$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft File: BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json) Hash identifier: FATu75D2tkc4+akLNaTVvqkkkCJQDf14bPpJjgNYTRQ= Subject key identifier: A2:43:BD:DE:D4:83:3C:4C:F1:00:1A:96:FD:12:9F:33:20:2F:9D:99 Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D Certificate issuer: /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Certificate serial: 3A07121903929FCDB5E1B03F3BE2685C59B30BBB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft Manifest number: 6E Signing time: Sun 12 Jul 2026 04:51:30 +0000 Manifest this update: Sun 12 Jul 2026 04:46:30 +0000 Manifest next update: Mon 13 Jul 2026 05:24:30 +0000 Files and hashes: 1: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: 1HA7bY7rYrPJ9EnEL3/DDVGNJ24M16Wv6fE0l62FOMM=) 2: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=) 3: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=) 4: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=) 5: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 21:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:07:12:19:03:92:9f:cd:b5:e1:b0:3f:3b:e2:68:5c:59:b3:0b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Validity Not Before: Jul 12 04:46:30 2026 GMT Not After : Jul 13 05:24:30 2026 GMT Subject: CN=A243BDDED4833C4CF1001A96FD129F33202F9D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:59:20:1f:3d:4f:c7:29:7d:6b:bd:01:26: 76:ee:ba:d4:cc:11:84:84:ee:d5:9a:47:26:ba:cc: 63:3a:1b:38:fb:02:f5:a9:48:32:04:a9:b9:1f:4b: 56:75:be:d1:b0:89:bc:d9:c4:e7:77:37:29:68:b4: 0f:f6:79:b2:d7:25:63:f7:ae:2d:ef:5b:b3:47:d3: 20:10:ae:0d:69:0f:3d:8c:48:c2:c0:d1:b8:d7:1a: fa:ef:e2:e8:61:a3:9e:40:07:ae:d9:20:86:74:8d: dc:53:5e:88:f0:40:fb:72:62:1d:e0:ba:74:87:7e: 37:d6:7c:64:06:e8:46:aa:39:9f:09:65:42:a8:a1: 29:36:94:92:cb:5d:3a:f6:94:14:bd:c0:8d:40:19: 9b:cf:45:52:d5:cf:9e:91:ae:1f:a0:fb:1f:43:3e: e3:34:6f:c0:cf:c7:4a:28:9d:dc:06:22:9b:c9:44: 64:94:e4:c6:4a:b9:d6:cd:42:26:3b:da:87:1c:64: 39:0d:cf:a7:d8:5a:50:60:54:4f:4c:be:b3:ac:83: ef:61:97:ad:9e:48:91:55:b7:78:d3:32:2b:16:3d: 44:ef:97:48:de:03:69:be:9c:9a:64:13:13:ed:97: de:63:55:ca:4c:50:73:c0:d9:03:56:9f:c3:3c:51: 9f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:43:BD:DE:D4:83:3C:4C:F1:00:1A:96:FD:12:9F:33:20:2F:9D:99 X509v3 Authority Key Identifier: keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d9:da:e6:1a:f9:38:57:54:6f:1c:27:91:0e:4f:89:64:4b: 7b:a1:c7:af:03:d7:f0:1c:29:12:95:0e:11:05:7f:77:91:8c: a5:df:a9:a2:06:0d:a7:0d:cb:bb:4c:d5:bb:2a:72:5e:20:31: 41:b1:b5:f0:51:db:8a:b3:bf:6b:01:83:f4:33:06:08:74:cd: 6f:f8:0e:d3:4c:77:c2:cd:66:8e:c3:ea:fc:84:aa:1a:2b:4c: 04:e3:8d:7e:01:57:0e:43:7e:4c:e8:97:f9:94:a1:21:1f:a7: 63:ef:83:1b:b9:55:98:b6:ea:78:c0:54:bb:94:04:ac:1d:1a: b3:b0:67:31:7d:5d:46:17:b3:53:ff:4e:14:83:a2:15:2d:47: f2:3a:1b:f1:02:5c:2a:a1:fd:53:35:04:2a:ac:68:58:70:c3: f8:e0:8f:9a:b2:23:88:aa:a4:4b:3f:0e:57:f5:de:6d:0d:04: 85:bd:c5:1f:27:71:97:75:af:bc:e6:b1:3f:4f:13:a8:ca:d5: bb:83:49:fe:bf:c6:e4:85:f9:90:72:a1:65:fb:23:61:9b:e2: ca:86:8d:36:23:fa:90:fb:44:29:03:59:08:27:83:bb:96:b7: 61:19:e5:35:34:2e:62:9d:a6:f3:e3:41:e0:fa:28:3c:fb:d0: d6:ae:01:2e -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUOgcSGQOSn8214bA/O+JoXFmzC7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5 RjY0OEY2RDAeFw0yNjA3MTIwNDQ2MzBaFw0yNjA3MTMwNTI0MzBaMDMxMTAvBgNV BAMTKEEyNDNCRERFRDQ4MzNDNENGMTAwMUE5NkZEMTI5RjMzMjAyRjlEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClolkgHz1Pxyl9a70BJnbuutTM EYSE7tWaRya6zGM6Gzj7AvWpSDIEqbkfS1Z1vtGwibzZxOd3NylotA/2ebLXJWP3 ri3vW7NH0yAQrg1pDz2MSMLA0bjXGvrv4uhho55AB67ZIIZ0jdxTXojwQPtyYh3g unSHfjfWfGQG6EaqOZ8JZUKooSk2lJLLXTr2lBS9wI1AGZvPRVLVz56Rrh+g+x9D PuM0b8DPx0oondwGIpvJRGSU5MZKudbNQiY72occZDkNz6fYWlBgVE9MvrOsg+9h l62eSJFVt3jTMisWPUTvl0jeA2m+nJpkExPtl95jVcpMUHPA2QNWn8M8UZ/nAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUokO93tSDPEzxABqW/RKfMyAvnZkwHwYDVR0j BBgwFoAUvcdxXSn05DGY1ZMVtxZ07p9kj20wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO LzEvQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMy9CREM3NzE1RDI5RjRFNDMxOThENTkzMTVCNzE2 NzRFRTlGNjQ4RjZELmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElOLzEvQkRDNzcxNUQyOUY0 RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJHZ2uYa+ThX VG8cJ5EOT4lkS3uhx68D1/AcKRKVDhEFf3eRjKXfqaIGDacNy7tM1bsqcl4gMUGx tfBR24qzv2sBg/QzBgh0zW/4DtNMd8LNZo7D6vyEqhorTATjjX4BVw5Dfkzol/mU oSEfp2Pvgxu5VZi26njAVLuUBKwdGrOwZzF9XUYXs1P/ThSDohUtR/I6G/ECXCqh /VM1BCqsaFhww/jgj5qyI4iqpEs/Dlf13m0NBIW9xR8ncZd1r7zmsT9PE6jK1buD Sf6/xuSF+ZByoWX7I2Gb4sqGjTYj+pD7RCkDWQgng7uWt2EZ5TU0LmKdpvPjQeD6 KDz70NauAS4= -----END CERTIFICATE-----Generated at Sun Jul 12 14:18:04 2026 by rpki-client