$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft File: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json) Hash identifier: 6KdBPXX0WMe4pX2Xy7iAp7yAWOfeqAlYl8DYGiyR/S4= Subject key identifier: 76:37:4F:36:61:92:7F:19:AA:CD:34:82:CB:48:D4:B4:ED:57:48:D6 Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05 Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005 Certificate serial: 33F7E94415A72A0D346D36C02FCC7C3663F2F438 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft Manifest number: 01F9 Signing time: Sat 11 Jul 2026 21:25:35 +0000 Manifest this update: Sat 11 Jul 2026 21:20:35 +0000 Manifest next update: Sun 12 Jul 2026 21:36:35 +0000 Files and hashes: 1: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=) 2: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=) 3: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=) 4: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=) 5: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=) 6: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=) 7: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=) 8: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: Sw0ope9Cv9DN0ttLpz5Udr/WHVp48rAkRGAyBT/TKHw=) 9: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 21:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f7:e9:44:15:a7:2a:0d:34:6d:36:c0:2f:cc:7c:36:63:f2:f4:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005 Validity Not Before: Jul 11 21:20:35 2026 GMT Not After : Jul 12 21:36:35 2026 GMT Subject: CN=76374F3661927F19AACD3482CB48D4B4ED5748D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a4:22:07:a1:d5:ab:ce:8e:14:cb:37:7e:e6: 34:5d:52:29:03:8f:b7:f6:5d:8e:65:37:df:f0:89: 25:a0:31:95:d3:10:6a:6e:a1:b4:4c:3b:3c:c6:93: f7:af:54:38:7d:78:e4:14:86:85:50:86:7b:38:38: 67:03:23:99:0b:f6:58:05:d6:1c:87:0c:69:b1:8f: 15:65:95:42:e0:4d:52:03:89:f8:48:4f:43:d5:08: f3:43:fb:8f:00:19:33:d4:63:14:d4:7e:fc:2d:54: 0e:93:fa:bf:7a:33:57:5f:76:c7:ff:2a:a3:2a:33: 2e:2e:c4:8d:10:30:52:6d:e4:23:e1:67:85:e0:3b: 8a:8e:05:31:59:7b:f9:ea:dc:37:89:a5:b5:59:75: 79:04:0f:25:60:df:95:ef:65:2a:33:56:40:10:87: a8:d6:2d:07:6d:a6:1e:1e:55:10:52:d6:27:fe:9e: bf:2d:40:9e:14:e8:c0:da:7b:3a:4b:63:e2:67:7c: 34:3d:18:df:7a:36:3e:4d:45:7c:0b:f0:c9:e3:be: 08:80:b5:65:43:39:fe:5b:d2:84:43:d9:5d:3e:8f: a5:ca:81:09:05:d5:f7:66:39:11:6b:c7:3b:97:f9: a2:01:7d:aa:1c:5b:6d:98:f2:2f:65:7d:5a:c0:ab: b4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:37:4F:36:61:92:7F:19:AA:CD:34:82:CB:48:D4:B4:ED:57:48:D6 X509v3 Authority Key Identifier: keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d9:ea:ed:92:a0:a2:53:be:8d:cf:cf:d6:18:b1:40:75:05: 7a:95:49:12:97:cf:a9:41:48:53:b6:72:42:9b:b4:0c:71:f3: 5c:d5:eb:1e:05:a2:ff:83:5e:60:13:c2:89:c9:78:bb:a2:39: a6:4b:27:33:00:52:be:05:c9:79:33:fb:bb:d6:c4:be:17:a3: a6:99:11:b6:ef:61:11:ca:c1:3e:d3:30:17:55:17:7e:1f:db: 74:ba:a2:ff:2c:e4:e8:03:9b:6c:81:72:14:b8:5f:67:9f:0b: 8a:67:b1:e7:1f:e6:f1:4a:a9:46:79:17:74:e0:ef:13:0e:3f: b7:5b:f2:2a:72:f9:5b:21:a1:66:d6:58:15:e6:e5:b8:07:93: b9:fd:3d:66:d7:5e:1b:2b:fe:83:e0:f0:84:46:04:29:4a:2f: 79:44:8b:3d:df:0a:ea:b5:04:aa:32:cf:45:78:68:97:b2:b3: a2:d1:ab:da:7c:b5:05:ea:93:33:71:51:9f:86:17:18:38:60: 94:18:42:1a:0e:a2:f6:17:ef:94:dd:89:68:6e:b6:4d:88:e9: 33:e8:7b:12:f2:17:62:99:04:a4:58:e3:bf:03:dc:57:47:01: f4:29:26:0c:91:b1:55:bc:9d:a2:c5:ef:24:06:c1:a1:77:a7: f0:fa:fd:7a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUM/fpRBWnKg00bTbAL8x8NmPy9DgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDNDlCQUUyNDMw QkVFQzM1NEMxQjE0RjIyNkU3NjFGQzlCRENGMDA1MB4XDTI2MDcxMTIxMjAzNVoX DTI2MDcxMjIxMzYzNVowMzExMC8GA1UEAxMoNzYzNzRGMzY2MTkyN0YxOUFBQ0Qz NDgyQ0I0OEQ0QjRFRDU3NDhENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJykIgeh1avOjhTLN37mNF1SKQOPt/ZdjmU33/CJJaAxldMQam6htEw7PMaT 969UOH145BSGhVCGezg4ZwMjmQv2WAXWHIcMabGPFWWVQuBNUgOJ+EhPQ9UI80P7 jwAZM9RjFNR+/C1UDpP6v3ozV192x/8qoyozLi7EjRAwUm3kI+FnheA7io4FMVl7 +ercN4mltVl1eQQPJWDfle9lKjNWQBCHqNYtB22mHh5VEFLWJ/6evy1AnhTowNp7 Oktj4md8ND0Y33o2Pk1FfAvwyeO+CIC1ZUM5/lvShEPZXT6PpcqBCQXV92Y5EWvH O5f5ogF9qhxbbZjyL2V9WsCrtGMCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBR2N082 YZJ/GarNNILLSNS07VdI1jAfBgNVHSMEGDAWgBTEm64kML7sNUwbFPIm52H8m9zw BTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzMvQzQ5QkFFMjQzMEJFRUMzNTRDMUIx NEYyMjZFNzYxRkM5QkRDRjAwNS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveEp1dUpEQy03RFZNR3hUeUp1ZGhfSnZj OEFVLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8zL0M0OUJBRTI0MzBCRUVDMzU0QzFC MTRGMjI2RTc2MUZDOUJEQ0YwMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA12ertkqCiU76Nz8/WGLFA dQV6lUkSl8+pQUhTtnJCm7QMcfNc1eseBaL/g15gE8KJyXi7ojmmSyczAFK+Bcl5 M/u71sS+F6OmmRG272ERysE+0zAXVRd+H9t0uqL/LOToA5tsgXIUuF9nnwuKZ7Hn H+bxSqlGeRd04O8TDj+3W/IqcvlbIaFm1lgV5uW4B5O5/T1m114bK/6D4PCERgQp Si95RIs93wrqtQSqMs9FeGiXsrOi0avafLUF6pMzcVGfhhcYOGCUGEIaDqL2F++U 3YlobrZNiOkz6HsS8hdimQSkWOO/A9xXRwH0KSYMkbFVvJ2ixe8kBsGhd6fw+v16 -----END CERTIFICATE-----Generated at Sun Jul 12 12:03:38 2026 by rpki-client