$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft File: wJahbCg9FgC_MmvP68HRHQoGPZ4.mft (raw, json) Hash identifier: Tg+mFW3dfB/2QIetBTXG6ilkaLGeJYwKljQj4e7lwYM= Subject key identifier: 1B:3A:DA:B5:BB:67:F7:78:04:F1:63:57:A6:49:7C:F0:AB:0F:F9:DB Authority key identifier: C0:96:A1:6C:28:3D:16:00:BF:32:6B:CF:EB:C1:D1:1D:0A:06:3D:9E Certificate issuer: /CN=C096A16C283D1600BF326BCFEBC1D11D0A063D9E Certificate serial: 01C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft Manifest number: 01C5 Signing time: Sat 17 May 2025 22:22:38 +0000 Manifest this update: Sat 17 May 2025 22:22:38 +0000 Manifest next update: Mon 19 May 2025 22:22:38 +0000 Files and hashes: 1: wJahbCg9FgC_MmvP68HRHQoGPZ4.crl (hash: FwaxTh+VVHU0yZnFwoFzUjZYVlCiMnC8CYUxBcaNWIY=) 2: wTfPiLCSAdkk3FDX2ayM5ViIXck.roa (hash: mrUGXWx+6DjRhJBHQi1oUIkBO2vJiX79l5sdzNEYhNg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C096A16C283D1600BF326BCFEBC1D11D0A063D9E Validity Not Before: May 17 22:22:38 2025 GMT Not After : Nov 7 15:30:19 2025 GMT Subject: CN=1B3ADAB5BB67F77804F16357A6497CF0AB0FF9DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:8c:0b:10:be:25:fe:df:be:81:39:71:41: f3:56:3a:1a:c0:2e:52:a6:5b:72:55:fd:4d:bd:bc: 77:7b:e1:41:86:f7:57:fa:b6:d0:c9:e4:a8:c7:32: 79:20:b3:82:48:c2:6d:17:e9:81:44:bd:92:86:4c: f1:52:e3:aa:04:24:e7:ac:c4:4b:b8:97:b0:61:26: 64:ab:ef:17:c2:76:fe:74:c8:e3:93:0a:51:c8:ab: 85:c9:de:fb:2e:17:1c:98:fd:7d:b4:f4:dc:d2:da: 58:3f:1f:2c:6c:57:d8:3d:d9:62:2e:ef:3b:45:29: 37:6c:be:9a:74:ea:d1:e0:81:9b:91:88:35:4d:06: c7:b6:c3:1d:e9:cf:3c:44:d7:eb:05:68:e4:47:32: ad:58:95:87:60:d3:a5:08:1d:e0:1c:e3:e6:a4:0f: 8e:92:8e:89:ba:95:2d:26:24:a1:c7:af:c7:ad:fb: a2:21:cb:4b:35:7c:9c:ea:57:82:8e:a2:ce:65:2f: ca:92:8e:2a:8c:42:11:27:56:cb:49:49:70:6b:4d: 75:04:fa:0a:3d:fc:bd:7f:ac:13:78:dc:05:77:ef: 22:82:12:b7:af:fe:28:d6:5e:aa:ed:c1:f6:42:46: 8d:86:fb:4e:a8:f3:f1:8d:12:8f:57:a0:c7:a7:6b: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3A:DA:B5:BB:67:F7:78:04:F1:63:57:A6:49:7C:F0:AB:0F:F9:DB X509v3 Authority Key Identifier: keyid:C0:96:A1:6C:28:3D:16:00:BF:32:6B:CF:EB:C1:D1:1D:0A:06:3D:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b6:da:f0:07:f5:36:0b:6a:77:cb:71:f5:da:e8:38:40:47: ed:89:f3:08:d6:67:9f:90:80:41:8c:82:13:b4:7f:c0:58:65: a1:08:f4:06:c3:0a:4b:3c:c7:4b:86:3f:c6:6c:37:ee:8d:43: c8:27:2a:c4:b4:6c:f5:44:6f:bc:4e:b5:1b:33:57:da:41:e1: 00:18:9c:4b:a5:60:5f:9c:dc:b3:bb:28:fd:d7:b9:1e:ed:fc: e7:8c:41:aa:d9:4b:90:2f:52:74:c6:9d:6c:12:fe:ab:8b:fe: c5:99:04:e0:f8:7d:ae:cb:e9:fa:3e:2f:f7:43:b7:04:e5:e7: 11:5c:0a:38:96:e7:ef:50:4b:13:78:bb:2d:9a:41:57:88:79: bb:97:49:73:5d:a0:f4:e8:26:82:c1:c1:75:24:53:e8:df:fd: 6d:b9:ec:9e:31:64:86:76:d2:ba:8b:23:a1:e8:d2:86:78:f2: b7:55:58:6b:3f:87:a2:dc:c1:f4:71:3d:d8:1b:05:ee:3b:67: ae:fd:4e:91:03:a9:87:5d:8d:99:76:fc:27:51:dd:c3:e0:a1: 51:06:6c:f4:7e:ee:3e:6f:7b:e3:af:4a:3f:97:30:31:b1:38: 5c:78:d7:fc:9a:2d:c8:9e:28:a8:8a:95:96:05:03:fe:7e:05: fd:60:2b:24 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICAccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzA5 NkExNkMyODNEMTYwMEJGMzI2QkNGRUJDMUQxMUQwQTA2M0Q5RTAeFw0yNTA1MTcy MjIyMzhaFw0yNTExMDcxNTMwMTlaMDMxMTAvBgNVBAMTKDFCM0FEQUI1QkI2N0Y3 NzgwNEYxNjM1N0E2NDk3Q0YwQUIwRkY5REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuJYwLEL4l/t++gTlxQfNWOhrALlKmW3JV/U29vHd74UGG91f6 ttDJ5KjHMnkgs4JIwm0X6YFEvZKGTPFS46oEJOesxEu4l7BhJmSr7xfCdv50yOOT ClHIq4XJ3vsuFxyY/X209NzS2lg/HyxsV9g92WIu7ztFKTdsvpp06tHggZuRiDVN Bse2wx3pzzxE1+sFaORHMq1YlYdg06UIHeAc4+akD46Sjom6lS0mJKHHr8et+6Ih y0s1fJzqV4KOos5lL8qSjiqMQhEnVstJSXBrTXUE+go9/L1/rBN43AV37yKCErev /ijWXqrtwfZCRo2G+06o8/GNEo9XoMena0DpAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUGzratbtn93gE8WNXpkl88KsP+dswHwYDVR0jBBgwFoAUwJahbCg9FgC/MmvP 68HRHQoGPZ4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENTS1kv d0phaGJDZzlGZ0NfTW12UDY4SFJIUW9HUFo0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93SmFoYkNnOUZnQ19NbXZQNjhIUkhRb0dQWjQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQ1NLWS93SmFoYkNnOUZnQ19NbXZQNjhI UkhRb0dQWjQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarba 8Af1Ngtqd8tx9droOEBH7YnzCNZnn5CAQYyCE7R/wFhloQj0BsMKSzzHS4Y/xmw3 7o1DyCcqxLRs9URvvE61GzNX2kHhABicS6VgX5zcs7so/de5Hu3854xBqtlLkC9S dMadbBL+q4v+xZkE4Ph9rsvp+j4v90O3BOXnEVwKOJbn71BLE3i7LZpBV4h5u5dJ c12g9OgmgsHBdSRT6N/9bbnsnjFkhnbSuosjoejShnjyt1VYaz+HotzB9HE92BsF 7jtnrv1OkQOph12NmXb8J1Hdw+ChUQZs9H7uPm97469KP5cwMbE4XHjX/JotyJ4o qIqVlgUD/n4F/WArJA== -----END CERTIFICATE-----Generated at Sun May 18 02:03:02 2025 by rpki-client