$ rpki-client -vvf rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft File: 3BFFB675B95FCD73A993F3228774251092970E7B.mft (raw, json) Hash identifier: mSFESolcL/1LU17sbgLFb+UfemXTeJVSXwpRaRmM8xE= Subject key identifier: 20:D5:EA:49:4D:66:E5:2D:E9:54:62:75:65:7B:58:15:DA:35:95:9B Authority key identifier: 3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B Certificate issuer: /CN=3BFFB675B95FCD73A993F3228774251092970E7B Certificate serial: 3CF64367ED50A73525FBAB0AAFDAEBE7ADDB8B6C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft Manifest number: 46 Signing time: Tue 30 Jun 2026 01:42:48 +0000 Manifest this update: Tue 30 Jun 2026 01:37:48 +0000 Manifest next update: Wed 01 Jul 2026 02:20:48 +0000 Files and hashes: 1: 3136302e32352e3130352e302f32342d3234203d3e20323038323233.roa (hash: YdBvwjNi4bXGDm/SLY5b1QLMeyyL4E2okhg4V5ia0DI=) 2: 3136302e32352e3130342e302f32342d3234203d3e20323038323233.roa (hash: /9BFFQzw0cKcAkYyhzrX90hfsn9yx3G5YlAAOT7vnaE=) 3: 3136302e32352e3130342e302f32332d3233203d3e20323038323233.roa (hash: 76EIdBl2ALW8D1iaU6elJyjtVPcLevkpSbCfYsK03xY=) 4: 3BFFB675B95FCD73A993F3228774251092970E7B.crl (hash: 1Z8NrbncnLwuBvB2cNjtkNGhzKw4MMH4h7YYiqhKa8E=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 02:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f6:43:67:ed:50:a7:35:25:fb:ab:0a:af:da:eb:e7:ad:db:8b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BFFB675B95FCD73A993F3228774251092970E7B Validity Not Before: Jun 30 01:37:48 2026 GMT Not After : Jul 1 02:20:48 2026 GMT Subject: CN=20D5EA494D66E52DE9546275657B5815DA35959B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:34:71:ed:4d:09:67:ab:4f:f7:4f:cb:ed: 36:cb:d3:97:4a:70:40:bb:e1:c3:3a:df:05:f9:d0: c4:1f:70:bf:dd:8f:5a:81:7c:ad:49:be:4c:61:66: 9c:67:79:fd:fc:e9:f3:99:98:86:70:f2:fe:ae:9e: d1:98:a5:06:7a:28:b5:8c:13:32:8e:ff:d7:44:9e: a3:bf:aa:d5:46:37:2f:58:e2:19:27:89:56:49:25: 2b:8e:47:19:a6:17:4e:df:6d:fc:25:2c:7b:75:ee: 22:cd:21:24:79:bf:30:a2:d2:9e:9d:28:4e:34:46: 53:01:ae:13:45:28:d8:96:d0:bd:ba:42:72:cb:2d: 4d:c7:03:5a:72:60:70:dd:1d:86:22:34:25:10:2d: c3:10:b3:33:ec:dd:05:1d:b7:f4:70:a1:82:e8:54: 48:3e:42:bf:23:c5:75:cf:89:cd:0d:3f:81:1e:b0: 48:65:e2:87:02:81:c1:a3:02:6d:4d:3f:b8:9c:e0: 06:92:67:2e:41:98:d2:75:8b:00:ed:60:ee:dc:00: e6:ee:60:2e:62:e9:37:1e:03:22:da:23:07:bf:5e: 83:f2:eb:07:fe:c2:ee:9e:c5:f7:35:5f:38:a2:c7: 0a:1e:34:49:2b:0f:7e:33:76:1f:e6:05:13:78:e8: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D5:EA:49:4D:66:E5:2D:E9:54:62:75:65:7B:58:15:DA:35:95:9B X509v3 Authority Key Identifier: keyid:3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:cb:30:66:9d:76:54:c9:2a:09:c0:93:a7:0f:6d:5c:59:c3: ae:ab:5f:e7:14:1b:e1:63:36:8e:d8:a4:82:0e:27:5c:9e:e5: d2:39:a6:bf:87:48:36:7e:92:5d:36:6c:2c:1b:76:aa:4d:63: f0:11:99:a0:90:1e:43:cd:5e:8e:07:3e:10:2a:26:3b:05:9f: e7:a7:c3:30:12:0a:0e:47:dd:e1:c3:29:2a:8c:ff:55:d8:53: 83:32:2c:dc:fc:77:5e:69:9a:93:14:41:5c:de:75:03:6b:e8: fb:20:a0:c9:d6:82:a4:76:a0:67:21:91:4e:f4:58:41:43:8c: 2c:51:32:5d:6c:25:3f:dc:87:1e:e1:f9:b4:13:c3:6b:a0:93: 27:bf:3c:32:59:eb:70:55:3c:35:f1:ff:39:7e:f5:c6:65:67: 5e:93:8c:9f:b5:c2:44:e1:46:ac:74:a7:67:13:bb:79:23:7c: 6b:b0:67:ff:8e:23:dc:e8:a9:ca:d4:79:c3:c7:c4:e7:5c:e0: 07:84:75:73:d1:c3:c4:47:cc:6d:2d:59:a0:5e:c1:ee:ad:b0: 56:2b:d3:57:82:3d:6d:66:ea:a8:de:90:dc:10:92:25:60:52: 49:9f:b8:58:ab:ef:ce:1f:ab:b0:63:95:d8:0f:f6:e5:2e:bf: 8c:40:ce:ad -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUPPZDZ+1QpzUl+6sKr9rr563bi2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3NDI1MTA5 Mjk3MEU3QjAeFw0yNjA2MzAwMTM3NDhaFw0yNjA3MDEwMjIwNDhaMDMxMTAvBgNV BAMTKDIwRDVFQTQ5NEQ2NkU1MkRFOTU0NjI3NTY1N0I1ODE1REEzNTk1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrODRx7U0JZ6tP90/L7TbL05dK cEC74cM63wX50MQfcL/dj1qBfK1JvkxhZpxnef386fOZmIZw8v6untGYpQZ6KLWM EzKO/9dEnqO/qtVGNy9Y4hkniVZJJSuORxmmF07fbfwlLHt17iLNISR5vzCi0p6d KE40RlMBrhNFKNiW0L26QnLLLU3HA1pyYHDdHYYiNCUQLcMQszPs3QUdt/RwoYLo VEg+Qr8jxXXPic0NP4EesEhl4ocCgcGjAm1NP7ic4AaSZy5BmNJ1iwDtYO7cAObu YC5i6TceAyLaIwe/XoPy6wf+wu6exfc1XziixwoeNEkrD34zdh/mBRN46LWnAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUINXqSU1m5S3pVGJ1ZXtYFdo1lZswHwYDVR0j BBgwFoAUO/+2dblfzXOpk/Mih3QlEJKXDnswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NFVEVD SC8xLzNCRkZCNjc1Qjk1RkNENzNBOTkzRjMyMjg3NzQyNTEwOTI5NzBFN0IuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzAvM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3 NDI1MTA5Mjk3MEU3Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDRVRFQ0gvMS8zQkZGQjY3NUI5 NUZDRDczQTk5M0YzMjI4Nzc0MjUxMDkyOTcwRTdCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMswZp12 VMkqCcCTpw9tXFnDrqtf5xQb4WM2jtikgg4nXJ7l0jmmv4dINn6SXTZsLBt2qk1j 8BGZoJAeQ81ejgc+EComOwWf56fDMBIKDkfd4cMpKoz/VdhTgzIs3Px3XmmakxRB XN51A2vo+yCgydaCpHagZyGRTvRYQUOMLFEyXWwlP9yHHuH5tBPDa6CTJ788Mlnr cFU8NfH/OX71xmVnXpOMn7XCROFGrHSnZxO7eSN8a7Bn/44j3OipytR5w8fE51zg B4R1c9HDxEfMbS1ZoF7B7q2wVivTV4I9bWbqqN6Q3BCSJWBSSZ+4WKvvzh+rsGOV 2A/25S6/jEDOrQ== -----END CERTIFICATE-----Generated at Tue Jun 30 13:12:29 2026 by rpki-client