$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft File: yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft (raw, json) Hash identifier: KSzz5TP3XH6rLSFEmh01ef6+pZB4fTWbBctB0+mRF+M= Subject key identifier: 2B:0A:22:29:9F:3D:18:6B:0F:FF:5D:74:74:FC:5E:38:D5:A0:0A:D0 Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B Certificate serial: 0F40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft Manifest number: 0F24 Signing time: Fri 04 Jul 2025 22:03:29 +0000 Manifest this update: Fri 04 Jul 2025 22:03:29 +0000 Manifest next update: Sun 06 Jul 2025 22:03:29 +0000 Files and hashes: 1: TC5O4BU5yifgspTLoBB-6tROqas.roa (hash: 5Z2V+asSnh0jJDO/1WCHnbOIIe8nc85aTk1atgqeHk4=) 2: bEyFLfDyPGGaE222hmgguAfkah4.roa (hash: 6kWlk6NMCJgw+qUJ8W9n1rIs/qfAK1WraQQkWjTOZ2Q=) 3: pjDSIqC07G2sc-JK1QvHVm6USe4.roa (hash: IBXNxPSvmGuAezCUvdgSujSlh2wGI05dKUepw9tjhZ4=) 4: yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl (hash: 43kk5cqepvlYDIhF4ujda/2yViA9vYwD3hjLSQabMRE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 10:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3904 (0xf40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B Validity Not Before: Jul 4 22:03:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2B0A22299F3D186B0FFF5D7474FC5E38D5A00AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:5b:cb:71:84:7e:97:e2:d1:b0:e7:e6:76: 33:a0:6e:d9:3b:30:81:a1:46:17:2b:6d:c8:d1:91: 13:61:9e:b0:9b:c4:52:5e:7d:d7:2b:ee:a1:d1:8d: 56:f3:ca:c8:e3:37:9d:04:92:c8:43:71:df:a6:ed: 99:5e:6d:42:9b:ac:13:d5:9b:d3:78:19:36:7b:41: e2:87:db:4b:7e:cf:ea:2e:27:c9:f5:70:a2:cf:2d: 31:f6:2f:ea:a8:3a:9f:5b:c5:f5:f0:16:3c:09:76: 80:2e:09:71:ba:5c:ba:20:e4:af:e6:41:58:7c:fa: 1d:6b:ee:a6:c3:c3:7e:e1:64:fc:8f:19:71:e1:fa: 21:d2:25:b6:c3:c1:0a:4b:9f:cc:0d:fc:43:68:c8: 35:1c:f9:1a:aa:a9:8b:41:8a:e0:7d:a2:2a:0c:87: 45:23:71:f9:df:20:9a:95:4f:38:33:12:8f:5d:db: 42:89:5a:a7:be:40:87:54:88:c0:c0:9a:57:35:9a: b1:c0:d4:ce:01:e2:3f:a2:8d:20:8a:d1:d0:83:8d: 0b:99:4a:dd:a1:c3:9e:cf:aa:5f:fd:6a:eb:fd:4f: 98:72:19:78:dc:d2:fd:6b:73:2c:a4:63:31:b7:a8: 91:f0:9d:c0:5c:26:36:13:90:35:2f:7b:1b:1b:bc: 74:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0A:22:29:9F:3D:18:6B:0F:FF:5D:74:74:FC:5E:38:D5:A0:0A:D0 X509v3 Authority Key Identifier: keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f2:0e:03:67:0d:a3:5d:8b:25:f7:02:94:6e:4f:2d:91:7c: 89:d9:a0:a2:e3:df:a7:0a:ef:f6:0a:f0:77:3a:68:f9:c6:03: 04:cb:d5:57:6b:c8:24:8f:03:a2:4d:a4:56:39:c3:25:af:ed: c9:24:67:b9:04:4b:f5:fc:6a:3c:5b:4d:26:4f:a8:d2:33:ab: 21:66:51:f6:46:c6:37:84:f3:1d:f7:f2:a7:13:35:45:a9:d8: d1:59:8e:02:12:77:a3:0f:c1:fe:e1:75:57:13:e6:98:7f:5b: 82:b9:9b:62:c9:4a:cd:02:4d:fb:9f:bb:cd:96:e0:83:c4:79: 57:bd:2e:ac:45:65:27:49:67:3d:de:73:83:38:64:5d:63:b5: e2:ba:ce:54:f9:cb:f0:5b:16:a0:f5:5f:21:34:cd:ee:74:af: b4:6b:e9:ef:d9:91:02:77:08:bd:a3:8a:d8:27:31:96:44:3b: ea:fa:44:f7:57:db:b3:97:a2:4a:3c:36:12:58:71:3e:a9:22: eb:9d:2f:e9:2c:55:8d:2f:62:8b:c2:27:0f:57:4e:60:03:c5: db:53:07:cf:f2:b3:00:56:a0:8a:1f:e2:6e:bb:50:d0:a2:a4: d4:ae:02:83:2b:cd:33:4e:0a:1b:4d:b1:9f:67:ae:ae:be:69: ba:15:35:f4 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICD0AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ex QjcxRUZBQzZGNkFBNDMwMjc2MDlDMThBNzM0OTgyNzY0NTU0QjAeFw0yNTA3MDQy MjAzMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJCMEEyMjI5OUYzRDE4 NkIwRkZGNUQ3NDc0RkM1RTM4RDVBMDBBRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCztVvLcYR+l+LRsOfmdjOgbtk7MIGhRhcrbcjRkRNhnrCbxFJe fdcr7qHRjVbzysjjN50EkshDcd+m7ZlebUKbrBPVm9N4GTZ7QeKH20t+z+ouJ8n1 cKLPLTH2L+qoOp9bxfXwFjwJdoAuCXG6XLog5K/mQVh8+h1r7qbDw37hZPyPGXHh +iHSJbbDwQpLn8wN/ENoyDUc+RqqqYtBiuB9oioMh0UjcfnfIJqVTzgzEo9d20KJ Wqe+QIdUiMDAmlc1mrHA1M4B4j+ijSCK0dCDjQuZSt2hw57Pql/9auv9T5hyGXjc 0v1rcyykYzG3qJHwncBcJjYTkDUvexsbvHQjAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUKwoiKZ89GGsP/110dPxeONWgCtAwHwYDVR0jBBgwFoAUyhtx76xvaqQwJ2Cc GKc0mCdkVUswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOVEVB U1kveWh0eDc2eHZhcVF3SjJDY0dLYzBtQ2RrVlVzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS95aHR4NzZ4dmFxUXdKMkNjR0tjMG1DZGtWVXMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5URUFTWS95aHR4NzZ4dmFxUXdK MkNjR0tjMG1DZGtWVXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJfIOA2cNo12LJfcClG5PLZF8idmgouPfpwrv9grwdzpo+cYDBMvVV2vIJI8D ok2kVjnDJa/tySRnuQRL9fxqPFtNJk+o0jOrIWZR9kbGN4TzHffypxM1RanY0VmO AhJ3ow/B/uF1VxPmmH9bgrmbYslKzQJN+5+7zZbgg8R5V70urEVlJ0lnPd5zgzhk XWO14rrOVPnL8FsWoPVfITTN7nSvtGvp79mRAncIvaOK2CcxlkQ76vpE91fbs5ei Sjw2ElhxPqki650v6SxVjS9ii8InD1dOYAPF21MHz/KzAFagih/ibrtQ0KKk1K4C gyvNM04KG02xn2eurr5puhU19A== -----END CERTIFICATE-----Generated at Sat Jul 5 06:30:32 2025 by rpki-client