$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft File: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft (raw, json) Hash identifier: j41YVo2U6Wm3jmR8sF5JU6lEWQUMzf+alSyrA5m7wJg= Subject key identifier: 99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46 Authority key identifier: EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1 Certificate issuer: /CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1 Certificate serial: 0D3F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft Manifest number: 0D3F Signing time: Sat 09 Aug 2025 22:10:51 +0000 Manifest this update: Sat 09 Aug 2025 22:10:51 +0000 Manifest next update: Mon 11 Aug 2025 22:10:51 +0000 Files and hashes: 1: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl (hash: SMkw03Lj3H9AVFAyUFm6RA7wgQjDuF0Eo0508PiHtYA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3391 (0xd3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1 Validity Not Before: Aug 9 22:10:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=99D31B221C7F6DD440390CFE6A41DC1E11986946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:ea:f1:d9:4d:9c:85:e3:3b:53:83:36:84: 34:d7:62:da:04:b6:c1:18:13:b0:ce:e1:ff:05:5a: f4:bc:a0:59:fc:0d:e1:51:e9:09:c5:e2:c4:19:0f: 6c:31:10:0b:57:8c:a0:60:e2:a0:26:63:04:af:38: 22:c1:0d:2f:da:42:9b:69:e2:93:d3:d2:d1:c6:34: ea:bb:70:9c:3d:2c:63:08:5a:1c:44:b2:83:4b:bc: b4:46:76:f3:a8:11:48:15:62:ad:82:fd:c1:a7:03: d4:6a:12:b1:31:29:9f:83:1b:a3:de:36:7c:f9:f3: 42:bd:4a:31:db:42:c3:c5:5a:55:eb:e1:2f:5a:98: be:16:5d:01:4b:55:d8:e8:d7:00:e3:46:a2:e0:c8: 63:75:9e:9f:fc:4f:4b:6a:52:54:3b:6d:ef:a7:77: 86:a3:45:80:bc:9f:cc:30:1f:30:d6:7b:63:38:37: d6:34:27:70:c8:ae:3b:03:4f:24:23:25:b7:6e:95: 67:57:92:5b:5d:9e:c1:62:c5:75:e3:55:b9:87:d0: 71:d5:8f:49:68:9e:d4:a3:12:6d:56:86:5d:19:fb: 7e:d0:53:17:04:0d:cc:6e:e2:65:66:42:38:c2:16: 5e:14:35:13:2f:7b:13:71:11:ea:fa:4f:46:09:4b: eb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46 X509v3 Authority Key Identifier: keyid:EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:05:12:33:00:ce:77:53:23:78:a2:2b:9e:ff:5e:c2:31:ef: e1:5a:f1:b0:63:d1:c1:b9:c4:06:81:d8:59:c8:f6:b8:7d:03: dc:4f:ab:3e:8f:54:e9:61:3c:5c:6a:4f:5a:72:42:f1:36:ef: e5:45:fc:6b:d6:2e:99:e9:d2:e2:2c:ba:20:c5:b4:8f:2a:c6: aa:f2:de:98:33:0c:aa:af:14:26:02:45:fc:84:a0:9f:35:b1: 1d:f2:5c:b0:6b:f3:af:a9:78:60:24:d5:6e:07:a8:f6:8c:86: 5a:52:e4:d6:4f:52:28:6f:51:64:80:13:ae:60:16:f9:ff:83: ed:df:ce:4f:00:f4:cf:4f:65:0d:14:20:e4:a1:a4:80:54:02: 97:8c:09:01:d6:e4:f9:fe:eb:c7:b1:6d:0f:41:ad:75:28:cd: 47:c3:fd:45:75:84:ce:35:c7:a7:4e:53:fb:89:03:27:a7:57: 81:da:c3:86:77:1b:50:9d:a6:62:90:f8:3a:6e:71:19:9b:7f: b3:1d:6a:27:88:6d:1b:97:fd:59:da:ed:c2:14:e4:66:04:42: 5c:e3:30:f8:be:e3:cd:4b:77:a1:2b:a3:d8:f7:f9:9e:5f:ac: 9c:39:3a:cd:2e:80:6d:05:f5:28:37:b3:51:2f:ef:4d:45:5a: 40:b5:a0:59 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDT8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUM0 Qjk4NTY3MUNCRUQ5QjBDOTM2RTU5QTA0NkUwMTdDMENBQ0JEMTAeFw0yNTA4MDky MjEwNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5RDMxQjIyMUM3RjZE RDQ0MDM5MENGRTZBNDFEQzFFMTE5ODY5NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJFOrx2U2cheM7U4M2hDTXYtoEtsEYE7DO4f8FWvS8oFn8DeFR 6QnF4sQZD2wxEAtXjKBg4qAmYwSvOCLBDS/aQptp4pPT0tHGNOq7cJw9LGMIWhxE soNLvLRGdvOoEUgVYq2C/cGnA9RqErExKZ+DG6PeNnz580K9SjHbQsPFWlXr4S9a mL4WXQFLVdjo1wDjRqLgyGN1np/8T0tqUlQ7be+nd4ajRYC8n8wwHzDWe2M4N9Y0 J3DIrjsDTyQjJbdulWdXkltdnsFixXXjVbmH0HHVj0lontSjEm1Whl0Z+37QUxcE Dcxu4mVmQjjCFl4UNRMvexNxEer6T0YJS+v7AgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUmdMbIhx/bdRAOQz+akHcHhGYaUYwHwYDVR0jBBgwFoAU7EuYVnHL7ZsMk25Z oEbgF8DKy9EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVFSQVRP Ui83RXVZVm5ITDdac01rMjVab0ViZ0Y4REt5OUUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBLzdFdVlWbkhMN1pzTWsyNVpvRWJnRjhES3k5RS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lRUkFUT1IvN0V1WVZuSEw3WnNNazI1 Wm9FYmdGOERLeTlFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AHAFEjMAzndTI3iiK57/XsIx7+Fa8bBj0cG5xAaB2FnI9rh9A9xPqz6PVOlhPFxq T1pyQvE27+VF/GvWLpnp0uIsuiDFtI8qxqry3pgzDKqvFCYCRfyEoJ81sR3yXLBr 86+peGAk1W4HqPaMhlpS5NZPUihvUWSAE65gFvn/g+3fzk8A9M9PZQ0UIOShpIBU ApeMCQHW5Pn+68exbQ9BrXUozUfD/UV1hM41x6dOU/uJAyenV4Haw4Z3G1CdpmKQ +DpucRmbf7MdaieIbRuX/Vna7cIU5GYEQlzjMPi+481Ld6Ero9j3+Z5frJw5Os0u gG0F9Sg3s1Ev701FWkC1oFk= -----END CERTIFICATE-----Generated at Mon Aug 11 10:48:25 2025 by rpki-client