$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft File: 4q-M_ZUnD89cLKZdh3d_b7er_TI.mft (raw, json) Hash identifier: 8Uva8PMu76m3cR/S779okAuila71YG3JE0D3yrlVxhA= Subject key identifier: 5C:6A:C1:CE:6B:B5:0E:99:09:73:8E:73:61:A1:2C:AC:5C:60:03:7B Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32 Certificate issuer: /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32 Certificate serial: 0452 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft Manifest number: 0440 Signing time: Wed 30 Jul 2025 11:09:05 +0000 Manifest this update: Wed 30 Jul 2025 11:09:05 +0000 Manifest next update: Fri 01 Aug 2025 11:09:05 +0000 Files and hashes: 1: 4q-M_ZUnD89cLKZdh3d_b7er_TI.crl (hash: 9bTttFWNsNWzHtTN3x1RWG7Nv1+zdB6qFfJc5zHAWgQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32 Validity Not Before: Jul 30 11:09:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5C6AC1CE6BB50E9909738E7361A12CAC5C60037B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1d:6f:cd:62:e4:c0:c0:d6:cf:8a:15:46:04: 26:8b:1d:25:3c:5f:32:a7:13:2c:60:b9:c3:dd:55: 08:0d:0c:2e:73:fb:9c:e5:f8:eb:c0:11:6c:4d:e0: aa:fc:51:88:83:7c:0f:e1:75:f4:05:5c:9a:bc:0b: bc:53:a1:14:04:0f:be:68:6b:fc:d1:ba:f2:16:f3: 10:d1:0f:47:20:72:f8:e2:fb:5f:e9:66:dc:35:a3: b7:94:c3:fa:b3:4c:1d:ee:fb:aa:a2:3d:84:af:cd: ee:df:7b:c0:95:d4:26:e7:f2:a3:1f:3d:16:4e:17: 7c:01:b1:45:b7:b7:6a:e4:a3:08:97:77:a0:f8:46: 49:09:91:10:f3:3c:f7:f9:ab:57:f5:43:fa:41:ba: 00:22:e4:11:d9:ac:eb:e2:67:52:f1:ce:f7:9d:32: 3b:a9:73:b4:17:ad:23:04:96:92:09:b5:ff:b1:b9: ed:16:29:e2:6f:d7:34:e2:f7:0d:b9:55:52:06:92: dc:35:0f:68:9b:90:03:e4:10:bf:ec:14:6e:2a:a9: 97:dc:5e:f6:66:8a:a5:21:ff:6d:b8:b6:f4:ac:3a: da:9d:d8:d8:82:3e:dc:96:8b:4b:22:94:5e:72:2d: d7:8f:1f:f0:0d:20:e4:98:dd:bb:79:b0:69:12:51: b0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6A:C1:CE:6B:B5:0E:99:09:73:8E:73:61:A1:2C:AC:5C:60:03:7B X509v3 Authority Key Identifier: keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:00:56:7d:9b:7f:f6:3a:e8:78:8f:0c:5f:73:eb:74:23:e2: dd:a1:a1:42:e7:44:2f:d1:13:a5:70:74:e1:b0:5d:9d:e7:8b: 3e:52:fd:d5:8a:72:f5:4e:30:1a:42:1e:d2:ea:9d:24:78:a4: ee:02:1e:78:2e:87:b8:93:d9:e1:9d:5a:4a:06:13:ee:22:a5: 74:0e:b2:aa:29:77:70:89:2b:a5:38:84:d3:63:36:4b:2a:60: fa:80:fc:8c:63:e0:b6:b5:62:3b:b9:54:9d:2c:ba:d3:df:39: bc:e3:b2:b9:20:51:7d:c0:b0:21:67:01:be:ed:58:2c:0f:bc: 3b:b2:ae:ef:ca:e3:c0:4a:a3:f3:19:90:ba:1b:85:ac:f4:3d: fc:bc:26:78:3c:38:78:77:a8:47:21:c6:d5:84:45:bb:0a:85: 1f:c4:f5:1e:ed:d2:de:be:b7:44:45:83:2c:75:95:b6:30:7b: 81:cb:71:89:fe:3f:b8:ef:87:cf:e9:cb:38:67:ca:4a:da:48: 00:56:9b:8a:00:67:7d:e6:c9:0f:1e:61:d7:e8:0d:b8:4d:44: f6:aa:3e:b2:9d:b8:50:a6:84:d0:bb:41:88:75:23:d2:59:91: 4c:da:f2:23:cd:71:0e:ca:9f:9d:ec:4e:3d:26:8e:05:64:e5: 0c:6c:20:2f -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTJB RjhDRkQ5NTI3MEZDRjVDMkNBNjVEODc3NzdGNkZCN0FCRkQzMjAeFw0yNTA3MzAx MTA5MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDNkFDMUNFNkJCNTBF OTkwOTczOEU3MzYxQTEyQ0FDNUM2MDAzN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxHW/NYuTAwNbPihVGBCaLHSU8XzKnEyxgucPdVQgNDC5z+5zl +OvAEWxN4Kr8UYiDfA/hdfQFXJq8C7xToRQED75oa/zRuvIW8xDRD0cgcvji+1/p Ztw1o7eUw/qzTB3u+6qiPYSvze7fe8CV1Cbn8qMfPRZOF3wBsUW3t2rkowiXd6D4 RkkJkRDzPPf5q1f1Q/pBugAi5BHZrOviZ1LxzvedMjupc7QXrSMElpIJtf+xue0W KeJv1zTi9w25VVIGktw1D2ibkAPkEL/sFG4qqZfcXvZmiqUh/224tvSsOtqd2NiC PtyWi0silF5yLdePH/ANIOSY3bt5sGkSUbD3AgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUXGrBzmu1DpkJc45zYaEsrFxgA3swHwYDVR0jBBgwFoAU4q+M/ZUnD89cLKZd h3d/b7er/TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUkVDVEFM RS80cS1NX1pVbkQ4OWNMS1pkaDNkX2I3ZXJfVEkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBLzRxLU1fWlVuRDg5Y0xLWmRoM2RfYjdlcl9USS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1JFQ1RBTEUvNHEtTV9aVW5EODljTEta ZGgzZF9iN2VyX1RJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AGgAVn2bf/Y66HiPDF9z63Qj4t2hoULnRC/RE6VwdOGwXZ3niz5S/dWKcvVOMBpC HtLqnSR4pO4CHnguh7iT2eGdWkoGE+4ipXQOsqopd3CJK6U4hNNjNksqYPqA/Ixj 4La1Yju5VJ0sutPfObzjsrkgUX3AsCFnAb7tWCwPvDuyru/K48BKo/MZkLobhaz0 Pfy8Jng8OHh3qEchxtWERbsKhR/E9R7t0t6+t0RFgyx1lbYwe4HLcYn+P7jvh8/p yzhnykraSABWm4oAZ33myQ8eYdfoDbhNRPaqPrKduFCmhNC7QYh1I9JZkUza8iPN cQ7Kn53sTj0mjgVk5QxsIC8= -----END CERTIFICATE-----Generated at Thu Jul 31 18:13:35 2025 by rpki-client