$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.mft File: 6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.mft (raw, json) Hash identifier: HBWioPxZBeVRAYAxuCG5dUcu218IzWUh3Fd2h0eLqtc= Subject key identifier: 62:C3:8B:7B:C7:EE:1F:D2:59:EE:32:70:1E:49:A6:10:DE:98:2D:FA Authority key identifier: EA:B2:50:D0:58:FA:CB:EB:3E:A0:D1:6B:53:86:50:61:33:90:74:B6 Certificate issuer: /CN=EAB250D058FACBEB3EA0D16B53865061339074B6 Certificate serial: 01DC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.mft Manifest number: 01D5 Signing time: Sun 20 Jul 2025 05:36:51 +0000 Manifest this update: Sun 20 Jul 2025 05:36:51 +0000 Manifest next update: Tue 22 Jul 2025 05:36:51 +0000 Files and hashes: 1: 6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.crl (hash: f2E/jBKsGV55CMi13BX0C1Hll9GfSht33+Ac2FHhnpM=) 2: Rzs2-t7CKvOLFHsylAHMYc03Q2c.roa (hash: xdht8wC5RZ3Sm2CIXd1DfxLs07+kTP+IL4jJ6oBbXQw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 20:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAB250D058FACBEB3EA0D16B53865061339074B6 Validity Not Before: Jul 20 05:36:51 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=62C38B7BC7EE1FD259EE32701E49A610DE982DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:79:e8:e2:a5:ea:4a:32:ff:9f:58:2e:32: 42:52:cd:ae:63:19:55:23:6a:bd:ac:97:74:fd:31: e8:46:3a:74:bf:43:e9:44:18:cc:dd:73:cf:b3:20: e7:f9:ae:b8:19:9f:0c:d2:41:51:a1:61:28:21:f7: d9:24:f2:7d:91:b8:f8:c6:69:b9:a4:f7:04:22:6b: d1:37:6b:5a:f3:67:9b:57:31:84:20:b0:05:42:54: ae:0e:6b:7e:d0:38:c8:c5:c1:b5:c4:a3:45:74:c0: 85:3b:d2:3b:d8:37:53:96:0b:83:82:44:9a:72:f6: 98:f7:66:a3:54:e8:dd:8a:c1:ca:57:36:fd:a3:66: dd:e5:78:e3:11:49:dc:12:ed:90:d8:1d:19:73:ba: da:d2:a2:44:fe:bb:d3:5e:bc:d9:95:51:cd:fc:18: bb:9f:d0:83:1b:6f:89:c2:94:91:3e:8b:f5:0a:36: 1a:9e:82:74:ce:b7:b3:18:fd:1e:b0:b3:14:60:02: 92:a2:cf:93:56:6e:17:4d:90:60:a9:eb:f1:f1:db: 57:bd:27:f7:bb:d9:ca:fd:32:bb:be:bb:86:16:75: d8:97:a5:f3:38:7b:b3:1e:5f:d0:3d:c7:89:71:82: 0b:df:09:a3:fd:4b:3c:a4:28:22:cc:4e:5e:eb:75: 72:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C3:8B:7B:C7:EE:1F:D2:59:EE:32:70:1E:49:A6:10:DE:98:2D:FA X509v3 Authority Key Identifier: keyid:EA:B2:50:D0:58:FA:CB:EB:3E:A0:D1:6B:53:86:50:61:33:90:74:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b4:8f:19:48:ae:b0:d1:b2:7a:f5:fb:a1:5a:9e:cc:d5:c3: 83:81:8c:cb:fd:ec:94:b4:6e:09:f7:3c:32:6a:d0:af:37:e7: 0d:3a:ab:b8:68:44:5a:21:dc:bc:7b:fc:ff:3a:5a:46:93:0d: 6a:ac:e8:56:3e:64:c3:7f:9c:92:31:56:2e:c2:2a:c4:9c:3b: 48:a2:8d:82:ab:2a:3e:af:db:b4:c3:0c:20:08:af:91:97:d5: 51:02:e6:0b:3e:a9:68:e6:ae:42:9a:cf:ee:89:d1:0f:08:ef: 4e:10:f0:d9:e3:49:06:ec:a9:81:7e:e6:e3:64:86:ee:bc:71: 8a:86:21:d5:85:c5:01:7d:0c:83:91:43:be:62:37:27:53:19: 6f:96:5e:0b:9e:b6:8a:20:d4:07:44:68:6c:a5:de:e5:ff:80: ee:41:e8:80:ae:c8:56:24:53:b9:8e:17:13:a1:b7:21:e4:1f: d2:93:f2:48:a7:d9:f2:46:65:4c:98:e7:60:74:11:2f:c9:55: 60:86:76:3b:d2:f5:87:35:83:4f:cc:c7:39:4c:dc:9f:58:d5: 4e:d4:f8:ed:37:43:b9:ab:16:bd:81:a4:af:da:04:d0:28:f9: 09:86:91:62:6b:6c:c1:91:85:71:33:8a:97:79:45:15:56:8c: 79:2b:6b:04 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUFC MjUwRDA1OEZBQ0JFQjNFQTBEMTZCNTM4NjUwNjEzMzkwNzRCNjAeFw0yNTA3MjAw NTM2NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyQzM4QjdCQzdFRTFG RDI1OUVFMzI3MDFFNDlBNjEwREU5ODJERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC1Hno4qXqSjL/n1guMkJSza5jGVUjar2sl3T9MehGOnS/Q+lE GMzdc8+zIOf5rrgZnwzSQVGhYSgh99kk8n2RuPjGabmk9wQia9E3a1rzZ5tXMYQg sAVCVK4Oa37QOMjFwbXEo0V0wIU70jvYN1OWC4OCRJpy9pj3ZqNU6N2KwcpXNv2j Zt3leOMRSdwS7ZDYHRlzutrSokT+u9NevNmVUc38GLuf0IMbb4nClJE+i/UKNhqe gnTOt7MY/R6wsxRgApKiz5NWbhdNkGCp6/Hx21e9J/e72cr9Mru+u4YWddiXpfM4 e7MeX9A9x4lxggvfCaP9SzykKCLMTl7rdXJpAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUYsOLe8fuH9JZ7jJwHkmmEN6YLfowHwYDVR0jBBgwFoAU6rJQ0Fj6y+s+oNFr U4ZQYTOQdLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVJDSEUv NnJKUTBGajZ5LXMtb05GclU0WlFZVE9RZExZLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS82ckpRMEZqNnktcy1vTkZyVTRaUVlUT1FkTFkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BUkNIRS82ckpRMEZqNnktcy1vTkZyVTRa UVlUT1FkTFkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLSP GUiusNGyevX7oVqezNXDg4GMy/3slLRuCfc8MmrQrzfnDTqruGhEWiHcvHv8/zpa RpMNaqzoVj5kw3+ckjFWLsIqxJw7SKKNgqsqPq/btMMMIAivkZfVUQLmCz6paOau QprP7onRDwjvThDw2eNJBuypgX7m42SG7rxxioYh1YXFAX0Mg5FDvmI3J1MZb5Ze C562iiDUB0RobKXe5f+A7kHogK7IViRTuY4XE6G3IeQf0pPySKfZ8kZlTJjnYHQR L8lVYIZ2O9L1hzWDT8zHOUzcn1jVTtT47TdDuasWvYGkr9oE0Cj5CYaRYmtswZGF cTOKl3lFFVaMeStrBA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:48:41 2025 by rpki-client