$ rpki-client -vvf rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft File: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft (raw, json) Hash identifier: KK4krD/ZjzNOTiMZMPqo/sV+Z1ihBSJWGR09WoyMK7I= Subject key identifier: 66:36:24:5A:7E:F7:C0:D1:E0:89:B3:A2:2D:A8:4F:D3:DC:78:37:37 Authority key identifier: 82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8 Certificate issuer: /CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8 Certificate serial: 69D4A061CD243BE3A9F1C7D5927590F0E8338121 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft Manifest number: 49 Signing time: Tue 30 Jun 2026 02:42:58 +0000 Manifest this update: Tue 30 Jun 2026 02:37:58 +0000 Manifest next update: Wed 01 Jul 2026 04:36:58 +0000 Files and hashes: 1: 3136302e3139312e382e302f32342d3234203d3e20313530373636.roa (hash: 23kEX/05VYapgUwuItpshBmqk2zUM39bNJvI89JH27Y=) 2: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl (hash: yofRxTYH2ho8KlFVw9/xQdPsJBTvcY+rKpEOEm0l/lQ=) 3: 3136302e3139312e382e302f32342d3332203d3e20313530373636.roa (hash: rnSZ0yRJQ87LO3K66pUprLSWzMYNldm6q1qbJoiJRVA=) 4: 3136302e3139312e382e302f32332d3234203d3e20313530373636.roa (hash: BxOTrJ4kAeU/jIshca7/vnqFH5T34oiHpb989w5ilgs=) 5: 3136302e3139312e392e302f32342d3234203d3e20313530373636.roa (hash: Fdjjfm1fJnNWkVxu2u3fwQcxaiitdeQENtBg51jTLAs=) 6: 3136302e3139312e392e302f32342d3332203d3e20313530373636.roa (hash: iobSCigwHPXsmKPAiv0Cm9wPrYmBsLfhPZWAEKgfxoc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 19:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d4:a0:61:cd:24:3b:e3:a9:f1:c7:d5:92:75:90:f0:e8:33:81:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8 Validity Not Before: Jun 30 02:37:58 2026 GMT Not After : Jul 1 04:36:58 2026 GMT Subject: CN=6636245A7EF7C0D1E089B3A22DA84FD3DC783737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:5d:c7:a0:5f:6f:76:de:d1:d9:22:09:b2: 54:c1:63:ff:e1:78:85:19:5e:90:0e:ae:96:3a:08: 40:72:ea:f3:3e:74:08:9e:eb:e9:0a:0f:4a:96:44: 20:ae:4f:f6:9b:a0:f2:a3:99:d4:86:6d:a4:47:52: 53:d0:63:62:df:e9:73:7b:a9:cb:41:1d:91:3e:a6: 24:09:91:4d:99:b4:b1:5c:43:9c:a2:a7:67:da:54: 78:0b:c8:5d:62:d2:cb:62:d1:57:fb:43:a0:d5:de: 2b:28:42:34:40:10:e8:a3:bf:35:0e:cb:e5:a7:a2: 5f:02:44:88:39:2a:5c:2f:a8:14:bb:6c:06:b2:d9: 08:3c:c5:49:fb:b9:d7:50:39:52:5e:4f:94:3f:c3: 75:a6:27:4b:94:a5:42:a5:bd:b9:1e:24:7f:9d:1c: 61:83:bb:08:bc:8c:4c:4c:7b:26:ca:93:fa:0b:03: 46:f8:e2:c9:f6:82:a2:49:61:de:66:a9:ce:67:45: 89:eb:04:6b:36:d8:ad:e6:81:27:55:dd:18:bb:8b: c3:dd:d3:8d:78:dd:aa:f6:ac:68:21:e2:aa:33:3a: 0e:32:99:c1:a6:ca:28:66:e4:3e:4d:04:c4:70:84: cf:43:d9:ed:be:4f:dd:b4:ca:c0:86:62:68:e8:14: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:36:24:5A:7E:F7:C0:D1:E0:89:B3:A2:2D:A8:4F:D3:DC:78:37:37 X509v3 Authority Key Identifier: keyid:82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ac:6a:c1:f2:f5:6d:f5:45:4c:54:5e:4c:6a:4d:ad:c5:1a: a2:47:4d:2c:36:d3:d7:fb:e9:0f:48:ef:34:26:f3:1d:ab:4c: 23:ef:70:8c:a5:21:31:f9:2b:0f:9f:ef:11:81:1e:ee:e1:82: 72:4a:54:dc:0b:f8:2d:2c:34:2c:5c:85:a6:8a:b8:80:67:96: 2a:74:10:da:6e:ab:b2:5f:00:f4:5f:98:84:61:dd:93:83:78: b5:01:19:2f:0e:9c:b7:fe:1b:69:f2:62:82:3f:7c:d6:65:ea: 24:7a:f7:87:03:58:52:bd:17:42:06:18:62:87:b7:9b:db:2a: 65:73:1b:8b:28:21:70:24:ac:ba:71:30:cb:79:eb:46:64:13: d1:e0:a4:cb:52:14:4a:d9:57:f2:99:76:3c:3b:07:68:34:67: 89:2f:71:c4:c0:42:12:e1:fb:17:20:cb:d5:ab:b8:fb:cc:4b: e3:1e:10:6d:13:fe:0b:94:c8:39:4c:a3:5b:92:22:d7:67:f1: 8c:f0:c0:ae:0a:34:be:de:97:73:13:44:df:4f:7f:01:43:23: 44:fb:8c:62:7a:19:c2:29:0b:a5:0e:c4:ca:52:f9:bd:bb:7c: 4a:6d:5a:3c:16:99:53:c0:ad:fb:bc:96:5e:30:16:99:e7:02: fb:6e:46:79 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUadSgYc0kO+Op8cfVknWQ8OgzgSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI0MkEzOUUwNTc3RThFODJCRjg2M0QwMTI0RkY1QUYy RjUzQzlDODAeFw0yNjA2MzAwMjM3NThaFw0yNjA3MDEwNDM2NThaMDMxMTAvBgNV BAMTKDY2MzYyNDVBN0VGN0MwRDFFMDg5QjNBMjJEQTg0RkQzREM3ODM3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1t13HoF9vdt7R2SIJslTBY//h eIUZXpAOrpY6CEBy6vM+dAie6+kKD0qWRCCuT/aboPKjmdSGbaRHUlPQY2Lf6XN7 qctBHZE+piQJkU2ZtLFcQ5yip2faVHgLyF1i0sti0Vf7Q6DV3isoQjRAEOijvzUO y+Wnol8CRIg5KlwvqBS7bAay2Qg8xUn7uddQOVJeT5Q/w3WmJ0uUpUKlvbkeJH+d HGGDuwi8jExMeybKk/oLA0b44sn2gqJJYd5mqc5nRYnrBGs22K3mgSdV3Ri7i8Pd 04143ar2rGgh4qozOg4ymcGmyihm5D5NBMRwhM9D2e2+T920ysCGYmjoFB6rAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUZjYkWn73wNHgibOiLahP09x4NzcwHwYDVR0j BBgwFoAUgkKjngV36Ogr+GPQEk/1ry9TycgwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE LzEvODI0MkEzOUUwNTc3RThFODJCRjg2M0QwMTI0RkY1QUYyRjUzQzlDOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC84MjQyQTM5RTA1NzdFOEU4MkJGODYzRDAxMjRG RjVBRjJGNTNDOUM4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzEvODI0MkEzOUUwNTc3 RThFODJCRjg2M0QwMTI0RkY1QUYyRjUzQzlDOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAC2sasHy9W31 RUxUXkxqTa3FGqJHTSw209f76Q9I7zQm8x2rTCPvcIylITH5Kw+f7xGBHu7hgnJK VNwL+C0sNCxchaaKuIBnlip0ENpuq7JfAPRfmIRh3ZODeLUBGS8OnLf+G2nyYoI/ fNZl6iR694cDWFK9F0IGGGKHt5vbKmVzG4soIXAkrLpxMMt560ZkE9HgpMtSFErZ V/KZdjw7B2g0Z4kvccTAQhLh+xcgy9WruPvMS+MeEG0T/guUyDlMo1uSItdn8Yzw wK4KNL7el3MTRN9PfwFDI0T7jGJ6GcIpC6UOxMpS+b27fEptWjwWmVPArfu8ll4w FpnnAvtuRnk= -----END CERTIFICATE-----Generated at Tue Jun 30 13:09:57 2026 by rpki-client