$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.mft File: d4GSKMQp9oiOthhlrFUxRgfpH2I.mft (raw, json) Hash identifier: drj3zJpYJCIrJdvZKkgfCYH0RUSOQifhjDcFbSX0nSE= Subject key identifier: 32:F5:13:20:D6:CB:95:AE:25:28:B9:5C:B6:0F:4B:90:10:39:78:D6 Authority key identifier: 77:81:92:28:C4:29:F6:88:8E:B6:18:65:AC:55:31:46:07:E9:1F:62 Certificate issuer: /CN=77819228C429F6888EB61865AC55314607E91F62 Certificate serial: 03AB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/d4GSKMQp9oiOthhlrFUxRgfpH2I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.mft Manifest number: 03AB Signing time: Thu 17 Apr 2025 21:38:23 +0000 Manifest this update: Thu 17 Apr 2025 21:38:23 +0000 Manifest next update: Sat 19 Apr 2025 21:38:23 +0000 Files and hashes: 1: d4GSKMQp9oiOthhlrFUxRgfpH2I.crl (hash: d+Q7Sg8KSwym5ngXQ2CZjY90OLi+JHySNCtyX2Ze/5I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/d4GSKMQp9oiOthhlrFUxRgfpH2I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77819228C429F6888EB61865AC55314607E91F62 Validity Not Before: Apr 17 21:38:23 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=32F51320D6CB95AE2528B95CB60F4B90103978D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:8a:04:00:63:b3:f9:88:d6:9a:3f:f4:d2: 2b:aa:0b:f6:c5:89:9c:ae:eb:0e:dc:a8:88:06:ec: 69:7d:ac:63:ff:b2:54:94:d4:b5:3b:28:83:f6:37: e4:ee:b7:47:de:03:1a:dd:6d:93:e6:6e:90:56:b8: d9:e4:0b:0d:5d:43:66:1e:3e:bf:11:48:69:32:bc: ef:1a:3e:2c:a5:c6:25:dc:82:ef:90:aa:60:3e:59: 67:bb:fe:70:1b:d7:d8:dc:1b:8a:aa:9d:fa:40:e2: 24:f4:68:e9:d7:48:f4:f0:b0:74:05:c3:80:bc:e9: 2d:64:07:3a:b6:54:85:4a:ce:88:a1:a9:80:1f:3a: be:28:11:96:6e:0b:ec:58:fa:1d:92:29:af:51:6e: 8d:8d:9e:86:4a:2e:d1:d1:fa:bb:d8:69:2d:93:04: 86:e2:66:ed:fa:8b:77:ea:09:2b:ed:96:05:e3:73: a2:ad:db:4c:0f:8b:29:16:21:10:ca:d3:e0:0d:9b: 58:95:49:c9:c8:b1:58:a6:d6:a1:23:c7:59:2b:b4: 27:c8:27:80:67:4c:c7:ec:af:0d:02:a7:49:7e:c9: b7:84:ae:ca:c8:a3:3b:eb:2c:90:4e:02:f6:e1:c4: 49:8e:47:d7:6d:ac:c8:c7:f6:a1:21:7f:cf:26:7b: 0a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F5:13:20:D6:CB:95:AE:25:28:B9:5C:B6:0F:4B:90:10:39:78:D6 X509v3 Authority Key Identifier: keyid:77:81:92:28:C4:29:F6:88:8E:B6:18:65:AC:55:31:46:07:E9:1F:62 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/d4GSKMQp9oiOthhlrFUxRgfpH2I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:13:fd:37:19:eb:2b:51:78:d7:3e:d6:f2:a1:c5:d3:b6:9c: 18:45:d7:db:47:d3:fd:93:db:f2:50:c4:8b:8c:55:bd:93:a9: 7a:5f:e1:57:02:52:6c:e1:1b:28:61:ae:81:35:89:c7:0f:2d: 4f:94:60:91:a3:0a:35:11:67:b2:29:9a:ae:6b:61:cc:f9:01: a3:4e:60:fa:5e:ef:7f:1b:87:33:f2:0d:b3:51:7a:c4:de:c0: 5b:85:32:43:67:32:f5:0a:32:08:f6:0f:7a:58:4d:4e:11:d7: 9b:38:f6:b3:aa:6a:49:a5:f4:1e:c3:fc:f0:54:40:13:52:fb: 78:c8:04:e6:31:df:1f:9e:f1:a8:e3:b2:6f:b6:08:5d:aa:b0: 1e:41:fb:86:d3:c5:af:55:65:ff:a0:fd:e8:21:d1:14:76:11: 26:6e:16:31:c2:f1:51:6b:c4:b2:ef:67:66:5b:45:6a:6f:d5: 17:5f:c1:5b:60:d0:ed:72:3d:72:f5:19:bc:e5:75:54:a6:37: 15:fc:c4:81:3b:cf:6d:20:52:48:98:5c:b7:ac:14:44:17:fc: ff:68:41:ff:33:c3:8f:9e:ca:e9:e5:77:b3:a5:f2:65:6e:e9: 9c:9a:b2:6e:37:42:49:d6:91:13:c5:30:3f:d1:de:04:b4:4d: 60:b9:87:53 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICA6swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc4 MTkyMjhDNDI5RjY4ODhFQjYxODY1QUM1NTMxNDYwN0U5MUY2MjAeFw0yNTA0MTcy MTM4MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyRjUxMzIwRDZDQjk1 QUUyNTI4Qjk1Q0I2MEY0QjkwMTAzOTc4RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKnooEAGOz+YjWmj/00iuqC/bFiZyu6w7cqIgG7Gl9rGP/slSU 1LU7KIP2N+Tut0feAxrdbZPmbpBWuNnkCw1dQ2YePr8RSGkyvO8aPiylxiXcgu+Q qmA+WWe7/nAb19jcG4qqnfpA4iT0aOnXSPTwsHQFw4C86S1kBzq2VIVKzoihqYAf Or4oEZZuC+xY+h2SKa9Rbo2NnoZKLtHR+rvYaS2TBIbiZu36i3fqCSvtlgXjc6Kt 20wPiykWIRDK0+ANm1iVScnIsVim1qEjx1krtCfIJ4BnTMfsrw0Cp0l+ybeErsrI ozvrLJBOAvbhxEmOR9dtrMjH9qEhf88mewqzAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUMvUTINbLla4lKLlctg9LkBA5eNYwHwYDVR0jBBgwFoAUd4GSKMQp9oiOthhl rFUxRgfpH2IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTFVPU0kv ZDRHU0tNUXA5b2lPdGhobHJGVXhSZ2ZwSDJJLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9kNEdTS01RcDlvaU90aGhsckZVeFJnZnBIMkkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MVU9TSS9kNEdTS01RcDlvaU90aGhsckZV eFJnZnBIMkkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRP9 NxnrK1F41z7W8qHF07acGEXX20fT/ZPb8lDEi4xVvZOpel/hVwJSbOEbKGGugTWJ xw8tT5RgkaMKNRFnsimarmthzPkBo05g+l7vfxuHM/INs1F6xN7AW4UyQ2cy9Qoy CPYPelhNThHXmzj2s6pqSaX0HsP88FRAE1L7eMgE5jHfH57xqOOyb7YIXaqwHkH7 htPFr1Vl/6D96CHRFHYRJm4WMcLxUWvEsu9nZltFam/VF1/BW2DQ7XI9cvUZvOV1 VKY3FfzEgTvPbSBSSJhct6wURBf8/2hB/zPDj57K6eV3s6XyZW7pnJqybjdCSdaR E8UwP9HeBLRNYLmHUw== -----END CERTIFICATE-----Generated at Fri Apr 18 20:42:54 2025 by rpki-client