$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft File: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft (raw, json) Hash identifier: +okivWOFaDZG1JRdZ8gL4eoDbJw1YrH+mw+B6sIggPQ= Subject key identifier: 99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46 Authority key identifier: EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1 Certificate issuer: /CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1 Certificate serial: 0C7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft Manifest number: 0C7D Signing time: Sun 16 Feb 2025 15:27:00 +0000 Manifest this update: Sun 16 Feb 2025 15:27:00 +0000 Manifest next update: Sun 16 Feb 2025 21:27:00 +0000 Files and hashes: 1: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl (hash: 9IWJyn7sSC2y2rhlGlhCCRlmGAUsv30gX04ADj2g03M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Feb 2025 21:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3197 (0xc7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1 Validity Not Before: Feb 16 15:27:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=99D31B221C7F6DD440390CFE6A41DC1E11986946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:ea:f1:d9:4d:9c:85:e3:3b:53:83:36:84: 34:d7:62:da:04:b6:c1:18:13:b0:ce:e1:ff:05:5a: f4:bc:a0:59:fc:0d:e1:51:e9:09:c5:e2:c4:19:0f: 6c:31:10:0b:57:8c:a0:60:e2:a0:26:63:04:af:38: 22:c1:0d:2f:da:42:9b:69:e2:93:d3:d2:d1:c6:34: ea:bb:70:9c:3d:2c:63:08:5a:1c:44:b2:83:4b:bc: b4:46:76:f3:a8:11:48:15:62:ad:82:fd:c1:a7:03: d4:6a:12:b1:31:29:9f:83:1b:a3:de:36:7c:f9:f3: 42:bd:4a:31:db:42:c3:c5:5a:55:eb:e1:2f:5a:98: be:16:5d:01:4b:55:d8:e8:d7:00:e3:46:a2:e0:c8: 63:75:9e:9f:fc:4f:4b:6a:52:54:3b:6d:ef:a7:77: 86:a3:45:80:bc:9f:cc:30:1f:30:d6:7b:63:38:37: d6:34:27:70:c8:ae:3b:03:4f:24:23:25:b7:6e:95: 67:57:92:5b:5d:9e:c1:62:c5:75:e3:55:b9:87:d0: 71:d5:8f:49:68:9e:d4:a3:12:6d:56:86:5d:19:fb: 7e:d0:53:17:04:0d:cc:6e:e2:65:66:42:38:c2:16: 5e:14:35:13:2f:7b:13:71:11:ea:fa:4f:46:09:4b: eb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46 X509v3 Authority Key Identifier: keyid:EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:8e:ed:6b:ff:ed:9c:38:ef:f3:80:4a:cd:2b:fb:e3:cc:33: ae:b2:2c:25:1f:52:79:14:64:bd:cb:58:ff:c5:6a:cb:40:45: 72:67:1b:d3:d2:a9:f4:a0:87:ec:b9:9f:c8:ee:9d:b3:ed:db: 68:55:01:a0:1a:e2:99:0f:42:e4:c3:d1:8c:c5:80:1d:9a:fc: c2:4a:06:96:a8:93:eb:b8:63:e4:ca:28:0b:a9:e3:98:ac:57: 32:1d:89:74:63:d7:10:fd:88:15:a8:51:c6:d4:6d:fb:20:ba: 9d:76:a9:1d:24:dd:41:31:f2:a8:3c:84:d5:ff:2c:9d:d8:4b: c1:d1:6a:d1:8c:a5:57:4c:bb:68:2b:ef:ca:5b:06:18:95:8e: 34:2f:96:65:f5:b1:ca:26:bc:c6:9a:95:c1:b1:4b:c9:98:08: 30:50:85:da:cf:91:c5:43:92:90:37:ef:a8:53:a2:61:62:b2: 21:9d:64:f0:6d:e1:ef:f0:17:21:1e:32:41:1c:e4:9e:d7:b3: a3:23:5e:ee:7d:c8:5f:22:33:03:5e:00:4a:b9:4d:f1:a0:9b: 05:e6:6e:c9:cc:cc:43:87:2e:f4:a2:a7:1d:a7:72:94:d4:85: 80:30:ec:ae:34:1e:30:3b:79:ba:b7:ee:80:bb:78:52:b4:27: 94:a7:a8:f5 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUM0 Qjk4NTY3MUNCRUQ5QjBDOTM2RTU5QTA0NkUwMTdDMENBQ0JEMTAeFw0yNTAyMTYx NTI3MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk5RDMxQjIyMUM3RjZE RDQ0MDM5MENGRTZBNDFEQzFFMTE5ODY5NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJFOrx2U2cheM7U4M2hDTXYtoEtsEYE7DO4f8FWvS8oFn8DeFR 6QnF4sQZD2wxEAtXjKBg4qAmYwSvOCLBDS/aQptp4pPT0tHGNOq7cJw9LGMIWhxE soNLvLRGdvOoEUgVYq2C/cGnA9RqErExKZ+DG6PeNnz580K9SjHbQsPFWlXr4S9a mL4WXQFLVdjo1wDjRqLgyGN1np/8T0tqUlQ7be+nd4ajRYC8n8wwHzDWe2M4N9Y0 J3DIrjsDTyQjJbdulWdXkltdnsFixXXjVbmH0HHVj0lontSjEm1Whl0Z+37QUxcE Dcxu4mVmQjjCFl4UNRMvexNxEer6T0YJS+v7AgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUmdMbIhx/bdRAOQz+akHcHhGYaUYwHwYDVR0jBBgwFoAU7EuYVnHL7ZsMk25Z oEbgF8DKy9EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVFSQVRP Ui83RXVZVm5ITDdac01rMjVab0ViZ0Y4REt5OUUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBLzdFdVlWbkhMN1pzTWsyNVpvRWJnRjhES3k5RS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lRUkFUT1IvN0V1WVZuSEw3WnNNazI1 Wm9FYmdGOERLeTlFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AHOO7Wv/7Zw47/OASs0r++PMM66yLCUfUnkUZL3LWP/FastARXJnG9PSqfSgh+y5 n8junbPt22hVAaAa4pkPQuTD0YzFgB2a/MJKBpaok+u4Y+TKKAup45isVzIdiXRj 1xD9iBWoUcbUbfsgup12qR0k3UEx8qg8hNX/LJ3YS8HRatGMpVdMu2gr78pbBhiV jjQvlmX1scomvMaalcGxS8mYCDBQhdrPkcVDkpA376hTomFisiGdZPBt4e/wFyEe MkEc5J7Xs6MjXu59yF8iMwNeAEq5TfGgmwXmbsnMzEOHLvSipx2ncpTUhYAw7K40 HjA7ebq37oC7eFK0J5SnqPU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:45:36 2025 by rpki-client