$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft File: wJahbCg9FgC_MmvP68HRHQoGPZ4.mft (raw, json) Hash identifier: ZKb3ObdM1tefzDg7O/zdbc7skz903iSxgsJBJ5lxgxc= Subject key identifier: 1B:3A:DA:B5:BB:67:F7:78:04:F1:63:57:A6:49:7C:F0:AB:0F:F9:DB Authority key identifier: C0:96:A1:6C:28:3D:16:00:BF:32:6B:CF:EB:C1:D1:1D:0A:06:3D:9E Certificate issuer: /CN=C096A16C283D1600BF326BCFEBC1D11D0A063D9E Certificate serial: 022F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft Manifest number: 022D Signing time: Sun 19 Oct 2025 21:55:33 +0000 Manifest this update: Sun 19 Oct 2025 21:55:33 +0000 Manifest next update: Tue 21 Oct 2025 21:55:33 +0000 Files and hashes: 1: wJahbCg9FgC_MmvP68HRHQoGPZ4.crl (hash: mBy1GlwnrRJePdxvHKP2glrwnczjkzr5w1qn6Z7iH84=) 2: wTfPiLCSAdkk3FDX2ayM5ViIXck.roa (hash: mrUGXWx+6DjRhJBHQi1oUIkBO2vJiX79l5sdzNEYhNg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C096A16C283D1600BF326BCFEBC1D11D0A063D9E Validity Not Before: Oct 19 21:55:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1B3ADAB5BB67F77804F16357A6497CF0AB0FF9DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:8c:0b:10:be:25:fe:df:be:81:39:71:41: f3:56:3a:1a:c0:2e:52:a6:5b:72:55:fd:4d:bd:bc: 77:7b:e1:41:86:f7:57:fa:b6:d0:c9:e4:a8:c7:32: 79:20:b3:82:48:c2:6d:17:e9:81:44:bd:92:86:4c: f1:52:e3:aa:04:24:e7:ac:c4:4b:b8:97:b0:61:26: 64:ab:ef:17:c2:76:fe:74:c8:e3:93:0a:51:c8:ab: 85:c9:de:fb:2e:17:1c:98:fd:7d:b4:f4:dc:d2:da: 58:3f:1f:2c:6c:57:d8:3d:d9:62:2e:ef:3b:45:29: 37:6c:be:9a:74:ea:d1:e0:81:9b:91:88:35:4d:06: c7:b6:c3:1d:e9:cf:3c:44:d7:eb:05:68:e4:47:32: ad:58:95:87:60:d3:a5:08:1d:e0:1c:e3:e6:a4:0f: 8e:92:8e:89:ba:95:2d:26:24:a1:c7:af:c7:ad:fb: a2:21:cb:4b:35:7c:9c:ea:57:82:8e:a2:ce:65:2f: ca:92:8e:2a:8c:42:11:27:56:cb:49:49:70:6b:4d: 75:04:fa:0a:3d:fc:bd:7f:ac:13:78:dc:05:77:ef: 22:82:12:b7:af:fe:28:d6:5e:aa:ed:c1:f6:42:46: 8d:86:fb:4e:a8:f3:f1:8d:12:8f:57:a0:c7:a7:6b: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3A:DA:B5:BB:67:F7:78:04:F1:63:57:A6:49:7C:F0:AB:0F:F9:DB X509v3 Authority Key Identifier: keyid:C0:96:A1:6C:28:3D:16:00:BF:32:6B:CF:EB:C1:D1:1D:0A:06:3D:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:33:8d:7e:4e:3d:45:4f:e8:ee:f7:75:11:04:bf:bd:4b:e4: 52:d2:e3:5e:60:4f:03:4c:0e:3b:ef:be:ed:6f:db:7f:77:2f: c5:73:7e:91:11:9d:ae:86:a6:b3:ed:b9:8b:2b:ee:21:29:0c: d7:16:21:46:44:27:35:c8:f8:f2:ef:cd:2d:11:0e:0c:eb:07: 1c:df:62:37:f3:62:4f:71:65:b7:5b:06:02:83:80:59:da:a6: 9b:1a:b6:16:c9:d6:ed:b0:9d:1b:84:53:42:92:33:08:b0:3e: 1d:4f:b6:98:c0:1b:1c:d6:b0:b0:11:48:3b:18:fd:4f:70:04: e5:49:1b:57:d4:4b:9a:c1:b6:8e:b3:27:10:ff:a1:b4:59:ef: 56:85:51:e9:96:44:e4:89:0d:97:c2:13:63:20:2c:7e:89:92: 24:20:32:b6:47:51:d4:bf:d4:12:5f:e4:02:6f:e1:10:cb:54: da:54:f4:df:7c:22:db:36:e5:b6:b5:2b:82:53:d0:d4:13:f7: 84:5f:af:91:34:f5:2c:94:5f:42:3d:11:e5:a1:7d:45:f9:be: a1:d0:fb:9a:b7:8f:11:c4:c3:2a:f7:07:d5:0a:bc:ad:62:c0: 66:f5:47:71:55:6e:08:09:26:ba:9e:d6:47:c1:ed:e1:81:96: 8e:54:a5:68 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzA5 NkExNkMyODNEMTYwMEJGMzI2QkNGRUJDMUQxMUQwQTA2M0Q5RTAeFw0yNTEwMTky MTU1MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFCM0FEQUI1QkI2N0Y3 NzgwNEYxNjM1N0E2NDk3Q0YwQUIwRkY5REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuJYwLEL4l/t++gTlxQfNWOhrALlKmW3JV/U29vHd74UGG91f6 ttDJ5KjHMnkgs4JIwm0X6YFEvZKGTPFS46oEJOesxEu4l7BhJmSr7xfCdv50yOOT ClHIq4XJ3vsuFxyY/X209NzS2lg/HyxsV9g92WIu7ztFKTdsvpp06tHggZuRiDVN Bse2wx3pzzxE1+sFaORHMq1YlYdg06UIHeAc4+akD46Sjom6lS0mJKHHr8et+6Ih y0s1fJzqV4KOos5lL8qSjiqMQhEnVstJSXBrTXUE+go9/L1/rBN43AV37yKCErev /ijWXqrtwfZCRo2G+06o8/GNEo9XoMena0DpAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUGzratbtn93gE8WNXpkl88KsP+dswHwYDVR0jBBgwFoAUwJahbCg9FgC/MmvP 68HRHQoGPZ4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENTS1kv d0phaGJDZzlGZ0NfTW12UDY4SFJIUW9HUFo0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93SmFoYkNnOUZnQ19NbXZQNjhIUkhRb0dQWjQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQ1NLWS93SmFoYkNnOUZnQ19NbXZQNjhI UkhRb0dQWjQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjON fk49RU/o7vd1EQS/vUvkUtLjXmBPA0wOO+++7W/bf3cvxXN+kRGdroams+25iyvu ISkM1xYhRkQnNcj48u/NLREODOsHHN9iN/NiT3Flt1sGAoOAWdqmmxq2FsnW7bCd G4RTQpIzCLA+HU+2mMAbHNawsBFIOxj9T3AE5UkbV9RLmsG2jrMnEP+htFnvVoVR 6ZZE5IkNl8ITYyAsfomSJCAytkdR1L/UEl/kAm/hEMtU2lT033wi2zbltrUrglPQ 1BP3hF+vkTT1LJRfQj0R5aF9Rfm+odD7mrePEcTDKvcH1Qq8rWLAZvVHcVVuCAkm up7WR8Ht4YGWjlSlaA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:28:47 2025 by rpki-client