$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft File: CcNLispiD2KMeh5oIUQO7mgOTNg.mft (raw, json) Hash identifier: HLQArmFdr5H/bxoOYtEGWXiwj0K767T//IsnCjfFWS0= Subject key identifier: 1C:BA:7D:EC:BE:64:D6:CB:9C:5C:26:38:EC:FB:96:7C:1E:A4:FC:8E Authority key identifier: 09:C3:4B:8A:CA:62:0F:62:8C:7A:1E:68:21:44:0E:EE:68:0E:4C:D8 Certificate issuer: /CN=09C34B8ACA620F628C7A1E6821440EEE680E4CD8 Certificate serial: DB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft Manifest number: D9 Signing time: Sun 01 Jun 2025 22:27:02 +0000 Manifest this update: Sun 01 Jun 2025 22:27:02 +0000 Manifest next update: Tue 03 Jun 2025 22:27:02 +0000 Files and hashes: 1: CcNLispiD2KMeh5oIUQO7mgOTNg.crl (hash: vFstFeARbS+HKj/YS08ROcmE5cn+GW4DncMPgRfbpSw=) 2: GnyyDpm3mmdAbCCQVhzVRnw6x0M.roa (hash: APtmjKoACUfAq/x3gki3kLBJ0COWTpLHdikKUYku2G8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Jun 2025 09:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09C34B8ACA620F628C7A1E6821440EEE680E4CD8 Validity Not Before: Jun 1 22:27:02 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1CBA7DECBE64D6CB9C5C2638ECFB967C1EA4FC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:5a:86:b7:69:3b:e2:d1:5b:00:7a:fd:5a: b2:84:8c:da:34:5c:8d:6b:38:f6:f6:5a:d3:39:0d: 8f:b8:7f:07:7b:15:94:14:3b:b3:cc:83:fd:cc:c5: d6:ce:87:9d:f1:60:77:96:05:33:7e:c4:55:c5:b4: c0:83:a9:64:4d:42:e6:01:0e:e8:fb:f8:9a:97:ad: 5e:06:5a:07:4a:b0:6b:60:0e:4b:be:7f:e8:03:0f: 68:5a:1d:e9:44:f8:bd:49:4d:ea:36:e8:4d:77:c5: 7a:3d:bc:d2:a4:a0:d0:60:01:61:5e:97:87:49:df: db:71:3a:0c:2a:e2:b9:8d:8d:7c:73:af:f6:33:fc: be:9d:f6:5f:f0:19:ef:8a:2e:0e:39:2d:74:a4:9d: 23:b2:b6:50:f0:94:18:fa:e2:d3:96:67:d0:3f:84: 8e:54:2c:55:14:83:c9:9c:fd:1e:be:1e:87:7c:fe: 59:56:de:04:51:15:38:ae:8a:37:6b:ca:b5:da:39: 3f:fc:ba:a0:e8:91:d3:a3:0d:19:72:9e:12:51:98: 31:c9:c4:b0:54:2c:c4:6c:cf:6a:aa:97:c5:b2:39: a3:6d:bb:2b:72:56:e4:88:bc:7f:8f:cd:e5:95:14: 5c:d4:3e:ea:4b:5b:2d:10:5d:e2:1b:b0:0c:61:bc: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BA:7D:EC:BE:64:D6:CB:9C:5C:26:38:EC:FB:96:7C:1E:A4:FC:8E X509v3 Authority Key Identifier: keyid:09:C3:4B:8A:CA:62:0F:62:8C:7A:1E:68:21:44:0E:EE:68:0E:4C:D8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ab:e6:f9:f5:44:22:06:85:3f:d1:9c:28:a6:c6:d9:3b:72: e1:ba:87:56:3e:59:cb:bf:7e:49:ee:65:65:02:98:e1:71:64: 45:f9:9f:64:ae:ac:2e:89:c2:02:86:26:c2:38:2f:6e:2a:f4: a2:16:66:58:a2:2e:e8:aa:d4:54:32:92:f1:68:1c:93:34:85: cb:49:8b:59:fd:82:42:6b:ba:18:bd:f5:cf:f4:aa:77:95:ea: 19:3e:fd:d6:17:83:13:94:40:99:b4:fb:d7:2d:8d:c2:67:2d: fb:7b:a8:72:c3:2b:f4:b6:46:d6:37:69:43:d3:0f:f2:05:c4: 7e:62:ab:30:00:b6:61:64:55:9e:d1:53:50:2c:2e:a7:23:b8: 8e:fd:c6:f3:8d:6c:34:68:9f:67:15:e0:bb:d6:e4:a5:3c:4d: ba:43:09:ce:37:3e:8c:b1:92:f0:49:9a:66:09:bc:b1:f3:99: 4f:f6:07:92:12:d7:e5:3e:5e:e3:41:40:5e:89:1f:d8:13:7d: eb:7c:55:2f:73:fe:76:f1:d2:4a:de:a5:8f:c2:12:e7:d3:10: af:06:9d:0a:36:f6:44:ec:27:4c:04:b0:0a:db:98:c3:de:2d: d3:02:71:d0:02:24:4e:d9:21:d8:80:50:49:d5:c3:aa:dd:19: 93:fa:20:e0 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICANswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDlD MzRCOEFDQTYyMEY2MjhDN0ExRTY4MjE0NDBFRUU2ODBFNENEODAeFw0yNTA2MDEy MjI3MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFDQkE3REVDQkU2NEQ2 Q0I5QzVDMjYzOEVDRkI5NjdDMUVBNEZDOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGTFqGt2k74tFbAHr9WrKEjNo0XI1rOPb2WtM5DY+4fwd7FZQU O7PMg/3MxdbOh53xYHeWBTN+xFXFtMCDqWRNQuYBDuj7+JqXrV4GWgdKsGtgDku+ f+gDD2haHelE+L1JTeo26E13xXo9vNKkoNBgAWFel4dJ39txOgwq4rmNjXxzr/Yz /L6d9l/wGe+KLg45LXSknSOytlDwlBj64tOWZ9A/hI5ULFUUg8mc/R6+Hod8/llW 3gRRFTiuijdryrXaOT/8uqDokdOjDRlynhJRmDHJxLBULMRsz2qql8WyOaNtuyty VuSIvH+PzeWVFFzUPupLWy0QXeIbsAxhvOsrAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUHLp97L5k1sucXCY47PuWfB6k/I4wHwYDVR0jBBgwFoAUCcNLispiD2KMeh5o IUQO7mgOTNgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU5OT0xV WC9DY05MaXNwaUQyS01laDVvSVVRTzdtZ09UTmcuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0NjTkxpc3BpRDJLTWVoNW9JVVFPN21nT1ROZy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lOTk9MVVgvQ2NOTGlzcGlEMktNZWg1 b0lVUU83bWdPVE5nLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ADKr5vn1RCIGhT/RnCimxtk7cuG6h1Y+Wcu/fknuZWUCmOFxZEX5n2SurC6JwgKG JsI4L24q9KIWZliiLuiq1FQykvFoHJM0hctJi1n9gkJruhi99c/0qneV6hk+/dYX gxOUQJm0+9ctjcJnLft7qHLDK/S2RtY3aUPTD/IFxH5iqzAAtmFkVZ7RU1AsLqcj uI79xvONbDRon2cV4LvW5KU8TbpDCc43PoyxkvBJmmYJvLHzmU/2B5IS1+U+XuNB QF6JH9gTfet8VS9z/nbx0krepY/CEufTEK8GnQo29kTsJ0wEsArbmMPeLdMCcdAC JE7ZIdiAUEnVw6rdGZP6IOA= -----END CERTIFICATE-----Generated at Tue Jun 3 08:10:40 2025 by rpki-client