$ rpki-client -vvf rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft File: 4CB3ABB1B4A024A701223CD715911D996706E3AA.mft (raw, json) Hash identifier: IlbLFUvGJrmz0SsrJBOKT1HbALJguoTwY+P0qYNWpgA= Subject key identifier: BB:0A:0E:2C:C3:F6:9F:2C:37:5B:48:95:8B:B2:CC:8A:6A:7C:A4:3D Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA Certificate issuer: /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Certificate serial: 73931D72770CE1F2C56FC025EDDBE5E9EEE4CA99 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft Manifest number: 47 Signing time: Tue 30 Jun 2026 07:43:20 +0000 Manifest this update: Tue 30 Jun 2026 07:38:20 +0000 Manifest next update: Wed 01 Jul 2026 09:22:20 +0000 Files and hashes: 1: 4CB3ABB1B4A024A701223CD715911D996706E3AA.crl (hash: ibM+Y/IZR66jFXwmog1VjY4xSy8W17VVbTcWTaWjKe8=) 2: 323430303a623061303a3a2f33322d3332203d3e203633393038.roa (hash: zreCdGN4BpY2/KXE7Xi0nbMj8CRAQTw3exmLLk8qka8=) 3: 3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa (hash: 0yV6274hzedLbyBXIX24PIgFkE/qG4nC2HGR5DvDDRk=) 4: 3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa (hash: GNYnz7E4zPrfGEpitBkpgKcXAY1dNLMFN8QmTypJQrA=) 5: 3130332e31342e3137302e302f32332d3234203d3e203338303432.roa (hash: 5mtwz/x5xstPzEWwV0mjjdNtyAKuFHozbJj1pgp59P4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 09:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:93:1d:72:77:0c:e1:f2:c5:6f:c0:25:ed:db:e5:e9:ee:e4:ca:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Validity Not Before: Jun 30 07:38:20 2026 GMT Not After : Jul 1 09:22:20 2026 GMT Subject: CN=BB0A0E2CC3F69F2C375B48958BB2CC8A6A7CA43D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:3c:6d:0f:4c:60:fd:fa:04:f1:59:78:87: b5:9e:58:dd:85:7f:17:f2:38:68:a6:c3:0b:4f:ab: ea:cf:cd:b9:4e:61:87:2c:39:de:75:58:5c:8d:bd: 12:ce:88:bf:11:ba:25:ca:42:35:78:6f:42:dc:fa: 05:96:55:a2:1c:8d:ba:25:88:7c:d9:b8:b8:5c:dd: ac:cc:5b:c2:81:cd:cc:25:f3:9a:ae:a6:66:13:7f: df:ba:20:0e:c9:df:39:41:3e:ed:c2:8a:0e:e4:88: c9:87:6c:12:0b:98:13:81:3c:49:61:d6:c8:6d:ec: 5d:e2:aa:f8:8a:74:2a:5c:0f:2a:fc:08:e6:29:2c: 29:dc:33:58:9b:03:f4:dd:3a:cd:a5:ad:be:cc:0c: ec:e5:ca:ad:05:2d:96:cc:c0:02:a9:33:69:4d:fd: 28:a8:e2:8c:48:3c:dd:aa:34:54:09:37:8c:67:7c: 60:14:4c:7d:a3:9a:e8:d8:04:4f:54:ab:87:a7:0c: 3d:da:bd:0a:ec:fd:43:fc:36:e9:cd:03:fb:69:85: a6:9f:34:08:30:59:fe:98:f6:ac:62:50:4f:ea:8e: 05:d1:69:c9:b2:6a:3a:a8:c0:e6:96:61:a5:30:a7: 94:70:ff:07:55:08:c2:e3:22:95:58:ff:63:f4:e9: f8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0A:0E:2C:C3:F6:9F:2C:37:5B:48:95:8B:B2:CC:8A:6A:7C:A4:3D X509v3 Authority Key Identifier: keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:af:af:2a:27:88:96:c4:04:ac:52:80:ff:70:75:6a:c3:20: 72:ce:af:cc:7a:94:00:00:32:58:ef:08:9c:19:b9:7f:d2:7c: 94:6a:03:e9:6b:a4:25:0e:45:8e:5a:d6:04:a8:20:09:fe:1b: 3f:8a:c5:f4:b6:ff:61:b9:c2:94:5c:9a:33:43:42:22:25:4f: c8:24:1c:4a:21:15:aa:59:95:97:86:e3:66:83:64:d4:1c:89: 92:3b:98:34:17:a7:78:fe:1b:ac:27:ee:a1:91:a4:a1:46:d3: 26:b6:77:bd:ba:f4:75:d5:28:2d:dd:c7:8e:59:4a:ef:97:d0: 68:24:4e:4a:d7:0b:62:1b:59:2f:12:ac:b8:2a:39:52:33:51: ef:2a:4d:cd:87:79:54:17:b3:e1:e5:17:8d:36:c4:26:9f:7e: 72:18:6a:84:f7:1b:ab:e0:72:be:3b:f0:68:ba:13:5c:7c:73: d4:a3:8f:86:e2:8b:ec:47:0c:5b:8b:d5:b8:a0:a9:d1:4d:70: b5:e0:b0:db:b0:83:84:ea:8a:7e:6d:4b:90:92:4d:8e:26:2c: f5:da:d2:18:21:a8:b6:0c:3c:72:85:8f:c6:51:03:83:0f:ae: bc:4f:b8:1e:e9:b9:1d:f6:33:8d:43:e7:ce:99:bd:46:46:87: 4e:74:8d:2e -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUc5MdcncM4fLFb8Al7dvl6e7kypkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCM0FCQjFCNEEwMjRBNzAxMjIzQ0Q3MTU5MTFEOTk2 NzA2RTNBQTAeFw0yNjA2MzAwNzM4MjBaFw0yNjA3MDEwOTIyMjBaMDMxMTAvBgNV BAMTKEJCMEEwRTJDQzNGNjlGMkMzNzVCNDg5NThCQjJDQzhBNkE3Q0E0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/EjxtD0xg/foE8Vl4h7WeWN2F fxfyOGimwwtPq+rPzblOYYcsOd51WFyNvRLOiL8RuiXKQjV4b0Lc+gWWVaIcjbol iHzZuLhc3azMW8KBzcwl85qupmYTf9+6IA7J3zlBPu3Cig7kiMmHbBILmBOBPElh 1sht7F3iqviKdCpcDyr8COYpLCncM1ibA/TdOs2lrb7MDOzlyq0FLZbMwAKpM2lN /Sio4oxIPN2qNFQJN4xnfGAUTH2jmujYBE9Uq4enDD3avQrs/UP8NunNA/tphaaf NAgwWf6Y9qxiUE/qjgXRacmyajqowOaWYaUwp5Rw/wdVCMLjIpVY/2P06fhhAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUuwoOLMP2nyw3W0iVi7LMimp8pD0wHwYDVR0j BBgwFoAUTLOrsbSgJKcBIjzXFZEdmWcG46owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1BTWVMv MC80Q0IzQUJCMUI0QTAyNEE3MDEyMjNDRDcxNTkxMUQ5OTY3MDZFM0FBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzRDQjNBQkIxQjRBMDI0QTcwMTIyM0NENzE1OTEx RDk5NjcwNkUzQUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8wLzRDQjNBQkIxQjRBMDI0 QTcwMTIyM0NENzE1OTExRDk5NjcwNkUzQUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKr68qJ4iWxASs UoD/cHVqwyByzq/MepQAADJY7wicGbl/0nyUagPpa6QlDkWOWtYEqCAJ/hs/isX0 tv9hucKUXJozQ0IiJU/IJBxKIRWqWZWXhuNmg2TUHImSO5g0F6d4/husJ+6hkaSh RtMmtne9uvR11Sgt3ceOWUrvl9BoJE5K1wtiG1kvEqy4KjlSM1HvKk3Nh3lUF7Ph 5ReNNsQmn35yGGqE9xur4HK+O/BouhNcfHPUo4+G4ovsRwxbi9W4oKnRTXC14LDb sIOE6op+bUuQkk2OJiz12tIYIai2DDxyhY/GUQODD668T7ge6bkd9jONQ+fOmb1G RodOdI0u -----END CERTIFICATE-----Generated at Tue Jun 30 19:08:16 2026 by rpki-client