$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft File: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft (raw, json) Hash identifier: M78A4T7Psy84fDU6GMMk/YQ74qV6ZtUbnSNsx9Q4dRg= Subject key identifier: C2:10:B9:50:DC:2F:C5:59:54:A2:91:A0:56:6A:BB:4D:13:24:4F:D4 Authority key identifier: 71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3 Certificate issuer: /CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3 Certificate serial: 562E7D337150288EAB106C5E55596B8614EDF3D7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft Manifest number: 0112 Signing time: Sun 12 Jul 2026 00:20:52 +0000 Manifest this update: Sun 12 Jul 2026 00:15:52 +0000 Manifest next update: Mon 13 Jul 2026 03:28:52 +0000 Files and hashes: 1: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl (hash: RsmVHiQXlUd8gNd22w+aRRnmFPMhUdbkG45cfDJhVnA=) 2: 323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa (hash: kPG07upBltBMpeU3lVOAGDxJPAnyCOXOCAXQZ9d58mQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 21:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2e:7d:33:71:50:28:8e:ab:10:6c:5e:55:59:6b:86:14:ed:f3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3 Validity Not Before: Jul 12 00:15:52 2026 GMT Not After : Jul 13 03:28:52 2026 GMT Subject: CN=C210B950DC2FC55954A291A0566ABB4D13244FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:eb:dc:a5:4a:65:7c:79:f3:7d:a0:8b:27: 51:8a:d1:6b:5b:e1:15:d4:89:69:d7:3e:d3:d7:8c: 27:f3:ef:ce:a2:67:60:26:06:8a:75:75:0e:f5:7a: 8a:61:63:75:d6:a8:95:14:41:db:81:70:be:bb:d3: 21:7a:aa:b8:05:b9:71:da:08:be:d9:e4:32:c7:26: 3f:78:fb:98:d5:53:1a:9b:71:50:4a:29:6d:a8:f9: 29:ba:14:6f:7f:75:f4:63:e8:1b:59:4e:5d:67:8e: da:05:d3:80:cc:02:a7:b9:ef:42:ec:1b:0e:14:99: 3f:53:85:28:ba:5a:88:c7:bb:c7:eb:72:2c:51:94: a0:a9:fd:ad:d5:b4:46:03:3c:26:37:9e:fd:3f:b8: ef:d5:3c:94:ad:5e:20:89:9c:ef:ad:a1:77:41:dc: ba:35:96:aa:a0:35:6e:5a:bd:18:81:91:b2:eb:3c: dd:ae:70:59:12:a2:22:f0:f8:9a:34:76:be:b0:e3: a5:28:94:af:b7:21:66:63:7a:a7:9c:37:02:28:65: 0e:b6:ae:52:57:40:b1:4f:7e:91:77:e5:eb:2f:6d: f0:92:00:04:ff:dc:23:52:9a:01:99:9f:d9:56:ea: 04:a4:b9:d7:f7:f6:96:99:b1:cc:db:d8:b1:09:2b: 91:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:10:B9:50:DC:2F:C5:59:54:A2:91:A0:56:6A:BB:4D:13:24:4F:D4 X509v3 Authority Key Identifier: keyid:71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f3:d6:1f:9c:d8:06:1f:f9:89:72:4d:04:ae:09:47:39:da: 0a:9e:e8:ab:0d:1a:4f:02:a3:95:45:f7:33:de:19:5d:97:40: 5d:7f:ed:0e:c3:be:7e:c2:62:fd:e4:a6:46:f4:1b:bc:80:41: a8:39:b4:c1:32:b3:15:bb:52:9b:c1:d1:93:b1:5d:6a:75:db: 36:82:54:e8:a5:da:c8:2f:21:3f:2a:ac:a2:c1:73:ff:2d:60: 84:a8:34:9b:b9:69:f7:44:cf:50:f3:60:ac:43:13:2d:70:e0: bf:22:00:62:8e:1a:84:64:e6:5a:3d:b1:ef:74:45:67:0a:ab: 8b:36:09:3b:df:70:6c:96:a2:86:1c:1f:d0:ce:24:02:7d:e1: cd:5c:88:50:1d:23:15:bc:14:9e:82:14:22:82:6d:ad:4b:af: 3d:d5:e8:a8:03:35:e1:5e:54:7e:75:11:13:c3:31:6d:5d:03: eb:c9:dc:65:bb:80:ce:90:3b:e9:5c:3a:e4:3a:66:21:ba:56: 21:1d:a8:f0:2f:dc:7b:3a:7a:8e:9f:e4:fd:bc:5c:3c:c0:89: 52:82:0a:19:26:70:df:3f:99:c5:1f:1a:56:65:0b:35:79:92: 17:60:d0:37:80:98:e9:4c:17:67:c6:4d:60:0d:0e:27:2c:25: ba:28:a7:23 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUVi59M3FQKI6rEGxeVVlrhhTt89cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTM0MDE4NTQ3RDc3QjY1RUJDRDBGQzQ5NDFEQzgx MTNGQUVFMzAeFw0yNjA3MTIwMDE1NTJaFw0yNjA3MTMwMzI4NTJaMDMxMTAvBgNV BAMTKEMyMTBCOTUwREMyRkM1NTk1NEEyOTFBMDU2NkFCQjREMTMyNDRGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51OvcpUplfHnzfaCLJ1GK0Wtb 4RXUiWnXPtPXjCfz786iZ2AmBop1dQ71eophY3XWqJUUQduBcL670yF6qrgFuXHa CL7Z5DLHJj94+5jVUxqbcVBKKW2o+Sm6FG9/dfRj6BtZTl1njtoF04DMAqe570Ls Gw4UmT9ThSi6WojHu8frcixRlKCp/a3VtEYDPCY3nv0/uO/VPJStXiCJnO+toXdB 3Lo1lqqgNW5avRiBkbLrPN2ucFkSoiLw+Jo0dr6w46UolK+3IWZjeqecNwIoZQ62 rlJXQLFPfpF35esvbfCSAAT/3CNSmgGZn9lW6gSkudf39paZsczb2LEJK5FvAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUwhC5UNwvxVlUopGgVmq7TRMkT9QwHwYDVR0j BBgwFoAUceU0AYVH13tl680PxJQdyBE/ruMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv Mi83MUU1MzQwMTg1NDdENzdCNjVFQkNEMEZDNDk0MURDODExM0ZBRUUzLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zLzcxRTUzNDAxODU0N0Q3N0I2NUVCQ0QwRkM0OTQx REM4MTEzRkFFRTMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8yLzcxRTUzNDAxODU0N0Q3 N0I2NUVCQ0QwRkM0OTQxREM4MTEzRkFFRTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAb89YfnNgGH/mJ ck0ErglHOdoKnuirDRpPAqOVRfcz3hldl0Bdf+0Ow75+wmL95KZG9Bu8gEGoObTB MrMVu1KbwdGTsV1qdds2glTopdrILyE/KqyiwXP/LWCEqDSbuWn3RM9Q82CsQxMt cOC/IgBijhqEZOZaPbHvdEVnCquLNgk733BslqKGHB/QziQCfeHNXIhQHSMVvBSe ghQigm2tS6891eioAzXhXlR+dRETwzFtXQPrydxlu4DOkDvpXDrkOmYhulYhHajw L9x7OnqOn+T9vFw8wIlSggoZJnDfP5nFHxpWZQs1eZIXYNA3gJjpTBdnxk1gDQ4n LCW6KKcj -----END CERTIFICATE-----Generated at Sun Jul 12 14:07:24 2026 by rpki-client