$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft File: aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft (raw, json) Hash identifier: UINzL8fMOCrxZGEYTM5WV5LaLb5MHZQQPOTVTiv4+q8= Subject key identifier: 8D:21:A4:B3:97:4B:0B:F7:AA:F6:C9:D1:3A:27:BC:B2:94:95:C0:67 Authority key identifier: 68:33:02:DF:6A:59:20:E2:F8:3A:C4:EF:76:65:6D:DC:E8:40:F5:93 Certificate issuer: /CN=683302DF6A5920E2F83AC4EF76656DDCE840F593 Certificate serial: 01B6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aDMC32pZIOL4OsTvdmVt3OhA9ZM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft Manifest number: 01B6 Signing time: Tue 21 Apr 2026 20:04:05 +0000 Manifest this update: Tue 21 Apr 2026 20:04:05 +0000 Manifest next update: Wed 22 Apr 2026 02:04:05 +0000 Files and hashes: 1: aDMC32pZIOL4OsTvdmVt3OhA9ZM.crl (hash: +FItgXVvSW8Bfn3iepRsJXbY8k6JtY1OsA/Jy6FNIrI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aDMC32pZIOL4OsTvdmVt3OhA9ZM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 02:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=683302DF6A5920E2F83AC4EF76656DDCE840F593 Validity Not Before: Apr 21 20:04:05 2026 GMT Not After : Jan 27 15:30:18 2027 GMT Subject: CN=8D21A4B3974B0BF7AAF6C9D13A27BCB29495C067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dc:64:98:41:09:03:a8:00:65:a2:f4:14:34: a5:84:77:90:52:53:7a:0f:11:9d:79:01:da:67:f3: d7:9e:45:8b:00:cf:1a:b5:38:11:e9:11:2d:c2:6e: 32:18:ee:b1:76:06:b1:50:e2:86:bd:fc:69:f9:b5: 46:42:e2:1e:0b:cb:1e:6a:97:96:1a:75:ff:80:99: cd:f4:13:c4:b4:f9:d1:a6:2d:26:89:c9:76:f2:25: e8:a7:2c:04:a7:32:cf:51:0e:c7:30:5b:98:8d:ce: 06:c9:c8:35:58:32:cb:25:49:47:47:33:32:96:c7: 88:67:71:17:dd:c6:93:51:2a:ef:a0:38:f6:06:65: 8d:60:aa:1b:e8:00:aa:a3:5b:03:49:70:f7:84:80: 53:9b:13:f5:70:86:b3:60:53:b5:6d:1e:c6:cc:b2: bc:d9:b7:d7:a4:08:67:1f:79:35:d0:f2:6f:fb:83: 8e:2e:ba:6b:e8:60:69:2a:31:8e:19:fd:97:f0:4d: 02:3f:76:da:db:73:b0:f2:f4:e1:11:5d:96:3f:c8: c2:03:be:d4:1f:3b:ae:a6:84:76:f7:d6:bb:fc:1b: ae:81:44:24:28:6b:90:11:d5:b5:d3:df:8e:46:f4: 72:d7:2f:cb:b3:74:4e:0b:7a:3e:b2:5a:69:83:7f: 50:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:21:A4:B3:97:4B:0B:F7:AA:F6:C9:D1:3A:27:BC:B2:94:95:C0:67 X509v3 Authority Key Identifier: keyid:68:33:02:DF:6A:59:20:E2:F8:3A:C4:EF:76:65:6D:DC:E8:40:F5:93 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aDMC32pZIOL4OsTvdmVt3OhA9ZM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a1:53:5c:4c:f3:8f:89:b7:3f:f4:7b:72:a5:63:87:da:1a: b1:29:b7:43:19:bb:e9:ec:b4:93:20:48:72:a1:77:5d:3c:62: 58:6c:8a:48:56:f6:f5:3b:49:c8:75:bf:9e:d3:ae:dd:99:d9: bd:5e:55:c8:d2:f4:60:4e:ed:d1:0c:f5:8f:08:2c:44:18:0a: 62:b6:83:bb:60:fd:fc:33:39:47:0f:70:1b:55:d8:5e:41:41: 99:6d:32:f0:e3:d8:2d:81:96:92:da:45:75:28:f5:36:85:1b: 54:55:65:fe:ba:c0:7c:dc:7d:2f:d8:9b:b5:37:fe:7c:3e:11: 8b:cf:83:b5:4c:86:4e:ed:2d:92:e9:5e:a6:48:ce:67:45:83: a1:38:a3:c1:71:9d:8f:80:4e:f4:a0:35:b7:b5:d8:29:44:76: 61:8d:7a:49:2a:de:e2:08:2f:63:22:98:f8:26:dd:26:d4:e6: 01:64:02:ea:ff:ac:42:52:5f:fa:25:2b:b4:a4:57:b0:d5:da: aa:ff:1f:24:bf:e1:9c:3a:db:d9:97:e7:a5:dd:12:be:24:f8: 50:ba:15:36:9e:01:00:96:e4:bd:8c:3f:a8:68:a3:e8:33:9c: 4b:3b:3c:47:19:b5:8d:bf:a5:9f:d2:00:ac:72:9a:86:0d:39: 10:5e:e4:69 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjgz MzAyREY2QTU5MjBFMkY4M0FDNEVGNzY2NTZERENFODQwRjU5MzAeFw0yNjA0MjEy MDA0MDVaFw0yNzAxMjcxNTMwMThaMDMxMTAvBgNVBAMTKDhEMjFBNEIzOTc0QjBC RjdBQUY2QzlEMTNBMjdCQ0IyOTQ5NUMwNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa3GSYQQkDqABlovQUNKWEd5BSU3oPEZ15Adpn89eeRYsAzxq1 OBHpES3CbjIY7rF2BrFQ4oa9/Gn5tUZC4h4Lyx5ql5Yadf+Amc30E8S0+dGmLSaJ yXbyJeinLASnMs9RDscwW5iNzgbJyDVYMsslSUdHMzKWx4hncRfdxpNRKu+gOPYG ZY1gqhvoAKqjWwNJcPeEgFObE/VwhrNgU7VtHsbMsrzZt9ekCGcfeTXQ8m/7g44u umvoYGkqMY4Z/ZfwTQI/dtrbc7Dy9OERXZY/yMIDvtQfO66mhHb31rv8G66BRCQo a5AR1bXT345G9HLXL8uzdE4Lej6yWmmDf1CNAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUjSGks5dLC/eq9snROie8spSVwGcwHwYDVR0jBBgwFoAUaDMC32pZIOL4OsTv dmVt3OhA9ZMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR01JQ0xP VURfUC9hRE1DMzJwWklPTDRPc1R2ZG1WdDNPaEE5Wk0uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL2FETUMzMnBaSU9MNE9zVHZkbVZ0M09oQTlaTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0dNSUNMT1VEX1AvYURNQzMycFpJ T0w0T3NUdmRtVnQzT2hBOVpNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEyhU1xM84+Jtz/0e3KlY4faGrEpt0MZu+nstJMgSHKhd108YlhsikhW 9vU7Sch1v57Trt2Z2b1eVcjS9GBO7dEM9Y8ILEQYCmK2g7tg/fwzOUcPcBtV2F5B QZltMvDj2C2BlpLaRXUo9TaFG1RVZf66wHzcfS/Ym7U3/nw+EYvPg7VMhk7tLZLp XqZIzmdFg6E4o8FxnY+ATvSgNbe12ClEdmGNekkq3uIIL2MimPgm3SbU5gFkAur/ rEJSX/olK7SkV7DV2qr/HyS/4Zw629mX56XdEr4k+FC6FTaeAQCW5L2MP6hoo+gz nEs7PEcZtY2/pZ/SAKxymoYNORBe5Gk= -----END CERTIFICATE-----Generated at Wed Apr 22 01:41:34 2026 by rpki-client