$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft File: wNLIw9TC-7ok09g1CKsULy1JQn0.mft (raw, json) Hash identifier: umORhVzAnCm4aMPJrif18JdNaC0PkuP3koearRH2Yzg= Subject key identifier: B7:A0:72:FF:D5:A0:F5:D2:70:56:47:B6:60:24:DB:B3:C4:3B:95:BC Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Certificate serial: 1442 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft Manifest number: 1403 Signing time: Mon 27 Oct 2025 09:58:55 +0000 Manifest this update: Mon 27 Oct 2025 09:58:55 +0000 Manifest next update: Wed 29 Oct 2025 09:58:55 +0000 Files and hashes: 1: FLAncUewSF6hei4RPk49VjC_PQg.roa (hash: 8fZqIG/MMfhI6s+b0ATJTXxQ4tAwF4sO0Th4u13XmXk=) 2: LC_aFhBz7fd7C6FebQLwmHV3t9I.roa (hash: 8QLVAAyFdZwfuwuj45MZA7t9fieWo6P6SMjDJo6pGeM=) 3: LgggCVwPbNdcnrCqVMduXlIqpsw.roa (hash: 4ju6mocONKVH9JpMBsRARsenKxMgM5gKSyN495Ilqg0=) 4: VunfuzJ7FKNptif6Q8gzb0wR95E.roa (hash: OTzSlzlxAlVbWUDG/GkIkODkIAkRsiSwSYY13w3XFEM=) 5: XIhWOlBKRqMagkzqFrODB_R8sI8.roa (hash: 9l8Iouic8Gg8mE30CkufgikNUXR5oK1+0q+hXl9OL1g=) 6: aN1MRs9ky_ae4kbv2Ws0Wicbi94.roa (hash: sFRpEdz/RLn0u4unDaARJlbqPIW1CDZKiuTdFbZiM/M=) 7: aytBevsakWW2oNPJfb9kF-YHitU.roa (hash: Lps8rcvk2vL+W/b6q00wg4AJ2PHp3UoZgX8QZBHYtBY=) 8: wNLIw9TC-7ok09g1CKsULy1JQn0.crl (hash: HrQ6o/FJXVdqfniFmXzaZDmGe4P19Y8rG8qgHzkUyOs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 01:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5186 (0x1442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Validity Not Before: Oct 27 09:58:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B7A072FFD5A0F5D2705647B66024DBB3C43B95BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9b:62:44:b4:9e:d6:69:a1:7c:5f:31:b7:69: c1:b2:10:9d:9e:b2:99:07:6a:82:b5:03:07:6d:c9: 55:f4:2e:18:dd:c8:21:13:16:f9:e9:d9:38:68:16: d4:24:24:5d:83:53:c4:ad:79:42:0a:ce:6c:af:cd: f9:78:da:7d:18:fb:00:53:d8:b4:06:1d:75:3e:06: 25:c1:2e:35:59:b5:b1:83:30:50:58:cb:1f:19:5b: 63:46:d1:aa:21:e6:a8:76:8e:d7:72:46:26:86:51: 1d:bf:1f:90:6d:a8:5b:fb:73:79:81:da:0e:29:95: be:29:d4:22:e8:b1:b9:c4:3a:22:a0:b3:30:c4:18: a0:94:f4:c2:f2:bb:96:1f:ac:c0:81:7b:8c:49:3f: e9:94:a7:c2:a1:1e:77:db:74:8f:40:92:85:1c:ad: 67:62:49:d0:fd:c2:32:48:7e:df:67:b8:46:34:cb: 53:6d:d7:ea:ed:fa:af:0c:47:6d:07:a5:12:ed:76: 1d:2d:b6:2a:d6:99:f9:5a:bb:35:5a:b6:89:63:bc: 43:cf:09:c0:cb:a5:50:d1:25:5c:b2:38:a0:e2:a8: 4f:e1:ff:32:25:5c:26:a5:32:ef:28:36:0c:10:84: ba:81:4b:74:6d:0e:c5:90:56:6b:35:eb:4c:aa:51: 39:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A0:72:FF:D5:A0:F5:D2:70:56:47:B6:60:24:DB:B3:C4:3B:95:BC X509v3 Authority Key Identifier: keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:5d:88:47:43:ea:62:76:a2:92:de:4f:05:08:9f:33:84:7f: 78:8b:06:2d:d8:3a:6a:13:68:b0:14:8a:26:b7:a2:41:ac:13: 31:f6:1d:77:11:ca:7d:34:11:2a:d3:e3:b0:df:93:76:a2:58: 91:73:39:73:32:74:aa:df:f6:3b:1c:8f:e9:22:50:ee:55:32: 21:94:e7:81:fc:ca:fd:62:b0:ad:27:2c:fe:c3:1e:fc:60:33: 3c:98:e1:01:0d:95:2c:e0:b9:bb:1d:11:ed:a7:d1:32:89:67: 09:07:ab:b9:40:01:69:24:ab:bc:3e:60:ab:89:aa:69:d2:9f: a2:b7:44:11:7e:8e:cf:a2:0f:99:ac:b2:c5:87:1b:c6:16:21: 50:15:77:4f:f8:22:35:9f:0a:99:78:11:8c:f7:35:9a:14:31: 76:d8:02:e8:fa:c1:b0:76:55:5a:9a:cd:c6:08:5b:a6:32:32: 66:18:f2:ea:21:3d:6b:62:55:ec:61:9b:da:ff:c2:a6:35:20: 5d:97:d0:60:a3:4b:46:00:72:68:29:da:be:2b:a7:09:e7:2f: f0:19:77:fb:fc:a2:f2:c9:c3:ff:e4:b8:3e:57:d9:06:ac:2b: 5f:0a:48:ea:c3:95:29:89:6e:75:42:ee:1e:95:aa:32:ba:2d: 3e:f4:69:cf -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICFEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yNTEwMjcw OTU4NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI3QTA3MkZGRDVBMEY1 RDI3MDU2NDdCNjYwMjREQkIzQzQzQjk1QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYm2JEtJ7WaaF8XzG3acGyEJ2espkHaoK1AwdtyVX0LhjdyCET Fvnp2ThoFtQkJF2DU8SteUIKzmyvzfl42n0Y+wBT2LQGHXU+BiXBLjVZtbGDMFBY yx8ZW2NG0aoh5qh2jtdyRiaGUR2/H5BtqFv7c3mB2g4plb4p1CLosbnEOiKgszDE GKCU9MLyu5YfrMCBe4xJP+mUp8KhHnfbdI9AkoUcrWdiSdD9wjJIft9nuEY0y1Nt 1+rt+q8MR20HpRLtdh0ttirWmflauzVatoljvEPPCcDLpVDRJVyyOKDiqE/h/zIl XCalMu8oNgwQhLqBS3RtDsWQVms160yqUTlFAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUt6By/9Wg9dJwVke2YCTbs8Q7lbwwHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1 CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi93TkxJdzlUQy03b2swOWcxQ0tz VUx5MUpRbjAubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlV2I R0PqYnaikt5PBQifM4R/eIsGLdg6ahNosBSKJreiQawTMfYddxHKfTQRKtPjsN+T dqJYkXM5czJ0qt/2OxyP6SJQ7lUyIZTngfzK/WKwrScs/sMe/GAzPJjhAQ2VLOC5 ux0R7afRMolnCQeruUABaSSrvD5gq4mqadKfordEEX6Oz6IPmayyxYcbxhYhUBV3 T/giNZ8KmXgRjPc1mhQxdtgC6PrBsHZVWprNxghbpjIyZhjy6iE9a2JV7GGb2v/C pjUgXZfQYKNLRgByaCnaviunCecv8Bl3+/yi8snD/+S4PlfZBqwrXwpI6sOVKYlu dULuHpWqMrotPvRpzw== -----END CERTIFICATE-----Generated at Tue Oct 28 23:10:57 2025 by rpki-client