$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft File: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft (raw, json) Hash identifier: tbPcxoDkeFT8EUCBUNDyKnf4ZkfObk4FBAAhk/76KpY= Subject key identifier: DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24 Authority key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 Certificate issuer: /CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Certificate serial: 0DA9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft Manifest number: 0D98 Signing time: Sun 19 Oct 2025 21:24:59 +0000 Manifest this update: Sun 19 Oct 2025 21:24:59 +0000 Manifest next update: Tue 21 Oct 2025 21:24:59 +0000 Files and hashes: 1: 9Earbhkqa-LgKS3Zg9gzfEBE5p0.roa (hash: Yro1LcI6Kqx48UAAj4bjWnwW3ENJmLQLiXoZ5hUTbAI=) 2: FXF0lO6EKMfGFrxa8tlZrvsmlqU.roa (hash: ffe3eFzQZ5bTVer3tI679pLNLQMpKZnEK747Ju2K6Qk=) 3: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl (hash: GEo2hW4bkrJRWWq+BR4NB3ZgR5FWxISiWcYrb9Xb/mY=) 4: aoCWMpsnJlxGVgYTo5eKVxrONMw.roa (hash: fnlUiKyutHjmzMA5ysK7pd75qboQLdU1ymUxPVf3zqA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 08:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3497 (0xda9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Validity Not Before: Oct 19 21:24:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DD9126B198369AE7D7CDD8B2326B111CB450F324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:72:54:60:7a:c1:b6:26:3c:af:58:7d:ac: c7:97:9d:37:73:7e:38:36:58:16:51:a1:e1:1c:f4: f1:17:59:29:bb:bc:34:76:44:94:e6:46:34:e5:96: d0:6e:d0:47:6a:3e:01:14:51:cc:fd:7c:d9:b5:f9: fc:60:bd:c7:b0:a5:a3:cb:d7:e2:65:34:9f:88:82: 31:64:8b:3d:80:91:b6:92:53:3f:61:89:f9:82:f0: 64:ad:53:08:b9:45:45:69:fc:a7:8e:66:df:2a:4c: 10:77:b0:b1:3b:4a:a4:24:26:db:33:00:0d:1c:b0: af:a7:4d:43:f0:84:6a:48:3c:e0:91:19:51:40:12: 1b:43:7d:ae:28:df:33:e0:3a:20:ea:66:c9:6a:f2: f5:b0:c2:2f:0f:26:7c:97:e0:6d:f7:db:40:8d:a6: 09:f8:b7:f4:38:51:8a:f5:7f:c6:3f:a6:2f:83:cc: 72:3a:8b:c4:eb:9d:90:df:16:fb:71:7c:19:ef:7b: da:f6:a7:2e:ff:a7:6c:19:59:c9:09:79:ec:6d:8b: ef:36:c9:d6:de:19:68:c1:05:4e:fe:94:4e:c7:15: 12:58:ec:b5:b6:5d:2b:78:db:fb:23:7a:17:d5:0f: 15:2f:45:df:74:03:2e:77:b3:c8:45:2a:bb:79:03: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24 X509v3 Authority Key Identifier: keyid:3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:cf:18:ed:3c:71:ae:5b:18:2b:e6:84:8b:55:e6:18:01:6c: 14:56:f0:0b:27:7c:f7:84:88:f7:1a:6f:63:dc:a7:ff:82:e5: 82:93:b5:8f:fe:28:fd:67:03:e2:cd:ab:26:30:8b:2d:b5:bd: 05:ea:a9:d3:8e:1e:15:bc:73:7c:58:cd:a2:91:9b:53:f5:c2: 8c:82:ca:60:d1:44:f7:60:58:7d:e9:ef:4e:98:52:00:58:31: d5:fc:6e:c0:82:a8:27:17:a4:03:e0:20:d7:b9:5f:05:72:04: 18:30:5d:78:dd:18:3e:60:24:ab:6e:ce:4f:9c:10:96:fb:5c: 67:73:e5:3f:ee:20:92:5d:87:d5:96:50:bf:52:f6:97:f3:db: 77:f4:5d:b6:dc:12:1a:6c:93:52:1f:e3:5c:d1:0a:60:c9:de: 3e:ca:7f:c3:a5:02:7b:1c:81:17:fe:10:51:97:ee:32:94:d3: cd:06:45:8a:bc:67:09:ef:50:4f:71:60:c0:73:d1:3c:dc:4b: ba:9e:94:d1:a8:99:8a:43:a6:5f:7b:3c:ef:e2:14:07:b8:77: c9:a9:93:3b:d5:ae:14:e8:99:ce:e2:37:ad:d9:d4:13:b1:f2: 2f:79:ec:59:b8:ae:9f:98:a4:31:3f:cd:49:87:d9:e6:fe:a2: 62:9d:9f:b1 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0I0 OUI4N0EzRkYzODk2MzRDN0QwOTBENzZEQUVBQTk2RkVFRkQ5MDAeFw0yNTEwMTky MTI0NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEREOTEyNkIxOTgzNjlB RTdEN0NERDhCMjMyNkIxMTFDQjQ1MEYzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0rXJUYHrBtiY8r1h9rMeXnTdzfjg2WBZRoeEc9PEXWSm7vDR2 RJTmRjTlltBu0EdqPgEUUcz9fNm1+fxgvcewpaPL1+JlNJ+IgjFkiz2AkbaSUz9h ifmC8GStUwi5RUVp/KeOZt8qTBB3sLE7SqQkJtszAA0csK+nTUPwhGpIPOCRGVFA EhtDfa4o3zPgOiDqZslq8vWwwi8PJnyX4G3320CNpgn4t/Q4UYr1f8Y/pi+DzHI6 i8TrnZDfFvtxfBnve9r2py7/p2wZWckJeexti+82ydbeGWjBBU7+lE7HFRJY7LW2 XSt42/sjehfVDxUvRd90Ay53s8hFKrt5A7zxAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU3ZEmsZg2mufXzdiyMmsRHLRQ8yQwHwYDVR0jBBgwFoAUO0m4ej/ziWNMfQkN dtrqqW/u/ZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNSRUUv TzBtNGVqX3ppV05NZlFrTmR0cnFxV191X1pBLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PMG00ZWpfemlXTk1mUWtOZHRycXFXX3VfWkEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OQ1JFRS9PMG00ZWpfemlXTk1mUWtOZHRy cXFXX3VfWkEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEASs8Y 7TxxrlsYK+aEi1XmGAFsFFbwCyd894SI9xpvY9yn/4LlgpO1j/4o/WcD4s2rJjCL LbW9Beqp044eFbxzfFjNopGbU/XCjILKYNFE92BYfenvTphSAFgx1fxuwIKoJxek A+Ag17lfBXIEGDBdeN0YPmAkq27OT5wQlvtcZ3PlP+4gkl2H1ZZQv1L2l/Pbd/Rd ttwSGmyTUh/jXNEKYMnePsp/w6UCexyBF/4QUZfuMpTTzQZFirxnCe9QT3FgwHPR PNxLup6U0aiZikOmX3s87+IUB7h3yamTO9WuFOiZzuI3rdnUE7HyL3nsWbiun5ik MT/NSYfZ5v6iYp2fsQ== -----END CERTIFICATE-----Generated at Tue Oct 21 07:52:39 2025 by rpki-client