$ rpki-client -vvf rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft File: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft (raw, json) Hash identifier: IeJp6XYUHXfEWT+fAXkE2YMc1kdPr96wi9PwqKSTA9U= Subject key identifier: 4B:F1:51:F4:E8:3E:D2:20:1C:F8:79:1E:C1:43:B0:1E:A3:DA:9E:87 Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 Certificate issuer: /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Certificate serial: 67DD5A21746DDDD4E4C40C5C0246E19AB4BD0986 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft Manifest number: 49 Signing time: Tue 30 Jun 2026 12:43:54 +0000 Manifest this update: Tue 30 Jun 2026 12:38:54 +0000 Manifest next update: Wed 01 Jul 2026 15:12:54 +0000 Files and hashes: 1: 3231302e312e3233342e302f32342d3332203d3e20313331363537.roa (hash: pYVK17zAbMWT4djhepdkPZ+a4SmhzlWvmNCdXixNe1Y=) 2: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (hash: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=) 3: 3231302e312e3233352e302f32342d3332203d3e20313331363537.roa (hash: RLXRr3oaU8tfZv8c58D+ZW+I4V/4m7eEXGAKJ8n/Gpk=) 4: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl (hash: 80ORVHgIPuS0KUukLiojMjnHkQn0Mnk5dg9XRivO9AQ=) 5: 3231302e312e3233342e302f32332d3332203d3e20313331363537.roa (hash: XhpQ+C1tVRKngGZ94cXlaeW9/WXKoL5qCwvg98P9HFY=) 6: 3231302e312e3233342e302f32332d3332203d3e20313334383233.roa (hash: HWI5VQZaFjKYV+LScUBkUhCoJacVyotR7e1ayxfccA8=) 7: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (hash: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 14:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:dd:5a:21:74:6d:dd:d4:e4:c4:0c:5c:02:46:e1:9a:b4:bd:09:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Validity Not Before: Jun 30 12:38:54 2026 GMT Not After : Jul 1 15:12:54 2026 GMT Subject: CN=4BF151F4E83ED2201CF8791EC143B01EA3DA9E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:47:27:29:6a:a1:f7:19:37:91:f6:20:0f: 65:7e:96:34:e4:ae:ab:e3:d7:32:5a:00:0c:3a:b7: 35:f9:61:1e:da:55:70:bd:2a:5b:c8:cc:e3:9d:24: da:cd:5e:c4:1e:5b:b3:c9:68:40:26:02:04:94:fb: 3e:32:4d:20:74:ed:e9:15:cc:b9:6e:04:59:5d:06: 82:b0:71:48:98:44:45:35:84:ff:99:6e:4c:94:52: 22:4b:5e:0d:23:28:fc:95:15:61:c0:b9:4d:5c:6b: e4:7d:8d:48:49:6a:ba:2f:58:d1:76:d2:70:a1:bf: 6e:36:7f:b6:c2:bf:a3:34:88:de:47:db:cd:07:1f: 5b:7a:40:f3:3b:7a:7e:49:4c:fe:6f:c7:49:f0:96: be:60:e5:a8:93:a1:63:3a:ed:e9:94:b4:2c:74:12: f1:7c:85:c3:ee:ab:b0:2a:c0:d9:ff:09:c6:a0:8c: f6:58:2d:79:a6:d0:db:07:a2:09:0e:69:7b:63:74: 47:c1:39:77:06:00:7b:46:46:15:17:9f:13:75:a4: 88:c6:2c:f9:b2:4f:c5:94:28:b2:ca:97:a6:a2:b2: 31:79:1b:80:61:6d:13:dd:d6:61:13:01:2f:4e:cd: 8f:b9:17:a4:0f:fa:82:f4:20:a2:ad:e2:a1:0f:22: 60:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F1:51:F4:E8:3E:D2:20:1C:F8:79:1E:C1:43:B0:1E:A3:DA:9E:87 X509v3 Authority Key Identifier: keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:82:6a:fa:41:e1:9a:3c:0a:41:0b:96:7d:38:33:31:e8:95: 08:4b:d4:bb:68:6a:b5:02:db:31:02:ff:a8:6b:78:28:e4:9e: fc:f2:77:03:1c:c9:bf:db:c1:62:08:17:f5:38:c4:ff:a8:f7: de:dd:31:5e:39:b7:97:ac:50:7a:a2:f5:59:c1:c9:d1:c4:f5: 54:26:5c:1b:ce:c4:e5:ef:87:0d:91:73:d6:a5:50:b4:cf:a4: a5:83:91:ca:91:d3:28:19:dc:18:56:0d:fe:96:d7:21:a1:be: 21:fe:4a:83:15:be:02:79:50:18:db:35:d8:d9:23:e4:eb:f5: 9f:de:7e:a8:ae:62:da:5d:ac:c0:91:ab:cb:30:82:ac:52:2f: c8:f3:9f:d4:be:9d:04:24:2d:3f:58:7f:76:99:08:be:61:4b: 3c:13:57:4c:9d:71:2e:a2:28:c1:0c:36:b7:af:25:12:66:68: 06:60:dc:95:aa:d2:ae:91:17:79:88:d0:2a:82:24:f1:bd:e6: 61:61:9a:fc:14:0a:f8:a5:74:60:cd:99:cc:bb:8e:41:c6:f6: 5f:ec:a5:8d:7a:5f:04:b1:43:c8:ab:92:e1:e6:e2:7f:12:69: 58:f6:a9:8f:ee:49:63:80:ef:7d:9d:ac:03:97:2d:89:ac:70: b1:4f:3f:fa -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUZ91aIXRt3dTkxAxcAkbhmrS9CYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZGOEE2 RkFEQTQ2MDAeFw0yNjA2MzAxMjM4NTRaFw0yNjA3MDExNTEyNTRaMDMxMTAvBgNV BAMTKDRCRjE1MUY0RTgzRUQyMjAxQ0Y4NzkxRUMxNDNCMDFFQTNEQTlFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpn0cnKWqh9xk3kfYgD2V+ljTk rqvj1zJaAAw6tzX5YR7aVXC9KlvIzOOdJNrNXsQeW7PJaEAmAgSU+z4yTSB07ekV zLluBFldBoKwcUiYREU1hP+ZbkyUUiJLXg0jKPyVFWHAuU1ca+R9jUhJarovWNF2 0nChv242f7bCv6M0iN5H280HH1t6QPM7en5JTP5vx0nwlr5g5aiToWM67emUtCx0 EvF8hcPuq7AqwNn/CcagjPZYLXmm0NsHogkOaXtjdEfBOXcGAHtGRhUXnxN1pIjG LPmyT8WUKLLKl6aisjF5G4BhbRPd1mETAS9OzY+5F6QP+oL0IKKt4qEPImBtAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUS/FR9Og+0iAc+HkewUOwHqPanocwHwYDVR0j BBgwFoAUnQ9tU28FPDu1Iz5o4GNvim+tpGAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREFGVS8w LzlEMEY2RDUzNkYwNTNDM0JCNTIzM0U2OEUwNjM2RjhBNkZBREE0NjAuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZG OEE2RkFEQTQ2MC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RBRlUvMC85RDBGNkQ1MzZGMDUzQzNC QjUyMzNFNjhFMDYzNkY4QTZGQURBNDYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooJq+kHhmjwKQQuW fTgzMeiVCEvUu2hqtQLbMQL/qGt4KOSe/PJ3AxzJv9vBYggX9TjE/6j33t0xXjm3 l6xQeqL1WcHJ0cT1VCZcG87E5e+HDZFz1qVQtM+kpYORypHTKBncGFYN/pbXIaG+ If5KgxW+AnlQGNs12Nkj5Ov1n95+qK5i2l2swJGryzCCrFIvyPOf1L6dBCQtP1h/ dpkIvmFLPBNXTJ1xLqIowQw2t68lEmZoBmDclarSrpEXeYjQKoIk8b3mYWGa/BQK +KV0YM2ZzLuOQcb2X+yljXpfBLFDyKuS4ebifxJpWPapj+5JY4DvfZ2sA5ctiaxw sU8/+g== -----END CERTIFICATE-----Generated at Tue Jun 30 19:08:17 2026 by rpki-client