$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNITEDSOFT/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.mft File: oMNmr2CU_YGQmNgmVzoIW7Fu4ns.mft (raw, json) Hash identifier: nSEze07FftDwrvBtaJdCrZ12Dp1Xu3+WyKPm95wXsJE= Subject key identifier: 90:61:2D:B3:64:E5:EF:65:DB:70:EC:66:3E:56:DE:C0:40:0A:1F:F3 Authority key identifier: A0:C3:66:AF:60:94:FD:81:90:98:D8:26:57:3A:08:5B:B1:6E:E2:7B Certificate issuer: /CN=A0C366AF6094FD819098D826573A085BB16EE27B Certificate serial: 1399 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNITEDSOFT/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.mft Manifest number: 1399 Signing time: Sat 23 Aug 2025 21:13:40 +0000 Manifest this update: Sat 23 Aug 2025 21:13:40 +0000 Manifest next update: Mon 25 Aug 2025 21:13:40 +0000 Files and hashes: 1: oMNmr2CU_YGQmNgmVzoIW7Fu4ns.crl (hash: fTnpKQFvRN0qVCsZLCQmxbwPm4fdC4oIKdxq78wPmgg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNITEDSOFT/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UNITEDSOFT/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5017 (0x1399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0C366AF6094FD819098D826573A085BB16EE27B Validity Not Before: Aug 23 21:13:40 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=90612DB364E5EF65DB70EC663E56DEC0400A1FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:6f:e3:95:a9:66:d9:f3:25:db:93:60:cd: 2e:8e:28:23:d6:bf:86:a8:05:b7:aa:cd:7d:39:2c: 57:d0:a0:be:97:77:89:85:6a:c6:d3:b2:35:6e:20: bf:0b:79:a5:4b:42:c2:42:00:87:89:1c:95:b9:b7: 90:7d:9b:60:64:f6:2a:b0:42:ea:33:4e:a9:62:ec: 12:c1:d8:49:1c:64:99:50:59:98:f4:5a:56:b9:5f: e7:f9:77:2d:ae:4b:b9:5c:b0:8e:1a:3d:4e:1a:48: cc:e4:9b:0b:1e:2d:ae:ab:99:d4:8c:ef:cf:73:f7: 04:95:69:b4:a0:f7:e9:6b:26:35:6b:79:8a:fd:47: 25:1b:bd:17:18:23:7f:da:9d:2f:d8:dc:3e:b3:c9: 68:7e:6f:d5:08:49:50:67:dd:af:86:e2:d3:20:84: 29:26:49:9b:e4:74:e9:96:39:ce:ac:c4:71:93:87: 96:52:bd:6e:f9:e2:00:85:c3:60:a8:46:f8:fb:55: 7e:f8:98:ec:9b:1e:3d:a1:ce:79:e9:3c:d7:c1:b4: a9:b4:27:df:7d:99:d4:65:0d:a0:a8:26:9e:7c:f3: ba:59:67:62:b4:78:bf:4f:02:9f:be:f6:18:a3:ce: e8:22:40:92:4c:20:9d:63:43:23:8a:1c:0a:0c:8d: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:61:2D:B3:64:E5:EF:65:DB:70:EC:66:3E:56:DE:C0:40:0A:1F:F3 X509v3 Authority Key Identifier: keyid:A0:C3:66:AF:60:94:FD:81:90:98:D8:26:57:3A:08:5B:B1:6E:E2:7B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNITEDSOFT/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNITEDSOFT/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:fb:74:73:d4:2c:43:e1:32:d4:3b:78:d8:50:2d:2c:14:bb: a8:83:57:48:17:1c:9b:b3:ac:f1:cb:35:57:ae:17:67:20:6e: 3a:df:ce:b1:57:67:3f:9a:83:ad:6a:82:0a:9c:af:13:0e:3a: 3c:eb:74:ba:a8:0a:b3:9f:20:67:14:95:fc:9a:8a:15:ae:25: b1:82:22:03:3b:7d:04:8b:a5:d7:27:2a:64:a4:8e:56:58:53: 76:c2:94:42:92:70:61:eb:f1:e1:1d:4b:87:a3:fd:b1:f3:9f: e2:56:dd:21:38:3f:f0:07:5c:bc:df:f7:ed:57:e0:9a:af:2f: ba:d3:71:e2:2c:0e:36:86:8f:3e:f2:b5:e3:9c:34:af:be:38: b5:99:da:89:37:68:d7:0b:94:a7:75:a4:44:07:9e:cb:51:4d: fc:07:45:50:d8:bf:36:81:25:f2:53:2f:d2:f0:1d:07:62:4f: 2a:dc:09:c9:c7:fc:4d:37:bc:1f:e9:a3:87:1a:a8:d0:66:e0: bc:2f:07:d4:68:6a:5e:b0:f7:24:29:62:24:5e:aa:51:3f:2b: ca:47:69:31:d5:4a:62:eb:fa:96:99:6e:c0:54:d8:86:25:1f: 83:55:f8:5c:5c:b6:12:08:07:99:ec:38:23:ee:dd:5d:43:c2: 90:68:d1:c5 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICE5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTBD MzY2QUY2MDk0RkQ4MTkwOThEODI2NTczQTA4NUJCMTZFRTI3QjAeFw0yNTA4MjMy MTEzNDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkwNjEyREIzNjRFNUVG NjVEQjcwRUM2NjNFNTZERUMwNDAwQTFGRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDATW/jlalm2fMl25NgzS6OKCPWv4aoBbeqzX05LFfQoL6Xd4mF asbTsjVuIL8LeaVLQsJCAIeJHJW5t5B9m2Bk9iqwQuozTqli7BLB2EkcZJlQWZj0 Wla5X+f5dy2uS7lcsI4aPU4aSMzkmwseLa6rmdSM789z9wSVabSg9+lrJjVreYr9 RyUbvRcYI3/anS/Y3D6zyWh+b9UISVBn3a+G4tMghCkmSZvkdOmWOc6sxHGTh5ZS vW754gCFw2CoRvj7VX74mOybHj2hznnpPNfBtKm0J999mdRlDaCoJp5887pZZ2K0 eL9PAp++9hijzugiQJJMIJ1jQyOKHAoMjWmFAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUkGEts2Tl72XbcOxmPlbewEAKH/MwHwYDVR0jBBgwFoAUoMNmr2CU/YGQmNgm VzoIW7Fu4nswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JVEVE U09GVC9vTU5tcjJDVV9ZR1FtTmdtVnpvSVc3RnU0bnMuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL29NTm1yMkNVX1lHUW1OZ21Wem9JVzdGdTRucy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1VOSVRFRFNPRlQvb01ObXIyQ1Vf WUdRbU5nbVZ6b0lXN0Z1NG5zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMD7dHPULEPhMtQ7eNhQLSwUu6iDV0gXHJuzrPHLNVeuF2cgbjrfzrFX Zz+ag61qggqcrxMOOjzrdLqoCrOfIGcUlfyaihWuJbGCIgM7fQSLpdcnKmSkjlZY U3bClEKScGHr8eEdS4ej/bHzn+JW3SE4P/AHXLzf9+1X4JqvL7rTceIsDjaGjz7y teOcNK++OLWZ2ok3aNcLlKd1pEQHnstRTfwHRVDYvzaBJfJTL9LwHQdiTyrcCcnH /E03vB/po4caqNBm4LwvB9Roal6w9yQpYiReqlE/K8pHaTHVSmLr+paZbsBU2IYl H4NV+FxcthIIB5nsOCPu3V1DwpBo0cU= -----END CERTIFICATE-----Generated at Sun Aug 24 08:14:28 2025 by rpki-client