$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.mft File: Yt2b1PDUByVbzZL7U4SrazUTeU8.mft (raw, json) Hash identifier: loosE2ETQ3x6DzGb2wI36at92YEsq5Q4rcyH4kDaeyk= Subject key identifier: 8B:4A:6C:6D:17:B5:C3:C5:CF:05:93:2F:B9:66:AC:5E:0E:DF:49:C8 Authority key identifier: 62:DD:9B:D4:F0:D4:07:25:5B:CD:92:FB:53:84:AB:6B:35:13:79:4F Certificate issuer: /CN=62DD9BD4F0D407255BCD92FB5384AB6B3513794F Certificate serial: 11FC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yt2b1PDUByVbzZL7U4SrazUTeU8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.mft Manifest number: 11FC Signing time: Mon 11 Aug 2025 09:11:06 +0000 Manifest this update: Mon 11 Aug 2025 09:11:06 +0000 Manifest next update: Wed 13 Aug 2025 09:11:06 +0000 Files and hashes: 1: Yt2b1PDUByVbzZL7U4SrazUTeU8.crl (hash: VM1B+TiKGQlwa4GrTGitBUo899tGoC5+wGr18ZQLXos=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Yt2b1PDUByVbzZL7U4SrazUTeU8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4604 (0x11fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD9BD4F0D407255BCD92FB5384AB6B3513794F Validity Not Before: Aug 11 09:11:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8B4A6C6D17B5C3C5CF05932FB966AC5E0EDF49C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:a8:4f:ad:43:c1:a4:b9:5e:c8:4b:50:87: a9:3a:77:63:92:2e:62:96:f9:b5:ee:38:92:5f:45: 93:a7:29:18:1d:43:f8:81:7d:c4:2c:fa:c1:a3:7e: 62:ab:52:9a:c9:19:0a:c5:a9:18:d0:f0:cd:68:d7: 61:3d:fb:35:5b:f6:7c:d4:1f:b7:95:40:88:f1:ad: 8f:9f:aa:98:1c:da:0c:c5:96:ff:ad:5d:1b:fc:6d: 99:67:f8:b9:f1:db:47:23:56:9e:65:27:60:d5:32: 45:fa:ee:c9:34:92:2b:be:81:b9:d8:38:71:f8:5c: d7:e1:dc:a8:49:65:d3:3b:26:f2:53:fa:32:46:e3: aa:90:6f:d1:7c:bd:a1:35:0c:99:f8:18:fb:c0:64: 88:84:d6:c6:32:bd:3a:3e:3e:0e:bb:25:fb:07:75: ad:78:88:0f:58:c1:f8:6b:5e:be:6e:43:5e:ea:e1: a6:04:fa:78:60:15:0c:d5:a2:67:11:86:1e:08:12: 21:d5:8d:5a:b4:11:04:ce:cc:94:a6:8f:80:82:71: 99:ca:5d:cb:36:e1:b4:4c:32:66:52:8e:30:3c:51: d7:37:5a:b0:43:af:27:7f:16:a3:d3:30:e1:88:87: 80:fe:92:4c:cd:2b:95:59:62:e0:b1:37:38:87:06: db:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4A:6C:6D:17:B5:C3:C5:CF:05:93:2F:B9:66:AC:5E:0E:DF:49:C8 X509v3 Authority Key Identifier: keyid:62:DD:9B:D4:F0:D4:07:25:5B:CD:92:FB:53:84:AB:6B:35:13:79:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yt2b1PDUByVbzZL7U4SrazUTeU8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:52:b0:ed:1a:5b:37:10:e2:a8:94:13:50:1e:bd:10:fe:97: f9:2e:d4:82:5d:31:31:e8:f3:d0:a6:be:20:08:34:6a:5a:c7: b4:4c:f3:26:4f:51:56:61:66:03:7f:21:d2:1d:28:e8:2d:97: e0:e3:ca:16:bd:41:69:2c:cb:51:fd:ba:9c:9f:18:4b:6b:36: 74:bb:8f:9a:93:4b:66:d0:0b:a8:3d:eb:f5:a3:3f:e0:2b:6c: c0:aa:72:22:7b:a0:ab:fa:17:e3:96:37:2c:ba:60:23:4f:9e: 98:3e:a6:07:86:23:ce:49:00:c2:45:66:16:c0:fa:ea:66:0d: 81:a2:c2:8c:fc:33:b2:59:85:9b:4b:71:b7:13:d6:04:35:9a: dd:e7:b3:8f:ca:6a:fb:08:ed:36:58:96:50:94:d4:f5:08:c8: 0c:f5:ac:90:b9:31:97:18:aa:4d:cc:5e:27:48:b3:ca:14:41: 48:58:88:e5:5f:c0:c3:79:0a:4b:c7:21:ae:f0:65:3d:02:ab: b9:4e:04:1b:cc:a7:88:09:3b:6c:87:fc:5c:01:e4:f7:fb:97: 64:a1:6b:5c:47:51:56:8e:e5:75:db:af:1f:52:c1:34:45:f5: 2c:8c:d6:c7:5c:13:a1:f2:17:e4:e9:7f:71:0a:0d:01:35:d5: 6c:f0:f8:f6 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgICEfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjJE RDlCRDRGMEQ0MDcyNTVCQ0Q5MkZCNTM4NEFCNkIzNTEzNzk0RjAeFw0yNTA4MTEw OTExMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhCNEE2QzZEMTdCNUMz QzVDRjA1OTMyRkI5NjZBQzVFMEVERjQ5QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBvqhPrUPBpLleyEtQh6k6d2OSLmKW+bXuOJJfRZOnKRgdQ/iB fcQs+sGjfmKrUprJGQrFqRjQ8M1o12E9+zVb9nzUH7eVQIjxrY+fqpgc2gzFlv+t XRv8bZln+Lnx20cjVp5lJ2DVMkX67sk0kiu+gbnYOHH4XNfh3KhJZdM7JvJT+jJG 46qQb9F8vaE1DJn4GPvAZIiE1sYyvTo+Pg67JfsHda14iA9YwfhrXr5uQ17q4aYE +nhgFQzVomcRhh4IEiHVjVq0EQTOzJSmj4CCcZnKXcs24bRMMmZSjjA8Udc3WrBD ryd/FqPTMOGIh4D+kkzNK5VZYuCxNziHBts5AgMBAAGjggINMIICCTAdBgNVHQ4E FgQUi0psbRe1w8XPBZMvuWasXg7fScgwHwYDVR0jBBgwFoAUYt2b1PDUByVbzZL7 U4SrazUTeU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFTVENM T1VEL1l0MmIxUERVQnlWYnpaTDdVNFNyYXpVVGVVOC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvWXQyYjFQRFVCeVZielpMN1U0U3JhelVUZVU4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFTVENMT1VEL1l0MmIxUERVQnlW YnpaTDdVNFNyYXpVVGVVOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBzUrDtGls3EOKolBNQHr0Q/pf5LtSCXTEx6PPQpr4gCDRqWse0TPMmT1FW YWYDfyHSHSjoLZfg48oWvUFpLMtR/bqcnxhLazZ0u4+ak0tm0AuoPev1oz/gK2zA qnIie6Cr+hfjljcsumAjT56YPqYHhiPOSQDCRWYWwPrqZg2BosKM/DOyWYWbS3G3 E9YENZrd57OPymr7CO02WJZQlNT1CMgM9ayQuTGXGKpNzF4nSLPKFEFIWIjlX8DD eQpLxyGu8GU9Aqu5TgQbzKeICTtsh/xcAeT3+5dkoWtcR1FWjuV1268fUsE0RfUs jNbHXBOh8hfk6X9xCg0BNdVs8Pj2 -----END CERTIFICATE-----Generated at Mon Aug 11 10:44:38 2025 by rpki-client