$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft File: m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft (raw, json) Hash identifier: R7Nb6MBMCgrS80aVFix5GxLlk0bZU6zmdpacNkYunv0= Subject key identifier: 79:5D:90:5E:77:95:2D:D1:FE:C2:8C:6A:56:DA:1F:DD:CF:1E:0C:6B Authority key identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3 Certificate issuer: /CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3 Certificate serial: 0351 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft Manifest number: 0339 Signing time: Wed 05 Nov 2025 07:59:48 +0000 Manifest this update: Wed 05 Nov 2025 07:59:48 +0000 Manifest next update: Fri 07 Nov 2025 07:59:48 +0000 Files and hashes: 1: -1e2AdlZM_kthAXAVDWdyw5ddmQ.roa (hash: grduK08LNWkFZnV7k9CSs49kYkTtuDiPGH3AkPWQvy0=) 2: 1FZ9xVPUVQZd3NZxmi3VEnlQsEg.roa (hash: U+TPLK5JTqhFXUtthiNct6dA59hyvG0NSPtNFes7KL0=) 3: 4NjTqan12me_p3c4kJ5pASqS4jM.roa (hash: uibqPg6JVeqXPcRIxVkudxh5JGzOD9Rmz0K5VlzMxVQ=) 4: HXMq6aoknxTmytxY7RSrHsYpt_g.roa (hash: hJpvy00NLN4dlxIzwmKdDB1poqJMfeou7n0Fuw2imM4=) 5: hwPzsGds16UWb86szZaeZXXvQpE.roa (hash: iY4c0DjiGId0Aa15ap0LWbmvwGS4G2BS3tUGBUnNRRw=) 6: m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl (hash: gQ1+5ht7U0X+0a2R3z+gqjSAvNPd6GYoM4A20ZqNGik=) 7: q8MZgMWgdtePuCv9114g_FqV6KY.roa (hash: ZPULdz8ciqCZCwIwOw2ZvUgUjQs9WSuMXc4jxCbfUFw=) 8: w10Xzm3QnT0ajMLDmBOEIonN8Ro.roa (hash: QYwPy/H598La7J5MB1HqoJS0u7dDO+OJwY1gvU8qT5A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3 Validity Not Before: Nov 5 07:59:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=795D905E77952DD1FEC28C6A56DA1FDDCF1E0C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:39:bb:30:78:4f:5e:c4:e7:47:9e:70:1b:2a: d2:fc:24:de:98:60:2f:fc:73:5a:7f:3a:94:74:4a: a8:cf:a5:6c:26:b5:7e:90:27:e3:1f:f5:5e:c4:c3: 62:de:e1:c8:07:f8:9f:ed:b9:cc:5c:43:3b:fc:1d: f5:74:12:ab:fe:a6:e9:ec:fb:95:fb:e2:e6:2d:18: 71:14:b8:75:36:f1:25:b0:fa:09:4b:89:28:97:fa: 34:c0:dc:fb:0f:74:e5:e9:82:e3:e3:3c:b9:44:31: ab:d7:ec:25:43:d4:b4:87:5b:bd:66:de:30:b2:1b: 4c:cb:c3:6d:ae:99:12:bc:80:95:46:76:39:e0:59: b1:fb:79:b5:4f:c9:c0:5d:05:a9:4b:e9:48:1c:9c: 47:f4:35:81:7c:72:d5:25:5b:9b:ce:c4:2b:1a:a4: 6f:d6:90:e1:95:bc:19:b1:3e:00:3e:b2:9e:63:b7: b7:64:68:7c:f8:18:2f:6b:8d:fa:11:7c:82:df:8b: 72:7b:1f:9a:fb:7f:17:11:73:42:64:b0:28:70:91: 14:ef:48:da:e9:82:6b:93:03:81:48:fc:03:9f:8a: 36:2e:de:af:ff:2e:01:1e:e2:60:05:62:b5:c5:a4: 3f:8d:d9:fc:77:e5:1c:59:bb:be:67:03:e6:18:d5: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5D:90:5E:77:95:2D:D1:FE:C2:8C:6A:56:DA:1F:DD:CF:1E:0C:6B X509v3 Authority Key Identifier: keyid:9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:9d:77:3a:31:96:c1:16:e9:6a:76:f9:b1:70:5a:25:3b:28: 54:eb:96:67:7c:7f:87:7c:e7:34:11:f6:47:48:fa:73:2c:1e: bb:20:c5:66:d3:65:2d:cd:95:2c:e4:f6:c2:92:ee:03:3a:46: 1a:bd:63:09:ed:40:00:1d:fe:2a:b7:d6:c3:a7:8b:92:11:7f: dc:8b:2a:76:8a:9f:57:66:16:9a:50:76:f4:f8:93:eb:62:10: 72:89:a3:9f:e0:a1:fe:5f:6f:0e:b4:fc:1d:87:95:70:db:74: 20:63:39:5e:b8:c4:c3:50:7f:32:7c:ee:23:df:98:16:a1:d4: 76:88:e8:42:c8:d3:9d:3c:d4:7f:e1:68:47:44:15:36:bf:78: 64:12:26:68:33:76:1f:09:bb:6d:92:87:e4:86:b0:aa:43:f7: 69:f4:b3:e2:61:5e:4f:19:94:7e:a9:fb:14:ff:aa:b2:89:0d: 24:d8:6a:19:a5:2e:c3:ae:ad:45:03:93:7c:89:ef:5a:b5:1b: 65:11:38:3c:77:ae:91:0a:4c:26:51:65:30:4c:ba:5a:4f:ee: ad:2f:24:a1:5f:57:c6:93:a4:6c:a2:71:df:76:da:22:24:bc: 4f:de:ea:5d:2b:d4:e0:61:58:b4:c1:94:36:e9:a8:97:fd:b9: 50:16:ea:9b -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUJG Q0ZBQTIxMDY3NDJCMkMwOTlFM0Y0QzJBNTA0MjhFNUNENjJEMzAeFw0yNTExMDUw NzU5NDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc5NUQ5MDVFNzc5NTJE RDFGRUMyOEM2QTU2REExRkREQ0YxRTBDNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeObsweE9exOdHnnAbKtL8JN6YYC/8c1p/OpR0SqjPpWwmtX6Q J+Mf9V7Ew2Le4cgH+J/tucxcQzv8HfV0Eqv+puns+5X74uYtGHEUuHU28SWw+glL iSiX+jTA3PsPdOXpguPjPLlEMavX7CVD1LSHW71m3jCyG0zLw22umRK8gJVGdjng WbH7ebVPycBdBalL6UgcnEf0NYF8ctUlW5vOxCsapG/WkOGVvBmxPgA+sp5jt7dk aHz4GC9rjfoRfILfi3J7H5r7fxcRc0JksChwkRTvSNrpgmuTA4FI/AOfijYu3q// LgEe4mAFYrXFpD+N2fx35RxZu75nA+YY1ZXPAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUeV2QXneVLdH+woxqVtof3c8eDGswHwYDVR0jBBgwFoAUm/z6ohBnQrLAmeP0 wqUEKOXNYtMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEVDSERS SVZFTi9tX3o2b2hCblFyTEFtZVAwd3FVRUtPWE5ZdE0uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL21fejZvaEJuUXJMQW1lUDB3cVVFS09YTll0TS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RFQ0hEUklWRU4vbV96Nm9oQm5R ckxBbWVQMHdxVUVLT1hOWXRNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJCddzoxlsEW6Wp2+bFwWiU7KFTrlmd8f4d85zQR9kdI+nMsHrsgxWbT ZS3NlSzk9sKS7gM6Rhq9YwntQAAd/iq31sOni5IRf9yLKnaKn1dmFppQdvT4k+ti EHKJo5/gof5fbw60/B2HlXDbdCBjOV64xMNQfzJ87iPfmBah1HaI6ELI05081H/h aEdEFTa/eGQSJmgzdh8Ju22Sh+SGsKpD92n0s+JhXk8ZlH6p+xT/qrKJDSTYahml LsOurUUDk3yJ71q1G2URODx3rpEKTCZRZTBMulpP7q0vJKFfV8aTpGyicd922iIk vE/e6l0r1OBhWLTBlDbpqJf9uVAW6ps= -----END CERTIFICATE-----Generated at Wed Nov 5 20:12:50 2025 by rpki-client