$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft File: 5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft (raw, json) Hash identifier: 4m2wlVMLf3dasj8CFuo/75JDY36CpAcOhd5x4KvtJQA= Subject key identifier: A5:D7:1E:07:AE:C6:EA:AC:BA:B0:ED:C2:09:69:53:07:99:CF:53:F7 Authority key identifier: E6:5F:FB:4C:0C:2E:E8:A6:DF:74:FF:5E:86:63:9B:F4:B4:0D:E8:CA Certificate issuer: /CN=E65FFB4C0C2EE8A6DF74FF5E86639BF4B40DE8CA Certificate serial: 0CF7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft Manifest number: 0CF7 Signing time: Tue 24 Jun 2025 09:01:42 +0000 Manifest this update: Tue 24 Jun 2025 09:01:42 +0000 Manifest next update: Thu 26 Jun 2025 09:01:42 +0000 Files and hashes: 1: 5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl (hash: MVttLop/Anz4eIDBfjhf+A60ALVh5Hr9ExP31YhIVGg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E65FFB4C0C2EE8A6DF74FF5E86639BF4B40DE8CA Validity Not Before: Jun 24 09:01:42 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A5D71E07AEC6EAACBAB0EDC20969530799CF53F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:f2:11:f8:d3:a2:30:73:5f:65:fc:65:dc: 2e:42:d7:c9:9d:a7:22:49:ca:8b:c1:f9:e8:50:c8: 52:3a:93:25:42:dc:40:9c:80:b9:49:24:10:a0:bf: 3b:25:01:ea:a9:a6:2d:89:9c:9c:a4:33:4a:b8:5d: cb:ae:35:e1:1f:d0:68:97:d2:e8:2e:97:a7:f4:d4: 0a:3a:a7:7e:68:65:6e:2d:a9:5d:e8:59:df:fd:61: 83:77:07:79:75:01:7d:3d:d4:13:02:a6:58:fd:75: ce:ff:85:23:5f:38:1f:67:22:8e:c7:61:da:2e:69: a1:32:a1:78:2a:8f:50:88:e8:dc:d8:4c:8e:23:8d: 2a:15:bc:c8:23:3d:ce:41:6a:45:82:bf:1c:07:f4: 45:eb:5b:8f:73:ce:83:6e:96:d9:40:6b:09:c6:ae: 7f:f9:aa:9f:30:04:c4:4a:b0:70:75:ab:49:c8:e4: 34:a2:4d:06:65:41:31:dd:ec:f2:68:84:e7:ca:34: a6:eb:ed:cb:93:7e:83:95:fc:e3:95:82:22:08:21: 74:45:23:7c:6f:01:f5:57:4f:16:30:0c:19:9e:f1: 0f:5b:6a:49:52:bb:58:9e:48:1e:42:f7:fa:98:3c: e6:d9:e0:b4:ce:64:19:c8:ba:73:00:70:4f:0b:dc: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:1E:07:AE:C6:EA:AC:BA:B0:ED:C2:09:69:53:07:99:CF:53:F7 X509v3 Authority Key Identifier: keyid:E6:5F:FB:4C:0C:2E:E8:A6:DF:74:FF:5E:86:63:9B:F4:B4:0D:E8:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:66:dc:4d:a1:47:35:86:ec:23:a4:af:5a:04:8d:26:87:72: f9:f7:6e:3f:cb:8c:15:00:71:ed:2d:55:eb:b5:c6:ce:1c:df: ff:1c:3b:7f:16:be:4b:73:fa:49:94:f7:ec:92:c8:49:ef:a2: 15:eb:31:d7:06:46:c6:11:5b:d6:73:64:cc:ee:20:14:19:96: 1e:54:82:5b:1f:34:e3:7d:6e:dc:06:12:12:ce:79:3f:e5:e2: 08:e5:b5:a1:3d:e7:b4:15:2d:72:6e:ea:9a:ee:e7:c0:40:8d: b2:a3:9e:5d:ad:77:62:67:86:53:ad:9d:42:ee:08:b7:c9:15: 3e:80:ed:e6:f3:77:22:eb:8e:44:4f:2c:11:74:45:9d:6e:73: 03:17:62:89:14:6f:9e:c4:02:6b:34:a7:c5:3a:b3:0f:8f:0e: 59:92:14:17:74:0b:4d:26:7f:c1:bc:e8:68:11:75:7d:96:62: dc:fe:8b:0f:2a:b8:27:6e:02:90:69:0d:ad:85:86:73:b5:16: db:57:16:6a:b3:b0:2e:af:65:c1:05:35:1d:31:24:55:4a:fa: 93:5a:f9:09:7c:73:80:af:67:19:d1:5b:58:84:66:53:e5:7a: d9:18:df:0e:85:b7:61:fe:92:f2:d6:ee:fd:25:1f:cc:96:99: 37:a0:2c:72 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY1 RkZCNEMwQzJFRThBNkRGNzRGRjVFODY2MzlCRjRCNDBERThDQTAeFw0yNTA2MjQw OTAxNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE1RDcxRTA3QUVDNkVB QUNCQUIwRURDMjA5Njk1MzA3OTlDRjUzRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMcvIR+NOiMHNfZfxl3C5C18mdpyJJyovB+ehQyFI6kyVC3ECc gLlJJBCgvzslAeqppi2JnJykM0q4XcuuNeEf0GiX0ugul6f01Ao6p35oZW4tqV3o Wd/9YYN3B3l1AX091BMCplj9dc7/hSNfOB9nIo7HYdouaaEyoXgqj1CI6NzYTI4j jSoVvMgjPc5BakWCvxwH9EXrW49zzoNultlAawnGrn/5qp8wBMRKsHB1q0nI5DSi TQZlQTHd7PJohOfKNKbr7cuTfoOV/OOVgiIIIXRFI3xvAfVXTxYwDBme8Q9baklS u1ieSB5C9/qYPObZ4LTOZBnIunMAcE8L3E+zAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUpdceB67G6qy6sO3CCWlTB5nPU/cwHwYDVR0jBBgwFoAU5l/7TAwu6KbfdP9e hmOb9LQN6MowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElOQ0hF SU4vNWxfN1RBd3U2S2JmZFA5ZWhtT2I5TFFONk1vLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS81bF83VEF3dTZLYmZkUDllaG1PYjlMUU42TW8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MSU5DSEVJTi81bF83VEF3dTZLYmZk UDllaG1PYjlMUU42TW8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt2bcTaFHNYbsI6SvWgSNJody+fduP8uMFQBx7S1V67XGzhzf/xw7fxa+S3P6 SZT37JLISe+iFesx1wZGxhFb1nNkzO4gFBmWHlSCWx80431u3AYSEs55P+XiCOW1 oT3ntBUtcm7qmu7nwECNsqOeXa13YmeGU62dQu4It8kVPoDt5vN3IuuORE8sEXRF nW5zAxdiiRRvnsQCazSnxTqzD48OWZIUF3QLTSZ/wbzoaBF1fZZi3P6LDyq4J24C kGkNrYWGc7UW21cWarOwLq9lwQU1HTEkVUr6k1r5CXxzgK9nGdFbWIRmU+V62Rjf DoW3Yf6S8tbu/SUfzJaZN6Ascg== -----END CERTIFICATE-----Generated at Tue Jun 24 20:50:00 2025 by rpki-client