$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft File: 5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft (raw, json) Hash identifier: mbjwA/XyQSu6bi4ecCmcS7Uif7/HME9a/rPoAWUKu24= Subject key identifier: A5:D7:1E:07:AE:C6:EA:AC:BA:B0:ED:C2:09:69:53:07:99:CF:53:F7 Authority key identifier: E6:5F:FB:4C:0C:2E:E8:A6:DF:74:FF:5E:86:63:9B:F4:B4:0D:E8:CA Certificate issuer: /CN=E65FFB4C0C2EE8A6DF74FF5E86639BF4B40DE8CA Certificate serial: 0CD1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft Manifest number: 0CD1 Signing time: Mon 28 Apr 2025 08:50:05 +0000 Manifest this update: Mon 28 Apr 2025 08:50:05 +0000 Manifest next update: Wed 30 Apr 2025 08:50:05 +0000 Files and hashes: 1: 5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl (hash: usNPyYEX98OUIhymFb6bfGNAEWY6oRJXRzkFzpul87M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3281 (0xcd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E65FFB4C0C2EE8A6DF74FF5E86639BF4B40DE8CA Validity Not Before: Apr 28 08:50:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A5D71E07AEC6EAACBAB0EDC20969530799CF53F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:f2:11:f8:d3:a2:30:73:5f:65:fc:65:dc: 2e:42:d7:c9:9d:a7:22:49:ca:8b:c1:f9:e8:50:c8: 52:3a:93:25:42:dc:40:9c:80:b9:49:24:10:a0:bf: 3b:25:01:ea:a9:a6:2d:89:9c:9c:a4:33:4a:b8:5d: cb:ae:35:e1:1f:d0:68:97:d2:e8:2e:97:a7:f4:d4: 0a:3a:a7:7e:68:65:6e:2d:a9:5d:e8:59:df:fd:61: 83:77:07:79:75:01:7d:3d:d4:13:02:a6:58:fd:75: ce:ff:85:23:5f:38:1f:67:22:8e:c7:61:da:2e:69: a1:32:a1:78:2a:8f:50:88:e8:dc:d8:4c:8e:23:8d: 2a:15:bc:c8:23:3d:ce:41:6a:45:82:bf:1c:07:f4: 45:eb:5b:8f:73:ce:83:6e:96:d9:40:6b:09:c6:ae: 7f:f9:aa:9f:30:04:c4:4a:b0:70:75:ab:49:c8:e4: 34:a2:4d:06:65:41:31:dd:ec:f2:68:84:e7:ca:34: a6:eb:ed:cb:93:7e:83:95:fc:e3:95:82:22:08:21: 74:45:23:7c:6f:01:f5:57:4f:16:30:0c:19:9e:f1: 0f:5b:6a:49:52:bb:58:9e:48:1e:42:f7:fa:98:3c: e6:d9:e0:b4:ce:64:19:c8:ba:73:00:70:4f:0b:dc: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:1E:07:AE:C6:EA:AC:BA:B0:ED:C2:09:69:53:07:99:CF:53:F7 X509v3 Authority Key Identifier: keyid:E6:5F:FB:4C:0C:2E:E8:A6:DF:74:FF:5E:86:63:9B:F4:B4:0D:E8:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINCHEIN/5l_7TAwu6KbfdP9ehmOb9LQN6Mo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3a:01:e1:9d:6c:88:7b:c9:72:01:7a:5d:d1:9b:59:8e:f0: b7:7b:35:5a:d4:ba:2b:ba:b6:03:0e:bc:be:59:9f:2a:c4:78: da:0e:56:17:73:9a:09:72:ed:2d:ce:31:fc:f9:01:3e:d1:2c: 13:d4:fd:60:f1:10:1e:b6:8e:2d:17:1a:15:64:f2:63:e3:c2: 22:44:02:bb:4d:67:a7:91:e3:a6:2c:7c:5f:2e:33:15:9f:27: 0e:f4:05:71:39:5a:e5:87:19:b5:f5:df:50:d8:0a:cd:30:e2: ae:0c:13:01:32:f3:05:70:c1:18:f8:74:7b:cc:43:c4:90:31: 21:61:ba:a2:6e:f6:64:a5:8d:e8:32:e0:d8:d9:73:75:fb:e8: 5b:f2:d0:9a:fd:43:a6:88:5f:01:6c:05:57:e6:2e:f7:72:54: c3:37:f4:41:86:5c:2b:41:fc:66:60:91:88:14:40:1e:28:7f: 6a:0b:38:44:51:1b:b2:bc:1b:d8:13:6a:b4:74:8e:e6:02:e6: 9e:a3:41:bc:b7:38:08:73:33:48:0d:cd:6f:f7:d0:02:80:74: 86:39:3b:22:11:ef:2e:6f:4e:e0:53:d4:fb:dd:2c:a3:90:ab: da:e2:38:b1:1a:a5:6a:c7:bd:d1:2e:99:44:4b:aa:1e:d3:48: d1:a7:56:5f -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDNEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY1 RkZCNEMwQzJFRThBNkRGNzRGRjVFODY2MzlCRjRCNDBERThDQTAeFw0yNTA0Mjgw ODUwMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE1RDcxRTA3QUVDNkVB QUNCQUIwRURDMjA5Njk1MzA3OTlDRjUzRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMcvIR+NOiMHNfZfxl3C5C18mdpyJJyovB+ehQyFI6kyVC3ECc gLlJJBCgvzslAeqppi2JnJykM0q4XcuuNeEf0GiX0ugul6f01Ao6p35oZW4tqV3o Wd/9YYN3B3l1AX091BMCplj9dc7/hSNfOB9nIo7HYdouaaEyoXgqj1CI6NzYTI4j jSoVvMgjPc5BakWCvxwH9EXrW49zzoNultlAawnGrn/5qp8wBMRKsHB1q0nI5DSi TQZlQTHd7PJohOfKNKbr7cuTfoOV/OOVgiIIIXRFI3xvAfVXTxYwDBme8Q9baklS u1ieSB5C9/qYPObZ4LTOZBnIunMAcE8L3E+zAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUpdceB67G6qy6sO3CCWlTB5nPU/cwHwYDVR0jBBgwFoAU5l/7TAwu6KbfdP9e hmOb9LQN6MowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElOQ0hF SU4vNWxfN1RBd3U2S2JmZFA5ZWhtT2I5TFFONk1vLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS81bF83VEF3dTZLYmZkUDllaG1PYjlMUU42TW8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MSU5DSEVJTi81bF83VEF3dTZLYmZk UDllaG1PYjlMUU42TW8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAejoB4Z1siHvJcgF6XdGbWY7wt3s1WtS6K7q2Aw68vlmfKsR42g5WF3OaCXLt Lc4x/PkBPtEsE9T9YPEQHraOLRcaFWTyY+PCIkQCu01np5Hjpix8Xy4zFZ8nDvQF cTla5YcZtfXfUNgKzTDirgwTATLzBXDBGPh0e8xDxJAxIWG6om72ZKWN6DLg2Nlz dfvoW/LQmv1DpohfAWwFV+Yu93JUwzf0QYZcK0H8ZmCRiBRAHih/ags4RFEbsrwb 2BNqtHSO5gLmnqNBvLc4CHMzSA3Nb/fQAoB0hjk7IhHvLm9O4FPU+90so5Cr2uI4 sRqlase90S6ZREuqHtNI0adWXw== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net