$ rpki-client -vvf rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft File: 2E8003B145695D652CFF3D58625D3B0A3535AD84.mft (raw, json) Hash identifier: Qn5B6E/ZayxFC5BwBOEkFOGY7U88Seih5hM8eW3EQUU= Subject key identifier: 89:29:9B:03:B6:AD:51:01:6C:17:29:28:D7:4D:AB:B4:51:3D:87:5B Authority key identifier: 2E:80:03:B1:45:69:5D:65:2C:FF:3D:58:62:5D:3B:0A:35:35:AD:84 Certificate issuer: /CN=2E8003B145695D652CFF3D58625D3B0A3535AD84 Certificate serial: 3A48515803430B92FE39D7E628FB2E881211542C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft Manifest number: 43 Signing time: Tue 30 Jun 2026 05:58:14 +0000 Manifest this update: Tue 30 Jun 2026 05:53:14 +0000 Manifest next update: Wed 01 Jul 2026 06:44:14 +0000 Files and hashes: 1: 2E8003B145695D652CFF3D58625D3B0A3535AD84.crl (hash: CvKkL2NQSkO9NMPQFRQxR1Hwf5Sx0yz90ZNmDHGrQo8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.crl rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 06:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:48:51:58:03:43:0b:92:fe:39:d7:e6:28:fb:2e:88:12:11:54:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8003B145695D652CFF3D58625D3B0A3535AD84 Validity Not Before: Jun 30 05:53:14 2026 GMT Not After : Jul 1 06:44:14 2026 GMT Subject: CN=89299B03B6AD51016C172928D74DABB4513D875B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:38:ca:98:6d:cf:87:87:ec:09:d6:be:10: 82:1b:06:80:91:fa:75:d7:1a:8c:03:73:ce:f4:9a: 1d:34:e1:ff:cb:a8:38:da:af:37:dd:6a:32:46:14: 18:62:24:16:3d:6d:95:2a:bd:b8:99:74:49:b0:07: 51:69:cd:5f:9a:84:b8:af:5e:ee:96:6d:17:b4:18: 77:54:82:ea:f9:94:4c:e1:2f:61:03:2b:1f:98:4d: 57:18:4d:1c:12:3a:c0:0f:a5:a3:7f:72:2c:74:06: 39:c4:5d:2d:d2:d4:76:b3:b6:fd:45:c0:dc:9a:17: 7f:f8:ef:31:9c:ca:c1:3b:e2:c2:ad:18:1b:31:97: b3:94:41:05:82:1e:9f:07:0a:f0:78:d5:9a:4b:92: 33:03:41:b7:4f:5c:28:26:37:19:4d:46:9e:ff:d9: 47:2b:21:a1:33:61:00:b4:59:f3:f5:57:66:eb:e7: e9:4e:7a:c4:8f:6e:bf:aa:69:37:fc:f5:7b:09:db: ae:2d:49:14:66:f0:25:80:b2:26:d7:5f:53:3c:c4: 95:7d:39:ef:dc:61:cd:19:53:46:5a:57:fa:dd:b8: 6e:36:16:cb:4e:f7:a2:fa:d6:49:06:9f:28:6b:40: 40:48:70:15:14:5b:ce:6c:0d:24:72:59:fd:bf:63: 85:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:29:9B:03:B6:AD:51:01:6C:17:29:28:D7:4D:AB:B4:51:3D:87:5B X509v3 Authority Key Identifier: keyid:2E:80:03:B1:45:69:5D:65:2C:FF:3D:58:62:5D:3B:0A:35:35:AD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d4:00:0d:96:f3:df:21:cf:20:36:3d:ba:f2:93:8f:f2:71: 7b:2f:be:78:a4:3a:88:af:16:a6:be:33:51:cc:b4:fb:71:64: 1d:ed:fc:41:ce:96:e4:53:a7:74:9c:15:74:b4:01:61:36:19: 32:42:47:a9:50:e4:0a:a1:4b:0c:ea:97:38:58:fe:f5:7c:0a: 32:f3:a2:a6:be:39:40:f8:8d:be:d0:de:48:ec:67:31:8b:be: 79:19:c0:02:df:a3:23:e4:8b:aa:4b:b5:33:0a:9f:67:e7:bb: f2:f8:7b:67:db:35:96:71:bc:c8:0f:a5:58:ce:7a:11:87:c4: 51:34:c6:f7:57:bb:af:83:9e:21:c5:5f:9d:0a:e5:73:ef:57: 99:65:53:6f:6e:e4:8c:1a:46:4b:0d:ea:e0:2c:1d:46:ec:0e: 66:a5:8f:c8:e9:a5:c2:73:67:b8:72:3c:01:a7:4d:d4:39:06: ca:4d:74:34:6e:8d:da:19:63:73:dd:4f:14:b1:57:78:35:55: 0b:96:a4:88:e9:76:1e:a4:06:ae:c4:fc:83:3c:74:6f:f7:7f: 97:9e:15:84:03:97:66:e5:b8:b4:c5:0e:52:3c:b2:c9:a2:3c: 76:67:b8:e2:e5:b2:64:2f:ba:ec:25:15:50:0f:94:eb:a8:a3: cd:2c:d8:d6 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUOkhRWANDC5L+OdfmKPsuiBIRVCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4MDAzQjE0NTY5NUQ2NTJDRkYzRDU4NjI1RDNCMEEz NTM1QUQ4NDAeFw0yNjA2MzAwNTUzMTRaFw0yNjA3MDEwNjQ0MTRaMDMxMTAvBgNV BAMTKDg5Mjk5QjAzQjZBRDUxMDE2QzE3MjkyOEQ3NERBQkI0NTEzRDg3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdjjKmG3Ph4fsCda+EIIbBoCR +nXXGowDc870mh004f/LqDjarzfdajJGFBhiJBY9bZUqvbiZdEmwB1FpzV+ahLiv Xu6WbRe0GHdUgur5lEzhL2EDKx+YTVcYTRwSOsAPpaN/cix0BjnEXS3S1Haztv1F wNyaF3/47zGcysE74sKtGBsxl7OUQQWCHp8HCvB41ZpLkjMDQbdPXCgmNxlNRp7/ 2UcrIaEzYQC0WfP1V2br5+lOesSPbr+qaTf89XsJ264tSRRm8CWAsibXX1M8xJV9 Oe/cYc0ZU0ZaV/rduG42FstO96L61kkGnyhrQEBIcBUUW85sDSRyWf2/Y4WFAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUiSmbA7atUQFsFyko102rtFE9h1swHwYDVR0j BBgwFoAULoADsUVpXWUs/z1YYl07CjU1rYQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAv MkU4MDAzQjE0NTY5NUQ2NTJDRkYzRDU4NjI1RDNCMEEzNTM1QUQ4NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yRTgwMDNCMTQ1Njk1RDY1MkNGRjNENTg2MjVEM0Iw QTM1MzVBRDg0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAvMkU4MDAzQjE0NTY5NUQ2NTJD RkYzRDU4NjI1RDNCMEEzNTM1QUQ4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHrUAA2W898hzyA2Pbry k4/ycXsvvnikOoivFqa+M1HMtPtxZB3t/EHOluRTp3ScFXS0AWE2GTJCR6lQ5Aqh SwzqlzhY/vV8CjLzoqa+OUD4jb7Q3kjsZzGLvnkZwALfoyPki6pLtTMKn2fnu/L4 e2fbNZZxvMgPpVjOehGHxFE0xvdXu6+DniHFX50K5XPvV5llU29u5IwaRksN6uAs HUbsDmalj8jppcJzZ7hyPAGnTdQ5BspNdDRujdoZY3PdTxSxV3g1VQuWpIjpdh6k Bq7E/IM8dG/3f5eeFYQDl2bluLTFDlI8ssmiPHZnuOLlsmQvuuwlFVAPlOuoo80s 2NY= -----END CERTIFICATE-----Generated at Tue Jun 30 19:08:10 2026 by rpki-client