$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft File: oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft (raw, json) Hash identifier: JS3U7AfqMEXmXtlhoJKX57GfdOYI3GVtlObyfNXDrPk= Subject key identifier: EC:8C:18:10:7F:FB:4A:61:65:6D:4A:EC:DB:2B:BC:90:D5:1F:42:7B Authority key identifier: A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58 Certificate issuer: /CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158 Certificate serial: 1252 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft Manifest number: 1246 Signing time: Mon 28 Apr 2025 09:50:11 +0000 Manifest this update: Mon 28 Apr 2025 09:50:11 +0000 Manifest next update: Wed 30 Apr 2025 09:50:11 +0000 Files and hashes: 1: TMV9x2lBBjY0kChgOnqJcZT6xh8.roa (hash: kHmGblb6P50M24xMqOY00BBP+CcZGGiUSVrhIQt1BCc=) 2: oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl (hash: jFJtSfdoeUi+rr4zNxc3KQ7MSK0HJGVOx7GlyUV1q1k=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4690 (0x1252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158 Validity Not Before: Apr 28 09:50:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EC8C18107FFB4A61656D4AECDB2BBC90D51F427B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:e8:95:e6:7b:44:fb:80:37:b4:eb:cd:8c: a8:2e:cf:1f:c4:2d:b4:e9:08:58:7f:c7:b2:33:e7: 24:ff:70:01:26:64:f0:ca:02:7e:f9:0e:78:5e:e1: 31:f3:0f:c2:f3:50:a6:b8:c6:df:1f:35:60:6a:5e: 36:12:38:3e:0b:7b:02:10:53:c8:85:dc:18:b4:be: 53:13:00:75:a6:b8:b2:6b:85:54:cd:a1:b3:bb:97: b5:72:7b:45:d5:e8:3b:15:bc:5e:c3:32:87:0c:c0: 46:f7:a7:9c:74:47:5e:c6:33:c0:69:fc:1a:8d:c0: 06:02:09:c0:8b:4a:2b:f3:76:19:fa:23:93:f6:56: 00:28:5b:e5:a3:5b:d2:2a:1e:6e:96:98:9f:aa:f3: 10:d8:00:ae:c2:6a:f2:9a:d6:a6:f8:a1:04:98:f4: ad:a5:e3:5b:00:12:21:51:40:c9:47:12:97:da:4c: bf:78:44:cb:73:2d:ad:40:7d:44:74:0d:52:13:73: b1:00:cb:0e:f5:0f:b1:57:2c:09:10:01:3e:b5:ef: 63:f6:54:07:a3:aa:30:7a:ca:e6:19:fa:55:a0:58: e9:da:9b:51:9f:3d:e0:82:c4:46:d6:67:1d:3f:dd: 85:c4:b4:43:30:6f:b0:95:80:e7:99:bb:45:89:af: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8C:18:10:7F:FB:4A:61:65:6D:4A:EC:DB:2B:BC:90:D5:1F:42:7B X509v3 Authority Key Identifier: keyid:A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:86:dd:1c:5b:8f:87:fa:80:d3:c2:1e:8a:f2:ec:54:28:08: 2f:b9:df:3a:36:3a:da:c5:d9:9c:b9:78:28:28:a4:0f:5a:dc: f3:9a:48:3d:01:0a:41:83:e9:b9:d2:11:41:d8:d5:53:4c:be: 4b:8f:fb:da:27:d6:b3:70:47:e7:75:31:05:24:40:db:34:04: b3:65:30:8f:11:40:3a:6a:fa:ef:77:37:3e:36:ee:3b:62:8c: 5c:91:e3:07:36:69:7b:77:16:27:44:73:f4:9c:01:ad:8a:34: 90:87:f4:98:45:f1:16:93:49:b3:91:8f:2f:c1:7d:19:37:19: de:7d:68:5e:90:07:e5:c1:98:32:a4:fa:f0:ce:f2:81:26:36: 4a:a4:78:23:1d:76:1c:fe:e4:7b:34:b7:a1:21:d7:44:8f:30: 52:1f:26:d6:b4:8b:54:40:ca:d0:83:01:c6:ad:24:7c:49:83: cc:3c:73:3d:75:be:9a:e4:8d:fd:86:d0:40:4e:a8:6c:66:36: 9a:db:86:40:4e:bc:e7:23:59:4d:dd:44:c9:40:d1:37:61:43: 3a:48:54:e2:e6:6c:99:21:6d:0b:92:de:57:c3:8d:67:1e:6f: d4:db:c1:b1:46:ee:ac:3d:25:62:6a:31:0c:d3:7b:b6:87:af: cb:20:33:95 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICElIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA1 RTY2Q0ZBNkY4QzBEQUFCRkIxQUY2RkEzMjE4NDI2MDQ0RjE1ODAeFw0yNTA0Mjgw OTUwMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVDOEMxODEwN0ZGQjRB NjE2NTZENEFFQ0RCMkJCQzkwRDUxRjQyN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuC+iV5ntE+4A3tOvNjKguzx/ELbTpCFh/x7Iz5yT/cAEmZPDK An75Dnhe4THzD8LzUKa4xt8fNWBqXjYSOD4LewIQU8iF3Bi0vlMTAHWmuLJrhVTN obO7l7Vye0XV6DsVvF7DMocMwEb3p5x0R17GM8Bp/BqNwAYCCcCLSivzdhn6I5P2 VgAoW+WjW9IqHm6WmJ+q8xDYAK7CavKa1qb4oQSY9K2l41sAEiFRQMlHEpfaTL94 RMtzLa1AfUR0DVITc7EAyw71D7FXLAkQAT6172P2VAejqjB6yuYZ+lWgWOnam1Gf PeCCxEbWZx0/3YXEtEMwb7CVgOeZu0WJrw0vAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQU7IwYEH/7SmFlbUrs2yu8kNUfQnswHwYDVR0jBBgwFoAUoF5mz6b4wNqr+xr2 +jIYQmBE8VgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRX L29GNW16NmI0d05xci14cjItaklZUW1CRThWZy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0Evb0Y1bXo2YjR3TnFyLXhyMi1qSVlRbUJFOFZnLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRXL29GNW16NmI0d05xci14cjIt aklZUW1CRThWZy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAB ht0cW4+H+oDTwh6K8uxUKAgvud86NjraxdmcuXgoKKQPWtzzmkg9AQpBg+m50hFB 2NVTTL5Lj/vaJ9azcEfndTEFJEDbNASzZTCPEUA6avrvdzc+Nu47YoxckeMHNml7 dxYnRHP0nAGtijSQh/SYRfEWk0mzkY8vwX0ZNxnefWhekAflwZgypPrwzvKBJjZK pHgjHXYc/uR7NLehIddEjzBSHybWtItUQMrQgwHGrSR8SYPMPHM9db6a5I39htBA TqhsZjaa24ZATrznI1lN3UTJQNE3YUM6SFTi5myZIW0Lkt5Xw41nHm/U28GxRu6s PSViajEM03u2h6/LIDOV -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net