$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNDC/v-t8ls_AEkBxdlN-AkPHxZ2cQqA.mft File: v-t8ls_AEkBxdlN-AkPHxZ2cQqA.mft (raw, json) Hash identifier: 1XEsYH8Fdf5H8eM0Gjadz2Tu5Mb1dNYMiTOOeuSlnAA= Subject key identifier: 4E:C2:6E:0E:83:A6:A4:F0:C4:80:13:6D:76:76:76:85:61:0E:00:92 Authority key identifier: BF:EB:7C:96:CF:C0:12:40:71:76:53:7E:02:43:C7:C5:9D:9C:42:A0 Certificate issuer: /CN=BFEB7C96CFC012407176537E0243C7C59D9C42A0 Certificate serial: 0AA3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v-t8ls_AEkBxdlN-AkPHxZ2cQqA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNDC/v-t8ls_AEkBxdlN-AkPHxZ2cQqA.mft Manifest number: 0AA3 Signing time: Sun 01 Jun 2025 21:55:44 +0000 Manifest this update: Sun 01 Jun 2025 21:55:44 +0000 Manifest next update: Tue 03 Jun 2025 21:55:44 +0000 Files and hashes: 1: v-t8ls_AEkBxdlN-AkPHxZ2cQqA.crl (hash: 0yEN1IwOEqgVyB9SKVmO0i0WzidzcQkvfxwpKEZOn+k=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNDC/v-t8ls_AEkBxdlN-AkPHxZ2cQqA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNDC/v-t8ls_AEkBxdlN-AkPHxZ2cQqA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/v-t8ls_AEkBxdlN-AkPHxZ2cQqA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Jun 2025 09:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2723 (0xaa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFEB7C96CFC012407176537E0243C7C59D9C42A0 Validity Not Before: Jun 1 21:55:44 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4EC26E0E83A6A4F0C480136D76767685610E0092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:07:a4:0c:f3:9c:29:a3:b8:0e:3d:81:4e: 2d:56:b1:8c:b7:4e:01:8b:4f:46:93:b4:14:ad:b2: 5a:46:5d:ff:20:6e:cc:ec:85:5a:2d:49:1c:2c:de: 78:97:82:e5:10:5b:2b:17:7a:e8:e6:9b:b3:57:2b: 78:7f:86:ed:1c:da:77:6b:f2:31:e6:e4:26:fa:59: 5a:e4:bd:79:85:d3:dd:04:bc:10:1d:9e:19:b9:6d: 5f:8b:45:ff:60:cd:20:21:d6:d4:8c:87:d4:71:3b: f1:5b:62:68:56:c7:80:0c:9f:0f:af:7a:5b:cc:a2: e1:88:55:d3:73:aa:51:52:d8:59:18:b6:2a:ce:2c: 62:c2:04:b5:58:ee:eb:62:ff:ef:90:b2:b2:d2:e7: 6f:ed:4a:9e:62:b7:91:c1:38:f7:c2:e6:56:31:ec: c0:66:3e:f3:3f:f6:67:fb:6f:66:8b:7f:8e:8a:f6: c9:f1:07:c1:c5:c5:35:b9:c5:52:65:78:d6:3e:67: 37:6e:e9:65:50:f5:d5:7c:66:5f:92:3b:b0:2c:79: fd:7f:f7:5e:22:c4:4a:1b:fe:ac:37:b2:62:85:1b: 8a:33:20:65:bb:ad:3b:d9:8e:00:0a:82:30:39:a7: 87:f6:56:1a:dc:fd:21:a1:06:44:6f:ed:7c:d5:f5: 34:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C2:6E:0E:83:A6:A4:F0:C4:80:13:6D:76:76:76:85:61:0E:00:92 X509v3 Authority Key Identifier: keyid:BF:EB:7C:96:CF:C0:12:40:71:76:53:7E:02:43:C7:C5:9D:9C:42:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNDC/v-t8ls_AEkBxdlN-AkPHxZ2cQqA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v-t8ls_AEkBxdlN-AkPHxZ2cQqA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNDC/v-t8ls_AEkBxdlN-AkPHxZ2cQqA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:71:b3:0d:fe:45:c6:8a:b6:67:14:7f:ef:6f:e9:7a:06:7b: df:92:25:d7:46:5b:5d:03:b4:e5:2d:79:0c:99:cf:cf:ea:ae: 61:fb:c6:cb:58:d8:8e:77:4e:78:7e:e9:e8:92:f3:aa:98:8a: 94:6b:e8:e2:59:1f:1b:e0:e5:57:6b:cc:86:cb:6b:48:90:d3: 45:55:ce:e8:e3:f7:b6:2e:b2:40:24:d4:fc:af:e4:d0:87:fe: 4f:32:d0:7f:9d:e8:5a:ec:3b:c2:90:ab:62:8a:54:e3:2b:31: 18:b3:97:e5:70:f4:e7:cb:93:00:57:d8:ad:6e:d6:33:68:a3: 79:12:b6:25:14:f1:b9:38:ac:ad:1b:b4:f1:35:1a:86:1f:0b: 23:ab:fa:28:be:7a:3a:2e:05:e4:6b:38:0d:f1:9f:1c:66:29: 6f:6b:13:fa:e8:34:43:3d:69:b8:68:26:ce:3d:14:24:38:ab: 80:f5:87:65:21:7c:9d:b1:27:40:dd:b0:28:89:1d:f7:2c:2c: 79:a9:1e:c3:8c:36:08:3a:fb:5c:f8:3c:32:8b:50:4d:69:11: 16:2a:dd:ee:11:9e:b5:67:7d:3b:e5:0c:e1:8a:07:19:d7:09: 83:06:ff:17:19:54:51:e7:44:6c:c6:ee:04:28:98:55:39:a2: 46:bc:ce:ff -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICCqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkZF QjdDOTZDRkMwMTI0MDcxNzY1MzdFMDI0M0M3QzU5RDlDNDJBMDAeFw0yNTA2MDEy MTU1NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRFQzI2RTBFODNBNkE0 RjBDNDgwMTM2RDc2NzY3Njg1NjEwRTAwOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwjAekDPOcKaO4Dj2BTi1WsYy3TgGLT0aTtBStslpGXf8gbszs hVotSRws3niXguUQWysXeujmm7NXK3h/hu0c2ndr8jHm5Cb6WVrkvXmF090EvBAd nhm5bV+LRf9gzSAh1tSMh9RxO/FbYmhWx4AMnw+velvMouGIVdNzqlFS2FkYtirO LGLCBLVY7uti/++QsrLS52/tSp5it5HBOPfC5lYx7MBmPvM/9mf7b2aLf46K9snx B8HFxTW5xVJleNY+Zzdu6WVQ9dV8Zl+SO7Asef1/914ixEob/qw3smKFG4ozIGW7 rTvZjgAKgjA5p4f2Vhrc/SGhBkRv7XzV9TRlAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUTsJuDoOmpPDEgBNtdnZ2hWEOAJIwHwYDVR0jBBgwFoAUv+t8ls/AEkBxdlN+ AkPHxZ2cQqAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOREMv di10OGxzX0FFa0J4ZGxOLUFrUEh4WjJjUXFBLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS92LXQ4bHNfQUVrQnhkbE4tQWtQSHhaMmNRcUEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05EQy92LXQ4bHNfQUVrQnhkbE4tQWtQ SHhaMmNRcUEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXGz Df5Fxoq2ZxR/72/pegZ735Il10ZbXQO05S15DJnPz+quYfvGy1jYjndOeH7p6JLz qpiKlGvo4lkfG+DlV2vMhstrSJDTRVXO6OP3ti6yQCTU/K/k0If+TzLQf53oWuw7 wpCrYopU4ysxGLOX5XD058uTAFfYrW7WM2ijeRK2JRTxuTisrRu08TUahh8LI6v6 KL56Oi4F5Gs4DfGfHGYpb2sT+ug0Qz1puGgmzj0UJDirgPWHZSF8nbEnQN2wKIkd 9ywseakew4w2CDr7XPg8MotQTWkRFird7hGetWd9O+UM4YoHGdcJgwb/FxlUUedE bMbuBCiYVTmiRrzO/w== -----END CERTIFICATE-----Generated at Tue Jun 3 08:16:21 2025 by rpki-client