$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft File: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft (raw, json) Hash identifier: /iDIFKbvCH6eWHMuXU38iMz9YGwkTEBrs4A0jzrE1ao= Subject key identifier: DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24 Authority key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 Certificate issuer: /CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Certificate serial: 0D93 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft Manifest number: 0D82 Signing time: Tue 16 Sep 2025 21:18:04 +0000 Manifest this update: Tue 16 Sep 2025 21:18:04 +0000 Manifest next update: Thu 18 Sep 2025 21:18:04 +0000 Files and hashes: 1: 9Earbhkqa-LgKS3Zg9gzfEBE5p0.roa (hash: Yro1LcI6Kqx48UAAj4bjWnwW3ENJmLQLiXoZ5hUTbAI=) 2: FXF0lO6EKMfGFrxa8tlZrvsmlqU.roa (hash: ffe3eFzQZ5bTVer3tI679pLNLQMpKZnEK747Ju2K6Qk=) 3: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl (hash: yAARONXBe5cNerY+GBcNQH1to/+nKdclaqiMv3c0G/E=) 4: aoCWMpsnJlxGVgYTo5eKVxrONMw.roa (hash: fnlUiKyutHjmzMA5ysK7pd75qboQLdU1ymUxPVf3zqA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 08:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3475 (0xd93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Validity Not Before: Sep 16 21:18:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DD9126B198369AE7D7CDD8B2326B111CB450F324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:72:54:60:7a:c1:b6:26:3c:af:58:7d:ac: c7:97:9d:37:73:7e:38:36:58:16:51:a1:e1:1c:f4: f1:17:59:29:bb:bc:34:76:44:94:e6:46:34:e5:96: d0:6e:d0:47:6a:3e:01:14:51:cc:fd:7c:d9:b5:f9: fc:60:bd:c7:b0:a5:a3:cb:d7:e2:65:34:9f:88:82: 31:64:8b:3d:80:91:b6:92:53:3f:61:89:f9:82:f0: 64:ad:53:08:b9:45:45:69:fc:a7:8e:66:df:2a:4c: 10:77:b0:b1:3b:4a:a4:24:26:db:33:00:0d:1c:b0: af:a7:4d:43:f0:84:6a:48:3c:e0:91:19:51:40:12: 1b:43:7d:ae:28:df:33:e0:3a:20:ea:66:c9:6a:f2: f5:b0:c2:2f:0f:26:7c:97:e0:6d:f7:db:40:8d:a6: 09:f8:b7:f4:38:51:8a:f5:7f:c6:3f:a6:2f:83:cc: 72:3a:8b:c4:eb:9d:90:df:16:fb:71:7c:19:ef:7b: da:f6:a7:2e:ff:a7:6c:19:59:c9:09:79:ec:6d:8b: ef:36:c9:d6:de:19:68:c1:05:4e:fe:94:4e:c7:15: 12:58:ec:b5:b6:5d:2b:78:db:fb:23:7a:17:d5:0f: 15:2f:45:df:74:03:2e:77:b3:c8:45:2a:bb:79:03: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24 X509v3 Authority Key Identifier: keyid:3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f7:ab:7b:e1:18:3b:47:13:15:9e:b4:7f:a9:f4:d9:ab:25: 18:8d:3e:3f:ed:0b:88:7b:7f:ae:3f:4e:e7:9a:77:25:bc:31: fa:03:69:28:4d:cb:f4:69:6c:bf:3b:f0:43:c5:bc:84:5e:6e: fd:99:cd:a3:12:f2:8d:85:84:7e:5c:76:30:69:5a:bd:63:ef: 59:d9:c8:ed:8e:ad:d2:11:fb:0a:cd:19:6d:bb:6e:c2:63:c8: fa:f4:e8:a8:31:8a:e6:5c:56:cb:82:f8:e3:a6:38:f5:c1:d4: 17:82:27:ed:d3:6c:46:a3:15:fd:ca:8b:37:a1:b9:40:25:fa: 2d:a1:1b:6f:5b:0a:18:84:e3:84:c4:a2:c6:74:e3:4f:da:a2: 03:08:dc:b0:da:57:c1:0b:c7:b6:05:f0:f3:95:9c:5e:1d:1e: 47:a0:01:5d:d4:57:8b:51:af:19:74:1a:d5:30:f1:a6:dd:8d: 7a:9a:a4:62:c4:74:e6:81:d0:ac:aa:b5:a4:0e:3d:2b:c5:78: b6:fc:75:8f:10:cb:98:c5:bc:b8:04:9c:a1:b1:70:59:5b:ab: a6:49:5f:dc:2d:a2:cc:d2:f0:32:03:f1:be:8d:b5:95:ab:b9: 63:92:35:40:05:86:c3:03:f8:4e:f4:8e:ce:9e:ff:14:47:9f: b5:d0:07:4f -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0I0 OUI4N0EzRkYzODk2MzRDN0QwOTBENzZEQUVBQTk2RkVFRkQ5MDAeFw0yNTA5MTYy MTE4MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEREOTEyNkIxOTgzNjlB RTdEN0NERDhCMjMyNkIxMTFDQjQ1MEYzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0rXJUYHrBtiY8r1h9rMeXnTdzfjg2WBZRoeEc9PEXWSm7vDR2 RJTmRjTlltBu0EdqPgEUUcz9fNm1+fxgvcewpaPL1+JlNJ+IgjFkiz2AkbaSUz9h ifmC8GStUwi5RUVp/KeOZt8qTBB3sLE7SqQkJtszAA0csK+nTUPwhGpIPOCRGVFA EhtDfa4o3zPgOiDqZslq8vWwwi8PJnyX4G3320CNpgn4t/Q4UYr1f8Y/pi+DzHI6 i8TrnZDfFvtxfBnve9r2py7/p2wZWckJeexti+82ydbeGWjBBU7+lE7HFRJY7LW2 XSt42/sjehfVDxUvRd90Ay53s8hFKrt5A7zxAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU3ZEmsZg2mufXzdiyMmsRHLRQ8yQwHwYDVR0jBBgwFoAUO0m4ej/ziWNMfQkN dtrqqW/u/ZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNSRUUv TzBtNGVqX3ppV05NZlFrTmR0cnFxV191X1pBLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PMG00ZWpfemlXTk1mUWtOZHRycXFXX3VfWkEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OQ1JFRS9PMG00ZWpfemlXTk1mUWtOZHRy cXFXX3VfWkEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfer e+EYO0cTFZ60f6n02aslGI0+P+0LiHt/rj9O55p3Jbwx+gNpKE3L9GlsvzvwQ8W8 hF5u/ZnNoxLyjYWEflx2MGlavWPvWdnI7Y6t0hH7Cs0ZbbtuwmPI+vToqDGK5lxW y4L446Y49cHUF4In7dNsRqMV/cqLN6G5QCX6LaEbb1sKGITjhMSixnTjT9qiAwjc sNpXwQvHtgXw85WcXh0eR6ABXdRXi1GvGXQa1TDxpt2NepqkYsR05oHQrKq1pA49 K8V4tvx1jxDLmMW8uAScobFwWVurpklf3C2izNLwMgPxvo21lau5Y5I1QAWGwwP4 TvSOzp7/FEeftdAHTw== -----END CERTIFICATE-----Generated at Thu Sep 18 05:03:28 2025 by rpki-client