$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft File: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft (raw, json) Hash identifier: BP8dWOvcJzUCACAttKPE4XpA2RVL3GTkqvmAFcBk8Pw= Subject key identifier: 99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46 Authority key identifier: EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1 Certificate issuer: /CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1 Certificate serial: 0D11 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft Manifest number: 0D11 Signing time: Sun 01 Jun 2025 21:56:52 +0000 Manifest this update: Sun 01 Jun 2025 21:56:52 +0000 Manifest next update: Tue 03 Jun 2025 21:56:52 +0000 Files and hashes: 1: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl (hash: 2tSkIe6wR6o8apgozyy5XbOn2oAsMgdufg9cGZE6EdM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Jun 2025 09:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3345 (0xd11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1 Validity Not Before: Jun 1 21:56:52 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=99D31B221C7F6DD440390CFE6A41DC1E11986946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:ea:f1:d9:4d:9c:85:e3:3b:53:83:36:84: 34:d7:62:da:04:b6:c1:18:13:b0:ce:e1:ff:05:5a: f4:bc:a0:59:fc:0d:e1:51:e9:09:c5:e2:c4:19:0f: 6c:31:10:0b:57:8c:a0:60:e2:a0:26:63:04:af:38: 22:c1:0d:2f:da:42:9b:69:e2:93:d3:d2:d1:c6:34: ea:bb:70:9c:3d:2c:63:08:5a:1c:44:b2:83:4b:bc: b4:46:76:f3:a8:11:48:15:62:ad:82:fd:c1:a7:03: d4:6a:12:b1:31:29:9f:83:1b:a3:de:36:7c:f9:f3: 42:bd:4a:31:db:42:c3:c5:5a:55:eb:e1:2f:5a:98: be:16:5d:01:4b:55:d8:e8:d7:00:e3:46:a2:e0:c8: 63:75:9e:9f:fc:4f:4b:6a:52:54:3b:6d:ef:a7:77: 86:a3:45:80:bc:9f:cc:30:1f:30:d6:7b:63:38:37: d6:34:27:70:c8:ae:3b:03:4f:24:23:25:b7:6e:95: 67:57:92:5b:5d:9e:c1:62:c5:75:e3:55:b9:87:d0: 71:d5:8f:49:68:9e:d4:a3:12:6d:56:86:5d:19:fb: 7e:d0:53:17:04:0d:cc:6e:e2:65:66:42:38:c2:16: 5e:14:35:13:2f:7b:13:71:11:ea:fa:4f:46:09:4b: eb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46 X509v3 Authority Key Identifier: keyid:EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cb:e7:2a:22:99:7c:77:e8:89:dd:36:78:a3:a7:17:fb:61: 45:22:1a:51:7b:38:82:08:f9:be:e5:cb:5b:e9:c1:1b:56:4e: 34:ac:cb:9e:9c:eb:24:d1:5c:de:ae:b0:cd:59:7f:12:02:95: 0a:8e:cf:6e:ba:e8:c5:3b:4c:fc:a9:ad:89:b8:e1:1c:5a:85: 64:47:cb:3d:58:ca:4b:87:a2:b7:c0:31:ae:21:18:44:b8:ee: 61:91:1e:6d:14:74:4b:b6:dc:45:f4:f1:58:18:86:36:94:8e: 52:1a:cb:de:ae:b3:35:ab:c9:35:05:9d:c9:66:0b:42:f7:30: 67:67:2e:a4:3c:a2:b4:2e:e4:e2:62:93:75:d3:bd:0d:32:27: 98:36:ea:bb:ad:f0:db:1a:c7:2f:15:ec:36:e1:fe:b1:9f:66: 36:ba:1d:e7:4c:8e:61:cc:45:af:a9:ef:a5:d3:f8:e5:dd:05: 8e:5e:fc:30:23:ea:80:ee:54:85:75:0a:1f:66:ef:92:f3:7e: 99:d9:27:88:f9:bf:41:6b:4f:24:29:96:c6:1d:ae:ac:ff:63: 8e:53:dc:13:db:41:ff:6d:25:80:e5:1e:d0:c8:3f:b0:0e:98: 27:41:eb:97:6c:b5:cd:7a:75:99:1e:f4:c9:9b:c4:db:8e:77: 92:8b:b5:99 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUM0 Qjk4NTY3MUNCRUQ5QjBDOTM2RTU5QTA0NkUwMTdDMENBQ0JEMTAeFw0yNTA2MDEy MTU2NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5RDMxQjIyMUM3RjZE RDQ0MDM5MENGRTZBNDFEQzFFMTE5ODY5NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJFOrx2U2cheM7U4M2hDTXYtoEtsEYE7DO4f8FWvS8oFn8DeFR 6QnF4sQZD2wxEAtXjKBg4qAmYwSvOCLBDS/aQptp4pPT0tHGNOq7cJw9LGMIWhxE soNLvLRGdvOoEUgVYq2C/cGnA9RqErExKZ+DG6PeNnz580K9SjHbQsPFWlXr4S9a mL4WXQFLVdjo1wDjRqLgyGN1np/8T0tqUlQ7be+nd4ajRYC8n8wwHzDWe2M4N9Y0 J3DIrjsDTyQjJbdulWdXkltdnsFixXXjVbmH0HHVj0lontSjEm1Whl0Z+37QUxcE Dcxu4mVmQjjCFl4UNRMvexNxEer6T0YJS+v7AgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUmdMbIhx/bdRAOQz+akHcHhGYaUYwHwYDVR0jBBgwFoAU7EuYVnHL7ZsMk25Z oEbgF8DKy9EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVFSQVRP Ui83RXVZVm5ITDdac01rMjVab0ViZ0Y4REt5OUUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBLzdFdVlWbkhMN1pzTWsyNVpvRWJnRjhES3k5RS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lRUkFUT1IvN0V1WVZuSEw3WnNNazI1 Wm9FYmdGOERLeTlFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AH/L5yoimXx36IndNnijpxf7YUUiGlF7OIII+b7ly1vpwRtWTjSsy56c6yTRXN6u sM1ZfxIClQqOz2666MU7TPyprYm44RxahWRHyz1YykuHorfAMa4hGES47mGRHm0U dEu23EX08VgYhjaUjlIay96uszWryTUFnclmC0L3MGdnLqQ8orQu5OJik3XTvQ0y J5g26rut8Nsaxy8V7Dbh/rGfZja6HedMjmHMRa+p76XT+OXdBY5e/DAj6oDuVIV1 Ch9m75LzfpnZJ4j5v0FrTyQplsYdrqz/Y45T3BPbQf9tJYDlHtDIP7AOmCdB65ds tc16dZke9MmbxNuOd5KLtZk= -----END CERTIFICATE-----Generated at Tue Jun 3 08:16:28 2025 by rpki-client