$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft File: tjCfg3WsbYZ88UyV8np05NLfGb0.mft (raw, json) Hash identifier: Xfp8JzUr5VEHvyxnRGOJkgSzZ/fAEdOZAqPP653jf3M= Subject key identifier: C5:EF:9C:72:5E:95:C2:97:04:CC:AE:D7:A0:98:FD:4B:B2:EF:DF:16 Authority key identifier: B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD Certificate issuer: /CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD Certificate serial: 04F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft Manifest number: 04F3 Signing time: Sat 10 May 2025 09:21:03 +0000 Manifest this update: Sat 10 May 2025 09:21:03 +0000 Manifest next update: Mon 12 May 2025 09:21:03 +0000 Files and hashes: 1: tjCfg3WsbYZ88UyV8np05NLfGb0.crl (hash: aNvUEPZh5I+rrKUnzc3kFD9AdoDImMUB/04iYRtPu4s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 15:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD Validity Not Before: May 10 09:21:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C5EF9C725E95C29704CCAED7A098FD4BB2EFDF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:eb:3a:02:86:9d:8f:41:ff:1b:a5:e0:12: c7:85:90:52:6d:29:d7:2c:2e:9e:0b:8d:ad:ad:8c: 3e:4c:4d:eb:42:76:ec:4d:c9:c5:71:cd:5e:f6:8c: 38:fd:1e:84:5b:58:78:1e:e0:a0:fb:dd:c4:7b:71: 02:ba:8b:f3:97:5d:ad:0b:d5:6e:fa:3d:6e:de:dc: 6e:ba:e8:a5:c1:31:f5:cf:5c:cb:67:8b:bf:ba:c7: b2:d9:26:31:14:d7:2d:dd:c7:0f:c3:90:1e:d5:18: ab:97:12:b7:fa:62:50:10:91:5a:a7:c0:7f:c8:36: 94:4e:58:95:ae:da:af:22:26:8e:35:fe:e5:2b:1a: 02:eb:17:78:ac:7e:3f:75:98:11:bd:3e:63:c7:e5: dc:ca:7d:c2:65:06:0c:d2:0d:c0:55:ec:dc:5a:3d: 64:17:52:eb:63:ba:66:c9:40:0e:f5:4b:48:39:b3: 05:fa:93:10:a0:77:65:bd:bf:8a:49:41:92:0e:6b: 9a:71:43:5e:04:59:cd:f6:b7:60:cd:7c:88:88:72: 71:36:bf:7d:c8:aa:83:fb:ce:57:24:03:85:70:54: d2:b0:26:34:66:db:47:c7:80:68:e2:c1:f5:98:5d: 3e:9f:af:a3:ee:e2:10:45:ad:65:e7:43:ef:05:be: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EF:9C:72:5E:95:C2:97:04:CC:AE:D7:A0:98:FD:4B:B2:EF:DF:16 X509v3 Authority Key Identifier: keyid:B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d2:5d:07:af:0a:b7:05:76:42:20:29:d8:89:2c:59:23:12: 2b:b7:65:1e:e4:19:af:4d:08:0e:92:e9:83:e7:c4:a5:71:b0: 56:ce:43:2c:bd:5d:f8:72:a1:52:e8:aa:18:65:a1:a6:52:b4: 58:5e:f8:c6:5e:db:a4:b1:fc:57:b1:6c:ab:6a:9e:ff:96:76: d6:be:f7:8d:28:1c:28:83:c6:15:07:4c:b3:41:6d:7e:aa:fe: 1f:44:84:1c:b8:96:a1:c7:14:46:80:f0:c3:1b:d5:fe:7e:f5: 29:f5:f9:c0:10:2f:2e:7e:d7:da:e2:e4:df:23:5a:e6:6d:84: 30:af:91:35:2c:16:76:2b:d3:7a:50:98:c7:c6:18:48:e5:41: ef:48:ba:73:de:da:b8:59:c7:4f:aa:b0:cc:a7:47:a5:84:52: 37:81:85:c5:cb:f9:98:f0:89:32:16:4c:3c:b2:c7:8b:f4:66: 46:2c:23:e6:c2:92:87:e1:ab:dd:e7:aa:c2:13:a9:2f:35:9b: 2c:fb:9b:2a:15:5b:f6:c4:02:0b:c9:5c:10:12:1a:c8:dc:f2: 50:ec:e3:70:bd:20:74:5c:c6:3e:ea:16:92:2d:c5:8a:81:08: 77:4d:e6:84:aa:fc:02:4a:41:17:15:f3:23:f9:f2:ec:29:ec: 49:ae:39:53 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjYz MDlGODM3NUFDNkQ4NjdDRjE0Qzk1RjI3QTc0RTREMkRGMTlCRDAeFw0yNTA1MTAw OTIxMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM1RUY5QzcyNUU5NUMy OTcwNENDQUVEN0EwOThGRDRCQjJFRkRGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxYus6Aoadj0H/G6XgEseFkFJtKdcsLp4Lja2tjD5MTetCduxN ycVxzV72jDj9HoRbWHge4KD73cR7cQK6i/OXXa0L1W76PW7e3G666KXBMfXPXMtn i7+6x7LZJjEU1y3dxw/DkB7VGKuXErf6YlAQkVqnwH/INpROWJWu2q8iJo41/uUr GgLrF3isfj91mBG9PmPH5dzKfcJlBgzSDcBV7NxaPWQXUutjumbJQA71S0g5swX6 kxCgd2W9v4pJQZIOa5pxQ14EWc32t2DNfIiIcnE2v33IqoP7zlckA4VwVNKwJjRm 20fHgGjiwfWYXT6fr6Pu4hBFrWXnQ+8Fvh3ZAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUxe+ccl6VwpcEzK7XoJj9S7Lv3xYwHwYDVR0jBBgwFoAUtjCfg3WsbYZ88UyV 8np05NLfGb0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF Q0gvdGpDZmczV3NiWVo4OFV5VjhucDA1TkxmR2IwLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS90akNmZzNXc2JZWjg4VXlWOG5wMDVOTGZHYjAuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC90akNmZzNXc2JZWjg4 VXlWOG5wMDVOTGZHYjAubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWtJdB68KtwV2QiAp2IksWSMSK7dlHuQZr00IDpLpg+fEpXGwVs5DLL1d+HKh UuiqGGWhplK0WF74xl7bpLH8V7Fsq2qe/5Z21r73jSgcKIPGFQdMs0Ftfqr+H0SE HLiWoccURoDwwxvV/n71KfX5wBAvLn7X2uLk3yNa5m2EMK+RNSwWdivTelCYx8YY SOVB70i6c97auFnHT6qwzKdHpYRSN4GFxcv5mPCJMhZMPLLHi/RmRiwj5sKSh+Gr 3eeqwhOpLzWbLPubKhVb9sQCC8lcEBIayNzyUOzjcL0gdFzGPuoWki3FioEId03m hKr8AkpBFxXzI/ny7CnsSa45Uw== -----END CERTIFICATE-----Generated at Sat May 10 12:21:50 2025 by rpki-client