$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft File: 9-nqSCJyPUfjBC-dj7bkK20KZoM.mft (raw, json) Hash identifier: N2O+boX0IOCXb/PHEF9irbq3bNjFvdWbLebw94Lx3+k= Subject key identifier: C8:87:76:32:C0:93:24:5F:AE:FB:6C:F0:C2:FE:BB:13:E5:5F:CE:F7 Authority key identifier: F7:E9:EA:48:22:72:3D:47:E3:04:2F:9D:8F:B6:E4:2B:6D:0A:66:83 Certificate issuer: /CN=F7E9EA4822723D47E3042F9D8FB6E42B6D0A6683 Certificate serial: 21 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft Manifest number: 20 Signing time: Mon 20 Oct 2025 15:24:44 +0000 Manifest this update: Mon 20 Oct 2025 15:24:44 +0000 Manifest next update: Mon 20 Oct 2025 21:24:44 +0000 Files and hashes: 1: 9-nqSCJyPUfjBC-dj7bkK20KZoM.crl (hash: g2pkdyepQETrY5HZuwhFTrykuMOhnzNeubmdJHCQFf4=) 2: F_tz9YMtONIj4ey14wz4m4cSAEQ.roa (hash: vCLC3PokhGJHFJYOcIOorW8KHb+s04OzjY9WuV9W2RI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 21:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7E9EA4822723D47E3042F9D8FB6E42B6D0A6683 Validity Not Before: Oct 20 15:24:44 2025 GMT Not After : Oct 7 15:30:24 2026 GMT Subject: CN=C8877632C093245FAEFB6CF0C2FEBB13E55FCEF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:93:92:df:ae:22:d2:95:8c:1b:4e:dc:04: df:b9:19:a1:1d:ab:43:b3:e7:74:3f:48:34:9a:3d: 25:21:c4:30:f1:61:b0:00:7a:95:64:f8:ed:8a:f1: 64:91:92:30:41:26:03:5c:aa:3f:e8:71:1f:58:ef: b5:c7:86:44:1e:97:09:b5:24:a8:3b:2e:d1:21:56: e4:9e:85:03:f3:1a:2e:a2:25:3c:f3:c5:69:66:be: f7:89:40:fc:1b:a5:96:79:de:e2:c7:11:bc:64:1d: ed:cb:21:51:31:16:3e:5c:a6:73:a0:55:79:25:97: 12:1e:2b:7a:9d:18:5a:da:8c:82:fa:f4:1c:5b:36: ce:67:a6:11:f3:d1:ee:6c:6d:cd:99:7f:bd:bd:ad: e1:f3:d2:0f:bb:13:e3:39:56:85:31:07:f6:32:f6: 1e:6b:95:87:3c:57:0c:de:0e:57:19:37:5a:d8:57: 09:6f:51:99:34:a3:80:ed:b3:f6:dc:d3:01:f3:5e: 4c:f2:a2:1e:e6:02:ac:99:c1:0e:a0:9a:51:99:ab: bb:d2:df:11:f7:9f:c0:6f:f4:74:60:ef:5f:5e:6d: 60:4f:74:8e:f0:96:04:16:fc:85:e6:70:e6:df:dc: bf:b8:a7:49:16:d9:e6:c4:19:ba:96:f0:65:39:14: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:87:76:32:C0:93:24:5F:AE:FB:6C:F0:C2:FE:BB:13:E5:5F:CE:F7 X509v3 Authority Key Identifier: keyid:F7:E9:EA:48:22:72:3D:47:E3:04:2F:9D:8F:B6:E4:2B:6D:0A:66:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:73:c5:55:c2:03:61:c6:4b:6c:ee:78:e2:ed:8b:6b:83:10: 56:c8:a8:25:0c:32:55:33:18:3a:9a:70:f4:4b:db:09:2f:8d: 34:eb:be:3c:66:26:8a:a6:b8:89:72:1e:d9:c4:61:15:65:7e: 03:6c:39:5c:d7:64:a3:1b:4d:57:36:95:14:ac:c7:99:70:d2: d5:ec:ab:29:a6:1b:61:5b:2e:b2:fd:a4:81:fe:69:3f:a4:56: 50:dc:b4:ea:cf:0b:6c:ee:3e:14:a2:e5:59:d6:3e:b4:9c:ad: da:ea:3d:79:7f:5d:14:24:5d:cf:46:83:69:f3:4e:b2:3b:92: 1a:b0:1c:de:19:e7:1e:ca:0d:fe:df:05:d6:e0:dc:4c:a4:47: ae:44:69:ba:77:4d:aa:b9:47:4f:ab:fe:0c:1b:38:f9:26:5e: 9d:52:85:f1:04:e6:f7:f8:1e:12:fb:be:71:99:80:02:b4:f1: ba:cf:08:13:7f:56:05:08:25:23:4a:bc:32:39:8e:f8:ec:97: 07:b5:04:82:1f:0d:a7:20:5e:5d:f2:a2:2d:e7:67:8f:ff:ec: 5b:c2:a9:ad:2c:1e:72:5a:b7:0a:56:af:1e:5f:02:d2:45:5d: 92:5a:3e:2a:dc:66:8f:37:85:9d:3f:44:82:06:f9:9c:71:18: 33:65:25:e8 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGN0U5 RUE0ODIyNzIzRDQ3RTMwNDJGOUQ4RkI2RTQyQjZEMEE2NjgzMB4XDTI1MTAyMDE1 MjQ0NFoXDTI2MTAwNzE1MzAyNFowMzExMC8GA1UEAxMoQzg4Nzc2MzJDMDkzMjQ1 RkFFRkI2Q0YwQzJGRUJCMTNFNTVGQ0VGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMy8k5LfriLSlYwbTtwE37kZoR2rQ7PndD9INJo9JSHEMPFhsAB6 lWT47YrxZJGSMEEmA1yqP+hxH1jvtceGRB6XCbUkqDsu0SFW5J6FA/MaLqIlPPPF aWa+94lA/Bullnne4scRvGQd7cshUTEWPlymc6BVeSWXEh4rep0YWtqMgvr0HFs2 zmemEfPR7mxtzZl/vb2t4fPSD7sT4zlWhTEH9jL2HmuVhzxXDN4OVxk3WthXCW9R mTSjgO2z9tzTAfNeTPKiHuYCrJnBDqCaUZmru9LfEfefwG/0dGDvX15tYE90jvCW BBb8heZw5t/cv7inSRbZ5sQZupbwZTkUMvsCAwEAAaOCAgMwggH/MB0GA1UdDgQW BBTIh3YywJMkX677bPDC/rsT5V/O9zAfBgNVHSMEGDAWgBT36epIInI9R+MEL52P tuQrbQpmgzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9aVVNPLzkt bnFTQ0p5UFVmakJDLWRqN2JrSzIwS1pvTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev OS1ucVNDSnlQVWZqQkMtZGo3YmtLMjBLWm9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvWlVTTy85LW5xU0NKeVBVZmpCQy1kajdia0sy MEtab00ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3PFVcID YcZLbO544u2La4MQVsioJQwyVTMYOppw9EvbCS+NNOu+PGYmiqa4iXIe2cRhFWV+ A2w5XNdkoxtNVzaVFKzHmXDS1eyrKaYbYVsusv2kgf5pP6RWUNy06s8LbO4+FKLl WdY+tJyt2uo9eX9dFCRdz0aDafNOsjuSGrAc3hnnHsoN/t8F1uDcTKRHrkRpundN qrlHT6v+DBs4+SZenVKF8QTm9/geEvu+cZmAArTxus8IE39WBQglI0q8MjmO+OyX B7UEgh8NpyBeXfKiLednj//sW8KprSweclq3ClavHl8C0kVdklo+KtxmjzeFnT9E ggb5nHEYM2Ul6A== -----END CERTIFICATE-----Generated at Mon Oct 20 19:51:06 2025 by rpki-client