$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.mft File: mKXDkBQxSUgd55vBe7YtuiJx9h8.mft (raw, json) Hash identifier: k4c33I3k9wC+/3wVgjZKeb7bX3RlgzMaIKV7M7BCimg= Subject key identifier: EF:E5:0D:06:61:FF:9E:19:A5:5F:F9:5F:84:F7:C5:07:81:35:31:5A Authority key identifier: 98:A5:C3:90:14:31:49:48:1D:E7:9B:C1:7B:B6:2D:BA:22:71:F6:1F Certificate issuer: /CN=98A5C390143149481DE79BC17BB62DBA2271F61F Certificate serial: 050D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.mft Manifest number: 0502 Signing time: Sun 19 Oct 2025 21:56:14 +0000 Manifest this update: Sun 19 Oct 2025 21:56:14 +0000 Manifest next update: Tue 21 Oct 2025 21:56:14 +0000 Files and hashes: 1: ZdLWKqa6EMDwN-qhiwZAqcqMqa8.roa (hash: KtWez8aYs/D8TDbUZc3TAt+qv5rrFnpRTQ++93BL604=) 2: mKXDkBQxSUgd55vBe7YtuiJx9h8.crl (hash: X20aiLSDd999z9Lsxu+XU5pwRI68Hy8JsNJ4cTUuSzI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 13:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98A5C390143149481DE79BC17BB62DBA2271F61F Validity Not Before: Oct 19 21:56:14 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EFE50D0661FF9E19A55FF95F84F7C5078135315A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:fc:ae:e4:9b:5f:bf:bb:2c:d1:fd:d1:63: 79:5d:30:ca:aa:31:46:1b:eb:98:b6:60:11:b9:d1: a7:e9:8c:5c:7e:47:1e:53:7d:1d:da:26:5d:87:e0: e4:40:fe:a8:52:0e:23:25:4b:d2:25:1a:76:aa:bb: ec:f3:a8:ab:63:6a:eb:dd:63:cd:db:ec:b3:be:cf: e2:d6:82:88:56:18:a0:e1:5a:17:a6:1c:88:f0:30: f0:99:62:2c:bf:1d:ea:12:2d:a5:98:86:c2:46:b3: 0c:9b:ca:56:01:10:78:4c:a7:65:54:c4:35:6c:73: d7:f9:61:2c:1e:46:f9:17:b6:b6:e1:a8:2d:c5:a9: ea:04:d8:81:80:af:a7:93:35:cc:92:1b:eb:cf:2a: 24:dd:fc:0e:e9:eb:e8:18:7d:6d:e9:56:9f:7c:df: 75:b4:28:a1:2a:cd:0c:b0:a9:93:29:48:1a:e9:5c: ca:fc:91:30:11:41:a8:41:57:91:6b:84:21:88:2c: 65:8f:ab:fe:e1:47:d9:fa:03:0e:43:3f:c1:6c:83: 54:ce:80:7d:f7:9a:d6:de:1c:6a:5a:1f:48:0c:cb: c9:b8:0f:ef:ab:11:a0:6f:d3:67:5b:cc:e2:3d:43: 33:ac:6b:c2:e0:b1:e7:03:9c:9d:84:13:a6:a4:cc: 48:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E5:0D:06:61:FF:9E:19:A5:5F:F9:5F:84:F7:C5:07:81:35:31:5A X509v3 Authority Key Identifier: keyid:98:A5:C3:90:14:31:49:48:1D:E7:9B:C1:7B:B6:2D:BA:22:71:F6:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:51:55:c7:f9:36:76:40:e1:d8:22:7d:51:5c:fb:b1:39:78: d1:1f:40:76:1f:46:53:8d:21:34:50:39:81:59:43:a8:b6:22: 72:8c:1a:5a:d6:1d:e3:5e:bc:7d:ec:a9:b9:b9:4d:8d:da:c2: 30:2f:42:72:cf:c2:db:fd:77:0f:4f:30:bb:5b:0b:d3:17:e8: c9:6c:e7:f7:aa:c0:c8:51:60:5a:57:bd:37:5d:81:44:8d:db: d0:8a:8e:2c:8f:5c:67:87:91:28:68:5f:48:e5:ae:c0:9a:42: 7a:d7:a6:c3:a9:bd:8e:f1:2b:70:1c:d5:99:5f:ac:93:bb:4a: e2:16:f2:64:0c:4c:fc:96:a8:51:93:ef:a9:0b:89:f9:f8:4e: ea:d8:c5:0d:8d:d7:be:48:ed:3b:fe:9e:f5:4c:8d:24:3e:94: 28:2d:10:64:90:f4:ba:ab:21:62:a0:01:7a:0d:2d:d5:fa:28: 41:7b:b2:04:c2:2a:8e:15:85:3d:26:c8:33:94:5e:32:f7:9f: 41:7e:6d:d9:9d:11:79:9e:af:af:40:0b:28:7d:d4:24:46:7d: f1:49:65:13:75:21:b9:11:9e:55:78:53:bc:3e:9c:71:54:99: 0b:9d:e4:63:27:1a:c0:d0:a7:d7:4d:d6:9b:53:5a:59:cc:8c: 01:60:a4:17 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOThB NUMzOTAxNDMxNDk0ODFERTc5QkMxN0JCNjJEQkEyMjcxRjYxRjAeFw0yNTEwMTky MTU2MTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVGRTUwRDA2NjFGRjlF MTlBNTVGRjk1Rjg0RjdDNTA3ODEzNTMxNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdUvyu5Jtfv7ss0f3RY3ldMMqqMUYb65i2YBG50afpjFx+Rx5T fR3aJl2H4ORA/qhSDiMlS9IlGnaqu+zzqKtjauvdY83b7LO+z+LWgohWGKDhWhem HIjwMPCZYiy/HeoSLaWYhsJGswybylYBEHhMp2VUxDVsc9f5YSweRvkXtrbhqC3F qeoE2IGAr6eTNcySG+vPKiTd/A7p6+gYfW3pVp9833W0KKEqzQywqZMpSBrpXMr8 kTARQahBV5FrhCGILGWPq/7hR9n6Aw5DP8Fsg1TOgH33mtbeHGpaH0gMy8m4D++r EaBv02dbzOI9QzOsa8LgsecDnJ2EE6akzEjLAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQU7+UNBmH/nhmlX/lfhPfFB4E1MVowHwYDVR0jBBgwFoAUmKXDkBQxSUgd55vB e7YtuiJx9h8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTVlTRU5T RS9tS1hEa0JReFNVZ2Q1NXZCZTdZdHVpSng5aDguY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL21LWERrQlF4U1VnZDU1dkJlN1l0dWlKeDloOC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL01ZU0VOU0UvbUtYRGtCUXhTVWdkNTV2 QmU3WXR1aUp4OWg4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AFFRVcf5NnZA4dgifVFc+7E5eNEfQHYfRlONITRQOYFZQ6i2InKMGlrWHeNevH3s qbm5TY3awjAvQnLPwtv9dw9PMLtbC9MX6Mls5/eqwMhRYFpXvTddgUSN29CKjiyP XGeHkShoX0jlrsCaQnrXpsOpvY7xK3Ac1ZlfrJO7SuIW8mQMTPyWqFGT76kLifn4 TurYxQ2N175I7Tv+nvVMjSQ+lCgtEGSQ9LqrIWKgAXoNLdX6KEF7sgTCKo4VhT0m yDOUXjL3n0F+bdmdEXmer69ACyh91CRGffFJZRN1IbkRnlV4U7w+nHFUmQud5GMn GsDQp9dN1ptTWlnMjAFgpBc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:54:07 2025 by rpki-client