$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft File: oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft (raw, json) Hash identifier: fElUAMe6MM5DusbFSJzYtLxuaYIGsFCVUtxuiDCGg8I= Subject key identifier: EC:8C:18:10:7F:FB:4A:61:65:6D:4A:EC:DB:2B:BC:90:D5:1F:42:7B Authority key identifier: A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58 Certificate issuer: /CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158 Certificate serial: 1269 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft Manifest number: 125D Signing time: Sun 01 Jun 2025 21:57:05 +0000 Manifest this update: Sun 01 Jun 2025 21:57:05 +0000 Manifest next update: Tue 03 Jun 2025 21:57:05 +0000 Files and hashes: 1: TMV9x2lBBjY0kChgOnqJcZT6xh8.roa (hash: kHmGblb6P50M24xMqOY00BBP+CcZGGiUSVrhIQt1BCc=) 2: oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl (hash: ZYHGPwq+rx6JL1UYyjmFVPeUmCEgVNt/uvo6S6Ew0YI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Jun 2025 09:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4713 (0x1269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158 Validity Not Before: Jun 1 21:57:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EC8C18107FFB4A61656D4AECDB2BBC90D51F427B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:e8:95:e6:7b:44:fb:80:37:b4:eb:cd:8c: a8:2e:cf:1f:c4:2d:b4:e9:08:58:7f:c7:b2:33:e7: 24:ff:70:01:26:64:f0:ca:02:7e:f9:0e:78:5e:e1: 31:f3:0f:c2:f3:50:a6:b8:c6:df:1f:35:60:6a:5e: 36:12:38:3e:0b:7b:02:10:53:c8:85:dc:18:b4:be: 53:13:00:75:a6:b8:b2:6b:85:54:cd:a1:b3:bb:97: b5:72:7b:45:d5:e8:3b:15:bc:5e:c3:32:87:0c:c0: 46:f7:a7:9c:74:47:5e:c6:33:c0:69:fc:1a:8d:c0: 06:02:09:c0:8b:4a:2b:f3:76:19:fa:23:93:f6:56: 00:28:5b:e5:a3:5b:d2:2a:1e:6e:96:98:9f:aa:f3: 10:d8:00:ae:c2:6a:f2:9a:d6:a6:f8:a1:04:98:f4: ad:a5:e3:5b:00:12:21:51:40:c9:47:12:97:da:4c: bf:78:44:cb:73:2d:ad:40:7d:44:74:0d:52:13:73: b1:00:cb:0e:f5:0f:b1:57:2c:09:10:01:3e:b5:ef: 63:f6:54:07:a3:aa:30:7a:ca:e6:19:fa:55:a0:58: e9:da:9b:51:9f:3d:e0:82:c4:46:d6:67:1d:3f:dd: 85:c4:b4:43:30:6f:b0:95:80:e7:99:bb:45:89:af: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8C:18:10:7F:FB:4A:61:65:6D:4A:EC:DB:2B:BC:90:D5:1F:42:7B X509v3 Authority Key Identifier: keyid:A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:db:88:eb:ff:c3:e6:bd:f9:3c:81:4c:f0:dc:a6:d6:9c:c2: 06:e5:d0:28:87:d8:18:e9:e6:e5:35:8b:10:cb:1f:43:97:49: ad:05:83:4c:8c:ba:fe:6d:cd:df:48:1e:74:19:74:ed:d1:2c: ee:a7:0e:4c:97:8e:dc:98:83:3b:aa:89:d7:01:d2:ae:55:c6: 30:a2:cf:97:d8:7c:af:b3:ce:e9:ed:aa:84:30:a9:8b:28:1f: 77:55:ac:b6:34:80:ea:ed:cf:5c:1b:37:20:db:0c:31:52:ed: 7d:bb:e0:d2:41:ab:ef:d4:bc:c5:3f:9c:ed:5d:09:6b:ba:a9: 52:b8:a0:b8:49:e0:b9:e2:44:76:c4:3f:3c:96:07:c5:a1:41: 0e:47:d8:13:12:16:b8:f0:a5:89:8d:c2:61:20:f5:83:6d:ff: c4:e9:4a:77:b3:02:44:b0:66:ef:82:16:14:9f:a5:05:04:7d: 4b:54:0a:a9:44:5f:e1:f9:be:df:0d:4e:b4:18:4a:24:42:ad: b8:3f:b3:f9:69:3c:80:6c:24:50:a8:aa:6e:70:8c:f7:71:00: bd:f8:d1:f4:bf:df:3c:ee:f3:40:28:b8:c5:10:1b:25:e0:e3: 16:20:1a:d7:b2:bc:05:88:43:7a:bc:26:cd:aa:3c:67:2a:0b: ff:a9:a9:03 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICEmkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA1 RTY2Q0ZBNkY4QzBEQUFCRkIxQUY2RkEzMjE4NDI2MDQ0RjE1ODAeFw0yNTA2MDEy MTU3MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVDOEMxODEwN0ZGQjRB NjE2NTZENEFFQ0RCMkJCQzkwRDUxRjQyN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuC+iV5ntE+4A3tOvNjKguzx/ELbTpCFh/x7Iz5yT/cAEmZPDK An75Dnhe4THzD8LzUKa4xt8fNWBqXjYSOD4LewIQU8iF3Bi0vlMTAHWmuLJrhVTN obO7l7Vye0XV6DsVvF7DMocMwEb3p5x0R17GM8Bp/BqNwAYCCcCLSivzdhn6I5P2 VgAoW+WjW9IqHm6WmJ+q8xDYAK7CavKa1qb4oQSY9K2l41sAEiFRQMlHEpfaTL94 RMtzLa1AfUR0DVITc7EAyw71D7FXLAkQAT6172P2VAejqjB6yuYZ+lWgWOnam1Gf PeCCxEbWZx0/3YXEtEMwb7CVgOeZu0WJrw0vAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQU7IwYEH/7SmFlbUrs2yu8kNUfQnswHwYDVR0jBBgwFoAUoF5mz6b4wNqr+xr2 +jIYQmBE8VgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRX L29GNW16NmI0d05xci14cjItaklZUW1CRThWZy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0Evb0Y1bXo2YjR3TnFyLXhyMi1qSVlRbUJFOFZnLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRXL29GNW16NmI0d05xci14cjIt aklZUW1CRThWZy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDC 24jr/8Pmvfk8gUzw3KbWnMIG5dAoh9gY6eblNYsQyx9Dl0mtBYNMjLr+bc3fSB50 GXTt0Szupw5Ml47cmIM7qonXAdKuVcYwos+X2Hyvs87p7aqEMKmLKB93Vay2NIDq 7c9cGzcg2wwxUu19u+DSQavv1LzFP5ztXQlruqlSuKC4SeC54kR2xD88lgfFoUEO R9gTEha48KWJjcJhIPWDbf/E6Up3swJEsGbvghYUn6UFBH1LVAqpRF/h+b7fDU60 GEokQq24P7P5aTyAbCRQqKpucIz3cQC9+NH0v9887vNAKLjFEBsl4OMWIBrXsrwF iEN6vCbNqjxnKgv/qakD -----END CERTIFICATE-----Generated at Tue Jun 3 08:13:42 2025 by rpki-client