$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft File: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft (raw, json) Hash identifier: si+LuySqVh3iVeJ78uQSIa4aPUu0D6+qrP1C6OpFLKs= Subject key identifier: 7F:F1:22:D7:B7:9E:81:BA:DE:C3:46:CF:1B:C7:3E:28:0D:D7:6B:7F Authority key identifier: E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB Certificate issuer: /CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB Certificate serial: 62633662C3DB6F58D6104ABA1413FE10D1E365E5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft Manifest number: 46 Signing time: Tue 30 Jun 2026 04:28:06 +0000 Manifest this update: Tue 30 Jun 2026 04:23:06 +0000 Manifest next update: Wed 01 Jul 2026 07:42:06 +0000 Files and hashes: 1: 3232332e32362e31302e302f32332d3234203d3e203231383539.roa (hash: KeYIdvmIdFmXoaD7PfpE0neyX1HamQXTrD45lQIfHyQ=) 2: 3232332e32362e31302e302f32332d3234203d3e2037343833.roa (hash: KY91dZeL6/YwGvfBK0FnKFAVL/6EOM1qXx3UNjlNsSo=) 3: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl (hash: /dJ64n2g0OmzQbwcxAreZZXkNGDL+hHD6F4Pv/aSpog=) 4: 3130332e3137352e3136362e302f32332d3234203d3e2037343833.roa (hash: M1t938UdIZV1R1GsREb23xynohkO0qzg0e3CIh+SGGk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 07:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:63:36:62:c3:db:6f:58:d6:10:4a:ba:14:13:fe:10:d1:e3:65:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB Validity Not Before: Jun 30 04:23:06 2026 GMT Not After : Jul 1 07:42:06 2026 GMT Subject: CN=7FF122D7B79E81BADEC346CF1BC73E280DD76B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:24:a9:ad:30:75:5a:cf:5f:ee:19:7c:7f: 6b:cf:02:1e:95:26:2c:90:93:67:b9:88:ae:84:58: ee:45:50:a9:03:a5:17:64:9a:7c:01:18:25:9e:76: 64:f8:80:cf:4e:10:21:2f:95:ba:df:be:a7:df:75: 70:17:64:1a:69:5c:67:6f:19:11:6f:5e:3f:04:f7: 14:46:ce:96:1e:6e:db:cd:73:65:bd:3d:a3:15:cd: 0f:5d:2b:fd:56:97:2d:a3:df:f0:18:74:79:e1:06: 1f:54:69:2c:9d:06:c9:77:97:6e:c9:d0:5d:1e:70: 15:e0:84:b5:7d:aa:e7:b0:16:a3:20:a5:1f:f1:da: 84:45:64:7e:f1:92:12:70:13:05:d7:1c:da:01:6b: 81:f4:5f:e8:e5:75:22:99:8f:15:18:79:80:03:35: 6a:3d:dc:72:a6:c5:bc:58:45:62:e9:1a:9f:15:00: c1:0f:78:03:1e:ec:75:79:fb:3b:21:f0:f1:05:c0: 0c:ce:fa:4a:2a:fb:83:9e:69:68:57:6f:0a:d1:bd: bc:75:19:6e:e0:86:56:42:17:93:8e:4b:7f:08:af: 1a:b3:1c:a0:e8:d1:2a:1a:2a:4d:c1:2e:03:3f:07: e4:35:6b:2b:89:d7:51:6e:e4:b2:c9:79:7f:32:9e: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F1:22:D7:B7:9E:81:BA:DE:C3:46:CF:1B:C7:3E:28:0D:D7:6B:7F X509v3 Authority Key Identifier: keyid:E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4a:3a:58:45:e7:eb:e9:a5:c5:d0:aa:a9:9b:ef:a4:5e:11: 1d:73:32:5e:fa:8f:49:d3:12:7c:5f:a5:d6:c4:cc:09:db:6e: 25:92:9e:16:6b:16:da:8e:24:48:68:2a:e3:9d:8f:a3:44:49: e1:fe:c1:f3:de:e9:95:f5:21:9c:c7:dc:0c:c1:99:76:c0:fd: dc:6f:92:1e:ac:96:22:51:d5:25:37:bd:c7:7f:25:7b:b2:2e: 39:3e:c0:c5:26:86:b2:05:b0:69:15:04:7e:77:aa:49:9c:a6: 3f:18:99:43:ae:6e:88:62:f9:16:66:ae:ca:90:8e:e4:1a:30: 56:56:22:37:d8:40:67:b0:02:78:76:b7:b0:2e:d7:95:fd:f4: ec:e2:ba:b5:d3:84:c5:d5:17:e3:22:f8:58:a7:85:ec:6d:f3: b8:12:f8:03:fc:9f:77:e9:9a:87:f9:42:24:dd:92:c3:05:dd: 87:f2:b2:75:af:18:f6:4b:e6:97:c4:74:1b:46:e0:cf:4c:41: 05:b8:e8:0e:e3:ac:f4:53:51:cb:2f:f8:2f:80:d5:5d:b3:2e: 68:98:6f:4e:a3:29:d9:7f:5f:40:6a:ca:bc:70:05:bc:4c:a7: de:c2:61:fa:f1:0d:5c:1f:c9:3e:1d:7f:65:88:26:f1:d4:4e: 64:ee:55:82 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUYmM2YsPbb1jWEEq6FBP+ENHjZeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MjNERkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMx RTM4N0VDQjAeFw0yNjA2MzAwNDIzMDZaFw0yNjA3MDEwNzQyMDZaMDMxMTAvBgNV BAMTKDdGRjEyMkQ3Qjc5RTgxQkFERUMzNDZDRjFCQzczRTI4MERENzZCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VSSprTB1Ws9f7hl8f2vPAh6V JiyQk2e5iK6EWO5FUKkDpRdkmnwBGCWedmT4gM9OECEvlbrfvqffdXAXZBppXGdv GRFvXj8E9xRGzpYebtvNc2W9PaMVzQ9dK/1Wly2j3/AYdHnhBh9UaSydBsl3l27J 0F0ecBXghLV9quewFqMgpR/x2oRFZH7xkhJwEwXXHNoBa4H0X+jldSKZjxUYeYAD NWo93HKmxbxYRWLpGp8VAMEPeAMe7HV5+zsh8PEFwAzO+koq+4OeaWhXbwrRvbx1 GW7ghlZCF5OOS38IrxqzHKDo0SoaKk3BLgM/B+Q1ayuJ11Fu5LLJeX8yns2jAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUf/Ei17eegbrew0bPG8c+KA3Xa38wHwYDVR0j BBgwFoAU44I9/qIf7wTjJp65rMO9rB44fsswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURO T0RFLzAvRTM4MjNERkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMxRTM4N0VDQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FMzgyM0RGRUEyMUZFRjA0RTMyNjlFQjlB Q0MzQkRBQzFFMzg3RUNCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVUROT0RFLzAvRTM4MjNE RkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMxRTM4N0VDQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIdK OlhF5+vppcXQqqmb76ReER1zMl76j0nTEnxfpdbEzAnbbiWSnhZrFtqOJEhoKuOd j6NESeH+wfPe6ZX1IZzH3AzBmXbA/dxvkh6sliJR1SU3vcd/JXuyLjk+wMUmhrIF sGkVBH53qkmcpj8YmUOubohi+RZmrsqQjuQaMFZWIjfYQGewAnh2t7Au15X99Ozi urXThMXVF+Mi+Finhext87gS+AP8n3fpmof5QiTdksMF3YfysnWvGPZL5pfEdBtG 4M9MQQW46A7jrPRTUcsv+C+A1V2zLmiYb06jKdl/X0BqyrxwBbxMp97CYfrxDVwf yT4df2WIJvHUTmTuVYI= -----END CERTIFICATE-----Generated at Tue Jun 30 19:07:19 2026 by rpki-client