$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft File: 5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft (raw, json) Hash identifier: dPXBmivy2GiwZ0VEd5e7Qm3v+aabGi8epOQXwHIFW8o= Subject key identifier: A5:D7:1E:07:AE:C6:EA:AC:BA:B0:ED:C2:09:69:53:07:99:CF:53:F7 Authority key identifier: E6:5F:FB:4C:0C:2E:E8:A6:DF:74:FF:5E:86:63:9B:F4:B4:0D:E8:CA Certificate issuer: /CN=E65FFB4C0C2EE8A6DF74FF5E86639BF4B40DE8CA Certificate serial: 0D30 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft Manifest number: 0D30 Signing time: Tue 16 Sep 2025 21:21:34 +0000 Manifest this update: Tue 16 Sep 2025 21:21:34 +0000 Manifest next update: Thu 18 Sep 2025 21:21:34 +0000 Files and hashes: 1: 5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl (hash: BciMh8LuElCORhy/TQTotmLEFJWZ0jkFQm+F7Y/dUUk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 08:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3376 (0xd30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E65FFB4C0C2EE8A6DF74FF5E86639BF4B40DE8CA Validity Not Before: Sep 16 21:21:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A5D71E07AEC6EAACBAB0EDC20969530799CF53F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:f2:11:f8:d3:a2:30:73:5f:65:fc:65:dc: 2e:42:d7:c9:9d:a7:22:49:ca:8b:c1:f9:e8:50:c8: 52:3a:93:25:42:dc:40:9c:80:b9:49:24:10:a0:bf: 3b:25:01:ea:a9:a6:2d:89:9c:9c:a4:33:4a:b8:5d: cb:ae:35:e1:1f:d0:68:97:d2:e8:2e:97:a7:f4:d4: 0a:3a:a7:7e:68:65:6e:2d:a9:5d:e8:59:df:fd:61: 83:77:07:79:75:01:7d:3d:d4:13:02:a6:58:fd:75: ce:ff:85:23:5f:38:1f:67:22:8e:c7:61:da:2e:69: a1:32:a1:78:2a:8f:50:88:e8:dc:d8:4c:8e:23:8d: 2a:15:bc:c8:23:3d:ce:41:6a:45:82:bf:1c:07:f4: 45:eb:5b:8f:73:ce:83:6e:96:d9:40:6b:09:c6:ae: 7f:f9:aa:9f:30:04:c4:4a:b0:70:75:ab:49:c8:e4: 34:a2:4d:06:65:41:31:dd:ec:f2:68:84:e7:ca:34: a6:eb:ed:cb:93:7e:83:95:fc:e3:95:82:22:08:21: 74:45:23:7c:6f:01:f5:57:4f:16:30:0c:19:9e:f1: 0f:5b:6a:49:52:bb:58:9e:48:1e:42:f7:fa:98:3c: e6:d9:e0:b4:ce:64:19:c8:ba:73:00:70:4f:0b:dc: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:1E:07:AE:C6:EA:AC:BA:B0:ED:C2:09:69:53:07:99:CF:53:F7 X509v3 Authority Key Identifier: keyid:E6:5F:FB:4C:0C:2E:E8:A6:DF:74:FF:5E:86:63:9B:F4:B4:0D:E8:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:fe:ed:c4:a5:ea:4e:ea:fe:56:f4:b2:c1:6c:b7:46:17:44: 46:57:0b:62:80:71:a9:02:b2:08:4d:89:13:7b:3d:4e:50:2a: 02:cb:eb:2e:83:75:19:be:e0:8e:d5:58:2e:9c:b6:7c:5d:bf: 81:7c:07:f4:f1:e6:40:91:02:98:c2:89:bd:5a:bf:6c:eb:b9: c7:26:cc:2f:50:8b:90:24:cb:78:6b:af:e0:95:be:10:31:03: fc:a2:d3:2b:04:44:64:ef:d7:63:73:08:9f:25:1f:c4:46:96: 6a:70:d5:ca:c5:fd:6b:69:51:77:76:68:76:ee:f4:f0:fe:2c: 3a:ce:bd:81:0b:5f:df:79:f3:bd:9b:3d:f9:a3:7a:0c:5b:a6: af:6d:72:8a:b7:0c:36:6f:b0:7e:4d:d6:79:07:85:cc:fc:f1: 68:a5:ea:09:ef:e1:7b:8a:3c:17:96:f1:9e:cc:be:67:2c:da: e8:76:53:28:75:1c:ff:a5:bc:7c:45:68:99:3b:15:2b:33:1a: 48:da:30:a5:69:fd:18:8d:06:ea:76:ea:3d:13:f7:3d:19:6b: 44:c7:69:55:10:e3:da:ab:64:95:5d:84:ec:bd:d6:f4:bf:d7: 7f:7c:8a:5f:d5:6e:2d:4a:e3:63:a5:32:32:17:f9:9d:e8:7c: b6:bb:e6:e3 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDTAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY1 RkZCNEMwQzJFRThBNkRGNzRGRjVFODY2MzlCRjRCNDBERThDQTAeFw0yNTA5MTYy MTIxMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE1RDcxRTA3QUVDNkVB QUNCQUIwRURDMjA5Njk1MzA3OTlDRjUzRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMcvIR+NOiMHNfZfxl3C5C18mdpyJJyovB+ehQyFI6kyVC3ECc gLlJJBCgvzslAeqppi2JnJykM0q4XcuuNeEf0GiX0ugul6f01Ao6p35oZW4tqV3o Wd/9YYN3B3l1AX091BMCplj9dc7/hSNfOB9nIo7HYdouaaEyoXgqj1CI6NzYTI4j jSoVvMgjPc5BakWCvxwH9EXrW49zzoNultlAawnGrn/5qp8wBMRKsHB1q0nI5DSi TQZlQTHd7PJohOfKNKbr7cuTfoOV/OOVgiIIIXRFI3xvAfVXTxYwDBme8Q9baklS u1ieSB5C9/qYPObZ4LTOZBnIunMAcE8L3E+zAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUpdceB67G6qy6sO3CCWlTB5nPU/cwHwYDVR0jBBgwFoAU5l/7TAwu6KbfdP9e hmOb9LQN6MowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElOQ0hF SU4vNWxfN1RBd3U2S2JmZFA5ZWhtT2I5TFFONk1vLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS81bF83VEF3dTZLYmZkUDllaG1PYjlMUU42TW8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MSU5DSEVJTi81bF83VEF3dTZLYmZk UDllaG1PYjlMUU42TW8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZv7txKXqTur+VvSywWy3RhdERlcLYoBxqQKyCE2JE3s9TlAqAsvrLoN1Gb7g jtVYLpy2fF2/gXwH9PHmQJECmMKJvVq/bOu5xybML1CLkCTLeGuv4JW+EDED/KLT KwREZO/XY3MInyUfxEaWanDVysX9a2lRd3Zodu708P4sOs69gQtf33nzvZs9+aN6 DFumr21yircMNm+wfk3WeQeFzPzxaKXqCe/he4o8F5bxnsy+Zyza6HZTKHUc/6W8 fEVomTsVKzMaSNowpWn9GI0G6nbqPRP3PRlrRMdpVRDj2qtklV2E7L3W9L/Xf3yK X9VuLUrjY6UyMhf5neh8trvm4w== -----END CERTIFICATE-----Generated at Thu Sep 18 03:26:47 2025 by rpki-client