$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft File: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft (raw, json) Hash identifier: /AGOzWBXTY3bKQ0czf9d9RqKA3RumTigCg2FsVVCDTA= Subject key identifier: 52:9C:D1:A7:45:A2:47:37:38:8B:A1:D5:1E:1E:B4:DF:32:A5:CD:8E Authority key identifier: E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB Certificate issuer: /CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB Certificate serial: 5769C0CD3FBCC6414183B256D914C84622BB1CAD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft Manifest number: 06 Signing time: Wed 13 May 2026 06:17:19 +0000 Manifest this update: Wed 13 May 2026 06:12:19 +0000 Manifest next update: Thu 14 May 2026 06:28:19 +0000 Files and hashes: 1: 3232332e32362e31302e302f32332d3234203d3e203231383539.roa (hash: KeYIdvmIdFmXoaD7PfpE0neyX1HamQXTrD45lQIfHyQ=) 2: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl (hash: on6wqIKnrUzbX3Iby86X5rNjBm1gzTd5CX0fZvud2BM=) 3: 3232332e32362e31302e302f32332d3234203d3e2037343833.roa (hash: KY91dZeL6/YwGvfBK0FnKFAVL/6EOM1qXx3UNjlNsSo=) 4: 3130332e3137352e3136362e302f32332d3234203d3e2037343833.roa (hash: M1t938UdIZV1R1GsREb23xynohkO0qzg0e3CIh+SGGk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:69:c0:cd:3f:bc:c6:41:41:83:b2:56:d9:14:c8:46:22:bb:1c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB Validity Not Before: May 13 06:12:19 2026 GMT Not After : May 14 06:28:19 2026 GMT Subject: CN=529CD1A745A24737388BA1D51E1EB4DF32A5CD8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:a7:26:9d:7a:ec:33:22:df:e3:da:76:04: d7:70:c8:66:79:84:bd:d3:73:98:fa:b6:f4:e4:d5: 6a:43:21:e1:51:6a:39:9d:a8:fd:fc:86:81:e2:bc: 57:d9:82:f3:0a:87:07:9e:ed:73:04:8d:fb:35:05: 70:0d:6d:13:31:8e:9d:b1:81:d8:85:a1:fd:95:d6: d7:ac:2b:0b:83:b7:29:bf:49:ed:1f:99:07:1d:a1: ce:ca:3d:fb:ef:74:9e:a6:d7:70:57:eb:56:58:11: da:94:8e:f2:e5:ea:a7:91:b7:03:08:ee:ec:f4:d2: 4f:a6:f8:ba:d0:3a:68:7d:e6:d8:9c:37:bc:0b:84: 07:a1:ec:f8:08:a2:d5:03:94:f2:95:87:86:93:e5: 28:c4:0b:32:c8:96:c3:9a:b7:c7:7f:e3:d8:9c:64: c7:c7:c4:92:49:24:24:fb:95:98:fc:8b:27:e4:13: a3:0d:cb:06:28:57:6e:65:ef:c1:1b:3f:f5:3b:3d: 4a:07:94:39:e0:0f:4c:02:84:38:5b:29:23:b7:a5: 0f:77:bc:9a:38:d0:b6:76:32:82:e1:cc:3d:af:36: 3a:82:4e:7b:ce:92:bb:ee:79:ba:3d:8f:67:a0:07: 23:f0:f1:69:b0:5f:e4:0b:6f:4a:3f:01:17:f8:0f: 93:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9C:D1:A7:45:A2:47:37:38:8B:A1:D5:1E:1E:B4:DF:32:A5:CD:8E X509v3 Authority Key Identifier: keyid:E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:34:95:76:1f:36:e6:36:0d:e8:eb:57:86:07:e7:24:f2:de: d2:89:24:e4:2a:1d:06:b6:00:08:eb:f5:60:9b:28:a8:6e:8e: d1:6a:7a:4e:1e:02:34:52:b0:de:7a:af:50:be:e9:ef:ef:52: e6:24:b5:b5:dd:42:8b:cc:ed:ba:91:2e:93:04:a7:b7:1d:ef: 6d:c6:c6:f6:ad:6d:17:21:bb:59:56:b2:ab:0b:70:1d:5a:f4: a6:39:dd:05:7a:0e:f8:6a:0f:3f:68:9c:92:6e:41:6c:e9:50: b7:58:8c:56:38:a6:6b:ad:a3:d7:bc:a2:b5:34:07:5d:0c:6b: a0:fe:b3:d5:8b:a9:c7:1d:76:be:c4:e3:d4:40:de:9b:da:7c: 33:8b:23:13:13:e7:06:36:aa:2e:15:f7:f3:14:a6:25:0f:5f: 36:49:f2:3a:83:e1:c9:57:1c:81:65:1c:98:5d:ef:d9:0d:59: 06:93:95:10:02:0d:13:4e:d5:3e:61:6a:9c:e8:0e:75:7c:1b: a4:51:b1:3e:8a:87:98:af:bd:46:02:b5:97:d5:3f:62:22:fb: de:bc:60:20:38:b3:d5:80:5b:20:9b:df:72:81:2f:77:56:fd: f6:39:72:6b:09:da:24:97:ff:ad:47:40:c7:8a:46:32:d9:0c: 11:3a:a2:04 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUV2nAzT+8xkFBg7JW2RTIRiK7HK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MjNERkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMx RTM4N0VDQjAeFw0yNjA1MTMwNjEyMTlaFw0yNjA1MTQwNjI4MTlaMDMxMTAvBgNV BAMTKDUyOUNEMUE3NDVBMjQ3MzczODhCQTFENTFFMUVCNERGMzJBNUNEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCll6cmnXrsMyLf49p2BNdwyGZ5 hL3Tc5j6tvTk1WpDIeFRajmdqP38hoHivFfZgvMKhwee7XMEjfs1BXANbRMxjp2x gdiFof2V1tesKwuDtym/Se0fmQcdoc7KPfvvdJ6m13BX61ZYEdqUjvLl6qeRtwMI 7uz00k+m+LrQOmh95ticN7wLhAeh7PgIotUDlPKVh4aT5SjECzLIlsOat8d/49ic ZMfHxJJJJCT7lZj8iyfkE6MNywYoV25l78EbP/U7PUoHlDngD0wChDhbKSO3pQ93 vJo40LZ2MoLhzD2vNjqCTnvOkrvuebo9j2egByPw8WmwX+QLb0o/ARf4D5NpAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUUpzRp0WiRzc4i6HVHh603zKlzY4wHwYDVR0j BBgwFoAU44I9/qIf7wTjJp65rMO9rB44fsswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURO T0RFLzAvRTM4MjNERkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMxRTM4N0VDQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FMzgyM0RGRUEyMUZFRjA0RTMyNjlFQjlB Q0MzQkRBQzFFMzg3RUNCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVUROT0RFLzAvRTM4MjNE RkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMxRTM4N0VDQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABQ0 lXYfNuY2DejrV4YH5yTy3tKJJOQqHQa2AAjr9WCbKKhujtFqek4eAjRSsN56r1C+ 6e/vUuYktbXdQovM7bqRLpMEp7cd723GxvatbRchu1lWsqsLcB1a9KY53QV6Dvhq Dz9onJJuQWzpULdYjFY4pmuto9e8orU0B10Ma6D+s9WLqccddr7E49RA3pvafDOL IxMT5wY2qi4V9/MUpiUPXzZJ8jqD4clXHIFlHJhd79kNWQaTlRACDRNO1T5hapzo DnV8G6RRsT6Kh5ivvUYCtZfVP2Ii+968YCA4s9WAWyCb33KBL3dW/fY5cmsJ2iSX /61HQMeKRjLZDBE6ogQ= -----END CERTIFICATE-----Generated at Wed May 13 20:33:03 2026 by rpki-client