$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft File: b96jRwcVIpDB0mBv-_xpuSfUCls.mft (raw, json) Hash identifier: MUGxf+nMuIyU04Gkmk1fLeis7+eGnZS+Wtwgx5lMIEI= Subject key identifier: 08:86:CA:42:E8:F2:8E:D7:D3:94:51:E5:B7:F5:FA:19:95:33:E4:F8 Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Certificate serial: 0D8A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft Manifest number: 0D40 Signing time: Fri 06 Jun 2025 10:26:35 +0000 Manifest this update: Fri 06 Jun 2025 10:26:35 +0000 Manifest next update: Sun 08 Jun 2025 10:26:35 +0000 Files and hashes: 1: 43zxwQkQ1BJtMtCf2OgD7QPMNSg.roa (hash: liz/DsHIAzdCwpACCCIGePe4Dg4LV17i53qHR79+7f0=) 2: 79jaa3KW1BX49iynPVA8_Yk-Ly4.roa (hash: 9eigHpHl8K1C+DHq+/l1rzr+VMKG92zrNmMYDTTg41o=) 3: VY3zj-IiEBrmpdZFDh6_Cq4A6iQ.roa (hash: OqpB/74KEq5CLRrcGpuP5PJwLxDCOmCaW+rOSSA7Ucc=) 4: WGMh2-qtfMLV7JGNrIs3JO39OQI.roa (hash: c0KTG0HrlfLImNTUqc06EtzsokorvHm1YEPb718gd7w=) 5: _7rdgf3MstxjV13wfizet_1466g.roa (hash: tx5ru9HuNvx1NeLoN4sLat3jjFhp7rGzwr+1yR0mOA8=) 6: aH6pIl04_NUCgEQHZfx-pxyo0M4.roa (hash: dX0B1ckXuX8WCOcas/V+KdeSlhqHegwbfrUhY1tdMYk=) 7: b96jRwcVIpDB0mBv-_xpuSfUCls.crl (hash: 0azpdL8bMldyWkaGbLUXYhV2cL1JrS2oV/JurtyirxY=) 8: hhNWcDPQkJDfzlF6cCTumslKuh4.roa (hash: 8k+h3x3u7qMvLRA2cYHE92WhBaL4XhFt00IbFPqKyOQ=) 9: ip1xXBUU2Yel8_FfS-ADzhHG3T0.roa (hash: BeeAavcJicDPH5FPFQ77TY+cXAfplqBR8JIEYsHMKfU=) 10: j2txO-1uU0yor-gOVggZ3X7ZrHU.roa (hash: O+o/AGxCvKvKwBE97uMgeE2RYD5rx6I1yk5C+XWbDXQ=) 11: zdnKzBBTuT6jn4y2d50eWgk-vAU.roa (hash: xw9Q4z5PZgNObdTHExdawhNihqNFJHEAsBzeqeIPLtI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3466 (0xd8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Validity Not Before: Jun 6 10:26:35 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0886CA42E8F28ED7D39451E5B7F5FA199533E4F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:65:dc:61:27:03:df:b4:89:58:59:97:7d:bd: 5e:4d:4b:92:9a:f5:44:72:8e:23:6d:31:72:b5:1e: 3c:5a:fd:f8:3e:c1:9e:93:30:ad:a7:c9:73:36:88: e9:f9:df:25:1a:01:e8:53:e6:12:ce:82:b2:a8:72: bc:c2:7a:85:f3:d3:90:23:dd:4f:78:d4:10:04:14: e6:cc:49:9c:3b:ad:97:3b:3c:9e:9d:22:3a:94:3b: 6e:6b:6a:9a:33:4b:b7:a1:6a:33:91:63:7b:39:56: b0:40:e9:77:82:4e:73:5c:a3:03:c7:a6:47:0b:36: fb:56:83:b3:a7:9e:74:79:f7:da:b2:35:97:28:a0: 09:03:82:ff:f1:90:91:f6:9c:e4:0a:a8:b8:87:dd: 90:ad:4e:ba:34:cf:62:21:a2:d8:a8:9f:d5:18:73: 57:86:d4:11:2e:c4:64:0b:0e:4b:c0:8e:dd:fd:d8: 3f:30:d4:06:c9:2a:48:a4:cd:d2:6d:a0:8a:3c:7c: 1a:e1:50:54:98:67:09:07:d7:b6:f0:c8:68:8a:e2: 51:54:b0:77:ba:96:0b:79:8e:0e:a5:e4:64:d0:90: 68:e1:3a:6b:61:9c:d1:7c:fe:4e:f6:02:75:8e:fe: c1:a3:26:3a:f1:1a:c2:9f:d2:41:1d:17:24:0e:56: bc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:86:CA:42:E8:F2:8E:D7:D3:94:51:E5:B7:F5:FA:19:95:33:E4:F8 X509v3 Authority Key Identifier: keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:01:22:41:09:e1:55:54:49:6a:6b:c1:54:d8:db:2a:e6:40: b5:79:94:4d:14:8b:ef:e9:31:dd:f5:36:c0:f5:b3:81:b9:b0: e8:44:da:25:fd:c3:e7:d3:ba:4a:b5:ed:92:35:cd:35:e6:ce: 5f:47:22:ea:12:a0:05:1d:89:9b:09:8e:9c:8f:46:d8:57:57: cf:6f:c9:cb:a9:a0:6a:9e:a8:cd:3d:6e:19:bb:ce:75:9d:60: 36:93:30:a5:ea:25:6f:a1:ca:56:6e:e6:13:60:82:e7:8e:87: 77:9a:11:0d:2d:44:71:85:93:00:6d:b3:9e:22:33:fc:7e:5a: 00:49:b0:b7:63:51:38:48:ba:ac:1e:7a:14:7e:2d:36:80:c0: fe:e7:a0:34:cd:f9:c6:65:dd:d1:49:6b:61:c9:1f:40:84:91: 06:a6:ed:52:01:38:99:a8:9f:41:6d:2d:9b:98:e3:e6:34:2b: 67:6e:8c:5c:4f:54:37:fd:93:c4:d2:8c:b1:d5:23:8d:d8:2e: d5:a4:a7:cf:cc:cf:85:92:67:f4:47:b3:28:5c:a5:a9:56:2b: 13:74:5e:34:65:d0:37:27:c1:b9:52:26:9d:8d:51:bf:7e:17: 76:52:07:fc:bd:72:e7:b9:2a:3e:9f:91:5b:ff:12:ab:a1:38: f7:c8:47:28 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yNTA2MDYx MDI2MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA4ODZDQTQyRThGMjhF RDdEMzk0NTFFNUI3RjVGQTE5OTUzM0U0RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhZdxhJwPftIlYWZd9vV5NS5Ka9URyjiNtMXK1Hjxa/fg+wZ6T MK2nyXM2iOn53yUaAehT5hLOgrKocrzCeoXz05Aj3U941BAEFObMSZw7rZc7PJ6d IjqUO25rapozS7ehajORY3s5VrBA6XeCTnNcowPHpkcLNvtWg7OnnnR599qyNZco oAkDgv/xkJH2nOQKqLiH3ZCtTro0z2Ihotion9UYc1eG1BEuxGQLDkvAjt392D8w 1AbJKkikzdJtoIo8fBrhUFSYZwkH17bwyGiK4lFUsHe6lgt5jg6l5GTQkGjhOmth nNF8/k72AnWO/sGjJjrxGsKf0kEdFyQOVrypAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUCIbKQujyjtfTlFHlt/X6GZUz5PgwHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv +/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvYjk2alJ3Y1ZJcERCMG1C di1feHB1U2ZVQ2xzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AKsBIkEJ4VVUSWprwVTY2yrmQLV5lE0Ui+/pMd31NsD1s4G5sOhE2iX9w+fTukq1 7ZI1zTXmzl9HIuoSoAUdiZsJjpyPRthXV89vycupoGqeqM09bhm7znWdYDaTMKXq JW+hylZu5hNggueOh3eaEQ0tRHGFkwBts54iM/x+WgBJsLdjUThIuqweehR+LTaA wP7noDTN+cZl3dFJa2HJH0CEkQam7VIBOJmon0FtLZuY4+Y0K2dujFxPVDf9k8TS jLHVI43YLtWkp8/Mz4WSZ/RHsyhcpalWKxN0XjRl0DcnwblSJp2NUb9+F3ZSB/y9 cue5Kj6fkVv/EquhOPfIRyg= -----END CERTIFICATE-----Generated at Fri Jun 6 17:27:33 2025 by rpki-client