$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft File: CcNLispiD2KMeh5oIUQO7mgOTNg.mft (raw, json) Hash identifier: sihKXKBNGGstM7AvSrg/kgEqD8ZViRHQwecUSMOvnSI= Subject key identifier: 1C:BA:7D:EC:BE:64:D6:CB:9C:5C:26:38:EC:FB:96:7C:1E:A4:FC:8E Authority key identifier: 09:C3:4B:8A:CA:62:0F:62:8C:7A:1E:68:21:44:0E:EE:68:0E:4C:D8 Certificate issuer: /CN=09C34B8ACA620F628C7A1E6821440EEE680E4CD8 Certificate serial: 0102 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft Manifest number: 0100 Signing time: Wed 30 Jul 2025 11:09:12 +0000 Manifest this update: Wed 30 Jul 2025 11:09:12 +0000 Manifest next update: Fri 01 Aug 2025 11:09:12 +0000 Files and hashes: 1: CcNLispiD2KMeh5oIUQO7mgOTNg.crl (hash: /+Uu53vKvcUA3I0Ramgu+RxXHQxoRNEc+JHDLu+ynj0=) 2: GnyyDpm3mmdAbCCQVhzVRnw6x0M.roa (hash: APtmjKoACUfAq/x3gki3kLBJ0COWTpLHdikKUYku2G8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09C34B8ACA620F628C7A1E6821440EEE680E4CD8 Validity Not Before: Jul 30 11:09:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1CBA7DECBE64D6CB9C5C2638ECFB967C1EA4FC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:5a:86:b7:69:3b:e2:d1:5b:00:7a:fd:5a: b2:84:8c:da:34:5c:8d:6b:38:f6:f6:5a:d3:39:0d: 8f:b8:7f:07:7b:15:94:14:3b:b3:cc:83:fd:cc:c5: d6:ce:87:9d:f1:60:77:96:05:33:7e:c4:55:c5:b4: c0:83:a9:64:4d:42:e6:01:0e:e8:fb:f8:9a:97:ad: 5e:06:5a:07:4a:b0:6b:60:0e:4b:be:7f:e8:03:0f: 68:5a:1d:e9:44:f8:bd:49:4d:ea:36:e8:4d:77:c5: 7a:3d:bc:d2:a4:a0:d0:60:01:61:5e:97:87:49:df: db:71:3a:0c:2a:e2:b9:8d:8d:7c:73:af:f6:33:fc: be:9d:f6:5f:f0:19:ef:8a:2e:0e:39:2d:74:a4:9d: 23:b2:b6:50:f0:94:18:fa:e2:d3:96:67:d0:3f:84: 8e:54:2c:55:14:83:c9:9c:fd:1e:be:1e:87:7c:fe: 59:56:de:04:51:15:38:ae:8a:37:6b:ca:b5:da:39: 3f:fc:ba:a0:e8:91:d3:a3:0d:19:72:9e:12:51:98: 31:c9:c4:b0:54:2c:c4:6c:cf:6a:aa:97:c5:b2:39: a3:6d:bb:2b:72:56:e4:88:bc:7f:8f:cd:e5:95:14: 5c:d4:3e:ea:4b:5b:2d:10:5d:e2:1b:b0:0c:61:bc: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BA:7D:EC:BE:64:D6:CB:9C:5C:26:38:EC:FB:96:7C:1E:A4:FC:8E X509v3 Authority Key Identifier: keyid:09:C3:4B:8A:CA:62:0F:62:8C:7A:1E:68:21:44:0E:EE:68:0E:4C:D8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:63:e6:1a:aa:12:d6:10:7c:50:97:30:03:de:e2:3e:e3:7a: 91:91:67:61:dc:2a:4b:8a:ca:69:cd:40:08:d9:6f:8a:f1:bc: 72:aa:76:a0:0c:fa:89:87:80:d3:a6:44:08:78:4b:9d:0c:ad: 9e:bb:2c:f6:e9:70:0b:11:0a:bb:6a:46:9e:be:15:13:be:02: c7:1a:78:7b:32:f7:24:ff:30:04:e7:24:1a:27:34:a8:f9:98: 64:2a:c2:9a:ae:8b:75:36:6b:f6:ec:e4:8a:af:66:7b:0c:f6: 6d:48:3f:c0:4f:f2:01:76:59:14:db:fe:c0:c9:5b:82:d5:ae: 9f:58:fd:db:aa:af:e3:0b:b6:0b:89:3d:50:f7:d3:db:3e:f3: c1:fa:dd:72:30:94:67:1a:35:e0:1c:03:0d:c0:96:a8:93:d1: fc:b9:69:ed:f8:7a:46:f8:3f:ab:2c:52:27:40:23:bd:c7:b8: ac:40:c6:dd:a4:af:e9:52:9f:9a:3a:d7:6b:e4:e9:46:f8:e2: 93:40:93:37:80:e9:cc:c8:5c:ff:af:b3:34:4b:4e:a4:11:06: 5e:e1:21:62:ad:f1:b7:4a:26:4d:fc:08:70:55:b3:b4:52:fb: ae:bb:a3:cc:df:52:ef:bc:13:e5:00:92:01:41:4d:c5:1a:4c: 3e:3b:07:eb -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDlD MzRCOEFDQTYyMEY2MjhDN0ExRTY4MjE0NDBFRUU2ODBFNENEODAeFw0yNTA3MzAx MTA5MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFDQkE3REVDQkU2NEQ2 Q0I5QzVDMjYzOEVDRkI5NjdDMUVBNEZDOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGTFqGt2k74tFbAHr9WrKEjNo0XI1rOPb2WtM5DY+4fwd7FZQU O7PMg/3MxdbOh53xYHeWBTN+xFXFtMCDqWRNQuYBDuj7+JqXrV4GWgdKsGtgDku+ f+gDD2haHelE+L1JTeo26E13xXo9vNKkoNBgAWFel4dJ39txOgwq4rmNjXxzr/Yz /L6d9l/wGe+KLg45LXSknSOytlDwlBj64tOWZ9A/hI5ULFUUg8mc/R6+Hod8/llW 3gRRFTiuijdryrXaOT/8uqDokdOjDRlynhJRmDHJxLBULMRsz2qql8WyOaNtuyty VuSIvH+PzeWVFFzUPupLWy0QXeIbsAxhvOsrAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUHLp97L5k1sucXCY47PuWfB6k/I4wHwYDVR0jBBgwFoAUCcNLispiD2KMeh5o IUQO7mgOTNgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU5OT0xV WC9DY05MaXNwaUQyS01laDVvSVVRTzdtZ09UTmcuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0NjTkxpc3BpRDJLTWVoNW9JVVFPN21nT1ROZy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lOTk9MVVgvQ2NOTGlzcGlEMktNZWg1 b0lVUU83bWdPVE5nLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ACNj5hqqEtYQfFCXMAPe4j7jepGRZ2HcKkuKymnNQAjZb4rxvHKqdqAM+omHgNOm RAh4S50MrZ67LPbpcAsRCrtqRp6+FRO+AscaeHsy9yT/MATnJBonNKj5mGQqwpqu i3U2a/bs5IqvZnsM9m1IP8BP8gF2WRTb/sDJW4LVrp9Y/duqr+MLtguJPVD309s+ 88H63XIwlGcaNeAcAw3AlqiT0fy5ae34ekb4P6ssUidAI73HuKxAxt2kr+lSn5o6 12vk6Ub44pNAkzeA6czIXP+vszRLTqQRBl7hIWKt8bdKJk38CHBVs7RS+667o8zf Uu+8E+UAkgFBTcUaTD47B+s= -----END CERTIFICATE-----Generated at Thu Jul 31 18:11:29 2025 by rpki-client