$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft File: 5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft (raw, json) Hash identifier: j9nAS/4poVnBW+eQCKiUUgPhbgvKu+DQ29otxXqDuqM= Subject key identifier: A5:D7:1E:07:AE:C6:EA:AC:BA:B0:ED:C2:09:69:53:07:99:CF:53:F7 Authority key identifier: E6:5F:FB:4C:0C:2E:E8:A6:DF:74:FF:5E:86:63:9B:F4:B4:0D:E8:CA Certificate issuer: /CN=E65FFB4C0C2EE8A6DF74FF5E86639BF4B40DE8CA Certificate serial: 0D0F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft Manifest number: 0D0F Signing time: Wed 30 Jul 2025 09:09:11 +0000 Manifest this update: Wed 30 Jul 2025 09:09:11 +0000 Manifest next update: Fri 01 Aug 2025 09:09:11 +0000 Files and hashes: 1: 5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl (hash: rIslp181dlfnzQ/AdTktkA9jO6tKKBKurhi3lkewTWE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3343 (0xd0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E65FFB4C0C2EE8A6DF74FF5E86639BF4B40DE8CA Validity Not Before: Jul 30 09:09:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A5D71E07AEC6EAACBAB0EDC20969530799CF53F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:f2:11:f8:d3:a2:30:73:5f:65:fc:65:dc: 2e:42:d7:c9:9d:a7:22:49:ca:8b:c1:f9:e8:50:c8: 52:3a:93:25:42:dc:40:9c:80:b9:49:24:10:a0:bf: 3b:25:01:ea:a9:a6:2d:89:9c:9c:a4:33:4a:b8:5d: cb:ae:35:e1:1f:d0:68:97:d2:e8:2e:97:a7:f4:d4: 0a:3a:a7:7e:68:65:6e:2d:a9:5d:e8:59:df:fd:61: 83:77:07:79:75:01:7d:3d:d4:13:02:a6:58:fd:75: ce:ff:85:23:5f:38:1f:67:22:8e:c7:61:da:2e:69: a1:32:a1:78:2a:8f:50:88:e8:dc:d8:4c:8e:23:8d: 2a:15:bc:c8:23:3d:ce:41:6a:45:82:bf:1c:07:f4: 45:eb:5b:8f:73:ce:83:6e:96:d9:40:6b:09:c6:ae: 7f:f9:aa:9f:30:04:c4:4a:b0:70:75:ab:49:c8:e4: 34:a2:4d:06:65:41:31:dd:ec:f2:68:84:e7:ca:34: a6:eb:ed:cb:93:7e:83:95:fc:e3:95:82:22:08:21: 74:45:23:7c:6f:01:f5:57:4f:16:30:0c:19:9e:f1: 0f:5b:6a:49:52:bb:58:9e:48:1e:42:f7:fa:98:3c: e6:d9:e0:b4:ce:64:19:c8:ba:73:00:70:4f:0b:dc: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:1E:07:AE:C6:EA:AC:BA:B0:ED:C2:09:69:53:07:99:CF:53:F7 X509v3 Authority Key Identifier: keyid:E6:5F:FB:4C:0C:2E:E8:A6:DF:74:FF:5E:86:63:9B:F4:B4:0D:E8:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:d6:cf:80:1f:cb:2f:c4:c9:21:57:eb:4e:61:41:45:5c:f8: 21:f8:99:cc:e5:f4:c2:3d:fb:35:c5:08:73:f6:c0:8e:b8:cd: b8:a2:4d:b8:a4:aa:bb:d2:9d:4d:f5:85:55:1a:b9:72:73:1b: d2:b7:74:08:11:0d:a4:b9:00:95:c2:1f:46:2e:9a:4d:cd:7b: 61:36:bc:f2:bc:c7:b0:1c:cc:14:94:e5:4b:11:0b:9e:5b:c6: 1b:29:bf:3e:9a:72:48:96:58:4c:2b:9b:f8:3d:42:9f:96:49: f1:cb:43:96:45:6f:ac:d1:2b:6d:9b:51:f4:15:06:36:ec:04: ca:63:70:c4:7d:ca:6a:84:a0:4c:ec:f1:ae:39:ef:9b:03:8e: 2b:52:88:bc:8f:70:e9:99:7b:12:02:c1:39:16:6f:65:59:59: 23:f4:a6:ef:9f:6b:07:5a:8a:d8:2d:00:cf:4a:1a:57:bd:aa: 21:e7:58:3c:89:15:59:2f:57:f5:37:92:6c:f2:45:e2:06:2e: 96:50:f8:39:9b:e4:d6:79:69:f8:72:05:9c:0e:95:0c:22:70: fa:9c:e8:74:3e:0b:39:e5:ba:4f:c4:92:91:f8:dc:15:f1:ab: 4c:74:06:64:76:bd:39:c7:55:53:86:d7:15:9f:c6:7d:c2:5c: 56:2a:a5:e7 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY1 RkZCNEMwQzJFRThBNkRGNzRGRjVFODY2MzlCRjRCNDBERThDQTAeFw0yNTA3MzAw OTA5MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE1RDcxRTA3QUVDNkVB QUNCQUIwRURDMjA5Njk1MzA3OTlDRjUzRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMcvIR+NOiMHNfZfxl3C5C18mdpyJJyovB+ehQyFI6kyVC3ECc gLlJJBCgvzslAeqppi2JnJykM0q4XcuuNeEf0GiX0ugul6f01Ao6p35oZW4tqV3o Wd/9YYN3B3l1AX091BMCplj9dc7/hSNfOB9nIo7HYdouaaEyoXgqj1CI6NzYTI4j jSoVvMgjPc5BakWCvxwH9EXrW49zzoNultlAawnGrn/5qp8wBMRKsHB1q0nI5DSi TQZlQTHd7PJohOfKNKbr7cuTfoOV/OOVgiIIIXRFI3xvAfVXTxYwDBme8Q9baklS u1ieSB5C9/qYPObZ4LTOZBnIunMAcE8L3E+zAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUpdceB67G6qy6sO3CCWlTB5nPU/cwHwYDVR0jBBgwFoAU5l/7TAwu6KbfdP9e hmOb9LQN6MowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElOQ0hF SU4vNWxfN1RBd3U2S2JmZFA5ZWhtT2I5TFFONk1vLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS81bF83VEF3dTZLYmZkUDllaG1PYjlMUU42TW8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MSU5DSEVJTi81bF83VEF3dTZLYmZk UDllaG1PYjlMUU42TW8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhdbPgB/LL8TJIVfrTmFBRVz4IfiZzOX0wj37NcUIc/bAjrjNuKJNuKSqu9Kd TfWFVRq5cnMb0rd0CBENpLkAlcIfRi6aTc17YTa88rzHsBzMFJTlSxELnlvGGym/ PppySJZYTCub+D1Cn5ZJ8ctDlkVvrNErbZtR9BUGNuwEymNwxH3KaoSgTOzxrjnv mwOOK1KIvI9w6Zl7EgLBORZvZVlZI/Sm759rB1qK2C0Az0oaV72qIedYPIkVWS9X 9TeSbPJF4gYullD4OZvk1nlp+HIFnA6VDCJw+pzodD4LOeW6T8SSkfjcFfGrTHQG ZHa9OcdVU4bXFZ/GfcJcViql5w== -----END CERTIFICATE-----Generated at Thu Jul 31 18:14:21 2025 by rpki-client