$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PCHOME/8ytU4ZH0DTcQjzszpSO5dVnmlNU.mft File: 8ytU4ZH0DTcQjzszpSO5dVnmlNU.mft (raw, json) Hash identifier: /Q2iX/c4ptMGmbxa+fwSpr1HH47xvMFaO4vQLEas2T0= Subject key identifier: D0:D0:A5:27:B0:82:EB:27:FD:F0:9B:8F:F0:36:9F:08:BA:F1:A9:DC Authority key identifier: F3:2B:54:E1:91:F4:0D:37:10:8F:3B:33:A5:23:B9:75:59:E6:94:D5 Certificate issuer: /CN=F32B54E191F40D37108F3B33A523B97559E694D5 Certificate serial: 0CC3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8ytU4ZH0DTcQjzszpSO5dVnmlNU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PCHOME/8ytU4ZH0DTcQjzszpSO5dVnmlNU.mft Manifest number: 0CC3 Signing time: Thu 17 Apr 2025 21:08:31 +0000 Manifest this update: Thu 17 Apr 2025 21:08:31 +0000 Manifest next update: Sat 19 Apr 2025 21:08:31 +0000 Files and hashes: 1: 8ytU4ZH0DTcQjzszpSO5dVnmlNU.crl (hash: L+M/t9rp2BlCN2HXIpGOutKc8kEYq8VRqcXC7Vxo53s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PCHOME/8ytU4ZH0DTcQjzszpSO5dVnmlNU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PCHOME/8ytU4ZH0DTcQjzszpSO5dVnmlNU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8ytU4ZH0DTcQjzszpSO5dVnmlNU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F32B54E191F40D37108F3B33A523B97559E694D5 Validity Not Before: Apr 17 21:08:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D0D0A527B082EB27FDF09B8FF0369F08BAF1A9DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ca:c5:02:6b:bc:8c:d3:18:26:21:40:55:cb: af:97:7e:1e:7c:47:a6:04:dc:00:05:69:02:09:14: 36:24:0f:1d:43:60:b1:26:ac:e2:15:90:a2:9b:98: 09:fd:69:7e:76:c0:58:a5:a9:c0:cb:1b:54:43:73: 26:a8:e4:57:46:2d:a6:39:9e:0d:0e:bb:d4:5f:91: 26:49:85:3c:b1:e4:13:6e:c6:a0:e0:21:78:56:d0: 56:44:c9:96:b6:cb:93:8c:97:be:07:43:18:6c:64: 04:88:e2:28:2b:62:32:65:c9:5a:a3:d4:f3:80:49: 83:bc:6a:34:36:bb:c7:cc:f0:1f:1f:92:38:8b:9c: 3e:f9:07:d3:f6:af:7f:8c:68:c2:f6:7f:5c:41:86: 32:a7:ef:62:92:f6:b5:cc:04:bd:de:17:08:66:9a: 78:c8:29:02:a6:a9:68:02:db:9e:f5:a9:ed:97:d6: 08:6a:3a:86:01:48:d9:b4:fd:78:38:35:6f:11:ed: cd:3f:31:b3:af:27:ab:bc:a9:bf:79:fd:4a:7a:0a: d6:ac:99:66:4c:64:c8:e1:90:b0:87:b9:79:57:30: ca:ea:1f:fd:2c:06:b5:ec:5f:47:f2:ed:b4:f1:00: 9f:6c:50:ca:83:31:b0:67:52:b7:36:b6:b8:c3:5b: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D0:A5:27:B0:82:EB:27:FD:F0:9B:8F:F0:36:9F:08:BA:F1:A9:DC X509v3 Authority Key Identifier: keyid:F3:2B:54:E1:91:F4:0D:37:10:8F:3B:33:A5:23:B9:75:59:E6:94:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCHOME/8ytU4ZH0DTcQjzszpSO5dVnmlNU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8ytU4ZH0DTcQjzszpSO5dVnmlNU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCHOME/8ytU4ZH0DTcQjzszpSO5dVnmlNU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f4:d6:04:df:e9:97:5c:cf:f1:13:0f:ac:fa:d6:31:68:41: e5:17:dc:a6:b6:b9:84:3c:ad:c7:4b:21:14:e3:c9:b5:fe:86: cc:d7:7d:4e:c3:5f:09:3e:a4:cc:42:29:67:d5:f6:66:b3:0e: 55:fe:10:13:0b:23:af:6a:7b:3d:03:3e:57:c1:44:7a:1f:8d: 68:62:05:34:85:ce:a7:93:a0:34:06:26:1d:a9:4c:61:24:c8: 02:92:1a:1c:54:90:fe:17:83:c5:3f:2d:cd:65:9e:de:00:6a: 09:1c:d3:3a:a8:90:e6:e4:e8:7f:c4:59:dc:9a:65:00:b3:cf: 3f:fe:7e:7b:18:bf:9e:db:92:ac:39:db:54:16:6b:a2:94:1e: bf:38:f5:ee:83:2f:fa:86:00:85:01:9a:94:e0:a2:8e:54:93: 8c:49:3e:e8:9a:ba:18:25:27:eb:45:fd:34:65:63:2b:04:20: e9:d0:7c:b1:0e:8e:cb:a6:32:78:06:49:98:81:a2:a4:97:69: 99:af:76:ac:b1:6d:5d:c2:ee:0e:aa:45:1b:e1:9f:1e:8c:b9: 90:c9:76:d9:17:13:3d:0e:58:fb:c9:44:33:0e:aa:78:a6:3e: 13:a9:1d:a4:58:8a:89:83:a2:59:7b:67:1b:da:d7:1c:68:52: 6e:ff:86:f7 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMy QjU0RTE5MUY0MEQzNzEwOEYzQjMzQTUyM0I5NzU1OUU2OTRENTAeFw0yNTA0MTcy MTA4MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQwRDBBNTI3QjA4MkVC MjdGREYwOUI4RkYwMzY5RjA4QkFGMUE5REMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqysUCa7yM0xgmIUBVy6+Xfh58R6YE3AAFaQIJFDYkDx1DYLEm rOIVkKKbmAn9aX52wFilqcDLG1RDcyao5FdGLaY5ng0Ou9RfkSZJhTyx5BNuxqDg IXhW0FZEyZa2y5OMl74HQxhsZASI4igrYjJlyVqj1POASYO8ajQ2u8fM8B8fkjiL nD75B9P2r3+MaML2f1xBhjKn72KS9rXMBL3eFwhmmnjIKQKmqWgC2571qe2X1ghq OoYBSNm0/Xg4NW8R7c0/MbOvJ6u8qb95/Up6CtasmWZMZMjhkLCHuXlXMMrqH/0s BrXsX0fy7bTxAJ9sUMqDMbBnUrc2trjDW22NAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQU0NClJ7CC6yf98JuP8DafCLrxqdwwHwYDVR0jBBgwFoAU8ytU4ZH0DTcQjzsz pSO5dVnmlNUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUENIT01F Lzh5dFU0WkgwRFRjUWp6c3pwU081ZFZubWxOVS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvOHl0VTRaSDBEVGNRanpzenBTTzVkVm5tbE5VLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUENIT01FLzh5dFU0WkgwRFRjUWp6c3pw U081ZFZubWxOVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCs 9NYE3+mXXM/xEw+s+tYxaEHlF9ymtrmEPK3HSyEU48m1/obM131Ow18JPqTMQiln 1fZmsw5V/hATCyOvans9Az5XwUR6H41oYgU0hc6nk6A0BiYdqUxhJMgCkhocVJD+ F4PFPy3NZZ7eAGoJHNM6qJDm5Oh/xFncmmUAs88//n57GL+e25KsOdtUFmuilB6/ OPXugy/6hgCFAZqU4KKOVJOMST7omroYJSfrRf00ZWMrBCDp0HyxDo7LpjJ4BkmY gaKkl2mZr3assW1dwu4OqkUb4Z8ejLmQyXbZFxM9Dlj7yUQzDqp4pj4TqR2kWIqJ g6JZe2cb2tccaFJu/4b3 -----END CERTIFICATE-----Generated at Fri Apr 18 22:43:43 2025 by rpki-client