$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft File: bWxcv87Lp5h5UREtqhh__LYgTiY.mft (raw, json) Hash identifier: ysnEW74lJDXOOpoS15jflmzYDKOlW10BG6T5fPCucXw= Subject key identifier: B3:5C:AF:80:4A:E0:EB:70:71:D8:A6:67:8E:E6:C6:1C:CE:5C:26:E1 Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Certificate serial: 0D82 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft Manifest number: 0D5E Signing time: Sat 09 Aug 2025 22:12:16 +0000 Manifest this update: Sat 09 Aug 2025 22:12:16 +0000 Manifest next update: Mon 11 Aug 2025 22:12:16 +0000 Files and hashes: 1: 1tT2-7nO8mOJl5DFIB6nlGswaw0.roa (hash: 8SfzRSDz/iRdx1pt7NYlWeiCBRUVDq6KS8N62PJsMGk=) 2: 3hqgrWdSikm66pTBoFFxGubAFsk.roa (hash: Yve5buWDuBaM+q8He9UnXOPYmvxvW0PJG5s2ZUpUeFw=) 3: ClVAqEr4nXrhr21al1Crsp_6WFc.roa (hash: veU/R8f2ss4O9BvMtJ1QtMPS9fpXw2vgmdgY2tWn5cE=) 4: bWxcv87Lp5h5UREtqhh__LYgTiY.crl (hash: 74oKrZH5l8GhBGCLeEBtPtz1p7HUAsTP6D5UG5gUWLU=) 5: sPAUWdCqFYkLgpNssTCbmY1Kyjo.roa (hash: tyi70WA6YZEtXRmwE6wwrGg2yWw8HDJBSOqWrcHzxJ0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3458 (0xd82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Validity Not Before: Aug 9 22:12:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B35CAF804AE0EB7071D8A6678EE6C61CCE5C26E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5e:63:5f:05:2f:45:4f:de:35:57:08:13:e1: 0a:c6:4a:1c:f5:2d:e8:c1:ba:7e:0d:dd:72:a8:94: 1c:3b:47:ee:49:bb:62:07:0c:90:fe:65:e3:5d:8e: d2:61:fb:ef:ad:fc:c9:f6:6f:7d:2d:50:3f:dd:b5: 29:88:f6:f2:bc:6b:1e:d8:3b:9c:7e:56:a2:80:7d: 91:41:00:35:05:0c:80:2e:a8:f9:f8:95:72:7d:05: 11:04:7a:a5:29:b6:4b:75:19:ed:ab:fc:c6:82:69: 58:88:e0:87:5f:ab:dd:64:94:0f:f6:4f:06:83:01: 2f:0e:49:b1:80:b4:56:e1:b2:cc:21:a9:7d:8d:56: cb:72:b8:c3:33:e2:4c:ad:d5:38:f5:89:0d:01:f0: 0c:ab:5f:51:c2:5d:18:95:cb:e3:4b:e8:ab:c2:b9: f2:4c:79:a7:e0:99:ef:11:d3:8e:91:2b:76:0c:d8: 40:53:75:4d:63:75:be:7c:21:95:31:bb:8a:31:5a: be:9d:97:b0:f8:8c:41:c4:8e:02:71:2a:77:5a:b3: 37:cb:de:19:78:2b:78:45:b4:b0:e3:6e:eb:b0:e9: 19:ca:c4:2e:7c:dd:b7:e2:6d:cd:88:14:5c:c8:d1: 1c:9d:ae:c8:00:93:63:0a:73:d6:33:8d:d6:e8:3e: 62:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5C:AF:80:4A:E0:EB:70:71:D8:A6:67:8E:E6:C6:1C:CE:5C:26:E1 X509v3 Authority Key Identifier: keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5c:45:d4:76:0f:5b:0a:35:fa:cd:3c:1e:c6:7d:75:2b:dd: 04:5e:50:d4:7d:20:ac:2f:3e:a6:3e:74:f3:b1:0d:92:fd:05: 7a:fd:a6:fd:94:c5:c3:7a:eb:dc:cd:30:d3:7f:04:9a:95:33: bb:e7:a0:e8:3f:82:99:8b:f2:1c:91:5c:85:77:2c:da:d3:5a: 2f:51:b3:ab:39:84:e3:14:9e:61:9f:96:18:73:70:4b:c5:b6: 97:16:51:34:d4:23:a5:55:8c:6c:32:2c:71:21:d1:f9:f5:f3: 2a:ec:8c:50:b2:c9:5d:e6:8e:ee:84:ee:c4:47:f2:2a:4f:ba: b3:bf:77:ca:66:0e:25:e0:79:1e:84:f1:d7:c7:7f:50:0f:23: 90:65:9a:0d:b5:5a:9e:50:4d:40:d0:7a:3b:f9:7f:ab:d2:d5: 62:3e:69:5f:fc:66:24:e0:6b:3f:9f:24:01:0c:0c:99:48:3b: a2:21:1b:03:e7:6b:e8:c9:74:d2:b3:88:6d:95:c8:51:f9:56: 43:28:30:92:75:6e:75:0d:cf:cd:21:ac:f9:7e:61:ad:0b:5c: 45:e0:2f:04:3a:29:3a:3a:fd:1d:e0:a5:17:56:44:1b:ba:49: 4b:91:64:37:d6:71:99:5e:6c:75:2f:4f:60:43:dd:2c:54:96: e0:13:2b:d2 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDYIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ2 QzVDQkZDRUNCQTc5ODc5NTExMTJEQUExODdGRkNCNjIwNEUyNjAeFw0yNTA4MDky MjEyMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIzNUNBRjgwNEFFMEVC NzA3MUQ4QTY2NzhFRTZDNjFDQ0U1QzI2RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZXmNfBS9FT941VwgT4QrGShz1LejBun4N3XKolBw7R+5Ju2IH DJD+ZeNdjtJh+++t/Mn2b30tUD/dtSmI9vK8ax7YO5x+VqKAfZFBADUFDIAuqPn4 lXJ9BREEeqUptkt1Ge2r/MaCaViI4Idfq91klA/2TwaDAS8OSbGAtFbhsswhqX2N VstyuMMz4kyt1Tj1iQ0B8AyrX1HCXRiVy+NL6KvCufJMeafgme8R046RK3YM2EBT dU1jdb58IZUxu4oxWr6dl7D4jEHEjgJxKndaszfL3hl4K3hFtLDjbuuw6RnKxC58 3bfibc2IFFzI0RydrsgAk2MKc9YzjdboPmKXAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUs1yvgErg63Bx2KZnjubGHM5cJuEwHwYDVR0jBBgwFoAUbWxcv87Lp5h5UREt qhh//LYgTiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlUQUNN REMvYld4Y3Y4N0xwNWg1VVJFdHFoaF9fTFlnVGlZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iV3hjdjg3THA1aDVVUkV0cWhoX19MWWdUaVkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSVRBQ01EQy9iV3hjdjg3THA1aDVV UkV0cWhoX19MWWdUaVkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAelxF1HYPWwo1+s08HsZ9dSvdBF5Q1H0grC8+pj5087ENkv0Fev2m/ZTFw3rr 3M0w038EmpUzu+eg6D+CmYvyHJFchXcs2tNaL1GzqzmE4xSeYZ+WGHNwS8W2lxZR NNQjpVWMbDIscSHR+fXzKuyMULLJXeaO7oTuxEfyKk+6s793ymYOJeB5HoTx18d/ UA8jkGWaDbVanlBNQNB6O/l/q9LVYj5pX/xmJOBrP58kAQwMmUg7oiEbA+dr6Ml0 0rOIbZXIUflWQygwknVudQ3PzSGs+X5hrQtcReAvBDopOjr9HeClF1ZEG7pJS5Fk N9ZxmV5sdS9PYEPdLFSW4BMr0g== -----END CERTIFICATE-----Generated at Mon Aug 11 10:44:45 2025 by rpki-client