$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft File: v7t_e1xYMjSQh1hJuO3aSV7xexs.mft (raw, json) Hash identifier: PQYguUzYGpb/cYYdpCaus8i6oVt+YgYn8yvDR6nAzpc= Subject key identifier: EB:9F:C0:C7:05:C1:F8:69:06:83:28:68:90:C1:29:62:0C:C6:AD:C1 Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B Certificate serial: 059F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft Manifest number: 0574 Signing time: Thu 17 Apr 2025 21:39:54 +0000 Manifest this update: Thu 17 Apr 2025 21:39:54 +0000 Manifest next update: Sat 19 Apr 2025 21:39:54 +0000 Files and hashes: 1: X9uMsZZ5AU3KHHweRpel2Ppflp4.roa (hash: dnqjHXAlN1o6TRO0CRjCu6+dGxVcEMmUhzxNl73EGZs=) 2: v7t_e1xYMjSQh1hJuO3aSV7xexs.crl (hash: xmrUNRdwIRIGpEMCvhvVlHDBnn0kmv4ct+5HzD7xMPs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1439 (0x59f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B Validity Not Before: Apr 17 21:39:54 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EB9FC0C705C1F8690683286890C129620CC6ADC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f7:29:bc:05:87:a3:da:ad:ea:44:56:1b:6e: e3:b1:b8:0d:62:64:10:e9:b6:98:e8:9c:31:0a:2b: b1:99:e8:a5:ad:2f:98:a7:8c:f4:ed:0e:98:ce:fc: 96:67:0f:72:76:be:90:5a:c3:33:3e:76:fe:b4:55: 19:fc:c2:36:ab:55:3d:ba:ea:c8:28:bd:56:1e:1c: 44:dc:73:78:20:cd:ed:13:e2:b3:b8:10:5d:10:7a: b8:39:ec:74:f2:08:76:ac:d1:91:a1:a8:8a:28:5e: f8:06:f6:e1:d1:96:15:2a:b2:cc:e6:36:db:03:44: 3b:34:33:94:8e:d9:ea:db:0d:62:2e:8e:20:be:81: 2e:ec:9a:a4:8d:d5:02:99:02:d2:80:d8:77:4e:08: 48:09:c9:74:aa:c7:25:28:b1:56:e0:94:78:6f:07: 50:52:00:8c:bb:c1:52:13:1d:13:56:35:d1:c3:90: 98:7e:97:24:5a:42:75:a9:59:6a:b5:da:cd:a4:18: dd:ba:5d:1d:10:35:88:56:65:5a:62:79:04:77:7a: 85:eb:9b:b5:83:14:d7:1b:e2:dc:9e:04:82:32:7d: 2e:36:38:a1:0d:78:1a:d2:6e:53:ff:89:02:52:d0: 46:fd:c5:a4:b5:54:c1:08:60:c9:ba:24:71:dd:c6: b7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9F:C0:C7:05:C1:F8:69:06:83:28:68:90:C1:29:62:0C:C6:AD:C1 X509v3 Authority Key Identifier: keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:20:b4:b8:0c:fb:6e:3f:45:e3:34:1f:94:25:f8:5e:75:90: ab:46:9d:e0:ba:25:16:16:f1:21:dc:f5:d3:5d:78:6f:45:de: a2:f6:d9:d7:07:99:c2:6b:69:e2:dc:d6:2f:2f:a0:31:78:ee: 60:5a:9f:89:8b:58:e2:a1:3e:a2:92:76:54:68:39:fb:4c:fa: 6c:e3:0e:36:15:1a:d2:4c:13:76:dc:74:61:19:25:c3:cf:a8: 12:8c:d2:c9:47:ed:ca:3f:50:8e:a0:6e:b8:be:e6:68:ed:96: 25:4e:6c:8f:c6:ee:69:31:2e:80:82:a1:98:66:32:a4:9a:55: fd:80:2f:12:a4:a2:b3:0a:8a:7f:63:5c:97:f7:b1:31:4b:bb: 62:49:25:71:96:1f:94:8f:f1:e2:ed:12:73:a2:30:d9:d3:86: 89:99:ad:2d:97:52:f1:ca:55:fe:15:92:9f:23:93:a8:b1:b1: 91:6c:fd:41:68:f1:84:34:46:2e:cd:ce:55:d2:b4:ca:42:13: 00:5a:f8:1e:50:07:95:1d:04:d3:f3:47:66:8e:6e:7a:1a:69: c7:9f:09:38:8f:1d:0f:74:d0:89:5a:ad:3f:c0:8f:c0:3e:59: 05:7a:83:0a:dd:28:29:8d:b7:71:cd:72:45:c8:56:01:eb:08: 4e:07:3f:fb -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkZC QjdGN0I1QzU4MzIzNDkwODc1ODQ5QjhFRERBNDk1RUYxN0IxQjAeFw0yNTA0MTcy MTM5NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVCOUZDMEM3MDVDMUY4 NjkwNjgzMjg2ODkwQzEyOTYyMENDNkFEQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM9ym8BYej2q3qRFYbbuOxuA1iZBDptpjonDEKK7GZ6KWtL5in jPTtDpjO/JZnD3J2vpBawzM+dv60VRn8wjarVT266sgovVYeHETcc3ggze0T4rO4 EF0Qerg57HTyCHas0ZGhqIooXvgG9uHRlhUqsszmNtsDRDs0M5SO2erbDWIujiC+ gS7smqSN1QKZAtKA2HdOCEgJyXSqxyUosVbglHhvB1BSAIy7wVITHRNWNdHDkJh+ lyRaQnWpWWq12s2kGN26XR0QNYhWZVpieQR3eoXrm7WDFNcb4tyeBIIyfS42OKEN eBrSblP/iQJS0Eb9xaS1VMEIYMm6JHHdxrdtAgMBAAGjggIBMIIB/TAdBgNVHQ4E FgQU65/AxwXB+GkGgyhokMEpYgzGrcEwHwYDVR0jBBgwFoAUv7t/e1xYMjSQh1hJ uO3aSV7xexswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL3Y3 dF9lMXhZTWpTUWgxaEp1TzNhU1Y3eGV4cy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev djd0X2UxeFlNalNRaDFoSnVPM2FTVjd4ZXhzLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL3Y3dF9lMXhZTWpTUWgxaEp1TzNhU1Y3 eGV4cy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfILS4DPtu P0XjNB+UJfhedZCrRp3guiUWFvEh3PXTXXhvRd6i9tnXB5nCa2ni3NYvL6AxeO5g Wp+Ji1jioT6iknZUaDn7TPps4w42FRrSTBN23HRhGSXDz6gSjNLJR+3KP1COoG64 vuZo7ZYlTmyPxu5pMS6AgqGYZjKkmlX9gC8SpKKzCop/Y1yX97ExS7tiSSVxlh+U j/Hi7RJzojDZ04aJma0tl1LxylX+FZKfI5OosbGRbP1BaPGENEYuzc5V0rTKQhMA WvgeUAeVHQTT80dmjm56GmnHnwk4jx0PdNCJWq0/wI/APlkFeoMK3SgpjbdxzXJF yFYB6whOBz/7 -----END CERTIFICATE-----Generated at Fri Apr 18 23:54:01 2025 by rpki-client