$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft File: 7jijaSKsEYQNtLsn0bA0l2BZh2E.mft (raw, json) Hash identifier: hUuZlBU3LuDXCVp2M05CGpUmo9dposMf4DKo6NqCVa8= Subject key identifier: 07:59:04:4F:CB:CE:4A:69:EF:FF:07:4B:47:4F:07:07:BD:94:38:C5 Authority key identifier: EE:38:A3:69:22:AC:11:84:0D:B4:BB:27:D1:B0:34:97:60:59:87:61 Certificate issuer: /CN=EE38A36922AC11840DB4BB27D1B0349760598761 Certificate serial: 02C0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft Manifest number: 02C0 Signing time: Mon 28 Apr 2025 09:50:06 +0000 Manifest this update: Mon 28 Apr 2025 09:50:06 +0000 Manifest next update: Wed 30 Apr 2025 09:50:06 +0000 Files and hashes: 1: 7jijaSKsEYQNtLsn0bA0l2BZh2E.crl (hash: 2BoGmpOGkalUdNjzDa2TRlwsvNTZ5WnRLPvR2Fgbk1g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE38A36922AC11840DB4BB27D1B0349760598761 Validity Not Before: Apr 28 09:50:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0759044FCBCE4A69EFFF074B474F0707BD9438C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5f:06:3e:5e:ed:bc:45:7c:dc:c6:87:c5:77: 59:83:fc:c7:cc:33:45:ac:92:83:fd:b8:7b:b8:e2: c7:a8:2b:f1:46:c0:87:4c:e2:a3:e3:9f:b0:8e:38: ac:c5:0a:f7:2c:77:0e:a8:9d:3f:88:b3:a5:fa:81: 4b:17:2f:da:29:3f:60:8d:fb:a0:e5:97:9a:fd:14: fa:7d:c0:fb:75:e3:6c:84:6f:71:35:4b:dd:de:64: 1c:2f:af:75:93:48:88:64:0f:25:3b:6e:73:8a:43: ba:22:ab:75:42:3e:1c:6f:b9:01:e2:a0:58:fb:f2: 87:f9:fa:e2:dd:f3:7c:d9:52:4c:c3:0f:55:9f:38: 87:b8:b0:66:89:bb:36:d8:04:e4:bf:6f:62:a7:ca: 07:04:dc:96:ed:21:35:79:d1:55:b4:d1:d0:b3:b5: 15:dc:33:8c:6e:fd:bc:fb:6c:dd:94:37:b3:c1:0c: df:0c:59:d7:e8:fd:c6:0b:d7:3a:27:19:92:af:f0: 78:75:09:a5:46:11:73:88:c8:1f:e4:06:21:91:43: 5c:65:ce:b5:d5:b5:e6:bc:6b:aa:fe:14:cb:ec:5b: 95:bc:98:85:a3:ae:d4:01:c3:07:47:5b:e0:54:da: 2d:63:e8:e1:b4:1e:50:61:ec:df:bc:74:7e:2b:df: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:59:04:4F:CB:CE:4A:69:EF:FF:07:4B:47:4F:07:07:BD:94:38:C5 X509v3 Authority Key Identifier: keyid:EE:38:A3:69:22:AC:11:84:0D:B4:BB:27:D1:B0:34:97:60:59:87:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7jijaSKsEYQNtLsn0bA0l2BZh2E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INITRISE/7jijaSKsEYQNtLsn0bA0l2BZh2E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:d3:71:5c:ea:33:47:5e:1d:ab:5d:94:8a:3a:8a:66:e9:f9: 1a:3f:1c:9d:f0:b1:41:3d:f0:a9:42:c3:a8:fa:03:19:7d:e5: 95:8e:7a:70:cb:06:cb:18:8d:c7:9e:e3:23:ed:ae:25:a5:ef: c6:0d:2a:ba:17:f2:5e:c3:3e:b0:1d:c3:14:0b:8d:25:51:4f: 5b:f2:ed:2e:98:cc:96:5d:bb:28:9d:df:dd:07:ad:cc:a9:5a: 35:50:32:6a:25:55:66:70:aa:1e:b1:6f:2d:22:48:fb:36:10: 0d:9a:03:23:13:69:86:64:a3:1f:f7:50:90:cf:2d:30:f9:6e: 20:91:8c:79:c9:48:57:0c:f4:4d:1a:b2:f9:91:94:28:e8:70: 09:26:70:ad:53:e8:ef:30:96:0a:bb:5d:e8:6d:3a:2e:99:19: ae:5d:dd:7f:da:ca:4d:c1:9b:fe:f8:b7:53:93:f8:0c:f5:0d: d1:7d:6d:ec:9a:f6:52:50:bc:0e:98:67:ec:8f:6c:9d:02:c8: 46:b1:80:30:ae:a9:60:96:8e:c2:6c:31:45:13:3f:16:6e:d2: 25:c0:ba:cd:47:05:b5:58:3f:25:aa:92:c1:d8:c7:8a:c2:d6: 07:3a:e1:6f:f8:54:1f:96:e0:6a:00:89:86:91:65:f6:9c:ab: 1b:0b:c1:90 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUUz OEEzNjkyMkFDMTE4NDBEQjRCQjI3RDFCMDM0OTc2MDU5ODc2MTAeFw0yNTA0Mjgw OTUwMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA3NTkwNDRGQ0JDRTRB NjlFRkZGMDc0QjQ3NEYwNzA3QkQ5NDM4QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiXwY+Xu28RXzcxofFd1mD/MfMM0WskoP9uHu44seoK/FGwIdM 4qPjn7COOKzFCvcsdw6onT+Is6X6gUsXL9opP2CN+6Dll5r9FPp9wPt142yEb3E1 S93eZBwvr3WTSIhkDyU7bnOKQ7oiq3VCPhxvuQHioFj78of5+uLd83zZUkzDD1Wf OIe4sGaJuzbYBOS/b2KnygcE3JbtITV50VW00dCztRXcM4xu/bz7bN2UN7PBDN8M Wdfo/cYL1zonGZKv8Hh1CaVGEXOIyB/kBiGRQ1xlzrXVtea8a6r+FMvsW5W8mIWj rtQBwwdHW+BU2i1j6OG0HlBh7N+8dH4r30VjAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUB1kET8vOSmnv/wdLR08HB72UOMUwHwYDVR0jBBgwFoAU7jijaSKsEYQNtLsn 0bA0l2BZh2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU5JVFJJ U0UvN2ppamFTS3NFWVFOdExzbjBiQTBsMkJaaDJFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS83amlqYVNLc0VZUU50THNuMGJBMGwyQlpoMkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTklUUklTRS83amlqYVNLc0VZUU50 THNuMGJBMGwyQlpoMkUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdNNxXOozR14dq12UijqKZun5Gj8cnfCxQT3wqULDqPoDGX3llY56cMsGyxiN x57jI+2uJaXvxg0quhfyXsM+sB3DFAuNJVFPW/LtLpjMll27KJ3f3QetzKlaNVAy aiVVZnCqHrFvLSJI+zYQDZoDIxNphmSjH/dQkM8tMPluIJGMeclIVwz0TRqy+ZGU KOhwCSZwrVPo7zCWCrtd6G06LpkZrl3df9rKTcGb/vi3U5P4DPUN0X1t7Jr2UlC8 Dphn7I9snQLIRrGAMK6pYJaOwmwxRRM/Fm7SJcC6zUcFtVg/JaqSwdjHisLWBzrh b/hUH5bgagCJhpFl9pyrGwvBkA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net