$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft File: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft (raw, json) Hash identifier: cpGK7ZY7BvdSPtRiMPmXhixygpGn70O43PfgduSvmA4= Subject key identifier: BC:7C:B9:C4:75:62:15:54:79:E6:2D:93:24:FD:21:56:E8:5B:CF:55 Authority key identifier: 80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D Certificate issuer: /CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Certificate serial: 77BD6E99F5FDBF5B83A9A925A537DF7473FDEC5D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft Manifest number: 83 Signing time: Fri 14 Aug 2026 16:07:16 +0000 Manifest this update: Fri 14 Aug 2026 16:02:16 +0000 Manifest next update: Sat 15 Aug 2026 18:51:16 +0000 Files and hashes: 1: 3130332e3132362e3136342e302f32322d3234203d3e20313331313433.roa (hash: GE6WCLDpaYk350arhm6T0hTObeMU3HA8Pi8MilsnVwk=) 2: 3137352e3138342e3234302e302f32312d3234203d3e20313331313433.roa (hash: 0QQUBFrsQpXXTYt4aIh8/MbRTgI4V9RhZAxoH9bVt18=) 3: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl (hash: G/I4O0T8lYJeHM90KAtEmL5QxezdvtimYHIqWfKC2Uc=) 4: 323430353a333330303a3a2f33322d3936203d3e20313331313433.roa (hash: ZKiaer8NjI3ngd1EbZw69ZFOR2ZlmwyGwjPK8gzDQck=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 18:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:bd:6e:99:f5:fd:bf:5b:83:a9:a9:25:a5:37:df:74:73:fd:ec:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Validity Not Before: Aug 14 16:02:16 2026 GMT Not After : Aug 15 18:51:16 2026 GMT Subject: CN=BC7CB9C47562155479E62D9324FD2156E85BCF55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:52:52:fa:13:ac:c5:55:21:41:e1:2f:b3:bc: 4e:b6:8b:a1:e5:f8:6d:89:1d:17:a7:a4:7c:9d:1b: fc:0b:c7:de:29:3f:79:9d:5d:81:fa:89:b9:34:53: 06:4f:93:2e:ad:e8:61:b7:45:d4:c6:ee:69:05:0a: 64:33:5b:81:7a:91:7e:9a:25:c2:30:bf:40:c2:13: d1:5a:cc:95:33:54:69:1b:6f:14:bc:06:57:12:5f: 4f:e3:64:20:c8:5a:7a:c7:51:4c:71:a2:3e:14:8f: d1:b2:19:92:05:d0:4f:e8:1e:bb:8c:c6:2a:5a:36: 1d:5e:53:67:65:a5:11:54:6b:a6:1b:7f:1a:5e:66: 51:fc:32:c3:a5:2e:50:c4:7d:6b:54:0c:ae:d0:ca: 91:49:dd:8e:09:44:ed:c2:f5:c5:84:46:76:ea:c0: 1a:f1:73:2b:6e:20:5f:8a:f2:51:33:af:92:8b:43: 03:40:2c:e3:a7:6c:32:a4:ac:23:46:66:7b:80:c7: a0:0c:3e:6b:94:52:df:74:46:f7:34:eb:ae:96:99: 58:bc:00:17:31:a1:eb:f9:2d:f2:04:9a:29:67:1b: 8d:04:bb:7b:25:ca:a4:7f:68:53:41:fc:55:91:dc: d6:62:c2:26:7c:5e:1e:d7:16:76:fb:a8:1b:c5:9d: b1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7C:B9:C4:75:62:15:54:79:E6:2D:93:24:FD:21:56:E8:5B:CF:55 X509v3 Authority Key Identifier: keyid:80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:35:52:71:de:d4:1e:71:0b:70:70:cb:6c:92:a2:e2:55:e2: 2b:d1:51:0c:ed:4d:03:55:f2:67:c1:cf:5e:31:54:00:f7:5c: 63:d9:eb:b8:36:80:4f:d5:1c:fc:3a:a6:5f:71:82:f4:d1:8c: 97:27:02:4e:42:f1:33:0a:1d:8a:0b:f2:75:38:9c:c1:8f:d6: 36:88:2b:1d:4f:1e:31:5c:16:09:e5:35:a1:9d:c1:64:21:93: 2c:5d:63:04:e7:fa:93:a0:f0:e6:a6:44:6e:2d:81:90:11:62: fa:85:8f:0f:79:15:9f:cd:bd:81:e8:2f:cb:47:6a:33:6a:65: 0a:62:42:be:8d:ea:b8:a0:39:d4:01:19:51:5c:e3:eb:83:4b: 1d:5c:ce:fa:60:77:2c:32:47:35:ce:cb:ca:6b:91:32:9a:61: 2c:72:b1:1b:45:2a:bb:a5:4b:05:4f:83:a4:64:cc:11:b6:39: e6:f8:f4:77:85:ae:10:ae:42:9d:3a:48:48:84:b7:83:d2:1e: 87:a5:81:17:d5:8c:21:25:7a:7f:b1:1c:56:fc:36:46:9d:2b: 12:12:93:87:a4:d1:7b:01:b4:57:0d:8a:6c:97:ba:7b:bb:b1: fa:07:ac:ad:84:a8:5c:cf:79:3e:17:f4:1e:82:f6:c6:49:5d: 1b:62:40:db -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUd71umfX9v1uDqaklpTffdHP97F0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1RUEzMTRDQzlB ODY3N0YyRDAeFw0yNjA4MTQxNjAyMTZaFw0yNjA4MTUxODUxMTZaMDMxMTAvBgNV BAMTKEJDN0NCOUM0NzU2MjE1NTQ3OUU2MkQ5MzI0RkQyMTU2RTg1QkNGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUlL6E6zFVSFB4S+zvE62i6Hl +G2JHRenpHydG/wLx94pP3mdXYH6ibk0UwZPky6t6GG3RdTG7mkFCmQzW4F6kX6a JcIwv0DCE9FazJUzVGkbbxS8BlcSX0/jZCDIWnrHUUxxoj4Uj9GyGZIF0E/oHruM xipaNh1eU2dlpRFUa6YbfxpeZlH8MsOlLlDEfWtUDK7QypFJ3Y4JRO3C9cWERnbq wBrxcytuIF+K8lEzr5KLQwNALOOnbDKkrCNGZnuAx6AMPmuUUt90Rvc0666WmVi8 ABcxoev5LfIEmilnG40Eu3slyqR/aFNB/FWR3NZiwiZ8Xh7XFnb7qBvFnbFtAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUvHy5xHViFVR55i2TJP0hVuhbz1UwHwYDVR0j BBgwFoAUgJnfwM/IPF3f2Qyl6jFMyahnfy0wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU UlVTVC8wLzgwOTlERkMwQ0ZDODNDNURERkQ5MENBNUVBMzE0Q0M5QTg2NzdGMkQu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1 RUEzMTRDQzlBODY3N0YyRC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NISU5BVFJVU1QvMC84MDk5 REZDMENGQzgzQzVEREZEOTBDQTVFQTMxNENDOUE4Njc3RjJELm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA TzVScd7UHnELcHDLbJKi4lXiK9FRDO1NA1XyZ8HPXjFUAPdcY9nruDaAT9Uc/Dqm X3GC9NGMlycCTkLxMwodigvydTicwY/WNogrHU8eMVwWCeU1oZ3BZCGTLF1jBOf6 k6Dw5qZEbi2BkBFi+oWPD3kVn829gegvy0dqM2plCmJCvo3quKA51AEZUVzj64NL HVzO+mB3LDJHNc7LymuRMpphLHKxG0Uqu6VLBU+DpGTMEbY55vj0d4WuEK5CnTpI SIS3g9Ieh6WBF9WMISV6f7EcVvw2Rp0rEhKTh6TRewG0Vw2KbJe6e7ux+gesrYSo XM95Phf0HoL2xkldG2JA2w== -----END CERTIFICATE-----Generated at Sat Aug 15 05:21:10 2026 by rpki-client