$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft File: yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft (raw, json) Hash identifier: z2k0tH08LCVg23cTkBwjy2OYdizXjG35YRjEzVHlKtc= Subject key identifier: 2B:0A:22:29:9F:3D:18:6B:0F:FF:5D:74:74:FC:5E:38:D5:A0:0A:D0 Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B Certificate serial: 0F58 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft Manifest number: 0F3C Signing time: Sat 09 Aug 2025 22:10:59 +0000 Manifest this update: Sat 09 Aug 2025 22:10:59 +0000 Manifest next update: Mon 11 Aug 2025 22:10:59 +0000 Files and hashes: 1: TC5O4BU5yifgspTLoBB-6tROqas.roa (hash: 5Z2V+asSnh0jJDO/1WCHnbOIIe8nc85aTk1atgqeHk4=) 2: bEyFLfDyPGGaE222hmgguAfkah4.roa (hash: 6kWlk6NMCJgw+qUJ8W9n1rIs/qfAK1WraQQkWjTOZ2Q=) 3: pjDSIqC07G2sc-JK1QvHVm6USe4.roa (hash: IBXNxPSvmGuAezCUvdgSujSlh2wGI05dKUepw9tjhZ4=) 4: yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl (hash: ePIw5sENZQRDJZzn0dgcVBa0AXTTBoSLOlGsP6EGwY0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 05:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3928 (0xf58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B Validity Not Before: Aug 9 22:10:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2B0A22299F3D186B0FFF5D7474FC5E38D5A00AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:5b:cb:71:84:7e:97:e2:d1:b0:e7:e6:76: 33:a0:6e:d9:3b:30:81:a1:46:17:2b:6d:c8:d1:91: 13:61:9e:b0:9b:c4:52:5e:7d:d7:2b:ee:a1:d1:8d: 56:f3:ca:c8:e3:37:9d:04:92:c8:43:71:df:a6:ed: 99:5e:6d:42:9b:ac:13:d5:9b:d3:78:19:36:7b:41: e2:87:db:4b:7e:cf:ea:2e:27:c9:f5:70:a2:cf:2d: 31:f6:2f:ea:a8:3a:9f:5b:c5:f5:f0:16:3c:09:76: 80:2e:09:71:ba:5c:ba:20:e4:af:e6:41:58:7c:fa: 1d:6b:ee:a6:c3:c3:7e:e1:64:fc:8f:19:71:e1:fa: 21:d2:25:b6:c3:c1:0a:4b:9f:cc:0d:fc:43:68:c8: 35:1c:f9:1a:aa:a9:8b:41:8a:e0:7d:a2:2a:0c:87: 45:23:71:f9:df:20:9a:95:4f:38:33:12:8f:5d:db: 42:89:5a:a7:be:40:87:54:88:c0:c0:9a:57:35:9a: b1:c0:d4:ce:01:e2:3f:a2:8d:20:8a:d1:d0:83:8d: 0b:99:4a:dd:a1:c3:9e:cf:aa:5f:fd:6a:eb:fd:4f: 98:72:19:78:dc:d2:fd:6b:73:2c:a4:63:31:b7:a8: 91:f0:9d:c0:5c:26:36:13:90:35:2f:7b:1b:1b:bc: 74:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0A:22:29:9F:3D:18:6B:0F:FF:5D:74:74:FC:5E:38:D5:A0:0A:D0 X509v3 Authority Key Identifier: keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:a4:21:0c:b5:27:e2:ad:00:0b:f3:77:65:a3:a3:f2:d3:30: a1:78:2b:67:69:ef:82:2d:21:fd:d8:64:e1:9c:2e:5f:02:34: 27:85:86:0d:08:e4:08:d5:5e:72:08:00:4f:c6:b3:9f:d5:10: 7c:50:43:73:42:ad:fe:6c:62:19:71:f8:9f:c1:3f:46:08:6f: 4e:a3:9a:f3:6c:20:f7:44:ff:25:57:c5:33:59:b9:8e:27:e9: f4:e5:ed:d3:2f:a3:d9:49:2d:d5:53:d7:1e:df:23:2b:8b:31: 64:23:77:0e:b1:ea:c0:40:c7:c2:b6:83:70:71:32:24:c2:b9: 84:0a:a7:5a:ba:ae:47:07:67:d0:f7:67:92:db:a4:ca:c3:a6: 61:9b:d4:d8:16:76:51:f3:75:07:e5:85:ad:99:16:c5:bc:98: 9c:3c:e7:f1:2a:08:14:20:1b:2e:e7:99:0b:58:0d:c4:84:5a: cc:10:52:ab:0b:fc:ce:f0:60:63:0d:be:64:13:01:fa:8c:79: b5:c8:45:3f:aa:63:5c:ea:6a:44:ca:2b:74:a0:e1:6d:7c:cb: 0f:4b:28:90:bf:28:1f:da:f7:d3:ff:66:88:07:9d:d4:40:b2: d6:9d:86:8a:33:a4:46:fe:75:4d:70:40:30:eb:0a:5e:be:b8: 7a:e6:bf:a0 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICD1gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ex QjcxRUZBQzZGNkFBNDMwMjc2MDlDMThBNzM0OTgyNzY0NTU0QjAeFw0yNTA4MDky MjEwNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJCMEEyMjI5OUYzRDE4 NkIwRkZGNUQ3NDc0RkM1RTM4RDVBMDBBRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCztVvLcYR+l+LRsOfmdjOgbtk7MIGhRhcrbcjRkRNhnrCbxFJe fdcr7qHRjVbzysjjN50EkshDcd+m7ZlebUKbrBPVm9N4GTZ7QeKH20t+z+ouJ8n1 cKLPLTH2L+qoOp9bxfXwFjwJdoAuCXG6XLog5K/mQVh8+h1r7qbDw37hZPyPGXHh +iHSJbbDwQpLn8wN/ENoyDUc+RqqqYtBiuB9oioMh0UjcfnfIJqVTzgzEo9d20KJ Wqe+QIdUiMDAmlc1mrHA1M4B4j+ijSCK0dCDjQuZSt2hw57Pql/9auv9T5hyGXjc 0v1rcyykYzG3qJHwncBcJjYTkDUvexsbvHQjAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUKwoiKZ89GGsP/110dPxeONWgCtAwHwYDVR0jBBgwFoAUyhtx76xvaqQwJ2Cc GKc0mCdkVUswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOVEVB U1kveWh0eDc2eHZhcVF3SjJDY0dLYzBtQ2RrVlVzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS95aHR4NzZ4dmFxUXdKMkNjR0tjMG1DZGtWVXMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5URUFTWS95aHR4NzZ4dmFxUXdK MkNjR0tjMG1DZGtWVXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaaQhDLUn4q0AC/N3ZaOj8tMwoXgrZ2nvgi0h/dhk4ZwuXwI0J4WGDQjkCNVe cggAT8azn9UQfFBDc0Kt/mxiGXH4n8E/RghvTqOa82wg90T/JVfFM1m5jifp9OXt 0y+j2Ukt1VPXHt8jK4sxZCN3DrHqwEDHwraDcHEyJMK5hAqnWrquRwdn0Pdnktuk ysOmYZvU2BZ2UfN1B+WFrZkWxbyYnDzn8SoIFCAbLueZC1gNxIRazBBSqwv8zvBg Yw2+ZBMB+ox5tchFP6pjXOpqRMordKDhbXzLD0sokL8oH9r30/9miAed1ECy1p2G ijOkRv51TXBAMOsKXr64eua/oA== -----END CERTIFICATE-----Generated at Mon Aug 11 02:09:24 2025 by rpki-client