$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft File: dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft (raw, json) Hash identifier: n2LZ63JsPJITy0Y1ZnfD35qDFDy+hMCRDSdmEKcN6bI= Subject key identifier: 3F:7E:EE:0F:94:F1:01:D3:B6:4B:50:C1:A1:B1:CE:BE:7F:D9:58:3A Authority key identifier: 76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5 Certificate issuer: /CN=76637EEBEFEF70C538CEADDCF9848FAA79C736A5 Certificate serial: 03AC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft Manifest number: 03A4 Signing time: Sat 25 Oct 2025 21:26:20 +0000 Manifest this update: Sat 25 Oct 2025 21:26:20 +0000 Manifest next update: Mon 27 Oct 2025 21:26:20 +0000 Files and hashes: 1: W5BmdQotnxv-3hOJA05GBWwWgd0.roa (hash: aOe4BEe1mjgp3cdmNyBe6BTembT4z1YgqCYeSRf/WTg=) 2: dmN-6-_vcMU4zq3c-YSPqnnHNqU.crl (hash: El6/3zn7tU+aLUxjoTUKly1e+QFPK0gPDJvGzq2j6gU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 06:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76637EEBEFEF70C538CEADDCF9848FAA79C736A5 Validity Not Before: Oct 25 21:26:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3F7EEE0F94F101D3B64B50C1A1B1CEBE7FD9583A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:94:32:32:23:74:70:93:1a:1b:a1:82:8d:04: 42:05:87:00:3e:62:6c:3d:49:9e:dd:59:71:18:6e: d8:61:56:ac:84:3c:f0:3a:19:ab:2b:ea:68:b4:67: 51:0c:87:23:7a:3f:da:33:2d:f0:0c:d7:6a:e2:24: 8a:1e:87:f1:de:1d:37:03:f7:2a:e2:20:af:50:88: d6:56:07:29:0a:b7:44:10:e9:02:bd:32:7a:b1:d2: 6d:56:56:38:db:36:b4:ea:9d:c1:9c:86:90:ae:e5: e4:d4:5b:d2:f8:f1:fc:c3:62:45:5e:ea:75:29:9e: 3e:e4:fc:73:9e:b0:c1:47:39:40:d6:70:e1:74:cd: 81:c8:87:2f:28:21:13:25:fa:3b:c6:a4:17:10:a0: 10:7b:cc:0b:2c:2b:ff:49:01:75:10:5b:26:3c:ec: 07:a0:f4:f7:fd:90:25:9f:ba:86:5b:5e:67:73:10: d5:25:3d:48:d9:e4:56:f9:c1:62:c7:a3:36:22:fb: a7:07:c8:6a:64:55:5a:6d:bb:34:93:e7:76:5d:03: 5f:b7:e8:5b:03:8a:31:60:c1:40:af:6c:ed:aa:dd: 7d:8c:3c:28:cc:e0:e6:c9:67:d7:3a:af:81:3b:64: 78:25:33:47:54:dc:f4:ce:48:d0:53:3b:e7:d5:51: 90:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7E:EE:0F:94:F1:01:D3:B6:4B:50:C1:A1:B1:CE:BE:7F:D9:58:3A X509v3 Authority Key Identifier: keyid:76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:51:be:53:d7:a9:99:4e:25:c6:f7:af:f0:a3:85:6b:c6:0b: 2b:67:17:89:d8:77:0c:fb:ec:5b:1f:2f:3f:b7:21:dc:e5:f8: 84:c8:a0:cd:53:7f:14:38:d6:e8:f7:55:c3:7a:04:04:5b:05: 76:7b:99:f0:76:b0:95:52:5c:9a:45:3e:f9:23:cb:39:02:48: 0e:70:cc:82:77:f0:88:47:52:44:f4:8f:b7:8e:d3:e9:cb:d0: 4e:c9:49:30:fc:4b:bf:9f:67:be:97:8b:60:ac:9c:1d:b4:e9: c2:7a:a4:23:8e:76:41:56:63:d2:f0:88:3a:95:d3:af:90:8b: d8:50:58:36:e6:f5:76:ed:6d:91:6c:2f:f6:a9:9b:81:b3:94: 25:83:43:48:fc:ea:1a:0e:47:32:a2:cb:e4:a3:a7:c1:19:31: 0d:10:fc:06:12:6c:d7:f6:53:19:1f:c2:7f:89:7e:2a:2a:15: 53:98:88:16:78:a5:85:2d:ee:af:e1:b0:36:05:17:8e:0b:f0: 9a:66:ec:22:dc:67:d8:27:4d:1a:54:98:96:f4:31:37:d5:6e: f1:a4:5f:58:e3:23:5c:44:57:df:fd:65:44:0c:17:a9:b9:74: a6:ff:32:6d:c9:b2:83:21:b0:86:29:58:1f:f7:fb:2d:40:81: 37:4b:47:04 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzY2 MzdFRUJFRkVGNzBDNTM4Q0VBRERDRjk4NDhGQUE3OUM3MzZBNTAeFw0yNTEwMjUy MTI2MjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNGN0VFRTBGOTRGMTAx RDNCNjRCNTBDMUExQjFDRUJFN0ZEOTU4M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhlDIyI3RwkxoboYKNBEIFhwA+Ymw9SZ7dWXEYbthhVqyEPPA6 Gasr6mi0Z1EMhyN6P9ozLfAM12riJIoeh/HeHTcD9yriIK9QiNZWBykKt0QQ6QK9 Mnqx0m1WVjjbNrTqncGchpCu5eTUW9L48fzDYkVe6nUpnj7k/HOesMFHOUDWcOF0 zYHIhy8oIRMl+jvGpBcQoBB7zAssK/9JAXUQWyY87Aeg9Pf9kCWfuoZbXmdzENUl PUjZ5Fb5wWLHozYi+6cHyGpkVVptuzST53ZdA1+36FsDijFgwUCvbO2q3X2MPCjM 4ObJZ9c6r4E7ZHglM0dU3PTOSNBTO+fVUZBtAgMBAAGjggINMIICCTAdBgNVHQ4E FgQUP37uD5TxAdO2S1DBobHOvn/ZWDowHwYDVR0jBBgwFoAUdmN+6+/vcMU4zq3c +YSPqnnHNqUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUFJRkVO R1RXL2RtTi02LV92Y01VNHpxM2MtWVNQcW5uSE5xVS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvZG1OLTYtX3ZjTVU0enEzYy1ZU1Bxbm5ITnFVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUFJRkVOR1RXL2RtTi02LV92Y01V NHpxM2MtWVNQcW5uSE5xVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAAUb5T16mZTiXG96/wo4VrxgsrZxeJ2HcM++xbHy8/tyHc5fiEyKDNU38U ONbo91XDegQEWwV2e5nwdrCVUlyaRT75I8s5AkgOcMyCd/CIR1JE9I+3jtPpy9BO yUkw/Eu/n2e+l4tgrJwdtOnCeqQjjnZBVmPS8Ig6ldOvkIvYUFg25vV27W2RbC/2 qZuBs5Qlg0NI/OoaDkcyosvko6fBGTENEPwGEmzX9lMZH8J/iX4qKhVTmIgWeKWF Le6v4bA2BReOC/CaZuwi3GfYJ00aVJiW9DE31W7xpF9Y4yNcRFff/WVEDBepuXSm /zJtybKDIbCGKVgf9/stQIE3S0cE -----END CERTIFICATE-----Generated at Mon Oct 27 05:23:24 2025 by rpki-client