$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft File: FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft (raw, json) Hash identifier: Y8tX7TSFvk4XrP96nQ5rgF6RnQPD2beSRKmd6VjYoFs= Subject key identifier: 3C:E3:DF:61:7B:EA:5D:05:79:2A:F9:97:07:A7:FD:2C:2C:CD:91:72 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1B1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft Manifest number: 1AA6 Signing time: Sat 26 Apr 2025 15:19:19 +0000 Manifest this update: Sat 26 Apr 2025 15:19:19 +0000 Manifest next update: Sat 26 Apr 2025 21:19:19 +0000 Files and hashes: 1: -FjQAAx8RqmGsuuWgV8GriaTqdA.cer (hash: z/XPYi8FOdw394vcNdauZxrYwnkHzJT7f6J9d4N8r54=) 2: 0mTRm5gGAj5HbgOcBf3OE3asbDw.cer (hash: VGHpG07mo0cQYV64c5zxdifyJW3dU0vjxMSz/e24v5g=) 3: 2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer (hash: hP8Z3yJqSVTj0ed21mTZlDTcXgFeWmFtgIvrc67rMSk=) 4: 3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer (hash: rBeDam6sRJ/bG4pjDBkLi0jRSHHrjk98zSE5oMpIBhc=) 5: 4hRiP9Epy5cnQNOR2vORlvKt8r0.cer (hash: bl13E5JJObrrRZI7mf6dDoWTtTmE2la6csPCj0KmbhQ=) 6: 6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.cer (hash: 7ixjjCQpyi2yR4ocv8wnaBPb66fReX5kMnyhrdYxEcs=) 7: 7hlBw3vR4s8SUS-YqzZsKdp5txg.cer (hash: 4gt4I2GT5TVOPo4V5ShJO6K6ZZUQWj4KXccwojfgnAI=) 8: 8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer (hash: ISB4umo25qh/0iV++TUopfHsL1yURELN6s0VaAYV7VQ=) 9: Ay0zZk94CyxQHuYj57vx0iayYkg.cer (hash: Z2c1Un7MJOAwqTIzJ5IDeItdtpm8wNUPtP2fmXZ6rec=) 10: B-NqPSGaivyE-IswVT5jjObCzs4.cer (hash: 8EK2wgutI6Vb2p16N3bcecLwkWkocObPmu61avisjtA=) 11: B9PnPsXrPXBIY4ieIhhFt2ldQJw.cer (hash: 6WLm4oaRNkB+JDh/8It0WtSdLGPSR4YQVa3S192SvMc=) 12: Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer (hash: MzHenGjoLUcNjoiVfdlbYk2J+bq8Saitp2yC91azKsU=) 13: C2fHjjXSNjKiVTKu_otKn8q-O00.cer (hash: FRQ8bWQC5DIuF99Ro0x8lj8/vXjcG1leUcME9dIo2mc=) 14: FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl (hash: uaSUoGVE2qGvr6e/LEWqqVLstMKn5MlbYYI1pTYXX0g=) 15: GBM8moK2QouL539igE0i4hikV0U.cer (hash: xoFq7QDQZEaUNlWh/Swb906QeqZ09ClkyzAt3N5dl0M=) 16: IKzKhxhQA3Ov93tBSyPcal8UdO4.cer (hash: plvYQIJXHpEmf8muHkvHECOHMpIERcr1ZgA2qvsXrTU=) 17: NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer (hash: UjZTOIWXU1rMa/a9zSSs8eyBYkf2wSmzDVHfqvQXghw=) 18: Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.cer (hash: TxLAZJEsULvWWV5fbxMcmj/c75QVP8UXsxbtISBWWKE=) 19: Qi58ldh96a7rISoMTMsBdOZcpdA.cer (hash: y3gnmAD4VUlr6VReqxjug8ksetmNNHg4KIjmIOzTCS4=) 20: RPjc9msltxkFbR7WXBbqklflVT0.cer (hash: 4nZyVnsKigzOeKNZkLbr0fg1aK6Le997hfoMs1Trqpg=) 21: RUwtAMcuK1O0J_30WpO8Vn5AQOI.cer (hash: yXP2j3NxnXnLIcAtMe8ErkqStZhJIzuXPdKYl4BTGBI=) 22: RXsQNypobj_3Nla-tc0968kyNxo.cer (hash: lmkUnPXMaEfnmvWkomNi7etpg3fdzs/nRTzqtYv+C/M=) 23: RhvA5RYCLDwnj8iSQgcF_rhWaNk.cer (hash: X3gtjBjiEepUHs7hrIgwbWrlQTRCQI6dS6immRp6Eu0=) 24: S0bOj4AxurdTZNpb2YHoiFBPtBE.cer (hash: bAbCax9pqLiy5UMLdc5Ql09dbj/qRAvtPGmGfy4WOvY=) 25: TwAMtt3TdIem3h9-rb2hJwjrLBk.cer (hash: jQyd3tLuTzN1WEW8IRfu+mzrq/V1j8zAABy3flW4uPc=) 26: UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer (hash: sQ/NtQJnkNXgJT1XfwGj9GaRiOrcwHiFzlE8icL4cqU=) 27: V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer (hash: gtenGDnbZaNDKW6m5z5nRNbyGuLsPhXJO8v+CEIT3qY=) 28: WHbkuN-qIkwBnSRpMfw816T-7So.cer (hash: eGy1+i19e12YvZKPUQZlwg/0exNYuNgY7QOiBXoLmN8=) 29: Yl2EXXlTUZ1xnr3MksF2MhdwIs8.cer (hash: cF22nYKtUVYFjRuiaji7jiPXkxu9vk9lu1rF82NLCjc=) 30: ZgKWWn0_f_vztR7fFOO7zC3ztpo.cer (hash: QMwPIGqlcLA78vxclt43G/yxfct1JvjNHr21r8tZKhc=) 31: aisTlsFC2mcRUYh16QxK7JCw9cQ.cer (hash: zxpz/hmX6Ya/ZhyZHaM81xty9U07CEZcnRVMCUQvvMU=) 32: b-yuhG9BvMOyThMnuiHCMFPhHAM.cer (hash: V4BBxCAIdgK8r6INC90qTnG4LaU6cJe/zYjhY7tFpPo=) 33: fpzvJ8je0TUGszmdmS7P9ia1eVE.cer (hash: I98MEeQC1Jbr03BWKzFcgcrkHcX7dDxsjuJumwSJ2v4=) 34: mgzAu2MdFRMQI4SQg9lBotvN-mU.cer (hash: x0WT8eObVlmm4GTSYKJ31won1GAcUy8soWov4ATFFtM=) 35: tKZaDrhmkhnEGFRC1J_J1vgltmU.cer (hash: BvrtjnvMRwfR+SqjsWmrP6hMHAKtWuNWbOYldsw8mWA=) 36: u_jlNSJAlxeHgGo-U6iQSFmp8Oc.cer (hash: o3u8naqefIUdWiR1vOpT8DGZB65vd44bsBSv1lSZmUg=) 37: x1hCDPdi5IrXyqYOs53NYisftPY.cer (hash: vaoThMPKg7pmpFLt5kEyU6aYDpnN/ULpjhahAgQJM44=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6943 (0x1b1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Apr 26 15:19:19 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=3CE3DF617BEA5D05792AF99707A7FD2C2CCD9172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:ee:25:61:32:a6:5d:0e:04:37:32:5f:d6: 12:41:14:61:6d:c2:98:d3:de:c8:01:8e:72:15:6a: 91:83:f2:e4:91:ef:94:48:d8:2b:66:18:29:ae:e4: 2d:05:bc:86:8b:5f:b9:cb:3c:e4:bc:9e:6b:6c:b4: b7:92:23:a6:28:14:98:44:9e:1b:b1:2a:4f:e3:09: 8a:83:ad:04:cd:6d:01:d6:95:3e:e4:d8:bf:db:86: 13:70:fe:8b:db:c8:29:57:61:29:fb:10:13:c4:18: 59:68:50:fb:a1:ec:df:0d:33:46:92:90:9d:9b:7e: c9:db:02:06:a8:73:4f:d9:fb:13:6a:b7:c3:c2:0f: ae:b1:4f:fa:37:fd:a8:59:2d:13:62:b3:52:de:b9: 3a:9f:48:6a:ac:f2:e4:77:83:38:83:2d:6b:c2:0a: b7:e4:63:c9:33:82:fb:1c:06:6d:4c:2b:c8:09:12: a4:ba:fa:3a:59:36:b1:c4:46:a3:92:e2:64:33:c9: 6c:9f:aa:cb:1f:da:86:13:ea:b7:fc:0b:30:c1:3f: a0:4a:9b:cc:66:93:da:86:20:96:ec:20:78:e0:10: 1e:3f:82:b4:61:c9:8e:f0:93:19:61:f9:a4:d7:ae: f7:e4:a6:db:39:65:3f:43:e5:b0:cc:30:bb:4d:aa: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E3:DF:61:7B:EA:5D:05:79:2A:F9:97:07:A7:FD:2C:2C:CD:91:72 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8b:f5:3f:ca:ec:bf:ed:93:f9:75:06:96:49:7a:80:68:63: 4c:4f:7e:dc:b0:1d:94:71:91:57:63:40:89:ad:66:8c:7b:a2: 07:02:e8:6d:ae:0b:e5:94:f4:a6:ed:78:24:a8:8d:d6:3b:54: d0:a6:ba:90:5f:3e:9f:13:cf:f1:c6:73:e8:bc:10:1a:d9:c4: af:2a:51:12:77:97:b7:1d:5d:47:0f:b9:77:a1:0f:10:f7:d2: 07:3b:5f:95:4a:4f:83:8b:ee:fd:50:97:56:1a:d0:25:12:f8: 50:7f:1f:fe:b3:1b:35:a1:76:da:33:12:97:df:3e:10:a6:bb: 02:14:a1:f7:27:d2:28:5c:d4:5c:80:34:fd:e3:54:72:ec:e2: b6:33:51:60:11:6a:73:de:7f:3c:e8:fe:22:31:a7:88:b1:7d: 35:7d:c9:b0:1a:95:0a:27:1e:78:af:1f:89:09:0d:16:d2:cf: 7c:3b:70:68:38:41:cd:db:c6:6b:c4:ec:fd:f1:a4:0a:a9:68: a9:af:a3:50:08:a0:ab:ed:be:a3:2c:99:c9:34:d5:82:e1:77: 8e:d9:80:a8:07:0a:87:72:72:00:fd:9c:f4:56:cd:e5:56:d4: 43:0e:c0:b7:42:d1:f4:47:5c:2d:4a:5c:a9:33:86:f1:ff:b1: 66:11:d9:52 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgICGx8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI1MDQyNjE1MTkxOVoXDTI1MDkzMDAwMDAwMFowMzEx MC8GA1UEAxMoM0NFM0RGNjE3QkVBNUQwNTc5MkFGOTk3MDdBN0ZEMkMyQ0NEOTE3 MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMR27iVhMqZdDgQ3Ml/W EkEUYW3CmNPeyAGOchVqkYPy5JHvlEjYK2YYKa7kLQW8hotfucs85Lyea2y0t5Ij pigUmESeG7EqT+MJioOtBM1tAdaVPuTYv9uGE3D+i9vIKVdhKfsQE8QYWWhQ+6Hs 3w0zRpKQnZt+ydsCBqhzT9n7E2q3w8IPrrFP+jf9qFktE2KzUt65Op9Iaqzy5HeD OIMta8IKt+RjyTOC+xwGbUwryAkSpLr6Olk2scRGo5LiZDPJbJ+qyx/ahhPqt/wL MME/oEqbzGaT2oYgluwgeOAQHj+CtGHJjvCTGWH5pNeu9+Sm2zllP0PlsMwwu02q Va0CAwEAAaOCAhcwggITMB0GA1UdDgQWBBQ8499he+pdBXkq+ZcHp/0sLM2RcjAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGVBggrBgEFBQcBCwSBiDCBhTBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0Yw TS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAai/U/yuy/7ZP5 dQaWSXqAaGNMT37csB2UcZFXY0CJrWaMe6IHAuhtrgvllPSm7XgkqI3WO1TQprqQ Xz6fE8/xxnPovBAa2cSvKlESd5e3HV1HD7l3oQ8Q99IHO1+VSk+Di+79UJdWGtAl EvhQfx/+sxs1oXbaMxKX3z4QprsCFKH3J9IoXNRcgDT941Ry7OK2M1FgEWpz3n88 6P4iMaeIsX01fcmwGpUKJx54rx+JCQ0W0s98O3BoOEHN28ZrxOz98aQKqWipr6NQ CKCr7b6jLJnJNNWC4XeO2YCoBwqHcnIA/Zz0Vs3lVtRDDsC3QtH0R1wtSlypM4bx /7FmEdlS -----END CERTIFICATE-----Generated at Sat Apr 26 20:13:27 2025 by rpki-client