$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft File: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft (raw, json) Hash identifier: bigbI2LsLi/dP4fG4cBW24VVJv1lW9CNVhVXlmPl4+U= Subject key identifier: 99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46 Authority key identifier: EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1 Certificate issuer: /CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1 Certificate serial: 0CF3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft Manifest number: 0CF3 Signing time: Thu 17 Apr 2025 21:39:06 +0000 Manifest this update: Thu 17 Apr 2025 21:39:06 +0000 Manifest next update: Sat 19 Apr 2025 21:39:06 +0000 Files and hashes: 1: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl (hash: Vdra9gLi809sF7dCGBumdMi0+P4SiX1Is8srCsJaA8c=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3315 (0xcf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1 Validity Not Before: Apr 17 21:39:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=99D31B221C7F6DD440390CFE6A41DC1E11986946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:ea:f1:d9:4d:9c:85:e3:3b:53:83:36:84: 34:d7:62:da:04:b6:c1:18:13:b0:ce:e1:ff:05:5a: f4:bc:a0:59:fc:0d:e1:51:e9:09:c5:e2:c4:19:0f: 6c:31:10:0b:57:8c:a0:60:e2:a0:26:63:04:af:38: 22:c1:0d:2f:da:42:9b:69:e2:93:d3:d2:d1:c6:34: ea:bb:70:9c:3d:2c:63:08:5a:1c:44:b2:83:4b:bc: b4:46:76:f3:a8:11:48:15:62:ad:82:fd:c1:a7:03: d4:6a:12:b1:31:29:9f:83:1b:a3:de:36:7c:f9:f3: 42:bd:4a:31:db:42:c3:c5:5a:55:eb:e1:2f:5a:98: be:16:5d:01:4b:55:d8:e8:d7:00:e3:46:a2:e0:c8: 63:75:9e:9f:fc:4f:4b:6a:52:54:3b:6d:ef:a7:77: 86:a3:45:80:bc:9f:cc:30:1f:30:d6:7b:63:38:37: d6:34:27:70:c8:ae:3b:03:4f:24:23:25:b7:6e:95: 67:57:92:5b:5d:9e:c1:62:c5:75:e3:55:b9:87:d0: 71:d5:8f:49:68:9e:d4:a3:12:6d:56:86:5d:19:fb: 7e:d0:53:17:04:0d:cc:6e:e2:65:66:42:38:c2:16: 5e:14:35:13:2f:7b:13:71:11:ea:fa:4f:46:09:4b: eb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46 X509v3 Authority Key Identifier: keyid:EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a7:85:42:41:67:30:b5:38:76:8c:bf:63:f1:97:37:f4:63: 7f:fb:40:72:82:aa:1f:06:5e:97:27:79:2c:38:97:77:cd:52: 51:65:93:b7:68:f9:1f:6b:a5:22:f5:33:c7:f1:ee:d0:b7:1a: f5:c4:6d:cc:ce:0c:1c:97:86:10:98:39:66:3f:8d:30:33:d2: 30:67:ea:46:6b:97:d9:67:08:b9:76:23:3d:bf:86:42:75:76: 8f:75:fd:f4:ea:7c:67:1e:20:50:80:e3:f3:9c:48:7b:8f:65: f1:69:65:b9:22:bd:8d:40:3f:6b:cd:31:8b:b6:1b:03:35:2c: ba:28:13:07:8b:d8:eb:f0:44:6f:ab:57:73:7d:92:7c:98:a8: fe:1c:1d:1b:fe:38:df:af:d0:9b:88:35:4b:4f:45:49:bc:12: d9:ad:10:02:bf:4d:ea:4e:45:46:64:34:33:38:3a:f3:c4:c7: 9f:f3:9f:5c:89:24:27:d4:aa:81:d3:8c:b5:1b:6e:dd:7a:d4: eb:e4:0e:64:14:0c:30:50:e1:7a:c9:42:6d:dd:39:ff:07:94: 4b:49:01:db:53:cb:37:f8:24:15:3f:69:81:5f:d9:1c:e5:81: 7c:a2:f2:59:fa:66:ec:bb:88:84:c2:f9:ee:c6:ab:1e:4d:b3: 11:d7:84:e7 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUM0 Qjk4NTY3MUNCRUQ5QjBDOTM2RTU5QTA0NkUwMTdDMENBQ0JEMTAeFw0yNTA0MTcy MTM5MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5RDMxQjIyMUM3RjZE RDQ0MDM5MENGRTZBNDFEQzFFMTE5ODY5NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJFOrx2U2cheM7U4M2hDTXYtoEtsEYE7DO4f8FWvS8oFn8DeFR 6QnF4sQZD2wxEAtXjKBg4qAmYwSvOCLBDS/aQptp4pPT0tHGNOq7cJw9LGMIWhxE soNLvLRGdvOoEUgVYq2C/cGnA9RqErExKZ+DG6PeNnz580K9SjHbQsPFWlXr4S9a mL4WXQFLVdjo1wDjRqLgyGN1np/8T0tqUlQ7be+nd4ajRYC8n8wwHzDWe2M4N9Y0 J3DIrjsDTyQjJbdulWdXkltdnsFixXXjVbmH0HHVj0lontSjEm1Whl0Z+37QUxcE Dcxu4mVmQjjCFl4UNRMvexNxEer6T0YJS+v7AgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUmdMbIhx/bdRAOQz+akHcHhGYaUYwHwYDVR0jBBgwFoAU7EuYVnHL7ZsMk25Z oEbgF8DKy9EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVFSQVRP Ui83RXVZVm5ITDdac01rMjVab0ViZ0Y4REt5OUUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBLzdFdVlWbkhMN1pzTWsyNVpvRWJnRjhES3k5RS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lRUkFUT1IvN0V1WVZuSEw3WnNNazI1 Wm9FYmdGOERLeTlFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AFunhUJBZzC1OHaMv2Pxlzf0Y3/7QHKCqh8GXpcneSw4l3fNUlFlk7do+R9rpSL1 M8fx7tC3GvXEbczODByXhhCYOWY/jTAz0jBn6kZrl9lnCLl2Iz2/hkJ1do91/fTq fGceIFCA4/OcSHuPZfFpZbkivY1AP2vNMYu2GwM1LLooEweL2OvwRG+rV3N9knyY qP4cHRv+ON+v0JuINUtPRUm8EtmtEAK/TepORUZkNDM4OvPEx5/zn1yJJCfUqoHT jLUbbt161OvkDmQUDDBQ4XrJQm3dOf8HlEtJAdtTyzf4JBU/aYFf2RzlgXyi8ln6 Zuy7iITC+e7Gqx5NsxHXhOc= -----END CERTIFICATE-----Generated at Fri Apr 18 23:50:46 2025 by rpki-client