$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft File: jCH-vEkP9giqCpuTTqr2g05UUms.mft (raw, json) Hash identifier: D02eXIsXb/h1Y05YjcIgppMaybhnWl9SCuhK2wZkdDM= Subject key identifier: 6C:40:07:38:AD:52:C4:5C:95:3F:10:B8:25:79:EC:42:E9:74:F5:3B Authority key identifier: 8C:21:FE:BC:49:0F:F6:08:AA:0A:9B:93:4E:AA:F6:83:4E:54:52:6B Certificate issuer: /CN=8C21FEBC490FF608AA0A9B934EAAF6834E54526B Certificate serial: 0220 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft Manifest number: 0220 Signing time: Fri 17 Apr 2026 07:33:02 +0000 Manifest this update: Fri 17 Apr 2026 07:33:02 +0000 Manifest next update: Fri 17 Apr 2026 13:33:02 +0000 Files and hashes: 1: jCH-vEkP9giqCpuTTqr2g05UUms.crl (hash: PSOjJR/lfQCB3Yno7eoHrmBeRxajdnpM37O8fWQ4/Ug=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 11:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C21FEBC490FF608AA0A9B934EAAF6834E54526B Validity Not Before: Apr 17 07:33:02 2026 GMT Not After : Nov 12 15:30:20 2026 GMT Subject: CN=6C400738AD52C45C953F10B82579EC42E974F53B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:72:df:cc:fb:5b:90:95:4d:0e:e0:34:a0: 7b:8a:90:fc:fd:92:56:6f:13:85:b6:ce:9f:ef:ee: 9d:77:7a:45:15:c6:5f:9f:8d:5c:40:93:20:20:0a: 75:ad:b1:f0:f3:45:6e:a2:60:c5:12:31:2c:15:49: 5c:4e:23:f1:51:71:a0:6c:b1:46:e6:ba:c4:e1:b5: cc:7d:7d:36:e6:9f:1f:bf:93:72:94:80:db:de:8c: 72:81:c7:a5:7d:64:32:20:f8:61:87:2d:27:b8:1f: 3e:e4:10:6a:bc:37:0c:87:cb:20:0c:10:84:e1:fa: cd:8c:dc:6e:97:6d:d5:cf:ae:42:21:7d:b2:03:ee: 00:07:b8:bb:f2:a2:27:95:a1:2b:be:44:f4:b9:93: 7a:ec:52:84:a6:ee:f9:75:cf:2f:0d:ff:d7:84:55: 70:80:29:69:49:2e:bd:09:2c:11:d1:b4:2e:55:1a: fc:db:07:5d:49:a2:42:61:b8:2d:27:59:78:e5:3c: 51:57:98:12:7d:5e:af:e3:33:03:fe:c5:9b:3c:b0: 2c:1b:98:3d:75:a2:52:f7:b7:62:75:ec:09:39:78: 52:13:47:bc:1e:18:cd:c3:71:86:69:0d:bf:68:f4: 1c:c4:b9:86:0b:a1:0c:96:1d:fa:b7:eb:99:a6:a4: 35:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:40:07:38:AD:52:C4:5C:95:3F:10:B8:25:79:EC:42:E9:74:F5:3B X509v3 Authority Key Identifier: keyid:8C:21:FE:BC:49:0F:F6:08:AA:0A:9B:93:4E:AA:F6:83:4E:54:52:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0b:ac:21:68:b4:d3:ca:5c:86:56:7a:49:cd:de:09:93:c2: 92:47:40:0b:e2:90:50:d8:eb:58:4e:0b:15:3e:b7:c3:d9:e9: 1e:d2:d3:ee:10:57:e5:e9:97:a6:4c:a4:8a:3e:f0:18:e8:83: a2:65:3a:73:2e:0f:ab:55:64:30:22:9d:55:f9:c0:e1:af:ee: d2:0c:2b:47:91:4a:ee:e3:cd:13:a2:63:4d:76:bf:c0:de:0f: bd:01:57:18:f1:de:ac:17:98:72:27:fe:7b:15:34:03:dc:25: 64:af:ed:8d:ec:87:f5:67:f5:83:74:15:f4:0e:0e:23:95:10: 2f:41:87:f6:37:2e:6c:f3:1a:a1:25:a8:4d:e3:2e:ee:29:a1: 02:42:0a:6a:4e:cc:4f:ae:f1:61:3c:8a:a1:69:a5:60:28:a1: 64:a9:c5:06:5e:56:9a:3d:c5:31:60:25:8e:7c:3e:04:fa:cf: 2b:1b:cd:20:9b:72:43:fd:f4:6b:00:b8:56:3d:90:ed:f8:12: 7b:dc:9d:cd:bd:96:4a:98:90:97:ff:1e:fe:97:9b:4f:c2:4c: 13:30:44:08:4d:3d:96:3b:73:fc:f0:28:06:5b:44:5e:9c:6c: 6e:bd:95:dd:25:49:38:c8:de:0c:9e:4c:97:88:73:c6:4a:4a: 71:49:7c:74 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMy MUZFQkM0OTBGRjYwOEFBMEE5QjkzNEVBQUY2ODM0RTU0NTI2QjAeFw0yNjA0MTcw NzMzMDJaFw0yNjExMTIxNTMwMjBaMDMxMTAvBgNVBAMTKDZDNDAwNzM4QUQ1MkM0 NUM5NTNGMTBCODI1NzlFQzQyRTk3NEY1M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnw3LfzPtbkJVNDuA0oHuKkPz9klZvE4W2zp/v7p13ekUVxl+f jVxAkyAgCnWtsfDzRW6iYMUSMSwVSVxOI/FRcaBssUbmusThtcx9fTbmnx+/k3KU gNvejHKBx6V9ZDIg+GGHLSe4Hz7kEGq8NwyHyyAMEITh+s2M3G6XbdXPrkIhfbID 7gAHuLvyoieVoSu+RPS5k3rsUoSm7vl1zy8N/9eEVXCAKWlJLr0JLBHRtC5VGvzb B11JokJhuC0nWXjlPFFXmBJ9Xq/jMwP+xZs8sCwbmD11olL3t2J17Ak5eFITR7we GM3DcYZpDb9o9BzEuYYLoQyWHfq365mmpDXdAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUbEAHOK1SxFyVPxC4JXnsQul09TswHwYDVR0jBBgwFoAUjCH+vEkP9giqCpuT Tqr2g05UUmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR01JQ0xP VUQvakNILXZFa1A5Z2lxQ3B1VFRxcjJnMDVVVW1zLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9qQ0gtdkVrUDlnaXFDcHVUVHFyMmcwNVVVbXMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HTUlDTE9VRC9qQ0gtdkVrUDlnaXFD cHVUVHFyMmcwNVVVbXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbQusIWi008pchlZ6Sc3eCZPCkkdAC+KQUNjrWE4LFT63w9npHtLT7hBX5emX pkykij7wGOiDomU6cy4Pq1VkMCKdVfnA4a/u0gwrR5FK7uPNE6JjTXa/wN4PvQFX GPHerBeYcif+exU0A9wlZK/tjeyH9Wf1g3QV9A4OI5UQL0GH9jcubPMaoSWoTeMu 7imhAkIKak7MT67xYTyKoWmlYCihZKnFBl5Wmj3FMWAljnw+BPrPKxvNIJtyQ/30 awC4Vj2Q7fgSe9ydzb2WSpiQl/8e/pebT8JMEzBECE09ljtz/PAoBltEXpxsbr2V 3SVJOMjeDJ5Ml4hzxkpKcUl8dA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:28:34 2026 by rpki-client