$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft File: 5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft (raw, json) Hash identifier: t5Z4Fcl4hIQcaDzUV+Vd8EKaka4mpxrXjDFcZA/GNgI= Subject key identifier: A5:D7:1E:07:AE:C6:EA:AC:BA:B0:ED:C2:09:69:53:07:99:CF:53:F7 Authority key identifier: E6:5F:FB:4C:0C:2E:E8:A6:DF:74:FF:5E:86:63:9B:F4:B4:0D:E8:CA Certificate issuer: /CN=E65FFB4C0C2EE8A6DF74FF5E86639BF4B40DE8CA Certificate serial: 0CD8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft Manifest number: 0CD8 Signing time: Thu 08 May 2025 20:52:14 +0000 Manifest this update: Thu 08 May 2025 20:52:14 +0000 Manifest next update: Sat 10 May 2025 20:52:14 +0000 Files and hashes: 1: 5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl (hash: mlXfR9pfoXyhWCHOnh0SE1geDpSFaWN1g5he3KR9ihM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 11:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E65FFB4C0C2EE8A6DF74FF5E86639BF4B40DE8CA Validity Not Before: May 8 20:52:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A5D71E07AEC6EAACBAB0EDC20969530799CF53F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:f2:11:f8:d3:a2:30:73:5f:65:fc:65:dc: 2e:42:d7:c9:9d:a7:22:49:ca:8b:c1:f9:e8:50:c8: 52:3a:93:25:42:dc:40:9c:80:b9:49:24:10:a0:bf: 3b:25:01:ea:a9:a6:2d:89:9c:9c:a4:33:4a:b8:5d: cb:ae:35:e1:1f:d0:68:97:d2:e8:2e:97:a7:f4:d4: 0a:3a:a7:7e:68:65:6e:2d:a9:5d:e8:59:df:fd:61: 83:77:07:79:75:01:7d:3d:d4:13:02:a6:58:fd:75: ce:ff:85:23:5f:38:1f:67:22:8e:c7:61:da:2e:69: a1:32:a1:78:2a:8f:50:88:e8:dc:d8:4c:8e:23:8d: 2a:15:bc:c8:23:3d:ce:41:6a:45:82:bf:1c:07:f4: 45:eb:5b:8f:73:ce:83:6e:96:d9:40:6b:09:c6:ae: 7f:f9:aa:9f:30:04:c4:4a:b0:70:75:ab:49:c8:e4: 34:a2:4d:06:65:41:31:dd:ec:f2:68:84:e7:ca:34: a6:eb:ed:cb:93:7e:83:95:fc:e3:95:82:22:08:21: 74:45:23:7c:6f:01:f5:57:4f:16:30:0c:19:9e:f1: 0f:5b:6a:49:52:bb:58:9e:48:1e:42:f7:fa:98:3c: e6:d9:e0:b4:ce:64:19:c8:ba:73:00:70:4f:0b:dc: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:1E:07:AE:C6:EA:AC:BA:B0:ED:C2:09:69:53:07:99:CF:53:F7 X509v3 Authority Key Identifier: keyid:E6:5F:FB:4C:0C:2E:E8:A6:DF:74:FF:5E:86:63:9B:F4:B4:0D:E8:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cf:ab:03:e2:46:42:3e:bd:fd:7e:78:bc:a5:79:b0:72:b7: 42:da:d8:f2:e4:8d:2d:03:23:f4:61:69:95:6b:0a:f2:1d:b7: be:c1:8a:6e:20:ac:4a:d1:42:1c:ae:64:57:3e:e2:42:5e:78: 50:17:ea:6d:b4:f6:39:cc:d6:5e:67:b6:96:0a:a1:36:4d:2d: c3:96:df:46:82:30:86:f2:8c:22:f9:c9:51:35:35:f4:09:7b: d8:ce:cf:a0:08:70:72:db:0b:11:0f:2d:08:45:71:38:a3:7c: 66:79:3e:6c:a2:9d:51:d5:9d:5f:41:7d:b8:8c:d4:9d:3f:7f: d4:1a:8f:59:e5:7e:24:2f:7c:4b:55:bc:a5:c8:8c:7e:d0:56: 4b:8f:2a:d1:8f:b4:76:1e:ba:ba:38:bd:c7:b6:cd:d6:be:e9: 24:ee:55:39:79:b6:cc:98:31:c3:97:59:96:24:09:3d:68:88: 32:fb:ab:fd:a0:db:e7:7d:7f:e4:e6:6f:fe:74:b2:4d:a3:23: 0e:ec:3f:cf:77:3b:89:8a:64:a7:f8:0c:e9:e5:9b:c7:84:53: 05:9e:e0:76:60:3d:fe:e9:d4:1b:12:4f:59:47:8e:6a:d1:c4: ae:d5:5d:c0:c5:9c:ec:e9:41:7b:73:40:c4:27:ec:23:8a:6d: 80:81:aa:2d -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY1 RkZCNEMwQzJFRThBNkRGNzRGRjVFODY2MzlCRjRCNDBERThDQTAeFw0yNTA1MDgy MDUyMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE1RDcxRTA3QUVDNkVB QUNCQUIwRURDMjA5Njk1MzA3OTlDRjUzRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMcvIR+NOiMHNfZfxl3C5C18mdpyJJyovB+ehQyFI6kyVC3ECc gLlJJBCgvzslAeqppi2JnJykM0q4XcuuNeEf0GiX0ugul6f01Ao6p35oZW4tqV3o Wd/9YYN3B3l1AX091BMCplj9dc7/hSNfOB9nIo7HYdouaaEyoXgqj1CI6NzYTI4j jSoVvMgjPc5BakWCvxwH9EXrW49zzoNultlAawnGrn/5qp8wBMRKsHB1q0nI5DSi TQZlQTHd7PJohOfKNKbr7cuTfoOV/OOVgiIIIXRFI3xvAfVXTxYwDBme8Q9baklS u1ieSB5C9/qYPObZ4LTOZBnIunMAcE8L3E+zAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUpdceB67G6qy6sO3CCWlTB5nPU/cwHwYDVR0jBBgwFoAU5l/7TAwu6KbfdP9e hmOb9LQN6MowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElOQ0hF SU4vNWxfN1RBd3U2S2JmZFA5ZWhtT2I5TFFONk1vLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS81bF83VEF3dTZLYmZkUDllaG1PYjlMUU42TW8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MSU5DSEVJTi81bF83VEF3dTZLYmZk UDllaG1PYjlMUU42TW8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOs+rA+JGQj69/X54vKV5sHK3QtrY8uSNLQMj9GFplWsK8h23vsGKbiCsStFC HK5kVz7iQl54UBfqbbT2OczWXme2lgqhNk0tw5bfRoIwhvKMIvnJUTU19Al72M7P oAhwctsLEQ8tCEVxOKN8Znk+bKKdUdWdX0F9uIzUnT9/1BqPWeV+JC98S1W8pciM ftBWS48q0Y+0dh66uji9x7bN1r7pJO5VOXm2zJgxw5dZliQJPWiIMvur/aDb531/ 5OZv/nSyTaMjDuw/z3c7iYpkp/gM6eWbx4RTBZ7gdmA9/unUGxJPWUeOatHErtVd wMWc7OlBe3NAxCfsI4ptgIGqLQ== -----END CERTIFICATE-----Generated at Sat May 10 09:13:18 2025 by rpki-client