$ rpki-client -vvf rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft File: B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft (raw, json) Hash identifier: +wFdK1QLYishj7sXtLRPNl471KhOPb0RdH/BQF4vFV8= Subject key identifier: D4:79:1B:CB:2A:2C:24:F1:9A:08:16:CE:AA:E4:3F:63:1C:FF:7F:7D Authority key identifier: B7:2C:12:A5:51:5B:F3:3E:A3:5A:CD:6C:99:11:C9:AC:6D:E9:EA:05 Certificate issuer: /CN=B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05 Certificate serial: 16662C647FF20BAC315B67C921BC81B2383906F0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft Manifest number: 43 Signing time: Tue 30 Jun 2026 05:33:11 +0000 Manifest this update: Tue 30 Jun 2026 05:28:11 +0000 Manifest next update: Wed 01 Jul 2026 07:30:11 +0000 Files and hashes: 1: B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl (hash: eSzKfccZKL7OHruYLxXZe/0WbJiR29leyhzvi2Kct1Q=) 2: 3135372e31352e37302e302f32332d3233203d3e20313530373639.roa (hash: RIJKr3g2uIwf5iqGFGjqViDDGGsabsMlFTzqof1niUM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 19:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:66:2c:64:7f:f2:0b:ac:31:5b:67:c9:21:bc:81:b2:38:39:06:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05 Validity Not Before: Jun 30 05:28:11 2026 GMT Not After : Jul 1 07:30:11 2026 GMT Subject: CN=D4791BCB2A2C24F19A0816CEAAE43F631CFF7F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:8f:17:dd:f3:b8:68:d3:39:8a:27:53:2b: 5e:b8:61:af:1c:aa:b7:7d:a7:fa:17:c2:27:b5:3e: 98:64:ec:2d:31:22:13:e4:59:87:50:d2:3c:84:22: f8:82:6a:23:8f:d5:7e:d7:bc:49:e5:c4:af:07:2d: b6:3b:f0:4f:57:a2:6d:85:0c:85:a1:b9:99:a0:4b: dc:dc:68:7c:41:8b:1b:7b:56:88:18:80:22:6d:40: 20:b5:4c:be:60:3c:84:8a:de:24:7e:ee:8d:d9:bf: af:48:a5:31:14:b7:c7:24:3d:6b:ae:44:81:c8:10: c6:48:4d:30:32:90:8d:83:c3:4f:ef:44:75:5f:15: 5f:d5:14:a2:bf:5c:61:2f:38:59:2a:d4:e9:77:9b: 7f:5b:ce:41:3e:dd:b6:4b:f5:ca:61:94:6b:7f:c6: 2a:8c:51:21:c5:23:08:9e:3d:71:1b:29:93:74:f6: 9a:0e:af:45:a6:59:ba:7b:05:3b:25:5e:1f:fb:fc: 12:eb:51:0b:7e:d0:98:54:83:07:ef:94:65:d4:a9: a0:78:a3:5d:3c:2c:bd:05:6e:54:e9:49:25:a0:c1: 68:b1:b4:1a:52:0b:ee:aa:c5:70:b5:98:43:63:d2: 44:ac:92:cf:e3:0a:eb:15:4c:a7:2b:94:43:ba:2a: b9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:79:1B:CB:2A:2C:24:F1:9A:08:16:CE:AA:E4:3F:63:1C:FF:7F:7D X509v3 Authority Key Identifier: keyid:B7:2C:12:A5:51:5B:F3:3E:A3:5A:CD:6C:99:11:C9:AC:6D:E9:EA:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6f:a2:2f:62:1b:57:ed:bc:ec:20:75:d5:45:79:02:de:95: 38:1e:86:11:06:0f:29:a3:fd:f4:2d:62:09:49:99:12:70:68: c7:9a:32:5e:72:48:d1:d4:3b:2e:3c:76:08:87:2a:56:a8:8c: a5:af:b7:b0:62:09:8a:32:1a:38:b2:22:c7:7b:60:5c:6b:48: e0:7e:c8:16:23:09:e3:29:29:e2:43:7d:83:c6:83:58:e2:d6: f6:18:13:89:79:54:e1:9b:33:eb:eb:03:45:e9:d0:9f:3a:3a: 00:f1:f5:72:2e:89:ec:93:f5:52:f3:55:f6:7f:26:16:23:70: be:5c:f0:f1:37:f5:be:dc:9e:5b:9e:23:46:88:4c:f5:78:37: 90:0d:1a:25:64:66:a1:88:61:75:a9:67:b3:b9:0a:d1:52:63: ee:31:0c:1b:ec:c2:da:00:5d:b2:6e:bb:57:7f:d7:de:99:69: ee:ef:10:bb:1b:4c:e3:7e:f6:6d:4b:00:13:b1:24:05:4a:a3: f5:84:5c:aa:82:5e:3a:9a:7e:a2:95:cf:bc:a7:67:ee:c6:3c: 75:40:73:32:ad:e6:c0:fa:1a:e3:e2:15:bf:d7:31:5a:47:5e: f2:86:b6:88:45:c0:84:38:70:f5:08:0b:b1:37:2d:0a:cc:9a: 97:8e:e9:35 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUFmYsZH/yC6wxW2fJIbyBsjg5BvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyQzEyQTU1MTVCRjMzRUEzNUFDRDZDOTkxMUM5QUM2 REU5RUEwNTAeFw0yNjA2MzAwNTI4MTFaFw0yNjA3MDEwNzMwMTFaMDMxMTAvBgNV BAMTKEQ0NzkxQkNCMkEyQzI0RjE5QTA4MTZDRUFBRTQzRjYzMUNGRjdGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Po8X3fO4aNM5iidTK164Ya8c qrd9p/oXwie1Pphk7C0xIhPkWYdQ0jyEIviCaiOP1X7XvEnlxK8HLbY78E9Xom2F DIWhuZmgS9zcaHxBixt7VogYgCJtQCC1TL5gPISK3iR+7o3Zv69IpTEUt8ckPWuu RIHIEMZITTAykI2Dw0/vRHVfFV/VFKK/XGEvOFkq1Ol3m39bzkE+3bZL9cphlGt/ xiqMUSHFIwiePXEbKZN09poOr0WmWbp7BTslXh/7/BLrUQt+0JhUgwfvlGXUqaB4 o108LL0FblTpSSWgwWixtBpSC+6qxXC1mENj0kSsks/jCusVTKcrlEO6KrkvAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU1HkbyyosJPGaCBbOquQ/Yxz/f30wHwYDVR0j BBgwFoAUtywSpVFb8z6jWs1smRHJrG3p6gUwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNQSVJB UFBTLzEvQjcyQzEyQTU1MTVCRjMzRUEzNUFDRDZDOTkxMUM5QUM2REU5RUEwNS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC9CNzJDMTJBNTUxNUJGMzNFQTM1QUNENkM5 OTExQzlBQzZERTlFQTA1LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNQSVJBUFBTLzEvQjcyQzEy QTU1MTVCRjMzRUEzNUFDRDZDOTkxMUM5QUM2REU5RUEwNS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAENv oi9iG1ftvOwgddVFeQLelTgehhEGDymj/fQtYglJmRJwaMeaMl5ySNHUOy48dgiH KlaojKWvt7BiCYoyGjiyIsd7YFxrSOB+yBYjCeMpKeJDfYPGg1ji1vYYE4l5VOGb M+vrA0Xp0J86OgDx9XIuieyT9VLzVfZ/JhYjcL5c8PE39b7cnlueI0aITPV4N5AN GiVkZqGIYXWpZ7O5CtFSY+4xDBvswtoAXbJuu1d/196Zae7vELsbTON+9m1LABOx JAVKo/WEXKqCXjqafqKVz7ynZ+7GPHVAczKt5sD6GuPiFb/XMVpHXvKGtohFwIQ4 cPUIC7E3LQrMmpeO6TU= -----END CERTIFICATE-----Generated at Tue Jun 30 13:10:00 2026 by rpki-client