$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft File: _u9qfUSgfrkJ7anFbFkwXloFXbc.mft (raw, json) Hash identifier: 7CDCK9yV5H1FjfkYvs41+K0VfaLK+3OSvgxr/1d5CMc= Subject key identifier: EA:52:71:DC:95:DD:D2:AE:4A:FF:4D:1A:06:08:94:17:53:48:1B:84 Authority key identifier: FE:EF:6A:7D:44:A0:7E:B9:09:ED:A9:C5:6C:59:30:5E:5A:05:5D:B7 Certificate issuer: /CN=FEEF6A7D44A07EB909EDA9C56C59305E5A055DB7 Certificate serial: 0938 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft Manifest number: 0938 Signing time: Tue 24 Jun 2025 09:59:59 +0000 Manifest this update: Tue 24 Jun 2025 09:59:59 +0000 Manifest next update: Thu 26 Jun 2025 09:59:59 +0000 Files and hashes: 1: _u9qfUSgfrkJ7anFbFkwXloFXbc.crl (hash: di/SIHa+YKA1Oq31DQjgUouxKBp1TPxoZrZ6AYsxuuM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 02:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2360 (0x938) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEEF6A7D44A07EB909EDA9C56C59305E5A055DB7 Validity Not Before: Jun 24 09:59:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EA5271DC95DDD2AE4AFF4D1A0608941753481B84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:05:6f:74:a8:6c:8d:d0:25:96:c0:db:dc: f2:d5:a0:4c:28:0f:8d:87:e7:cb:3b:d7:4e:ed:24: 92:9a:e4:f4:e4:e9:bf:fd:3e:cd:58:73:8e:d2:68: 54:6d:ff:e6:18:bc:fe:e6:7e:3e:50:77:fe:04:8d: ab:d6:5d:0f:78:c1:ae:78:6d:2a:8e:5e:b3:1f:ce: 74:bb:1d:ef:08:33:e4:c1:86:bd:cb:c9:0b:de:66: 16:3e:93:23:63:8a:f5:db:7b:63:88:d0:e7:19:81: c7:d6:be:29:1e:a5:70:36:e9:bc:38:22:ee:c9:96: 53:d1:d5:45:92:6c:d3:6b:ee:bc:81:fb:e4:ad:c5: aa:db:ba:73:69:16:6d:72:c9:63:b5:48:2e:6d:f8: 30:ee:de:7e:2e:cc:09:2e:bd:7b:7c:4a:ee:f5:91: d1:4b:6c:e4:2e:d7:9f:06:ab:59:7f:9e:5d:fe:2e: 82:f6:8e:a7:4a:2d:ae:ff:1f:f3:08:f3:5f:7a:b3: af:4a:78:2b:a2:73:1f:e4:13:07:f9:29:64:d4:22: 1e:75:2c:65:95:37:08:55:16:46:48:75:fe:dc:fe: 02:10:d0:80:92:68:00:46:c8:f4:b0:0f:7e:52:af: ee:5c:79:de:fe:04:7d:c1:63:92:d2:45:8f:d7:22: 23:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:52:71:DC:95:DD:D2:AE:4A:FF:4D:1A:06:08:94:17:53:48:1B:84 X509v3 Authority Key Identifier: keyid:FE:EF:6A:7D:44:A0:7E:B9:09:ED:A9:C5:6C:59:30:5E:5A:05:5D:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8d:1c:ca:8a:d0:1c:56:98:4a:10:ea:b7:96:20:e3:15:c0: 0f:5b:df:6d:d3:d3:da:c7:86:eb:73:00:87:2d:9d:76:6f:1d: 49:53:18:1d:e0:9d:df:55:0c:7f:74:e9:d9:15:0c:b6:a2:a9: 99:e5:5f:16:49:dd:c0:f1:c9:8c:f0:07:90:18:ca:75:e1:5d: 2a:6b:6d:cb:5f:7d:d8:0a:ae:cb:82:38:e8:3e:4f:30:f6:04: b9:98:37:7f:92:f4:4a:02:04:18:5a:43:c0:bd:d5:71:80:b4: 5b:68:71:99:4f:34:28:af:09:5e:91:ce:76:11:69:2d:f1:16: 57:8f:05:ca:c1:dd:ad:70:e0:5a:b4:ec:c0:55:59:14:c0:ea: 71:99:83:8f:fd:98:02:89:4a:f0:ed:a9:6d:9a:50:b6:28:af: 1f:02:f7:5b:58:34:56:07:02:78:70:17:8d:4a:f1:08:2a:cd: 95:51:a7:6e:fb:d9:ce:99:5c:03:71:8d:de:e0:b3:58:cb:19: 2a:bf:b7:b1:47:00:1e:5c:bb:7b:24:fb:b9:49:6c:69:ff:df: 6c:bc:01:52:5f:de:30:f1:87:6f:cb:8f:af:cf:26:dd:30:c6: 5d:dc:32:5f:8f:38:14:a7:1f:e2:90:c9:b8:c0:79:39:0b:55: 07:5c:20:ba -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICCTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkVF RjZBN0Q0NEEwN0VCOTA5RURBOUM1NkM1OTMwNUU1QTA1NURCNzAeFw0yNTA2MjQw OTU5NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVBNTI3MURDOTVEREQy QUU0QUZGNEQxQTA2MDg5NDE3NTM0ODFCODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVbQVvdKhsjdAllsDb3PLVoEwoD42H58s7107tJJKa5PTk6b/9 Ps1Yc47SaFRt/+YYvP7mfj5Qd/4EjavWXQ94wa54bSqOXrMfznS7He8IM+TBhr3L yQveZhY+kyNjivXbe2OI0OcZgcfWvikepXA26bw4Iu7JllPR1UWSbNNr7ryB++St xarbunNpFm1yyWO1SC5t+DDu3n4uzAkuvXt8Su71kdFLbOQu158Gq1l/nl3+LoL2 jqdKLa7/H/MI8196s69KeCuicx/kEwf5KWTUIh51LGWVNwhVFkZIdf7c/gIQ0ICS aABGyPSwD35Sr+5ced7+BH3BY5LSRY/XIiMbAgMBAAGjggILMIICBzAdBgNVHQ4E FgQU6lJx3JXd0q5K/00aBgiUF1NIG4QwHwYDVR0jBBgwFoAU/u9qfUSgfrkJ7anF bFkwXloFXbcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1VBTlRJ TkcvX3U5cWZVU2dmcmtKN2FuRmJGa3dYbG9GWGJjLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9fdTlxZlVTZ2Zya0o3YW5GYkZrd1hsb0ZYYmMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HVUFOVElORy9fdTlxZlVTZ2Zya0o3 YW5GYkZrd1hsb0ZYYmMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATo0cyorQHFaYShDqt5Yg4xXAD1vfbdPT2seG63MAhy2ddm8dSVMYHeCd31UM f3Tp2RUMtqKpmeVfFkndwPHJjPAHkBjKdeFdKmtty1992Aquy4I46D5PMPYEuZg3 f5L0SgIEGFpDwL3VcYC0W2hxmU80KK8JXpHOdhFpLfEWV48FysHdrXDgWrTswFVZ FMDqcZmDj/2YAolK8O2pbZpQtiivHwL3W1g0VgcCeHAXjUrxCCrNlVGnbvvZzplc A3GN3uCzWMsZKr+3sUcAHly7eyT7uUlsaf/fbLwBUl/eMPGHb8uPr88m3TDGXdwy X484FKcf4pDJuMB5OQtVB1wgug== -----END CERTIFICATE-----Generated at Tue Jun 24 22:34:21 2025 by rpki-client