$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft File: cJhPAIyij2R120JjU7_RxDPYvBo.mft (raw, json) Hash identifier: OHc05rUBBTXii9MlW9IudUGMsqMXiSE846i0o1QCOW4= Subject key identifier: E9:C6:02:C2:C3:AB:88:79:C8:2F:5A:CD:6A:4B:0E:AC:A0:20:AA:66 Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Certificate serial: 0D66 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft Manifest number: 0D30 Signing time: Thu 08 May 2025 21:52:59 +0000 Manifest this update: Thu 08 May 2025 21:52:59 +0000 Manifest next update: Sat 10 May 2025 21:52:59 +0000 Files and hashes: 1: 1nMjymujxDc_PAe8gjFd6J-I8w4.roa (hash: /g1VuA52uVSm9s9ILINxofywoKvACqUgz2NMNS8PTeg=) 2: Kw5iW9SrMFSMowkICxV4HcPCwKY.roa (hash: xSdKXiq1kR4Mcin8WOojtY/rtN+9/n17Tg+t0iQlJuw=) 3: XvW3FGlq0MFwhXB7t0o-dj0Rhq4.roa (hash: xUZ9aj/msdMfDuid9fi8MaQ7M0Vz0xUZWTH2CagJStg=) 4: _-pNbKWWYFAD4VesqFNxb2PL_TE.roa (hash: J+3UrHRxIL6I3H9twAhPye2dlQO/7S+qJIqFdUdoIX4=) 5: cJhPAIyij2R120JjU7_RxDPYvBo.crl (hash: PArgGpoQX+/Fb19F858cw+VTgJNvKtMYSsCejdD5fbE=) 6: jXDPeJq12ggj_MB4JIPiVa-V8ZU.roa (hash: nIHOOuv3XT3n0mjrT4eEruvLbkstdVLcvYWH7R8pMW4=) 7: p-wpyQFKkeOZDS24yiG1JiKxTl8.roa (hash: tHNaIdIOqqssW+YRuN2cfBlhdro3BgfRlPnHRO47XPM=) 8: qMbeSyjhHXyD4w6cTf56vM7mnYM.roa (hash: m0IIzcScgG69zmN5STDBCX9SqtewkoDgoRQbLSowxe8=) 9: qgPderFvMtC8xgv2j31eaFQXadQ.roa (hash: 2ERQBzdG2DHxFL6HzQd2ct0pQ+HNmcR8ByKQCokdztI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 11:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3430 (0xd66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Validity Not Before: May 8 21:52:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E9C602C2C3AB8879C82F5ACD6A4B0EACA020AA66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:4a:e6:25:b3:c9:a8:72:89:ad:c7:e8:56: 3c:86:b4:8d:a9:ce:31:78:73:63:8c:c0:5a:40:91: 71:02:e9:57:06:67:78:de:2b:fe:e2:fb:d5:0e:8e: b2:a0:ec:68:64:cf:ac:dc:7e:4c:d7:de:9a:e5:e9: f2:cb:23:50:2e:01:3b:53:2e:83:33:ef:99:70:f9: b6:64:e8:67:bc:04:c8:e3:c2:19:57:1a:f0:c6:44: 1f:e7:18:6f:e3:cc:e9:57:c0:8a:a6:d4:ca:46:ef: 89:49:09:3e:0c:77:de:08:05:16:58:6a:7d:df:cf: 47:b1:df:75:97:7c:2f:16:a2:e2:bc:9b:dc:07:8a: 40:f6:83:a0:47:ce:ac:6b:d8:26:8a:b2:77:19:6c: 9d:3e:4e:af:14:ae:9f:73:ec:d3:66:9c:e2:7c:29: d5:18:b0:f8:d5:c0:25:11:0d:37:ef:44:0f:3e:c1: e1:77:56:47:fa:79:3c:bd:82:c7:a8:72:e4:46:e1: 16:02:f0:03:98:ea:d5:46:a3:2b:85:d0:36:21:e6: ab:c0:58:c3:35:b6:4f:76:ee:76:bf:89:34:b0:f8: 6a:ac:73:98:89:85:1c:a8:e2:bd:42:29:fa:a5:ac: 98:95:fa:aa:ae:22:25:1b:31:cd:b9:75:f1:b0:a0: 1a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C6:02:C2:C3:AB:88:79:C8:2F:5A:CD:6A:4B:0E:AC:A0:20:AA:66 X509v3 Authority Key Identifier: keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:75:29:9d:20:54:54:73:9b:f8:e7:2b:e3:f9:0a:73:6e:dd: e6:b7:53:b1:f0:be:51:99:c8:98:82:dd:18:7b:89:65:2d:31: 88:67:f6:c8:d2:af:a8:7f:7b:30:8e:c0:0b:ca:97:bb:8f:64: 0f:1d:b1:7c:bb:69:03:a7:c2:28:5c:e5:e7:3f:90:1b:b2:55: aa:a5:66:25:7e:75:90:5a:1e:d9:5e:6c:5a:7d:9f:55:a6:c3: 77:42:68:18:67:a4:1b:f1:d9:a1:55:2a:95:2f:03:9c:48:cd: 79:0b:5e:f2:7d:bf:79:a3:4e:81:71:4e:17:f5:5a:55:2b:17: e4:b3:b8:31:38:c6:df:63:bc:3c:8a:6f:cc:4d:18:e6:52:a0: 7c:fa:a7:1d:82:5d:2a:4f:93:8f:83:53:32:39:e2:7f:96:f6: 46:5d:4b:98:6f:42:9e:c9:2d:bd:3c:9d:27:00:34:59:bb:83: dc:de:e8:b3:f6:1b:93:48:48:5f:2a:0e:ff:07:9a:cd:02:c6: c5:e7:d3:7b:85:bd:50:e1:e2:92:02:2f:ba:ba:0d:d6:2d:95: 9e:4c:e0:cb:97:b7:67:17:c3:56:e2:ab:85:a5:cb:72:6e:9f: 5c:92:02:3f:b9:b1:90:80:25:68:8d:26:cb:b6:cf:81:4b:a0: 36:44:1e:a5 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDWYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzA5 ODRGMDA4Q0EyOEY2NDc1REI0MjYzNTNCRkQxQzQzM0Q4QkMxQTAeFw0yNTA1MDgy MTUyNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU5QzYwMkMyQzNBQjg4 NzlDODJGNUFDRDZBNEIwRUFDQTAyMEFBNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLlkrmJbPJqHKJrcfoVjyGtI2pzjF4c2OMwFpAkXEC6VcGZ3je K/7i+9UOjrKg7Ghkz6zcfkzX3prl6fLLI1AuATtTLoMz75lw+bZk6Ge8BMjjwhlX GvDGRB/nGG/jzOlXwIqm1MpG74lJCT4Md94IBRZYan3fz0ex33WXfC8WouK8m9wH ikD2g6BHzqxr2CaKsncZbJ0+Tq8Urp9z7NNmnOJ8KdUYsPjVwCURDTfvRA8+weF3 Vkf6eTy9gseocuRG4RYC8AOY6tVGoyuF0DYh5qvAWMM1tk927na/iTSw+Gqsc5iJ hRyo4r1CKfqlrJiV+qquIiUbMc25dfGwoBqXAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU6cYCwsOriHnIL1rNaksOrKAgqmYwHwYDVR0jBBgwFoAUcJhPAIyij2R120Jj U7/RxDPYvBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNORVQv Y0poUEFJeWlqMlIxMjBKalU3X1J4RFBZdkJvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9jSmhQQUl5aWoyUjEyMEpqVTdfUnhEUFl2Qm8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BU05FVC9jSmhQQUl5aWoyUjEyMEpqVTdf UnhEUFl2Qm8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHUp nSBUVHOb+Ocr4/kKc27d5rdTsfC+UZnImILdGHuJZS0xiGf2yNKvqH97MI7AC8qX u49kDx2xfLtpA6fCKFzl5z+QG7JVqqVmJX51kFoe2V5sWn2fVabDd0JoGGekG/HZ oVUqlS8DnEjNeQte8n2/eaNOgXFOF/VaVSsX5LO4MTjG32O8PIpvzE0Y5lKgfPqn HYJdKk+Tj4NTMjnif5b2Rl1LmG9CnsktvTydJwA0WbuD3N7os/Ybk0hIXyoO/wea zQLGxefTe4W9UOHikgIvuroN1i2Vnkzgy5e3ZxfDVuKrhaXLcm6fXJICP7mxkIAl aI0my7bPgUugNkQepQ== -----END CERTIFICATE-----Generated at Sat May 10 08:59:52 2025 by rpki-client