$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft File: gwvEQQFipY0NsX4KNRVR-7PXUaE.mft (raw, json) Hash identifier: ofMrsagXl8YCCbTl4KHv8sTy0n2LfZqIaWKR9KsU/cY= Subject key identifier: 01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83 Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Certificate serial: 0D5F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft Manifest number: 0D32 Signing time: Sat 10 May 2025 09:21:07 +0000 Manifest this update: Sat 10 May 2025 09:21:07 +0000 Manifest next update: Mon 12 May 2025 09:21:07 +0000 Files and hashes: 1: 3Kf3vQjh77j-rovWseazIe2p3N0.roa (hash: 07kUCJaDVepBYELuXGf6572F1XUmEmaBDfv569uoqAE=) 2: 9F3wUx7xk_uyyBAckXeo8GtKBCg.roa (hash: Inb/cjQwutVg2dLsNevaryukIUxJX4sS3o22vwCOT7w=) 3: NBMitYmQhIh2rnquqkNjJdTprQA.roa (hash: 9ElOZUZFrBnQxctX56S3T+EwMNiefRafQOIg0vsLUxo=) 4: cmBNJBmOkVoPRxVqC932eEk8U4U.roa (hash: KtkGafBeLiSh3QNd4wYz+hrNvhwahgzQlmZ3K7/RZJg=) 5: gwvEQQFipY0NsX4KNRVR-7PXUaE.crl (hash: lZF4q4m7sJmUNasIGyn+a9LXHHHWZ/+EnnIxoTAAPCc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 15:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3423 (0xd5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Validity Not Before: May 10 09:21:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=01CF58E390EF3AF26464E9734E6C92234FDAA683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:ca:58:28:32:52:b4:ca:c3:69:88:0a:6f: 1e:ba:61:57:db:f6:9a:2c:5c:e0:8e:a8:7f:29:98: 8d:f3:a3:e3:80:8b:fa:31:7a:f0:89:28:84:2a:80: 52:1a:87:ad:db:b9:9e:61:9b:2b:60:ca:1b:a7:80: c9:5e:d9:8c:73:58:37:be:51:ff:f1:ed:fd:11:ef: d1:7d:f5:2a:87:fe:e4:42:e4:db:e2:8c:fd:7e:61: ed:f0:83:c9:d6:a7:bb:2c:8e:e7:8d:11:74:ba:ad: ea:8f:15:43:91:e5:8f:d3:f3:7b:5e:4f:64:dc:38: 04:1b:28:c5:9f:e2:cf:f2:2d:ef:9d:e4:3f:76:13: b2:52:21:c4:11:af:7c:b6:43:96:16:15:f8:fe:4f: 70:44:02:03:f6:dc:4f:c7:7c:91:b7:44:63:73:a9: d6:08:18:ff:64:65:db:3c:be:32:8c:5a:91:1a:d3: f6:88:45:55:17:e1:e8:ac:7d:e8:4c:e8:f1:4e:ef: 84:38:f2:cf:e0:ed:81:60:ec:77:17:3c:62:b9:e7: 8a:e6:38:ea:f6:40:45:86:8a:50:0e:a3:84:cf:cb: 26:da:c5:34:b9:4d:0d:28:c4:2c:11:c8:76:ae:bd: 15:52:b3:8d:35:45:ca:26:87:73:41:cf:17:2f:7d: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83 X509v3 Authority Key Identifier: keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:99:84:97:b2:6d:e2:99:10:81:f6:e7:f2:a8:c7:c6:c6:d4: 2b:7d:67:71:58:e5:69:e6:b8:d3:9a:1d:82:e3:91:19:37:91: ae:f7:4f:3f:76:0f:6a:58:d6:99:9a:12:68:5d:04:75:97:3c: 01:d2:b1:52:ba:62:93:82:e5:9f:c1:9b:19:d0:86:b8:5f:c4: 1a:c8:56:54:6e:2d:53:e7:0d:63:a0:cb:8c:18:8c:02:39:1d: 3d:16:f6:13:38:fa:90:08:20:de:45:0b:93:21:69:dc:e8:1b: 4f:d5:34:bb:84:eb:96:29:96:c5:27:a9:7b:b7:35:48:97:ba: d8:68:36:1c:18:78:2e:b8:af:27:1f:e7:df:8b:53:65:cb:43: 9e:56:c6:9c:bb:a5:da:10:b5:98:41:b2:3a:24:06:57:48:95: f6:ab:c0:9e:9e:eb:05:fe:8b:11:e5:1e:36:fc:e0:0d:2d:ec: 5a:c4:91:5b:7d:fb:b7:3f:1e:f2:3b:ad:96:a3:c7:50:6a:cf: 59:b9:ba:1f:e8:bf:87:fa:8f:b9:d0:26:d0:01:83:b8:75:8b: be:34:0a:08:5e:41:70:41:a2:87:9b:8b:cd:0a:70:e7:54:6f: 5c:e0:9b:40:18:c0:52:72:ef:e2:81:12:2c:e3:5d:71:d7:54: 42:0f:de:b4 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDV8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNTA1MTAw OTIxMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxQ0Y1OEUzOTBFRjNB RjI2NDY0RTk3MzRFNkM5MjIzNEZEQUE2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY6spYKDJStMrDaYgKbx66YVfb9posXOCOqH8pmI3zo+OAi/ox evCJKIQqgFIah63buZ5hmytgyhungMle2YxzWDe+Uf/x7f0R79F99SqH/uRC5Nvi jP1+Ye3wg8nWp7ssjueNEXS6reqPFUOR5Y/T83teT2TcOAQbKMWf4s/yLe+d5D92 E7JSIcQRr3y2Q5YWFfj+T3BEAgP23E/HfJG3RGNzqdYIGP9kZds8vjKMWpEa0/aI RVUX4eisfehM6PFO74Q48s/g7YFg7HcXPGK554rmOOr2QEWGilAOo4TPyybaxTS5 TQ0oxCwRyHauvRVSs401Rcomh3NBzxcvfbf7AgMBAAGjggILMIICBzAdBgNVHQ4E FgQUAc9Y45DvOvJkZOlzTmySI0/apoMwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy9nd3ZFUVFGaXBZME5z WDRLTlJWUi03UFhVYUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkJmEl7Jt4pkQgfbn8qjHxsbUK31ncVjlaea405odguORGTeRrvdPP3YPaljW mZoSaF0EdZc8AdKxUrpik4Lln8GbGdCGuF/EGshWVG4tU+cNY6DLjBiMAjkdPRb2 Ezj6kAgg3kULkyFp3OgbT9U0u4TrlimWxSepe7c1SJe62Gg2HBh4LrivJx/n34tT ZctDnlbGnLul2hC1mEGyOiQGV0iV9qvAnp7rBf6LEeUeNvzgDS3sWsSRW337tz8e 8jutlqPHUGrPWbm6H+i/h/qPudAm0AGDuHWLvjQKCF5BcEGih5uLzQpw51RvXOCb QBjAUnLv4oESLONdcddUQg/etA== -----END CERTIFICATE-----Generated at Sat May 10 12:24:25 2025 by rpki-client