$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft File: h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft (raw, json) Hash identifier: US+uRJU8uEGKo42KUDrnPfOQIdgks+oahtYhJcAQ5+w= Subject key identifier: EE:B9:32:DC:94:D9:37:CD:E4:9C:E1:3B:9F:03:6C:98:EC:16:6C:F1 Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05 Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05 Certificate serial: 0E24 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft Manifest number: 0DC8 Signing time: Tue 04 Nov 2025 06:59:38 +0000 Manifest this update: Tue 04 Nov 2025 06:59:38 +0000 Manifest next update: Thu 06 Nov 2025 06:59:38 +0000 Files and hashes: 1: 1ZsHxzXj-JEzQF4d4QyisHq4uE0.roa (hash: ZtACC3p9lp64uPpWUR/MJelsLLcWHrJ6dApGMrUdUnI=) 2: 3rkN4QtVRk7Go8TY9xNJKGA61Mo.roa (hash: 1qrknS+K4FBqRE/5/X0VR55zvjBnmIx57i4BHUrWFBY=) 3: DPYuqdj9R3UZhJ7PXnqrKX-qpB0.roa (hash: +yE7LoVPL8tJY9d8qyhaeFemxBORI9luFIdti1Fkzrg=) 4: O7HquR7xpx4Bp9aP-fgAsV4YMTY.roa (hash: zwfuRgPxKAiB3MbTJdqsuSjTV3lkv4ymqO9ytsr/1fE=) 5: P7m86jyEF2VzvShWSvCu6WADdkw.roa (hash: oGvnEqypBEBRt2kWwLrfIRZ+6rLBP3D41B3DjGwxvVk=) 6: Px7aP9Pnq-n_CAnjAj1CDsinrzQ.roa (hash: 1VVdTYOiYVyZK9bHx2rD8awnRtszqX3o+655EReBBL0=) 7: QPLGM8lP7FMtdFHPgXpGP8AluTQ.roa (hash: n/L3UI+GqmbUd9HBK4wl/HNwzrXS9ZnFx0KCQWXX2kM=) 8: Zd9HEDXuw6WMlR73XrXIRaMrdgg.roa (hash: SXUr2IlVNq15G3U1XCSGqtUdNd4BZFV/EoNMr9V5x+s=) 9: h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl (hash: o4oVlHat7c/dVX8t01Ga+ydJKH3+lfY2yFcO0xr1orM=) 10: jKGOGVu-VgPMh5yxoUKC_5C3G4c.roa (hash: LoiZHBwTDrYW+ZW69wIMjJ2rgYb1O5nxJY7B/tH59oA=) 11: kt7eLetQiPuVtADs2c3--v-XsQs.roa (hash: 52Nl/h5HmfHGhSHokaYQWMakklftj0mCfohu6Yg+McU=) 12: sBqC0IaFmFIz7JQkrEFNhDL9lR4.roa (hash: vWuOYv7J9M9j0jpbj9B83PJZuyhD9ScXXvle6tmM8XI=) 13: yiGKFLuUmGsRGKB_3PU0DdIunrM.roa (hash: 5gb0RhIG6Fi8br15VjfRZjbg6xtpSFr+i883cxmilU8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3620 (0xe24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05 Validity Not Before: Nov 4 06:59:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EEB932DC94D937CDE49CE13B9F036C98EC166CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:30:82:04:f9:78:9a:ed:15:cd:a4:5d:0d: 41:a9:40:f4:53:0e:c8:95:74:13:91:36:3c:3b:d1: ad:0a:01:b6:0e:3b:7d:e9:ad:28:9d:1e:d6:0b:83: 2d:ee:e4:6f:12:6b:25:8f:cb:81:33:f8:b7:a3:51: 7c:dd:53:1c:d8:cc:11:4a:79:8e:9e:95:6a:11:3a: 0f:ef:d2:04:b9:4c:09:3a:e7:fa:03:1a:21:8d:91: 50:29:c8:cd:94:48:b2:ff:10:47:a2:2f:89:dc:58: 69:4e:30:53:86:d7:1e:6e:ac:26:9c:01:8f:da:ac: 4e:cf:f2:3e:3d:55:63:9d:74:ba:48:0b:49:36:a3: 5f:24:8b:2e:8f:ce:15:60:c7:1b:84:3a:f3:a8:1f: 0c:dd:be:89:fa:d2:14:66:c5:a3:5d:bc:fb:14:d6: cf:80:69:4a:d9:8f:9b:9a:b0:b7:14:ae:69:d9:1a: d2:e9:87:4a:32:a9:c2:f9:7e:a2:88:66:41:4a:9b: 43:6b:70:2d:d3:04:48:6f:f7:34:3b:18:f9:29:4b: d1:95:67:8c:b2:60:0b:a5:cf:af:f0:bf:36:ce:3c: ea:4f:f8:ff:e5:b1:7c:33:a2:af:a9:9d:fa:ae:a6: e4:e2:2b:b8:ac:3d:23:65:3c:f3:be:fc:2d:db:af: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B9:32:DC:94:D9:37:CD:E4:9C:E1:3B:9F:03:6C:98:EC:16:6C:F1 X509v3 Authority Key Identifier: keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e1:3f:b3:47:aa:60:b7:f0:18:07:1b:73:93:71:1e:9c:73: 73:0a:7e:e5:4b:d9:df:7a:9c:cc:06:7d:5f:55:fb:88:8b:ed: 65:c3:fe:30:bf:b2:b5:bd:47:2c:81:01:ab:d7:55:1d:e6:c7: 0e:a1:47:4c:06:6e:5c:73:16:0b:05:19:de:d6:3c:0f:0d:6e: 43:3c:7b:11:8c:bb:a1:93:81:0b:bc:a9:45:30:98:0d:7a:6e: 1f:28:e4:05:f6:dd:93:f0:5a:61:76:c9:be:90:7a:3f:51:c3: 3a:95:1e:ea:c4:ea:40:22:b3:8f:6b:32:a0:1e:37:ed:36:4a: 01:a6:01:eb:b8:3a:d4:e1:27:db:d3:7b:d8:d4:8e:85:69:75: 7e:0c:ef:68:08:f8:68:d6:e3:32:92:19:86:a7:f1:cb:48:a6: 14:b9:cf:05:31:fc:c6:cc:18:72:9c:ee:35:0e:26:9d:0f:e0: ef:1c:cb:0c:3d:a7:4e:dd:3e:ee:59:82:bc:2f:f0:f2:5a:10: 0f:27:1f:27:35:ff:a8:be:70:21:1c:a9:03:21:92:55:03:3f: ae:8b:a8:5a:4c:10:df:21:61:e8:2a:9d:9c:7e:45:29:ab:4b: 1e:fb:b3:f8:52:02:48:be:2c:a8:bb:ca:3c:c7:90:40:15:c3: 39:ed:49:8f -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdB NEFGRDlFN0ZDMUZFRDRGOTU0NURFNDFDRTQ0MTNEQUNCMEUwNTAeFw0yNTExMDQw NjU5MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVFQjkzMkRDOTREOTM3 Q0RFNDlDRTEzQjlGMDM2Qzk4RUMxNjZDRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkizCCBPl4mu0VzaRdDUGpQPRTDsiVdBORNjw70a0KAbYOO33p rSidHtYLgy3u5G8SayWPy4Ez+LejUXzdUxzYzBFKeY6elWoROg/v0gS5TAk65/oD GiGNkVApyM2USLL/EEeiL4ncWGlOMFOG1x5urCacAY/arE7P8j49VWOddLpIC0k2 o18kiy6PzhVgxxuEOvOoHwzdvon60hRmxaNdvPsU1s+AaUrZj5uasLcUrmnZGtLp h0oyqcL5fqKIZkFKm0NrcC3TBEhv9zQ7GPkpS9GVZ4yyYAulz6/wvzbOPOpP+P/l sXwzoq+pnfqupuTiK7isPSNlPPO+/C3brx4pAgMBAAGjggILMIICBzAdBgNVHQ4E FgQU7rky3JTZN83knOE7nwNsmOwWbPEwHwYDVR0jBBgwFoAUh6Sv2ef8H+1PlUXe Qc5EE9rLDgUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWVVBTkpI RU4vaDZTdjJlZjhILTFQbFVYZVFjNUVFOXJMRGdVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9oNlN2MmVmOEgtMVBsVVhlUWM1RUU5ckxEZ1UuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ZVUFOSkhFTi9oNlN2MmVmOEgtMVBs VVhlUWM1RUU5ckxEZ1UubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiuE/s0eqYLfwGAcbc5NxHpxzcwp+5UvZ33qczAZ9X1X7iIvtZcP+ML+ytb1H LIEBq9dVHebHDqFHTAZuXHMWCwUZ3tY8Dw1uQzx7EYy7oZOBC7ypRTCYDXpuHyjk Bfbdk/BaYXbJvpB6P1HDOpUe6sTqQCKzj2syoB437TZKAaYB67g61OEn29N72NSO hWl1fgzvaAj4aNbjMpIZhqfxy0imFLnPBTH8xswYcpzuNQ4mnQ/g7xzLDD2nTt0+ 7lmCvC/w8loQDycfJzX/qL5wIRypAyGSVQM/rouoWkwQ3yFh6CqdnH5FKatLHvuz +FICSL4sqLvKPMeQQBXDOe1Jjw== -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:08 2025 by rpki-client