$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.mft File: -0c5peYaY59Wb94P20Egi6P2m_E.mft (raw, json) Hash identifier: ZeVZtHtpBzkIJdbJB2c3TJ7tUIicmbNuRDJzXFCuCJI= Subject key identifier: 38:94:02:64:7D:0E:D7:92:6F:20:78:91:F8:13:93:E6:DE:D3:0F:04 Authority key identifier: FB:47:39:A5:E6:1A:63:9F:56:6F:DE:0F:DB:41:20:8B:A3:F6:9B:F1 Certificate issuer: /CN=FB4739A5E61A639F566FDE0FDB41208BA3F69BF1 Certificate serial: 0D2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-0c5peYaY59Wb94P20Egi6P2m_E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.mft Manifest number: 0D20 Signing time: Sat 10 May 2025 09:53:20 +0000 Manifest this update: Sat 10 May 2025 09:53:20 +0000 Manifest next update: Mon 12 May 2025 09:53:20 +0000 Files and hashes: 1: -0c5peYaY59Wb94P20Egi6P2m_E.crl (hash: e5OGlW7y4ZKqxbU8gecNs960z+/CSh3tzHf2sZ6V7q8=) 2: xujBu5QPZsFf7pi26lVMB5PscIg.roa (hash: uUweoTwHHApqT6o4Df+cXC77vcTK9uxAw9hszx5K0DQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-0c5peYaY59Wb94P20Egi6P2m_E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 15:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3370 (0xd2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB4739A5E61A639F566FDE0FDB41208BA3F69BF1 Validity Not Before: May 10 09:53:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=389402647D0ED7926F207891F81393E6DED30F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:a8:65:2e:71:42:87:5c:ad:33:34:69:01: 9b:a7:56:53:69:57:eb:9e:37:6b:e9:68:23:63:d1: 5c:02:00:ad:ef:68:ef:fb:f0:88:b3:d7:4c:56:cb: 95:d0:42:e0:5d:36:bf:ac:3d:20:3d:40:56:89:15: b3:11:e6:52:00:ff:4f:4c:fa:ca:25:9c:79:4e:59: d9:5f:c2:c8:0d:52:69:f0:36:ac:5c:b6:c8:cc:95: 42:46:6b:a3:8d:81:3b:a9:91:85:4e:46:0f:7e:a3: b0:05:0d:14:9a:f4:56:be:df:1b:c7:80:6d:1b:1f: 4a:3c:f3:10:4a:8d:bb:8a:f0:fa:0d:a8:45:3c:62: f5:88:31:11:b0:51:8b:b3:8d:ec:4d:e2:54:75:98: d6:2e:a9:b6:e4:96:8c:6f:d3:6f:ff:26:80:dd:37: 32:e1:2e:0f:74:9e:20:ed:d4:bc:b2:44:02:77:6b: 27:e4:2f:a0:f8:a8:14:ec:ae:be:75:30:aa:9e:db: 9c:eb:6e:20:42:62:55:54:7b:6f:de:b5:07:0b:e2: e3:b8:d8:3e:40:89:6c:9f:9a:45:e9:75:3a:02:e2: 20:07:9b:c3:c4:c3:68:e1:55:fc:02:6d:cc:ac:d0: 35:a9:13:d6:46:7b:7c:c0:6a:0d:8b:0f:f4:52:9a: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:94:02:64:7D:0E:D7:92:6F:20:78:91:F8:13:93:E6:DE:D3:0F:04 X509v3 Authority Key Identifier: keyid:FB:47:39:A5:E6:1A:63:9F:56:6F:DE:0F:DB:41:20:8B:A3:F6:9B:F1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-0c5peYaY59Wb94P20Egi6P2m_E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:80:f1:ed:a3:03:86:5a:f9:2b:b2:8c:b9:3d:22:94:47:f1: 3c:25:d0:e3:f4:e3:70:7e:fb:ef:7b:e5:ea:4d:5b:ca:83:91: b3:ac:8c:7e:11:b1:49:ed:be:05:70:ed:b7:68:bc:92:c2:d9: df:fc:3e:97:a1:a3:5a:48:46:e8:f5:52:fd:9a:93:81:56:ca: 19:ba:c7:95:22:0c:96:a0:a2:34:3b:33:f4:56:fa:19:a6:09: e1:79:10:ee:0e:eb:3b:57:d0:59:ce:a9:0d:3c:c2:a5:ed:0e: 60:a8:5f:4c:30:35:bf:d0:c6:ff:2e:c9:f9:17:ba:4f:ac:83: 53:ac:49:9d:1f:e7:72:d0:b4:5d:54:55:52:66:04:f6:75:c3: 1f:34:ad:47:b5:0a:30:88:20:89:70:3f:4e:bc:20:0f:d4:39: 0d:8e:50:eb:ba:65:59:f7:8f:a5:53:2c:ef:c7:74:c5:9f:6a: e0:bb:02:50:c8:71:64:b8:26:64:d9:e4:07:30:29:49:a1:f2: 75:c5:23:2e:32:06:d9:b9:e4:50:9d:23:18:8c:4c:4e:20:f4: 49:c3:83:5d:ec:64:ec:c4:bc:4b:87:6c:33:1e:69:1d:a1:36: 5e:a5:16:50:62:b9:b6:6f:40:27:40:cf:e7:7a:ce:ff:ce:0d: 76:b5:7c:a5 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDSowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkI0 NzM5QTVFNjFBNjM5RjU2NkZERTBGREI0MTIwOEJBM0Y2OUJGMTAeFw0yNTA1MTAw OTUzMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM4OTQwMjY0N0QwRUQ3 OTI2RjIwNzg5MUY4MTM5M0U2REVEMzBGMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCutKhlLnFCh1ytMzRpAZunVlNpV+ueN2vpaCNj0VwCAK3vaO/7 8Iiz10xWy5XQQuBdNr+sPSA9QFaJFbMR5lIA/09M+solnHlOWdlfwsgNUmnwNqxc tsjMlUJGa6ONgTupkYVORg9+o7AFDRSa9Fa+3xvHgG0bH0o88xBKjbuK8PoNqEU8 YvWIMRGwUYuzjexN4lR1mNYuqbbkloxv02//JoDdNzLhLg90niDt1LyyRAJ3ayfk L6D4qBTsrr51MKqe25zrbiBCYlVUe2/etQcL4uO42D5AiWyfmkXpdToC4iAHm8PE w2jhVfwCbcys0DWpE9ZGe3zAag2LD/RSmq01AgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUOJQCZH0O15JvIHiR+BOT5t7TDwQwHwYDVR0jBBgwFoAU+0c5peYaY59Wb94P 20Egi6P2m/EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lOT1BB Qy8tMGM1cGVZYVk1OVdiOTRQMjBFZ2k2UDJtX0UuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBLy0wYzVwZVlhWTU5V2I5NFAyMEVnaTZQMm1fRS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NJTk9QQUMvLTBjNXBlWWFZNTlXYjk0 UDIwRWdpNlAybV9FLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ADqA8e2jA4Za+SuyjLk9IpRH8Twl0OP043B+++975epNW8qDkbOsjH4RsUntvgVw 7bdovJLC2d/8Ppeho1pIRuj1Uv2ak4FWyhm6x5UiDJagojQ7M/RW+hmmCeF5EO4O 6ztX0FnOqQ08wqXtDmCoX0wwNb/Qxv8uyfkXuk+sg1OsSZ0f53LQtF1UVVJmBPZ1 wx80rUe1CjCIIIlwP068IA/UOQ2OUOu6ZVn3j6VTLO/HdMWfauC7AlDIcWS4JmTZ 5AcwKUmh8nXFIy4yBtm55FCdIxiMTE4g9EnDg13sZOzEvEuHbDMeaR2hNl6lFlBi ubZvQCdAz+d6zv/ODXa1fKU= -----END CERTIFICATE-----Generated at Sat May 10 11:24:45 2025 by rpki-client