$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft File: h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft (raw, json) Hash identifier: SBGyOavdRThVd7rG0p3PSVoa1PFoEU/FQH6/o+yIcwc= Subject key identifier: EE:B9:32:DC:94:D9:37:CD:E4:9C:E1:3B:9F:03:6C:98:EC:16:6C:F1 Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05 Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05 Certificate serial: 0DD5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft Manifest number: 0D85 Signing time: Wed 30 Jul 2025 10:10:19 +0000 Manifest this update: Wed 30 Jul 2025 10:10:19 +0000 Manifest next update: Fri 01 Aug 2025 10:10:19 +0000 Files and hashes: 1: 9Ny-lz9RL07lz766l5gKxDCAT8Q.roa (hash: WzHzlRbbYFvJl0+XcqMw3M7vy6e2/30qe3J40aqKDa8=) 2: BG3m5BCL73ZYXAime1svwkwNimw.roa (hash: xU1bJ+gE0jzveyNgoUVEW44bF/ZUAYEyAT1Or8HNpyU=) 3: D1bzjoH60-Q1IIbcdRQ5BbxBwfU.roa (hash: B81litXl6LWAkBOB6UiiOJjnR7HVlZMTw21zIPkVwuw=) 4: HhKPAxd3vvmwn1Yswdk2S7QJph0.roa (hash: 5T5ntbWpbtbgpwbW3WRK1jpdaqAKzR6rvWOhXLfy+m4=) 5: K47ORmLidXa-eBFtrmMWmmRBSlE.roa (hash: FF+OBZJacV1N9tU/5Wwwb2oLkVHPVE8q/+P7QiYvQLY=) 6: OCMEZ3yMWeFWs9VjsoU6Vh7qz9k.roa (hash: tMRR6LRommOdK0FUdvxqDOUOOAAyiyufq4LdgMtyVyE=) 7: WFZhHwnDq5fSdRpEoNZ81Jb-MTI.roa (hash: NgFTfh2dQpDjSsvdZLO00vjzLbw8CbSfjPR5s+tfSgY=) 8: WbB8Uq5GZ-6LNMifqqSKaUZAYyI.roa (hash: zOkERklex8Vv8cnxTwBLXfd4ypr/sFTvbu3UZQ9GVnU=) 9: X4Ir-wb2q862lqnZwYhfFOsztgo.roa (hash: 1QnuOq3cIqiBSD40VN2XGT88lnToa/NET6w7kFUPYkA=) 10: h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl (hash: 5Dc/IquG2GnFlmCGqRf6WNpakNxstSV93FejiJiSlmM=) 11: n25YhG77D2V2zns7nbF_XyuoVI4.roa (hash: hKXU4gJQSfRk0tWlw+fKEnJI8qZxgRy3veR8UWVtodg=) 12: xN2QuqiGMJ9SjZfxcfndZxeDkDU.roa (hash: x31wNJoUREowdR3qQt1MYb/Lfvw0Z26vh/ZoJLc0KIY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3541 (0xdd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05 Validity Not Before: Jul 30 10:10:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EEB932DC94D937CDE49CE13B9F036C98EC166CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:30:82:04:f9:78:9a:ed:15:cd:a4:5d:0d: 41:a9:40:f4:53:0e:c8:95:74:13:91:36:3c:3b:d1: ad:0a:01:b6:0e:3b:7d:e9:ad:28:9d:1e:d6:0b:83: 2d:ee:e4:6f:12:6b:25:8f:cb:81:33:f8:b7:a3:51: 7c:dd:53:1c:d8:cc:11:4a:79:8e:9e:95:6a:11:3a: 0f:ef:d2:04:b9:4c:09:3a:e7:fa:03:1a:21:8d:91: 50:29:c8:cd:94:48:b2:ff:10:47:a2:2f:89:dc:58: 69:4e:30:53:86:d7:1e:6e:ac:26:9c:01:8f:da:ac: 4e:cf:f2:3e:3d:55:63:9d:74:ba:48:0b:49:36:a3: 5f:24:8b:2e:8f:ce:15:60:c7:1b:84:3a:f3:a8:1f: 0c:dd:be:89:fa:d2:14:66:c5:a3:5d:bc:fb:14:d6: cf:80:69:4a:d9:8f:9b:9a:b0:b7:14:ae:69:d9:1a: d2:e9:87:4a:32:a9:c2:f9:7e:a2:88:66:41:4a:9b: 43:6b:70:2d:d3:04:48:6f:f7:34:3b:18:f9:29:4b: d1:95:67:8c:b2:60:0b:a5:cf:af:f0:bf:36:ce:3c: ea:4f:f8:ff:e5:b1:7c:33:a2:af:a9:9d:fa:ae:a6: e4:e2:2b:b8:ac:3d:23:65:3c:f3:be:fc:2d:db:af: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B9:32:DC:94:D9:37:CD:E4:9C:E1:3B:9F:03:6C:98:EC:16:6C:F1 X509v3 Authority Key Identifier: keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:4d:52:92:0e:03:00:1c:cb:a6:e8:90:92:fc:f7:7b:63:8b: 69:29:df:1b:72:49:d8:0d:f8:5f:90:4d:20:f2:96:1a:6e:e5: 8a:3d:27:81:93:cc:0a:39:f2:7b:56:b4:81:e1:ed:f1:ac:e9: 8d:74:1b:d0:5f:41:86:7b:a4:15:32:c0:b3:5a:d1:a7:a7:83: b6:d5:04:48:c1:39:a9:f2:d8:9b:cf:a5:e7:47:14:26:3d:8a: 69:c0:92:2d:a8:f7:cd:12:3d:73:0d:2d:e2:6e:60:f5:90:6c: 4a:c0:d3:58:19:21:d5:4c:d7:8d:f8:16:14:06:c0:fa:4d:e7: 2f:23:a4:5c:66:76:88:d4:19:25:f6:fa:00:72:e3:dd:01:3f: 4c:20:3f:3e:2d:c7:87:71:df:c8:d2:c9:00:cc:11:8c:da:22: 1f:a6:d0:0a:fe:d1:ef:2c:35:d8:08:12:fb:b2:3e:dc:c0:30: 6d:e8:a5:d6:9a:0f:57:da:5a:60:77:0c:03:b5:f4:14:ef:23: f5:bb:8d:26:69:6d:4a:a9:7b:d0:28:b0:75:e5:eb:e3:02:0f: 77:1c:ad:56:73:51:44:5b:fe:8f:ea:b7:ac:2e:b0:57:4f:8d: d8:1c:8b:57:c8:c4:f1:7b:44:95:0f:dc:2f:e2:01:4c:1d:1f: 2c:a9:3e:df -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdB NEFGRDlFN0ZDMUZFRDRGOTU0NURFNDFDRTQ0MTNEQUNCMEUwNTAeFw0yNTA3MzAx MDEwMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVFQjkzMkRDOTREOTM3 Q0RFNDlDRTEzQjlGMDM2Qzk4RUMxNjZDRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkizCCBPl4mu0VzaRdDUGpQPRTDsiVdBORNjw70a0KAbYOO33p rSidHtYLgy3u5G8SayWPy4Ez+LejUXzdUxzYzBFKeY6elWoROg/v0gS5TAk65/oD GiGNkVApyM2USLL/EEeiL4ncWGlOMFOG1x5urCacAY/arE7P8j49VWOddLpIC0k2 o18kiy6PzhVgxxuEOvOoHwzdvon60hRmxaNdvPsU1s+AaUrZj5uasLcUrmnZGtLp h0oyqcL5fqKIZkFKm0NrcC3TBEhv9zQ7GPkpS9GVZ4yyYAulz6/wvzbOPOpP+P/l sXwzoq+pnfqupuTiK7isPSNlPPO+/C3brx4pAgMBAAGjggILMIICBzAdBgNVHQ4E FgQU7rky3JTZN83knOE7nwNsmOwWbPEwHwYDVR0jBBgwFoAUh6Sv2ef8H+1PlUXe Qc5EE9rLDgUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWVVBTkpI RU4vaDZTdjJlZjhILTFQbFVYZVFjNUVFOXJMRGdVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9oNlN2MmVmOEgtMVBsVVhlUWM1RUU5ckxEZ1UuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ZVUFOSkhFTi9oNlN2MmVmOEgtMVBs VVhlUWM1RUU5ckxEZ1UubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqk1Skg4DABzLpuiQkvz3e2OLaSnfG3JJ2A34X5BNIPKWGm7lij0ngZPMCjny e1a0geHt8azpjXQb0F9BhnukFTLAs1rRp6eDttUESME5qfLYm8+l50cUJj2KacCS Laj3zRI9cw0t4m5g9ZBsSsDTWBkh1UzXjfgWFAbA+k3nLyOkXGZ2iNQZJfb6AHLj 3QE/TCA/Pi3Hh3HfyNLJAMwRjNoiH6bQCv7R7yw12AgS+7I+3MAwbeil1poPV9pa YHcMA7X0FO8j9buNJmltSql70CiwdeXr4wIPdxytVnNRRFv+j+q3rC6wV0+N2ByL V8jE8XtElQ/cL+IBTB0fLKk+3w== -----END CERTIFICATE-----Generated at Thu Jul 31 18:13:35 2025 by rpki-client