:d0:88: 6c:fa:77:85:f9:76:b8:82:c5:2e:fe:8e:70:30:bd: 00:ba:8c:30:38:55:d0:4c:5b:f3:cd:15:cb:a0:7d: 87:eb:40:c8:47:c7:a6:5a:9d:98:22:b4:26:e1:f1: 95:54:a4:6f:50:ef:f7:8f:22:8a:45:cd:c7:e5:88: 21:4d:9f:c3:c6:e8:f9:3e:ba:33:7e:fa:b0:43:c3: 07:9f:e2:07:ff:d8:e5:5f:1c:fa:54:dd:41:ae:6c: 5a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:42:5C:6E:D3:CC:F1:90:05:22:31:4C:BC:23:9E:E9:92:78:86:07 X509v3 Authority Key Identifier: keyid:AC:32:D3:4F:BF:01:01:7C:1E:67:FF:E2:67:3F:AA:62:25:C4:41:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/rDLTT78BAXweZ__iZz-qYiXEQSI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rDLTT78BAXweZ__iZz-qYiXEQSI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGDING/rDLTT78BAXweZ__iZz-qYiXEQSI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d3:21:fe:52:78:96:22:8c:09:c2:f0:15:b4:e9:f1:b7:22: 06:d0:c7:ce:b9:20:fb:22:54:01:6c:33:38:0c:f0:e2:46:f0: 31:3d:16:3a:97:56:8f:f2:c9:ca:37:87:6a:a2:f0:c8:b4:7e: 2a:3b:a2:5f:dd:cf:e2:73:ca:a4:85:e4:1e:ec:bb:65:b2:71: 77:3b:9a:fe:95:5c:1d:3f:bb:fe:79:16:b0:8f:f0:1b:ee:34: 46:9f:29:b5:87:f6:7e:a5:84:17:78:9b:13:5e:75:96:77:cb: c9:6e:bf:30:15:3f:14:39:91:86:cf:6d:8b:98:8b:ca:30:c9: 31:df:25:bd:87:2b:c4:bb:96:07:09:56:49:6c:08:07:3e:35: 20:9b:8e:62:47:a2:ae:8d:d8:2d:7f:96:84:df:eb:23:1d:ab: a8:a6:d8:bf:0b:a7:0d:5d:b6:25:64:fb:af:cc:1c:c5:23:17: 90:c0:0d:12:ad:07:d2:38:84:65:a6:8b:60:76:cb:e0:17:1b: c6:77:82:a6:3c:cd:fe:cd:ec:fe:b0:2a:b5:c4:0e:ca:37:10: 6d:1b:7a:df:67:d4:51:6a:1b:56:7f:01:93:01:96:b6:84:e3: e3:da:d9:ed:23:55:98:cf:74:1a:67:8b:b2:e0:aa:54:fd:9c: f2:b2:17:d8 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICASEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUMz MkQzNEZCRjAxMDE3QzFFNjdGRkUyNjczRkFBNjIyNUM0NDEyMjAeFw0yNTA4MjQw MjEzMTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ4NDI1QzZFRDNDQ0Yx OTAwNTIyMzE0Q0JDMjM5RUU5OTI3ODg2MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuCVvJHB7HZdhe1RKdGwmnXhMVE+i6RSJmJzAfx2t+pRSq5ewg 9wyFbGBIYCr8O4OKknlFLxJsDA8VpQo13dIZ1HBxBGdMWsvzjvDU9vMqV3lJScHS TPcDG2rVqp34W11R9i898YKG/vV8I5CZx25581+uC8uMpYhEzTOs3wwuqyzbS3Tq WEJkB9Bk/FTBbMIXUHgCxnS/rbpO1OZ6Xfe2F1HQiGz6d4X5driCxS7+jnAwvQC6 jDA4VdBMW/PNFcugfYfrQMhHx6ZanZgitCbh8ZVUpG9Q7/ePIopFzcfliCFNn8PG 6Pk+ujN++rBDwwef4gf/2OVfHPpU3UGubFo1AgMBAAGjggILMIICBzAdBgNVHQ4E FgQUSEJcbtPM8ZAFIjFMvCOe6ZJ4hgcwHwYDVR0jBBgwFoAUrDLTT78BAXweZ//i Zz+qYiXEQSIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0RJ TkcvckRMVFQ3OEJBWHdlWl9faVp6LXFZaVhFUVNJLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9yRExUVDc4QkFYd2VaX19pWnotcVlpWEVRU0kuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSU5HRElORy9yRExUVDc4QkFYd2Va X19pWnotcVlpWEVRU0kubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA9Mh/lJ4liKMCcLwFbTp8bciBtDHzrkg+yJUAWwzOAzw4kbwMT0WOpdWj/LJ yjeHaqLwyLR+KjuiX93P4nPKpIXkHuy7ZbJxdzua/pVcHT+7/nkWsI/wG+40Rp8p tYf2fqWEF3ibE151lnfLyW6/MBU/FDmRhs9ti5iLyjDJMd8lvYcrxLuWBwlWSWwI Bz41IJuOYkeiro3YLX+WhN/rIx2rqKbYvwunDV22JWT7r8wcxSMXkMANEq0H0jiE ZaaLYHbL4BcbxneCpjzN/s3s/rAqtcQOyjcQbRt632fUUWobVn8BkwGWtoTj49rZ 7SNVmM90GmeLsuCqVP2c8rIX2A== -----END CERTIFICATE-----Generated at Sun Aug 24 05:05:37 2025 by rpki-client