$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.mft File: fhfZI6oLxrCgi1oYe-6crejVDq8.mft (raw, json) Hash identifier: A+9Zlh7aDYzEAo1gX+L5OsOZ/DUfbRHTNKT29kuqSA4= Subject key identifier: 8F:29:38:B7:7D:18:33:41:E7:8D:06:34:73:36:86:AF:C3:EB:0C:E6 Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF Certificate issuer: /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF Certificate serial: 0414 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.mft Manifest number: 03EE Signing time: Mon 27 Oct 2025 09:57:31 +0000 Manifest this update: Mon 27 Oct 2025 09:57:31 +0000 Manifest next update: Wed 29 Oct 2025 09:57:31 +0000 Files and hashes: 1: 4kC2bULq9anW24g_vx8krkcsdBo.roa (hash: 7HlPeNFEe2YJl9Kvh28TwPAzDY//LorhcGKITfQzFow=) 2: FUXuk2vn6bIce9bKUsjgcU3uKuA.roa (hash: AlEHns3LLEzjhg4CMpFq+KVvLFXubOBq1MABYszcBx4=) 3: PgVkuGprgrCL_lIQLtvy1rg57HI.roa (hash: v2btXmztzeindLO4HUVlTjMIniSPk8SEhiWvT+5Vo2Y=) 4: fhfZI6oLxrCgi1oYe-6crejVDq8.crl (hash: 8Rr61urezzqPzhPjlxBKQdI/L+ouW7ytYkbDPEzgr7E=) 5: jLKa0XsGBSbaFXh3TxEn76E0l1Y.roa (hash: h68/GTheWe8r+L492QZjNMqxMSvq1YkR6jBkOn/d0Sc=) 6: rEDBPd9QydLPmNdugYc-Cw9E9d8.roa (hash: Is2DH/5MAbpAg0nOVvIxsesK1GhINut4G7201Gjsppg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 16:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF Validity Not Before: Oct 27 09:57:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8F2938B77D183341E78D0634733686AFC3EB0CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bd:d5:fc:40:18:6f:d9:55:36:f2:f7:b3:9e: f6:07:fb:50:4b:28:74:dc:2c:5d:cc:06:a6:36:f1: fa:ed:3d:1d:3c:8a:57:57:5d:df:96:18:8d:1e:d0: b2:57:60:65:65:00:b7:8f:51:d5:2b:df:db:5c:0b: b5:9e:f8:45:58:da:2b:15:8a:2e:ef:0b:c1:69:ea: 4f:de:47:eb:f4:14:63:52:fc:bd:d0:6f:76:d9:9c: 01:94:50:df:fc:0c:d8:fc:18:53:63:9f:d4:99:d9: 47:52:1c:95:46:57:dc:eb:3a:e0:33:b4:ac:cd:8c: e0:83:58:de:d9:b6:1f:0a:7c:7f:87:4d:d9:7c:2c: 9b:b7:69:6b:17:75:fd:fd:f4:a0:c5:a3:e9:85:0a: 93:f8:c0:3a:00:65:05:81:22:d7:3a:94:c1:8e:3d: 50:cb:62:84:24:69:5c:3d:ec:eb:52:37:4e:65:d5: aa:e3:b1:38:2b:93:77:54:9d:89:50:f0:91:9a:44: d7:27:8f:83:5f:ef:b2:54:af:b2:59:57:59:92:64: d3:c4:17:7c:d4:b6:55:ae:78:8d:2f:f3:33:84:c8: fe:b2:36:73:9d:41:01:ca:30:bb:02:87:58:b4:09: c7:9c:09:22:5d:f5:bb:ed:ae:ba:e0:17:f9:df:d3: c0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:29:38:B7:7D:18:33:41:E7:8D:06:34:73:36:86:AF:C3:EB:0C:E6 X509v3 Authority Key Identifier: keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:5b:c5:ca:1b:e9:e6:ac:44:c3:f9:e2:f0:40:75:f8:c3:40: 33:5b:43:20:db:30:64:40:b8:74:05:83:0b:40:2d:5f:be:af: 39:60:91:59:9d:fc:ec:b0:c2:82:33:84:b5:56:46:ce:50:7d: 53:18:42:7b:4f:a1:0b:42:40:b2:bd:50:55:14:e0:da:03:c1: d5:0d:b5:72:5f:60:54:c9:0e:52:70:1e:c9:3a:93:f3:e3:47: 72:a2:7a:09:de:e0:1c:e3:d1:5d:8b:dd:7e:7c:dd:80:f7:6f: fa:7f:df:fd:0e:e7:ec:94:17:e3:3b:3e:f2:13:72:4a:b7:9b: 0a:06:d7:f6:48:0f:65:32:58:b2:1a:b6:d5:71:2f:af:67:98: 42:a0:47:03:ac:48:05:2c:70:63:67:bb:e2:11:d4:80:be:1c: f5:01:b6:e3:09:7f:11:c7:4a:56:56:df:6c:c1:c9:55:53:9d: 87:58:6b:36:24:4e:21:95:23:20:f0:13:c8:b6:ed:91:ae:15: 24:34:d7:ab:43:48:ac:c1:14:68:07:e0:b6:6b:1d:4c:87:d3: 89:f4:00:e3:7d:39:4f:f0:6a:03:5a:da:6e:fe:8e:21:13:48: 4c:66:b8:79:0e:60:42:a0:31:3a:87:e7:72:12:b2:40:f1:60: e7:25:70:4f -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Ux N0Q5MjNBQTBCQzZCMEEwOEI1QTE4N0JFRTlDQURFOEQ1MEVBRjAeFw0yNTEwMjcw OTU3MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhGMjkzOEI3N0QxODMz NDFFNzhEMDYzNDczMzY4NkFGQzNFQjBDRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSvdX8QBhv2VU28veznvYH+1BLKHTcLF3MBqY28frtPR08ildX Xd+WGI0e0LJXYGVlALePUdUr39tcC7We+EVY2isVii7vC8Fp6k/eR+v0FGNS/L3Q b3bZnAGUUN/8DNj8GFNjn9SZ2UdSHJVGV9zrOuAztKzNjOCDWN7Zth8KfH+HTdl8 LJu3aWsXdf399KDFo+mFCpP4wDoAZQWBItc6lMGOPVDLYoQkaVw97OtSN05l1arj sTgrk3dUnYlQ8JGaRNcnj4Nf77JUr7JZV1mSZNPEF3zUtlWueI0v8zOEyP6yNnOd QQHKMLsCh1i0CcecCSJd9bvtrrrgF/nf08AjAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUjyk4t30YM0HnjQY0czaGr8PrDOYwHwYDVR0jBBgwFoAUfhfZI6oLxrCgi1oY e+6crejVDq8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVNISVNI L2ZoZlpJNm9MeHJDZ2kxb1llLTZjcmVqVkRxOC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvZmhmWkk2b0x4ckNnaTFvWWUtNmNyZWpWRHE4LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVNISVNIL2ZoZlpJNm9MeHJDZ2kxb1ll LTZjcmVqVkRxOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBn W8XKG+nmrETD+eLwQHX4w0AzW0Mg2zBkQLh0BYMLQC1fvq85YJFZnfzssMKCM4S1 VkbOUH1TGEJ7T6ELQkCyvVBVFODaA8HVDbVyX2BUyQ5ScB7JOpPz40dyonoJ3uAc 49Fdi91+fN2A92/6f9/9DufslBfjOz7yE3JKt5sKBtf2SA9lMliyGrbVcS+vZ5hC oEcDrEgFLHBjZ7viEdSAvhz1AbbjCX8Rx0pWVt9swclVU52HWGs2JE4hlSMg8BPI tu2RrhUkNNerQ0iswRRoB+C2ax1Mh9OJ9ADjfTlP8GoDWtpu/o4hE0hMZrh5DmBC oDE6h+dyErJA8WDnJXBP -----END CERTIFICATE-----Generated at Tue Oct 28 14:21:09 2025 by rpki-client