$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft File: yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft (raw, json) Hash identifier: wsMQtaNZWgzJCbao9LxK5U+EDGM7ukzlQFMUFl4slS8= Subject key identifier: 2B:0A:22:29:9F:3D:18:6B:0F:FF:5D:74:74:FC:5E:38:D5:A0:0A:D0 Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B Certificate serial: 0F96 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft Manifest number: 0F77 Signing time: Wed 05 Nov 2025 09:58:57 +0000 Manifest this update: Wed 05 Nov 2025 09:58:57 +0000 Manifest next update: Fri 07 Nov 2025 09:58:57 +0000 Files and hashes: 1: VX3cOf6GUsJYxVQdo75ONkZrPuY.roa (hash: XUGYDvnHIAleabGqSO8GDzgLM+2ecJuh/OLfCB1KAi8=) 2: ZDC6zM1xKWCaJVZw0QC6GOuB1W0.roa (hash: s8jNOh8rOpDSjX/BeBSzQ9SzlJwgCxKSOgI3y33J+tQ=) 3: obDFcslJtpSFRBXA0ZM70BH_8wM.roa (hash: w5iLJWqtZk2NqT+X94gBX2cP6EwaHRPkQp2ksH9YuCE=) 4: yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl (hash: nrlMg+XQ8GJoesjf3UXZK6AR/R/0sZLDkDtBaFfbsVc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3990 (0xf96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B Validity Not Before: Nov 5 09:58:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2B0A22299F3D186B0FFF5D7474FC5E38D5A00AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:5b:cb:71:84:7e:97:e2:d1:b0:e7:e6:76: 33:a0:6e:d9:3b:30:81:a1:46:17:2b:6d:c8:d1:91: 13:61:9e:b0:9b:c4:52:5e:7d:d7:2b:ee:a1:d1:8d: 56:f3:ca:c8:e3:37:9d:04:92:c8:43:71:df:a6:ed: 99:5e:6d:42:9b:ac:13:d5:9b:d3:78:19:36:7b:41: e2:87:db:4b:7e:cf:ea:2e:27:c9:f5:70:a2:cf:2d: 31:f6:2f:ea:a8:3a:9f:5b:c5:f5:f0:16:3c:09:76: 80:2e:09:71:ba:5c:ba:20:e4:af:e6:41:58:7c:fa: 1d:6b:ee:a6:c3:c3:7e:e1:64:fc:8f:19:71:e1:fa: 21:d2:25:b6:c3:c1:0a:4b:9f:cc:0d:fc:43:68:c8: 35:1c:f9:1a:aa:a9:8b:41:8a:e0:7d:a2:2a:0c:87: 45:23:71:f9:df:20:9a:95:4f:38:33:12:8f:5d:db: 42:89:5a:a7:be:40:87:54:88:c0:c0:9a:57:35:9a: b1:c0:d4:ce:01:e2:3f:a2:8d:20:8a:d1:d0:83:8d: 0b:99:4a:dd:a1:c3:9e:cf:aa:5f:fd:6a:eb:fd:4f: 98:72:19:78:dc:d2:fd:6b:73:2c:a4:63:31:b7:a8: 91:f0:9d:c0:5c:26:36:13:90:35:2f:7b:1b:1b:bc: 74:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0A:22:29:9F:3D:18:6B:0F:FF:5D:74:74:FC:5E:38:D5:A0:0A:D0 X509v3 Authority Key Identifier: keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:42:07:9c:b1:08:b3:d8:e9:75:4b:87:23:bb:89:54:50:ec: d0:26:6f:22:f5:29:60:ba:ee:86:62:c2:85:e9:ba:98:f6:6e: be:8c:da:e6:67:a5:40:c0:d3:1e:21:08:5d:08:7f:84:a2:b0: b3:d5:6c:4f:fc:6d:17:72:9e:e8:62:4c:6d:a2:67:73:3b:0e: e8:71:c6:82:10:a6:bc:8e:cd:86:92:78:b3:25:ea:74:d2:54: e5:f4:75:68:2b:62:6b:e5:dd:e4:02:52:98:6c:21:60:c0:7d: 58:46:cc:df:d2:b5:79:cb:51:eb:72:11:15:79:47:ea:fe:9d: 84:fb:fc:88:72:f0:af:4b:ab:b9:fc:48:15:23:12:f7:bc:63: e7:ce:87:67:6b:f8:01:13:9d:bf:dd:bd:f6:a1:85:7b:fd:d7: c6:d0:f4:9e:0e:19:52:9c:80:02:65:05:30:8a:b7:ab:02:64: f7:0e:a9:4f:cb:b7:81:2a:e2:49:1e:76:71:5b:70:47:01:96: 8a:49:ef:72:34:8f:93:aa:90:f3:85:98:7f:c8:37:55:2c:ab: ac:98:41:81:40:19:9e:16:41:c5:18:0c:c1:0c:f4:a3:6c:2f: 1b:d6:03:5e:cd:a6:dd:4a:7f:ff:5b:cd:30:f7:2f:e3:99:c0: 04:cb:ab:f7 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICD5YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ex QjcxRUZBQzZGNkFBNDMwMjc2MDlDMThBNzM0OTgyNzY0NTU0QjAeFw0yNTExMDUw OTU4NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJCMEEyMjI5OUYzRDE4 NkIwRkZGNUQ3NDc0RkM1RTM4RDVBMDBBRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCztVvLcYR+l+LRsOfmdjOgbtk7MIGhRhcrbcjRkRNhnrCbxFJe fdcr7qHRjVbzysjjN50EkshDcd+m7ZlebUKbrBPVm9N4GTZ7QeKH20t+z+ouJ8n1 cKLPLTH2L+qoOp9bxfXwFjwJdoAuCXG6XLog5K/mQVh8+h1r7qbDw37hZPyPGXHh +iHSJbbDwQpLn8wN/ENoyDUc+RqqqYtBiuB9oioMh0UjcfnfIJqVTzgzEo9d20KJ Wqe+QIdUiMDAmlc1mrHA1M4B4j+ijSCK0dCDjQuZSt2hw57Pql/9auv9T5hyGXjc 0v1rcyykYzG3qJHwncBcJjYTkDUvexsbvHQjAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUKwoiKZ89GGsP/110dPxeONWgCtAwHwYDVR0jBBgwFoAUyhtx76xvaqQwJ2Cc GKc0mCdkVUswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOVEVB U1kveWh0eDc2eHZhcVF3SjJDY0dLYzBtQ2RrVlVzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS95aHR4NzZ4dmFxUXdKMkNjR0tjMG1DZGtWVXMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5URUFTWS95aHR4NzZ4dmFxUXdK MkNjR0tjMG1DZGtWVXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPUIHnLEIs9jpdUuHI7uJVFDs0CZvIvUpYLruhmLChem6mPZuvoza5melQMDT HiEIXQh/hKKws9VsT/xtF3Ke6GJMbaJnczsO6HHGghCmvI7NhpJ4syXqdNJU5fR1 aCtia+Xd5AJSmGwhYMB9WEbM39K1ectR63IRFXlH6v6dhPv8iHLwr0urufxIFSMS 97xj586HZ2v4AROdv9299qGFe/3XxtD0ng4ZUpyAAmUFMIq3qwJk9w6pT8u3gSri SR52cVtwRwGWiknvcjSPk6qQ84WYf8g3VSyrrJhBgUAZnhZBxRgMwQz0o2wvG9YD Xs2m3Up//1vNMPcv45nABMur9w== -----END CERTIFICATE-----Generated at Wed Nov 5 17:34:41 2025 by rpki-client