$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft File: AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft (raw, json) Hash identifier: wg11aVTU8SzqywiE7a49ZEiOyjG/P95+81MbMXsAgUU= Subject key identifier: 37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Certificate serial: 0E0F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft Manifest number: 0D73 Signing time: Sun 01 Jun 2025 21:57:50 +0000 Manifest this update: Sun 01 Jun 2025 21:57:50 +0000 Manifest next update: Tue 03 Jun 2025 21:57:50 +0000 Files and hashes: 1: AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl (hash: Miqcn5/g4YaqDaHxhjPOiwrSayXj/nDQqqb9S47Qcj4=) 2: KRCYoJkBEwU0QDfRdCJlYOxW03c.roa (hash: gDF/Mu6bpv/JZS1EFK0KYw6yp6hX0mDFqSbAdZmzMyo=) 3: _DLp1aYVm6VfKnF2szQEEwfIcVw.roa (hash: PQWNbufEx6fGkApqBrf0z4+5sziOs2tgmKYNFNNRr6k=) 4: cD1kIflUNymx7DOrFmqrTycESAU.roa (hash: Mb85K/N4LobSVZKbHMaAeYVAbHiPsbztUbhncsnEDdw=) 5: iQxvbObwXhnrCBbkCdiBDjZQE_0.roa (hash: mLwml0lj+IbDSeRGbp7ZoMNYWsuaYIhBQBuJ7JGw3dg=) 6: q3dDuQZhRgIT3JpIfHs_1k6uxiA.roa (hash: b8ldYcazBFP64u2fgebwaSBpsAB5/Hc4XYgnk65Ubp0=) 7: t8lahAwp4Nk5b9dfzURZESBeGB4.roa (hash: vMVeq6Sv2yEV3WWrgSlVpx6fCwBxEZzDTkByVVPoivk=) 8: wJSE7aBk5x4r8N95KBFgcyRFujg.roa (hash: vyNR9Q2Z5lcK5ddvUcQ9fXCG63Lwr8eqdwTKg4rbZnw=) 9: zoml0r3ZWfK_qyFCbkcftKlcX6Y.roa (hash: kZb+jpWn6RebjR2BmXQkLh2ah+VTq3XIEq9ZaflJP7c=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Jun 2025 09:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3599 (0xe0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Validity Not Before: Jun 1 21:57:50 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=372D66D089BD7DDFC0D3FACB220981EDE0C5968D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:a5:83:b4:12:b1:26:3f:09:69:85:93:4f: e3:76:ec:36:6c:ae:7c:2c:a9:40:28:2a:07:a7:c4: 8b:01:38:42:c8:0d:ea:c9:84:83:a7:a8:4a:6d:46: c5:19:31:8e:b9:ec:19:d7:af:89:81:99:81:b0:14: 2b:9e:14:e4:78:97:c7:40:fc:84:95:21:28:83:6f: bb:bc:b5:ad:37:75:5c:a2:84:c1:b2:00:a2:58:2f: 66:1e:18:3e:13:6d:c3:c6:81:30:5c:bf:0c:bf:a0: fd:05:1d:34:f7:cc:c2:ad:6e:34:64:00:98:40:37: 01:4f:f1:a5:55:4b:85:5e:44:5a:e5:bd:a8:7c:ec: 03:97:f6:68:46:d1:a5:6b:25:a7:26:29:07:69:df: 7f:59:4f:d0:0a:a6:16:09:e0:4b:f6:a6:59:51:79: ba:0c:fc:cb:20:b5:55:40:43:b6:12:2c:62:c6:3e: 2c:9a:11:6d:b7:da:7f:3d:7f:fb:2c:08:43:4e:37: f9:c8:55:c0:2d:5a:09:8a:08:e4:a6:44:e6:cb:73: 6b:f9:95:01:88:4b:7b:92:72:8b:22:7b:3a:b9:b4: 67:ff:8c:56:f0:4e:21:07:2c:76:02:7b:2e:d1:0b: ed:8a:d4:36:9f:3f:95:21:5c:bd:36:ba:34:fe:36: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D X509v3 Authority Key Identifier: keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:96:af:ab:51:44:06:15:22:bc:f3:c5:d0:d8:31:b2:01:69: 8a:b5:72:27:d9:43:ad:78:c1:3d:0a:a9:92:88:20:72:14:07: c9:17:61:47:6c:9a:dd:2c:b9:c6:26:1b:61:49:56:26:de:b0: 5d:75:61:e3:9c:67:0c:66:16:87:7e:60:8a:9b:c5:45:00:6c: 52:9e:69:b5:fc:ff:8b:1a:a3:dd:96:38:86:0e:d3:e2:ad:6e: 0f:f2:39:ea:7b:68:6f:00:d4:18:85:fe:7f:e1:73:62:9c:91: ac:d6:ef:69:fa:9d:d4:ef:eb:d9:ec:2f:a2:b1:08:1c:11:01: 0b:ec:94:27:25:77:fd:80:16:61:f5:92:7d:6b:bf:7f:bf:37: ba:ed:02:2b:21:0c:96:d7:65:c2:f9:e2:d4:3d:0b:18:8f:d5: af:bc:ba:d3:f8:ae:22:25:11:f7:c2:d4:f3:57:fc:e5:43:3a: 89:99:5f:53:13:0b:7e:9a:45:a3:cc:b0:9f:12:8a:f4:68:68: a1:5f:57:05:d6:f1:00:83:34:62:90:a5:18:de:0d:6c:9a:41: 28:23:f6:e9:ae:05:9a:11:ae:4b:e0:5e:c2:03:4c:f8:cb:b9: 10:2e:53:40:22:3b:2e:aa:39:6a:e4:6f:90:09:33:58:9d:8b: 49:85:61:7f -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgICDg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1 NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yNTA2MDEy MTU3NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM3MkQ2NkQwODlCRDdE REZDMEQzRkFDQjIyMDk4MUVERTBDNTk2OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFfKWDtBKxJj8JaYWTT+N27DZsrnwsqUAoKgenxIsBOELIDerJ hIOnqEptRsUZMY657BnXr4mBmYGwFCueFOR4l8dA/ISVISiDb7u8ta03dVyihMGy AKJYL2YeGD4TbcPGgTBcvwy/oP0FHTT3zMKtbjRkAJhANwFP8aVVS4VeRFrlvah8 7AOX9mhG0aVrJacmKQdp339ZT9AKphYJ4Ev2pllReboM/MsgtVVAQ7YSLGLGPiya EW232n89f/ssCENON/nIVcAtWgmKCOSmRObLc2v5lQGIS3uScosiezq5tGf/jFbw TiEHLHYCey7RC+2K1DafP5UhXL02ujT+NmoFAgMBAAGjggINMIICCTAdBgNVHQ4E FgQUNy1m0Im9fd/A0/rLIgmB7eDFlo0wHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB 76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL0FGY3VtY1pPMWxM NmdkVUI3NkZzLWRSSzZady5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAslq+rUUQGFSK888XQ2DGyAWmKtXIn2UOteME9CqmSiCByFAfJF2FHbJrd LLnGJhthSVYm3rBddWHjnGcMZhaHfmCKm8VFAGxSnmm1/P+LGqPdljiGDtPirW4P 8jnqe2hvANQYhf5/4XNinJGs1u9p+p3U7+vZ7C+isQgcEQEL7JQnJXf9gBZh9ZJ9 a79/vze67QIrIQyW12XC+eLUPQsYj9WvvLrT+K4iJRH3wtTzV/zlQzqJmV9TEwt+ mkWjzLCfEor0aGihX1cF1vEAgzRikKUY3g1smkEoI/bprgWaEa5L4F7CA0z4y7kQ LlNAIjsuqjlq5G+QCTNYnYtJhWF/ -----END CERTIFICATE-----Generated at Tue Jun 3 08:13:28 2025 by rpki-client