$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft File: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft (raw, json) Hash identifier: 9I7rozVuxGNVhY7K/YD9lEdwn1MZCYIcnW2ppYDzavM= Subject key identifier: 99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46 Authority key identifier: EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1 Certificate issuer: /CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1 Certificate serial: 0D38 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft Manifest number: 0D38 Signing time: Wed 30 Jul 2025 10:08:43 +0000 Manifest this update: Wed 30 Jul 2025 10:08:43 +0000 Manifest next update: Fri 01 Aug 2025 10:08:43 +0000 Files and hashes: 1: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl (hash: R6zJ8SRll6d25FGZEXAXeIVYz9NxxVc6U/3PHaInRpE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3384 (0xd38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1 Validity Not Before: Jul 30 10:08:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=99D31B221C7F6DD440390CFE6A41DC1E11986946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:ea:f1:d9:4d:9c:85:e3:3b:53:83:36:84: 34:d7:62:da:04:b6:c1:18:13:b0:ce:e1:ff:05:5a: f4:bc:a0:59:fc:0d:e1:51:e9:09:c5:e2:c4:19:0f: 6c:31:10:0b:57:8c:a0:60:e2:a0:26:63:04:af:38: 22:c1:0d:2f:da:42:9b:69:e2:93:d3:d2:d1:c6:34: ea:bb:70:9c:3d:2c:63:08:5a:1c:44:b2:83:4b:bc: b4:46:76:f3:a8:11:48:15:62:ad:82:fd:c1:a7:03: d4:6a:12:b1:31:29:9f:83:1b:a3:de:36:7c:f9:f3: 42:bd:4a:31:db:42:c3:c5:5a:55:eb:e1:2f:5a:98: be:16:5d:01:4b:55:d8:e8:d7:00:e3:46:a2:e0:c8: 63:75:9e:9f:fc:4f:4b:6a:52:54:3b:6d:ef:a7:77: 86:a3:45:80:bc:9f:cc:30:1f:30:d6:7b:63:38:37: d6:34:27:70:c8:ae:3b:03:4f:24:23:25:b7:6e:95: 67:57:92:5b:5d:9e:c1:62:c5:75:e3:55:b9:87:d0: 71:d5:8f:49:68:9e:d4:a3:12:6d:56:86:5d:19:fb: 7e:d0:53:17:04:0d:cc:6e:e2:65:66:42:38:c2:16: 5e:14:35:13:2f:7b:13:71:11:ea:fa:4f:46:09:4b: eb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46 X509v3 Authority Key Identifier: keyid:EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ba:42:97:73:80:78:59:a8:46:59:b8:34:02:4f:af:68:dc: 0e:c9:fc:11:e9:fd:3a:ec:fc:6a:29:30:d4:23:ab:5b:7f:a2: 8f:2e:5c:88:c3:ec:5e:62:79:67:72:f2:40:d7:95:b6:d1:9e: 4a:be:cc:f2:43:c4:a0:fd:15:3a:44:21:9e:4e:24:fb:88:af: 1c:8a:6e:19:45:35:ac:60:61:4d:e6:26:07:71:12:12:77:bf: 40:cc:9d:eb:2b:d4:b8:6c:2f:c9:45:3a:c2:79:7a:a1:05:a7: b9:2f:9c:e1:58:d3:12:ee:3d:a8:23:35:54:fb:2d:da:ae:bb: f2:86:bc:d7:0f:5c:0f:07:1b:77:aa:62:c2:bf:cf:9f:4e:24: 9f:07:fb:91:27:13:79:2c:98:b2:0a:95:85:b8:09:6c:c4:32: fe:4b:32:01:e3:55:f5:45:17:ed:51:6b:50:c7:8e:1a:92:db: 49:dd:f0:91:fd:68:a6:d2:44:f6:6c:c7:cf:5c:df:98:07:14: 1a:3b:aa:d1:03:b7:3b:3f:59:1a:4f:ed:5b:f4:54:e9:e2:af: d2:5a:af:8e:7c:fe:12:20:5d:e5:4b:46:13:2f:05:2c:77:36: 5d:20:b7:8f:57:27:5c:75:41:1b:47:00:d7:a5:c6:28:27:bc: 53:94:bd:72 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUM0 Qjk4NTY3MUNCRUQ5QjBDOTM2RTU5QTA0NkUwMTdDMENBQ0JEMTAeFw0yNTA3MzAx MDA4NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5RDMxQjIyMUM3RjZE RDQ0MDM5MENGRTZBNDFEQzFFMTE5ODY5NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJFOrx2U2cheM7U4M2hDTXYtoEtsEYE7DO4f8FWvS8oFn8DeFR 6QnF4sQZD2wxEAtXjKBg4qAmYwSvOCLBDS/aQptp4pPT0tHGNOq7cJw9LGMIWhxE soNLvLRGdvOoEUgVYq2C/cGnA9RqErExKZ+DG6PeNnz580K9SjHbQsPFWlXr4S9a mL4WXQFLVdjo1wDjRqLgyGN1np/8T0tqUlQ7be+nd4ajRYC8n8wwHzDWe2M4N9Y0 J3DIrjsDTyQjJbdulWdXkltdnsFixXXjVbmH0HHVj0lontSjEm1Whl0Z+37QUxcE Dcxu4mVmQjjCFl4UNRMvexNxEer6T0YJS+v7AgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUmdMbIhx/bdRAOQz+akHcHhGYaUYwHwYDVR0jBBgwFoAU7EuYVnHL7ZsMk25Z oEbgF8DKy9EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVFSQVRP Ui83RXVZVm5ITDdac01rMjVab0ViZ0Y4REt5OUUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBLzdFdVlWbkhMN1pzTWsyNVpvRWJnRjhES3k5RS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lRUkFUT1IvN0V1WVZuSEw3WnNNazI1 Wm9FYmdGOERLeTlFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AH66QpdzgHhZqEZZuDQCT69o3A7J/BHp/Trs/GopMNQjq1t/oo8uXIjD7F5ieWdy 8kDXlbbRnkq+zPJDxKD9FTpEIZ5OJPuIrxyKbhlFNaxgYU3mJgdxEhJ3v0DMnesr 1LhsL8lFOsJ5eqEFp7kvnOFY0xLuPagjNVT7Ldquu/KGvNcPXA8HG3eqYsK/z59O JJ8H+5EnE3ksmLIKlYW4CWzEMv5LMgHjVfVFF+1Ra1DHjhqS20nd8JH9aKbSRPZs x89c35gHFBo7qtEDtzs/WRpP7Vv0VOnir9Jar458/hIgXeVLRhMvBSx3Nl0gt49X J1x1QRtHANelxignvFOUvXI= -----END CERTIFICATE-----Generated at Thu Jul 31 18:19:31 2025 by rpki-client