$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft File: tjCfg3WsbYZ88UyV8np05NLfGb0.mft (raw, json) Hash identifier: +Gn+CNuQyAPp+ZRY1w+6Zde+94O09dc8IePrhObvojo= Subject key identifier: C5:EF:9C:72:5E:95:C2:97:04:CC:AE:D7:A0:98:FD:4B:B2:EF:DF:16 Authority key identifier: B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD Certificate issuer: /CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD Certificate serial: 04F8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft Manifest number: 04F8 Signing time: Sat 17 May 2025 21:22:29 +0000 Manifest this update: Sat 17 May 2025 21:22:29 +0000 Manifest next update: Mon 19 May 2025 21:22:29 +0000 Files and hashes: 1: tjCfg3WsbYZ88UyV8np05NLfGb0.crl (hash: z0/tDAiIDI7UqsVHFGpmHBJDE4ohXP07spijk+dzTrM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 19:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD Validity Not Before: May 17 21:22:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C5EF9C725E95C29704CCAED7A098FD4BB2EFDF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:eb:3a:02:86:9d:8f:41:ff:1b:a5:e0:12: c7:85:90:52:6d:29:d7:2c:2e:9e:0b:8d:ad:ad:8c: 3e:4c:4d:eb:42:76:ec:4d:c9:c5:71:cd:5e:f6:8c: 38:fd:1e:84:5b:58:78:1e:e0:a0:fb:dd:c4:7b:71: 02:ba:8b:f3:97:5d:ad:0b:d5:6e:fa:3d:6e:de:dc: 6e:ba:e8:a5:c1:31:f5:cf:5c:cb:67:8b:bf:ba:c7: b2:d9:26:31:14:d7:2d:dd:c7:0f:c3:90:1e:d5:18: ab:97:12:b7:fa:62:50:10:91:5a:a7:c0:7f:c8:36: 94:4e:58:95:ae:da:af:22:26:8e:35:fe:e5:2b:1a: 02:eb:17:78:ac:7e:3f:75:98:11:bd:3e:63:c7:e5: dc:ca:7d:c2:65:06:0c:d2:0d:c0:55:ec:dc:5a:3d: 64:17:52:eb:63:ba:66:c9:40:0e:f5:4b:48:39:b3: 05:fa:93:10:a0:77:65:bd:bf:8a:49:41:92:0e:6b: 9a:71:43:5e:04:59:cd:f6:b7:60:cd:7c:88:88:72: 71:36:bf:7d:c8:aa:83:fb:ce:57:24:03:85:70:54: d2:b0:26:34:66:db:47:c7:80:68:e2:c1:f5:98:5d: 3e:9f:af:a3:ee:e2:10:45:ad:65:e7:43:ef:05:be: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EF:9C:72:5E:95:C2:97:04:CC:AE:D7:A0:98:FD:4B:B2:EF:DF:16 X509v3 Authority Key Identifier: keyid:B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5b:f3:07:0e:0b:3a:47:7f:71:13:f1:a6:87:2e:ff:68:8f: 3a:1c:5a:b8:9e:c2:59:56:4e:93:a6:c9:fe:90:71:b4:3d:93: 43:3e:02:1e:eb:56:b5:82:c3:03:1f:87:23:dd:68:b3:0c:62: b6:65:e6:19:51:ee:37:53:da:05:36:bf:95:d5:6f:9d:c0:e9: ee:76:a6:8a:4c:ee:ae:d5:6a:92:18:22:92:b9:6c:d9:4a:7b: 80:78:c7:04:69:b8:29:84:68:8a:88:1c:b1:c2:58:e6:5b:bb: 92:e4:a3:c7:4d:68:62:b2:98:12:f5:db:60:de:37:08:95:0d: 95:10:28:be:ff:03:39:54:6d:cf:33:8c:ab:8e:b9:d9:44:cc: f2:14:15:d0:df:1a:1e:72:16:41:e2:7e:f0:82:ec:bc:03:55: 97:b5:83:86:aa:5f:b7:2b:36:54:2c:81:82:0a:f9:e5:24:0f: 8d:5d:19:12:f5:f3:15:77:ad:cd:e3:14:78:53:72:ec:43:3f: 82:42:b5:9d:a7:8c:23:83:49:52:eb:4e:b0:15:f6:34:4c:35: d9:d8:6c:32:1e:ed:dd:c1:7f:d2:55:a9:19:36:0b:8a:20:e9: 35:62:45:86:40:6e:eb:65:11:d2:a5:fd:19:63:d4:b1:7d:4b: e9:fb:ad:78 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjYz MDlGODM3NUFDNkQ4NjdDRjE0Qzk1RjI3QTc0RTREMkRGMTlCRDAeFw0yNTA1MTcy MTIyMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM1RUY5QzcyNUU5NUMy OTcwNENDQUVEN0EwOThGRDRCQjJFRkRGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxYus6Aoadj0H/G6XgEseFkFJtKdcsLp4Lja2tjD5MTetCduxN ycVxzV72jDj9HoRbWHge4KD73cR7cQK6i/OXXa0L1W76PW7e3G666KXBMfXPXMtn i7+6x7LZJjEU1y3dxw/DkB7VGKuXErf6YlAQkVqnwH/INpROWJWu2q8iJo41/uUr GgLrF3isfj91mBG9PmPH5dzKfcJlBgzSDcBV7NxaPWQXUutjumbJQA71S0g5swX6 kxCgd2W9v4pJQZIOa5pxQ14EWc32t2DNfIiIcnE2v33IqoP7zlckA4VwVNKwJjRm 20fHgGjiwfWYXT6fr6Pu4hBFrWXnQ+8Fvh3ZAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUxe+ccl6VwpcEzK7XoJj9S7Lv3xYwHwYDVR0jBBgwFoAUtjCfg3WsbYZ88UyV 8np05NLfGb0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF Q0gvdGpDZmczV3NiWVo4OFV5VjhucDA1TkxmR2IwLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS90akNmZzNXc2JZWjg4VXlWOG5wMDVOTGZHYjAuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC90akNmZzNXc2JZWjg4 VXlWOG5wMDVOTGZHYjAubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAilvzBw4LOkd/cRPxpocu/2iPOhxauJ7CWVZOk6bJ/pBxtD2TQz4CHutWtYLD Ax+HI91oswxitmXmGVHuN1PaBTa/ldVvncDp7namikzurtVqkhgikrls2Up7gHjH BGm4KYRoiogcscJY5lu7kuSjx01oYrKYEvXbYN43CJUNlRAovv8DOVRtzzOMq465 2UTM8hQV0N8aHnIWQeJ+8ILsvANVl7WDhqpftys2VCyBggr55SQPjV0ZEvXzFXet zeMUeFNy7EM/gkK1naeMI4NJUutOsBX2NEw12dhsMh7t3cF/0lWpGTYLiiDpNWJF hkBu62UR0qX9GWPUsX1L6futeA== -----END CERTIFICATE-----Generated at Sun May 18 18:03:37 2025 by rpki-client