$ rpki-client -vvf rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft File: 3135985A244571EE521F17A73A1F0D6341A35ED5.mft (raw, json) Hash identifier: fDt6ZqrfFEvAr6PYqLQoZgd3pCt6gp6wlw9vzQtbSNc= Subject key identifier: 49:DC:FF:88:4A:86:93:9E:CD:A5:DC:0B:3F:63:13:A4:DD:9B:E6:DE Authority key identifier: 31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5 Certificate issuer: /CN=3135985A244571EE521F17A73A1F0D6341A35ED5 Certificate serial: 28515FAB2F25BD3533CC403DA3AC110A07767FE9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft Manifest number: 43 Signing time: Mon 29 Jun 2026 23:42:35 +0000 Manifest this update: Mon 29 Jun 2026 23:37:35 +0000 Manifest next update: Wed 01 Jul 2026 02:47:35 +0000 Files and hashes: 1: 3135985A244571EE521F17A73A1F0D6341A35ED5.crl (hash: Xfgztge3WyQgKXu+KW07rQ8l838BmJPS6mP7URl3iHM=) 2: 3130332e362e3132342e302f32332d3332203d3e20313530373638.roa (hash: 6vguh3CJd68lcmEK8FAHm7dq7zEm2fYFwl9UdWFuOJk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.crl rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 02:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:51:5f:ab:2f:25:bd:35:33:cc:40:3d:a3:ac:11:0a:07:76:7f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3135985A244571EE521F17A73A1F0D6341A35ED5 Validity Not Before: Jun 29 23:37:35 2026 GMT Not After : Jul 1 02:47:35 2026 GMT Subject: CN=49DCFF884A86939ECDA5DC0B3F6313A4DD9BE6DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e0:60:8b:ca:d3:db:17:2b:86:5c:30:fe:c3: b8:f5:28:d0:b7:f7:9b:10:7d:fc:19:85:ca:ea:26: d5:9d:1a:24:d4:de:58:68:27:3f:b4:27:1d:e8:8a: b8:1e:86:2c:9b:da:78:8a:03:43:52:8b:03:80:01: d4:05:09:26:bd:1e:c6:9e:78:44:b2:68:d7:e8:29: d6:f4:37:b4:6b:bb:26:60:a4:8e:f0:4a:7b:a5:0e: eb:4b:b9:85:95:75:51:ce:e7:8e:bb:44:53:da:6e: 9e:e5:3c:25:e4:db:37:e8:8d:2a:d6:a3:44:fb:6f: 7a:28:91:a0:31:38:ec:17:67:10:b8:71:76:be:c5: f2:b4:19:66:05:e3:b6:d8:b0:7c:ca:f4:df:f5:85: c5:c3:02:88:1a:f0:d8:c0:fa:aa:3b:7b:53:29:c3: bf:6c:a5:a4:66:d7:6d:91:f6:93:48:4d:be:92:83: 16:bc:6a:99:b0:49:48:8e:47:b8:b2:eb:f4:ec:d8: 84:29:f7:1f:5a:0d:7d:da:71:f8:f4:ff:c7:bb:47: 48:28:a2:cd:94:5a:c6:d3:fb:ea:11:b6:50:5e:63: 7b:3c:2b:0c:a3:79:80:0a:68:70:4e:80:f3:a4:bc: b0:1f:ff:78:41:4a:a1:0f:8e:79:55:7d:ba:d8:f8: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DC:FF:88:4A:86:93:9E:CD:A5:DC:0B:3F:63:13:A4:DD:9B:E6:DE X509v3 Authority Key Identifier: keyid:31:35:98:5A:24:45:71:EE:52:1F:17:A7:3A:1F:0D:63:41:A3:5E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3135985A244571EE521F17A73A1F0D6341A35ED5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COLIN/0/3135985A244571EE521F17A73A1F0D6341A35ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:71:e0:78:bf:36:db:93:14:07:9c:a0:2d:a2:e1:c2:0f:04: 34:af:68:2e:3a:44:f4:fd:ea:fa:11:21:71:1e:39:5c:7c:6e: 8c:ce:02:91:27:cf:10:11:e2:3a:45:d8:5a:ab:19:15:ba:41: 5f:99:40:ec:61:88:37:6d:5f:1c:32:e6:02:de:74:3f:3d:97: 7a:f8:8f:74:23:17:9c:af:0d:15:92:76:1e:c4:2a:2a:ba:0b: 36:50:76:4b:3a:04:b3:3d:20:35:90:9b:84:a1:9a:11:1c:9c: 52:46:6b:23:1b:9e:84:ad:25:96:d8:1e:33:7a:f1:d0:d0:7c: 79:fb:d9:4a:55:d1:0a:86:f0:30:ad:3d:df:94:bf:d4:a3:b0: 32:bc:22:b5:8e:4c:e0:89:04:a3:95:ce:7a:28:d0:d0:f3:bb: 1b:4a:56:ee:40:16:bd:ff:d2:90:73:c0:5e:03:c1:fe:81:88: 37:19:16:73:d7:26:2e:e9:be:ce:c3:5a:e2:22:55:80:72:fd: 40:ab:64:8f:35:52:d7:24:e1:23:05:95:fd:c8:38:0e:05:3c: 84:1b:c9:68:e6:db:c9:df:d5:ae:b9:ee:75:fa:6c:7b:95:17: f5:62:53:8c:d1:c8:45:69:7a:22:65:e2:bb:10:aa:61:4c:59: 15:00:17:83 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUKFFfqy8lvTUzzEA9o6wRCgd2f+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNTk4NUEyNDQ1NzFFRTUyMUYxN0E3M0ExRjBENjM0 MUEzNUVENTAeFw0yNjA2MjkyMzM3MzVaFw0yNjA3MDEwMjQ3MzVaMDMxMTAvBgNV BAMTKDQ5RENGRjg4NEE4NjkzOUVDREE1REMwQjNGNjMxM0E0REQ5QkU2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz4GCLytPbFyuGXDD+w7j1KNC3 95sQffwZhcrqJtWdGiTU3lhoJz+0Jx3oirgehiyb2niKA0NSiwOAAdQFCSa9Hsae eESyaNfoKdb0N7RruyZgpI7wSnulDutLuYWVdVHO5467RFPabp7lPCXk2zfojSrW o0T7b3ookaAxOOwXZxC4cXa+xfK0GWYF47bYsHzK9N/1hcXDAoga8NjA+qo7e1Mp w79spaRm122R9pNITb6Sgxa8apmwSUiOR7iy6/Ts2IQp9x9aDX3acfj0/8e7R0go os2UWsbT++oRtlBeY3s8KwyjeYAKaHBOgPOkvLAf/3hBSqEPjnlVfbrY+OxXAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUSdz/iEqGk57NpdwLP2MTpN2b5t4wHwYDVR0j BBgwFoAUMTWYWiRFce5SHxenOh8NY0GjXtUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09MSU4v MC8zMTM1OTg1QTI0NDU3MUVFNTIxRjE3QTczQTFGMEQ2MzQxQTM1RUQ1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzMxMzU5ODVBMjQ0NTcxRUU1MjFGMTdBNzNBMUYw RDYzNDFBMzVFRDUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DT0xJTi8wLzMxMzU5ODVBMjQ0NTcx RUU1MjFGMTdBNzNBMUYwRDYzNDFBMzVFRDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC2ceB4vzbbkxQH nKAtouHCDwQ0r2guOkT0/er6ESFxHjlcfG6MzgKRJ88QEeI6RdhaqxkVukFfmUDs YYg3bV8cMuYC3nQ/PZd6+I90Ixecrw0VknYexCoqugs2UHZLOgSzPSA1kJuEoZoR HJxSRmsjG56ErSWW2B4zevHQ0Hx5+9lKVdEKhvAwrT3flL/Uo7AyvCK1jkzgiQSj lc56KNDQ87sbSlbuQBa9/9KQc8BeA8H+gYg3GRZz1yYu6b7Ow1riIlWAcv1Aq2SP NVLXJOEjBZX9yDgOBTyEG8lo5tvJ39Wuue51+mx7lRf1YlOM0chFaXoiZeK7EKph TFkVABeD -----END CERTIFICATE-----Generated at Tue Jun 30 19:09:56 2026 by rpki-client