$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMANIA/SRZ16-Pmvjm2pgmHdtn2JEJP-4k.mft File: SRZ16-Pmvjm2pgmHdtn2JEJP-4k.mft (raw, json) Hash identifier: i3s7ey//TE4LL/14w89Rox32u6R7OWH0wBB65+H8v+s= Subject key identifier: 46:8E:EE:8C:30:AC:1A:41:ED:9B:58:EF:C8:7A:E9:B9:50:5C:B7:6A Authority key identifier: 49:16:75:EB:E3:E6:BE:39:B6:A6:09:87:76:D9:F6:24:42:4F:FB:89 Certificate issuer: /CN=491675EBE3E6BE39B6A6098776D9F624424FFB89 Certificate serial: 0CD8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SRZ16-Pmvjm2pgmHdtn2JEJP-4k.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMANIA/SRZ16-Pmvjm2pgmHdtn2JEJP-4k.mft Manifest number: 0CD8 Signing time: Sat 10 May 2025 09:53:11 +0000 Manifest this update: Sat 10 May 2025 09:53:11 +0000 Manifest next update: Mon 12 May 2025 09:53:11 +0000 Files and hashes: 1: SRZ16-Pmvjm2pgmHdtn2JEJP-4k.crl (hash: LOk/NLR7JbKg8M1HLEZCAwOvi+npPwwBuW5/S+FJGOU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMANIA/SRZ16-Pmvjm2pgmHdtn2JEJP-4k.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMANIA/SRZ16-Pmvjm2pgmHdtn2JEJP-4k.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/SRZ16-Pmvjm2pgmHdtn2JEJP-4k.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 15:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491675EBE3E6BE39B6A6098776D9F624424FFB89 Validity Not Before: May 10 09:53:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=468EEE8C30AC1A41ED9B58EFC87AE9B9505CB76A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ee:d4:75:cd:30:e2:c3:ef:3a:77:52:26:81: 90:24:db:38:f6:eb:b1:f2:b4:a8:32:2c:95:03:ee: 27:23:fe:ca:72:60:de:7a:51:35:67:07:89:52:74: 42:25:f0:09:8f:19:04:b7:9a:79:25:cf:c3:8a:f4: fb:59:a7:e7:dd:fc:a4:ba:9f:17:71:fe:75:1a:0b: ad:43:db:7c:a5:b4:30:61:be:8d:31:34:66:c3:23: e8:31:f0:3b:8f:41:aa:af:ea:51:e4:1b:51:ed:19: 92:6c:33:03:d1:6d:59:c6:05:1b:c5:98:c2:40:04: b3:fe:a3:69:96:3f:ca:9a:e9:c3:19:28:6e:3a:fc: e6:0f:b1:dd:29:e1:1d:61:f3:cb:5f:8d:5d:40:47: ef:d7:2d:25:12:eb:c3:4d:43:d2:b2:b6:1c:19:c9: f6:ec:7e:be:32:f5:46:ad:86:35:17:a9:36:05:dc: 67:b9:8f:4a:05:b1:92:e3:52:2a:4a:79:4f:18:8a: 7f:ea:28:94:10:4b:ab:6a:7b:67:c0:18:11:28:76: e2:ab:1e:4d:ac:97:09:4c:87:c8:61:d7:b3:59:31: 86:51:6d:95:e2:26:3e:41:0b:7b:c6:f9:e4:47:7f: 60:28:16:37:62:08:0e:09:b4:01:62:89:66:e3:12: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8E:EE:8C:30:AC:1A:41:ED:9B:58:EF:C8:7A:E9:B9:50:5C:B7:6A X509v3 Authority Key Identifier: keyid:49:16:75:EB:E3:E6:BE:39:B6:A6:09:87:76:D9:F6:24:42:4F:FB:89 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMANIA/SRZ16-Pmvjm2pgmHdtn2JEJP-4k.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SRZ16-Pmvjm2pgmHdtn2JEJP-4k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMANIA/SRZ16-Pmvjm2pgmHdtn2JEJP-4k.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3d:5d:2f:b7:7b:d0:99:f9:5c:d6:36:de:12:86:3a:92:6c: f4:1a:6c:ed:db:a4:6b:5e:a1:01:54:48:d7:60:8b:60:16:ca: 1a:28:23:12:ef:98:b0:3d:6f:1b:09:2a:41:3f:68:b3:4d:8e: 13:b3:bd:4a:6b:82:95:ac:27:a3:70:41:b3:71:ca:1a:c3:95: 8a:ed:6c:55:0d:57:ec:08:ef:6d:c9:26:a9:cf:da:5f:e1:f2: c4:9a:d2:bb:aa:13:24:a9:9e:af:78:fe:b5:4b:5e:0b:2a:02: 0c:e8:ab:6b:de:99:ca:51:23:28:e7:fe:e0:f9:31:29:0f:b3: b7:e7:60:36:b1:16:e3:bd:b3:0e:a8:3e:31:99:ef:28:91:90: e2:ec:27:2f:c8:e4:42:83:96:c9:ab:f6:b9:4b:e8:bf:4b:a5: db:d7:f4:b0:ea:41:dc:ba:8a:7e:7d:f5:86:b0:42:25:ef:28: 0e:8f:9a:59:c0:c1:13:67:c3:d0:76:36:67:43:37:ee:75:75: 75:e5:f4:02:6e:71:b6:65:68:c0:a7:48:65:f8:39:b1:a2:4b: 35:4d:b6:d2:d4:46:ba:f6:03:fe:5b:11:73:65:0e:b0:2a:b6: 31:09:91:4f:aa:fb:30:63:80:61:8f:b7:f3:5b:45:1b:3c:00: e5:d8:05:36 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx Njc1RUJFM0U2QkUzOUI2QTYwOTg3NzZEOUY2MjQ0MjRGRkI4OTAeFw0yNTA1MTAw OTUzMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ2OEVFRThDMzBBQzFB NDFFRDlCNThFRkM4N0FFOUI5NTA1Q0I3NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCm7tR1zTDiw+86d1ImgZAk2zj267HytKgyLJUD7icj/spyYN56 UTVnB4lSdEIl8AmPGQS3mnklz8OK9PtZp+fd/KS6nxdx/nUaC61D23yltDBhvo0x NGbDI+gx8DuPQaqv6lHkG1HtGZJsMwPRbVnGBRvFmMJABLP+o2mWP8qa6cMZKG46 /OYPsd0p4R1h88tfjV1AR+/XLSUS68NNQ9KythwZyfbsfr4y9UathjUXqTYF3Ge5 j0oFsZLjUipKeU8Yin/qKJQQS6tqe2fAGBEoduKrHk2slwlMh8hh17NZMYZRbZXi Jj5BC3vG+eRHf2AoFjdiCA4JtAFiiWbjEpdtAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQURo7ujDCsGkHtm1jvyHrpuVBct2owHwYDVR0jBBgwFoAUSRZ16+Pmvjm2pgmH dtn2JEJP+4kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNQU5J QS9TUloxNi1QbXZqbTJwZ21IZHRuMkpFSlAtNGsuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1NSWjE2LVBtdmptMnBnbUhkdG4ySkVKUC00ay5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0dBTUFOSUEvU1JaMTYtUG12am0ycGdt SGR0bjJKRUpQLTRrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AD49XS+3e9CZ+VzWNt4ShjqSbPQabO3bpGteoQFUSNdgi2AWyhooIxLvmLA9bxsJ KkE/aLNNjhOzvUprgpWsJ6NwQbNxyhrDlYrtbFUNV+wI723JJqnP2l/h8sSa0ruq EySpnq94/rVLXgsqAgzoq2vemcpRIyjn/uD5MSkPs7fnYDaxFuO9sw6oPjGZ7yiR kOLsJy/I5EKDlsmr9rlL6L9LpdvX9LDqQdy6in599YawQiXvKA6PmlnAwRNnw9B2 NmdDN+51dXXl9AJucbZlaMCnSGX4ObGiSzVNttLURrr2A/5bEXNlDrAqtjEJkU+q +zBjgGGPt/NbRRs8AOXYBTY= -----END CERTIFICATE-----Generated at Sat May 10 12:35:17 2025 by rpki-client