$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft File: 9-nqSCJyPUfjBC-dj7bkK20KZoM.mft (raw, json) Hash identifier: 2o4wMXsMXeutNO2E0pAJSCpIBL++WGkjhURF8teOcU0= Subject key identifier: C8:87:76:32:C0:93:24:5F:AE:FB:6C:F0:C2:FE:BB:13:E5:5F:CE:F7 Authority key identifier: F7:E9:EA:48:22:72:3D:47:E3:04:2F:9D:8F:B6:E4:2B:6D:0A:66:83 Certificate issuer: /CN=F7E9EA4822723D47E3042F9D8FB6E42B6D0A6683 Certificate serial: 3C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft Manifest number: 3B Signing time: Sat 25 Oct 2025 17:57:07 +0000 Manifest this update: Sat 25 Oct 2025 17:57:07 +0000 Manifest next update: Sat 25 Oct 2025 23:57:07 +0000 Files and hashes: 1: 9-nqSCJyPUfjBC-dj7bkK20KZoM.crl (hash: geIj3FK9ewMMi+7nL6rI8imEhPmpb5O6gbz/uocuaZ8=) 2: F_tz9YMtONIj4ey14wz4m4cSAEQ.roa (hash: vCLC3PokhGJHFJYOcIOorW8KHb+s04OzjY9WuV9W2RI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7E9EA4822723D47E3042F9D8FB6E42B6D0A6683 Validity Not Before: Oct 25 17:57:07 2025 GMT Not After : Oct 7 15:30:24 2026 GMT Subject: CN=C8877632C093245FAEFB6CF0C2FEBB13E55FCEF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:93:92:df:ae:22:d2:95:8c:1b:4e:dc:04: df:b9:19:a1:1d:ab:43:b3:e7:74:3f:48:34:9a:3d: 25:21:c4:30:f1:61:b0:00:7a:95:64:f8:ed:8a:f1: 64:91:92:30:41:26:03:5c:aa:3f:e8:71:1f:58:ef: b5:c7:86:44:1e:97:09:b5:24:a8:3b:2e:d1:21:56: e4:9e:85:03:f3:1a:2e:a2:25:3c:f3:c5:69:66:be: f7:89:40:fc:1b:a5:96:79:de:e2:c7:11:bc:64:1d: ed:cb:21:51:31:16:3e:5c:a6:73:a0:55:79:25:97: 12:1e:2b:7a:9d:18:5a:da:8c:82:fa:f4:1c:5b:36: ce:67:a6:11:f3:d1:ee:6c:6d:cd:99:7f:bd:bd:ad: e1:f3:d2:0f:bb:13:e3:39:56:85:31:07:f6:32:f6: 1e:6b:95:87:3c:57:0c:de:0e:57:19:37:5a:d8:57: 09:6f:51:99:34:a3:80:ed:b3:f6:dc:d3:01:f3:5e: 4c:f2:a2:1e:e6:02:ac:99:c1:0e:a0:9a:51:99:ab: bb:d2:df:11:f7:9f:c0:6f:f4:74:60:ef:5f:5e:6d: 60:4f:74:8e:f0:96:04:16:fc:85:e6:70:e6:df:dc: bf:b8:a7:49:16:d9:e6:c4:19:ba:96:f0:65:39:14: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:87:76:32:C0:93:24:5F:AE:FB:6C:F0:C2:FE:BB:13:E5:5F:CE:F7 X509v3 Authority Key Identifier: keyid:F7:E9:EA:48:22:72:3D:47:E3:04:2F:9D:8F:B6:E4:2B:6D:0A:66:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:4c:50:b4:04:a9:36:3f:c8:a7:b5:4b:4f:17:c9:8e:17:90: 2a:58:6f:ca:63:89:bb:e1:b1:09:f3:33:1b:ed:02:3c:a1:86: 1b:10:61:45:cf:59:32:e5:23:63:e1:6f:9e:01:42:a4:c3:53: 1e:db:2f:7c:e5:c3:ab:de:ad:c0:f9:80:e0:b4:98:33:5f:fd: f7:53:0a:50:c5:86:36:ae:44:c4:08:5f:9d:d4:87:1a:fb:14: b8:5f:83:bd:7c:d9:74:dc:d9:28:99:af:ac:22:10:5c:f0:1e: e6:bd:8a:34:cd:38:8d:fb:7e:30:4a:b1:77:43:73:b2:b4:2b: cf:e3:9f:d8:44:2b:1b:4e:03:d1:3d:f6:cc:9f:78:bc:e9:9a: b2:29:4a:4e:04:d0:e5:17:e7:58:8f:06:87:7b:ff:a4:07:1d: 8f:00:e5:73:03:72:bd:f4:4a:4c:42:c4:fe:3b:fe:04:68:65: b4:33:1b:50:4c:45:82:01:66:bf:1d:46:7d:2b:bc:d2:ad:51: 8c:2f:8b:84:95:b0:3e:2a:72:41:26:9e:a7:c5:42:1b:ba:a7: b9:81:27:25:30:0a:9d:9d:af:58:5d:09:a8:bf:34:6a:c8:f6: 97:33:0c:7a:43:f4:b6:f7:0b:35:fc:05:60:87:42:d9:90:65: 25:08:33:8d -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGN0U5 RUE0ODIyNzIzRDQ3RTMwNDJGOUQ4RkI2RTQyQjZEMEE2NjgzMB4XDTI1MTAyNTE3 NTcwN1oXDTI2MTAwNzE1MzAyNFowMzExMC8GA1UEAxMoQzg4Nzc2MzJDMDkzMjQ1 RkFFRkI2Q0YwQzJGRUJCMTNFNTVGQ0VGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMy8k5LfriLSlYwbTtwE37kZoR2rQ7PndD9INJo9JSHEMPFhsAB6 lWT47YrxZJGSMEEmA1yqP+hxH1jvtceGRB6XCbUkqDsu0SFW5J6FA/MaLqIlPPPF aWa+94lA/Bullnne4scRvGQd7cshUTEWPlymc6BVeSWXEh4rep0YWtqMgvr0HFs2 zmemEfPR7mxtzZl/vb2t4fPSD7sT4zlWhTEH9jL2HmuVhzxXDN4OVxk3WthXCW9R mTSjgO2z9tzTAfNeTPKiHuYCrJnBDqCaUZmru9LfEfefwG/0dGDvX15tYE90jvCW BBb8heZw5t/cv7inSRbZ5sQZupbwZTkUMvsCAwEAAaOCAgMwggH/MB0GA1UdDgQW BBTIh3YywJMkX677bPDC/rsT5V/O9zAfBgNVHSMEGDAWgBT36epIInI9R+MEL52P tuQrbQpmgzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9aVVNPLzkt bnFTQ0p5UFVmakJDLWRqN2JrSzIwS1pvTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev OS1ucVNDSnlQVWZqQkMtZGo3YmtLMjBLWm9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvWlVTTy85LW5xU0NKeVBVZmpCQy1kajdia0sy MEtab00ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUExQtASp Nj/Ip7VLTxfJjheQKlhvymOJu+GxCfMzG+0CPKGGGxBhRc9ZMuUjY+FvngFCpMNT HtsvfOXDq96twPmA4LSYM1/991MKUMWGNq5ExAhfndSHGvsUuF+DvXzZdNzZKJmv rCIQXPAe5r2KNM04jft+MEqxd0NzsrQrz+Of2EQrG04D0T32zJ94vOmasilKTgTQ 5RfnWI8Gh3v/pAcdjwDlcwNyvfRKTELE/jv+BGhltDMbUExFggFmvx1GfSu80q1R jC+LhJWwPipyQSaep8VCG7qnuYEnJTAKnZ2vWF0JqL80asj2lzMMekP0tvcLNfwF YIdC2ZBlJQgzjQ== -----END CERTIFICATE-----Generated at Sat Oct 25 22:43:34 2025 by rpki-client