$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.mft File: Yt2b1PDUByVbzZL7U4SrazUTeU8.mft (raw, json) Hash identifier: MB1wdYPXRg7YR04UDdB8VK4xbvYSNIaUltRDIf2VDC8= Subject key identifier: 8B:4A:6C:6D:17:B5:C3:C5:CF:05:93:2F:B9:66:AC:5E:0E:DF:49:C8 Authority key identifier: 62:DD:9B:D4:F0:D4:07:25:5B:CD:92:FB:53:84:AB:6B:35:13:79:4F Certificate issuer: /CN=62DD9BD4F0D407255BCD92FB5384AB6B3513794F Certificate serial: 11AF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yt2b1PDUByVbzZL7U4SrazUTeU8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.mft Manifest number: 11AF Signing time: Thu 17 Apr 2025 20:38:43 +0000 Manifest this update: Thu 17 Apr 2025 20:38:43 +0000 Manifest next update: Sat 19 Apr 2025 20:38:43 +0000 Files and hashes: 1: Yt2b1PDUByVbzZL7U4SrazUTeU8.crl (hash: TOUIl+PY11+iejitdpSEV1q62oMrccyIp+03HiD+a7c=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Yt2b1PDUByVbzZL7U4SrazUTeU8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4527 (0x11af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD9BD4F0D407255BCD92FB5384AB6B3513794F Validity Not Before: Apr 17 20:38:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8B4A6C6D17B5C3C5CF05932FB966AC5E0EDF49C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:a8:4f:ad:43:c1:a4:b9:5e:c8:4b:50:87: a9:3a:77:63:92:2e:62:96:f9:b5:ee:38:92:5f:45: 93:a7:29:18:1d:43:f8:81:7d:c4:2c:fa:c1:a3:7e: 62:ab:52:9a:c9:19:0a:c5:a9:18:d0:f0:cd:68:d7: 61:3d:fb:35:5b:f6:7c:d4:1f:b7:95:40:88:f1:ad: 8f:9f:aa:98:1c:da:0c:c5:96:ff:ad:5d:1b:fc:6d: 99:67:f8:b9:f1:db:47:23:56:9e:65:27:60:d5:32: 45:fa:ee:c9:34:92:2b:be:81:b9:d8:38:71:f8:5c: d7:e1:dc:a8:49:65:d3:3b:26:f2:53:fa:32:46:e3: aa:90:6f:d1:7c:bd:a1:35:0c:99:f8:18:fb:c0:64: 88:84:d6:c6:32:bd:3a:3e:3e:0e:bb:25:fb:07:75: ad:78:88:0f:58:c1:f8:6b:5e:be:6e:43:5e:ea:e1: a6:04:fa:78:60:15:0c:d5:a2:67:11:86:1e:08:12: 21:d5:8d:5a:b4:11:04:ce:cc:94:a6:8f:80:82:71: 99:ca:5d:cb:36:e1:b4:4c:32:66:52:8e:30:3c:51: d7:37:5a:b0:43:af:27:7f:16:a3:d3:30:e1:88:87: 80:fe:92:4c:cd:2b:95:59:62:e0:b1:37:38:87:06: db:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4A:6C:6D:17:B5:C3:C5:CF:05:93:2F:B9:66:AC:5E:0E:DF:49:C8 X509v3 Authority Key Identifier: keyid:62:DD:9B:D4:F0:D4:07:25:5B:CD:92:FB:53:84:AB:6B:35:13:79:4F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yt2b1PDUByVbzZL7U4SrazUTeU8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FASTCLOUD/Yt2b1PDUByVbzZL7U4SrazUTeU8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:fa:d1:ff:7a:8d:57:fe:43:44:fd:1d:c1:f1:94:b7:52:ef: a7:81:f8:7d:ab:54:7a:2a:36:38:09:7b:16:47:f1:0a:96:b5: be:ec:07:88:99:d4:4b:94:56:7e:4b:c4:00:8f:a3:1f:c0:d9: c7:4f:1a:e4:cc:97:e3:cc:5f:26:a2:a7:e9:ae:4b:0c:5f:fe: 55:3c:da:db:eb:dc:3d:8d:0e:d4:80:bd:28:18:3f:bd:db:23: b9:08:c8:38:20:e4:02:b7:9b:60:99:04:ac:65:f3:11:c2:be: dc:c3:5e:73:22:ad:1d:c5:bc:00:d5:7f:f2:fe:b2:03:de:fb: b5:dc:e3:6c:ab:c7:0f:69:1a:5a:f3:5e:4c:95:7d:15:78:07: 69:59:26:49:27:12:81:86:d6:3f:9e:55:e1:bf:59:39:c8:ca: 82:d9:32:52:62:84:47:64:1c:90:b3:c2:79:d2:16:0b:29:63: 91:6d:9b:a1:f8:36:40:a1:11:5d:c9:27:6b:8f:42:72:34:e4: be:ad:fd:bd:04:f4:a4:3a:62:58:e2:10:28:c7:0d:5d:1a:65: 11:34:d0:5a:af:83:55:3b:a6:a2:6b:de:16:45:c8:9c:96:c9: 2f:fd:57:df:a0:1a:54:0c:78:2f:2d:00:5b:3e:4b:66:de:dc: aa:9d:b6:90 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgICEa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjJE RDlCRDRGMEQ0MDcyNTVCQ0Q5MkZCNTM4NEFCNkIzNTEzNzk0RjAeFw0yNTA0MTcy MDM4NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhCNEE2QzZEMTdCNUMz QzVDRjA1OTMyRkI5NjZBQzVFMEVERjQ5QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBvqhPrUPBpLleyEtQh6k6d2OSLmKW+bXuOJJfRZOnKRgdQ/iB fcQs+sGjfmKrUprJGQrFqRjQ8M1o12E9+zVb9nzUH7eVQIjxrY+fqpgc2gzFlv+t XRv8bZln+Lnx20cjVp5lJ2DVMkX67sk0kiu+gbnYOHH4XNfh3KhJZdM7JvJT+jJG 46qQb9F8vaE1DJn4GPvAZIiE1sYyvTo+Pg67JfsHda14iA9YwfhrXr5uQ17q4aYE +nhgFQzVomcRhh4IEiHVjVq0EQTOzJSmj4CCcZnKXcs24bRMMmZSjjA8Udc3WrBD ryd/FqPTMOGIh4D+kkzNK5VZYuCxNziHBts5AgMBAAGjggINMIICCTAdBgNVHQ4E FgQUi0psbRe1w8XPBZMvuWasXg7fScgwHwYDVR0jBBgwFoAUYt2b1PDUByVbzZL7 U4SrazUTeU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFTVENM T1VEL1l0MmIxUERVQnlWYnpaTDdVNFNyYXpVVGVVOC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvWXQyYjFQRFVCeVZielpMN1U0U3JhelVUZVU4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFTVENMT1VEL1l0MmIxUERVQnlW YnpaTDdVNFNyYXpVVGVVOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBE+tH/eo1X/kNE/R3B8ZS3Uu+ngfh9q1R6KjY4CXsWR/EKlrW+7AeImdRL lFZ+S8QAj6MfwNnHTxrkzJfjzF8moqfprksMX/5VPNrb69w9jQ7UgL0oGD+92yO5 CMg4IOQCt5tgmQSsZfMRwr7cw15zIq0dxbwA1X/y/rID3vu13ONsq8cPaRpa815M lX0VeAdpWSZJJxKBhtY/nlXhv1k5yMqC2TJSYoRHZByQs8J50hYLKWORbZuh+DZA oRFdySdrj0JyNOS+rf29BPSkOmJY4hAoxw1dGmURNNBar4NVO6aia94WRciclskv /VffoBpUDHgvLQBbPktm3tyqnbaQ -----END CERTIFICATE-----Generated at Fri Apr 18 21:22:36 2025 by rpki-client