$ rpki-client -vvf rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft File: 67919719E801E94CCA89D7569D37B67D252A261F.mft (raw, json) Hash identifier: 3mao0NSGMVTVZ9hgDam63tStcnrvZ1qYLAxF5YzUstw= Subject key identifier: 84:92:95:64:A0:FB:B6:FB:02:29:50:DA:34:24:AA:21:54:45:4B:66 Authority key identifier: 67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F Certificate issuer: /CN=67919719E801E94CCA89D7569D37B67D252A261F Certificate serial: 6E820F86B754CD13F26AF8EFF79DFB7E5138B0CE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft Manifest number: 07 Signing time: Thu 14 May 2026 15:09:51 +0000 Manifest this update: Thu 14 May 2026 15:04:51 +0000 Manifest next update: Fri 15 May 2026 18:11:51 +0000 Files and hashes: 1: 3130332e3138302e31382e302f32332d3234203d3e203633383933.roa (hash: YHu6xUiyV20ecZfxOWBbvKCz1hQvQ5fZsJlGMsXnUjk=) 2: 67919719E801E94CCA89D7569D37B67D252A261F.crl (hash: 0UgbVGNVaMlB4nJamT/tqYmMXjVurJR4juoA2+6I3qA=) 3: 323430303a353065303a3a2f33322d3634203d3e203633383933.roa (hash: W+Ffc6VUEComE7wKXCSRqfcLvgJdlvoiPW+6XMV3r6s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 18:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:82:0f:86:b7:54:cd:13:f2:6a:f8:ef:f7:9d:fb:7e:51:38:b0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67919719E801E94CCA89D7569D37B67D252A261F Validity Not Before: May 14 15:04:51 2026 GMT Not After : May 15 18:11:51 2026 GMT Subject: CN=84929564A0FBB6FB022950DA3424AA2154454B66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:3b:92:8a:f4:f5:29:0a:64:75:58:e3:38: 37:8f:92:57:79:5e:1b:6b:b3:9e:4a:dd:1e:0d:ac: 16:8d:a9:8b:72:20:a4:93:de:33:14:f0:c2:f2:16: 13:73:2f:64:a6:40:91:de:da:2c:42:73:46:41:ac: 99:ba:a6:d0:b5:d0:ad:51:e4:07:74:22:8c:d0:81: b3:7d:b0:63:38:50:17:51:99:04:4d:58:dc:fc:4b: 30:43:3f:e6:b5:b2:5e:29:e9:c3:de:68:c7:ce:4d: 8d:d6:9e:2b:ef:55:40:b6:54:b5:fd:1f:5a:da:6c: ae:72:06:5c:f7:21:c0:f1:66:8f:4f:85:8b:51:74: b1:9a:e6:bf:d7:a1:07:76:f8:e9:79:c7:7c:89:ac: cf:5b:c1:ce:b7:51:24:ab:9e:b4:00:04:0f:89:ae: a7:08:d8:13:6f:d0:f0:2e:af:3d:91:f0:8c:26:b0: 87:57:77:1a:8c:d7:ec:a5:74:d3:99:48:34:7a:2a: ff:58:dc:0e:81:b3:71:a9:c4:6f:d3:93:74:b6:40: 65:06:19:95:fe:d4:8d:c2:50:89:31:5f:d7:fb:c7: 91:35:91:1d:6b:59:3f:1a:b4:62:ea:05:c5:67:a8: 10:c1:b5:23:85:b2:10:7e:7e:82:7f:fc:5e:cc:51: ea:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:92:95:64:A0:FB:B6:FB:02:29:50:DA:34:24:AA:21:54:45:4B:66 X509v3 Authority Key Identifier: keyid:67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:1d:73:51:fa:5f:10:04:b1:39:1c:a5:55:0f:45:6d:21:43: ab:ef:9b:c3:a5:c5:ef:37:27:18:a8:20:bd:2b:1f:20:5b:55: ba:fb:38:15:ef:8c:8a:37:45:ac:f3:5a:f6:be:7f:fa:be:69: 29:c8:8e:50:2f:46:d4:28:18:37:9c:4c:26:9e:7c:e0:0b:93: 0e:f7:79:e3:b1:49:54:5a:4b:7a:2c:6f:d2:3f:66:38:d3:f2: ca:2f:e2:24:1c:d6:4c:58:37:8b:7a:3f:48:94:8f:76:4d:3a: 9b:89:d7:cd:e9:6e:9e:f5:73:77:15:e3:15:86:af:dc:3b:20: 30:39:be:39:64:f8:1c:4c:17:42:52:e2:6f:5b:73:4e:89:90: fa:ce:9d:e3:24:76:7c:69:95:ba:3a:50:af:f7:c5:8a:95:71: 79:8d:bd:42:11:7e:c9:59:a1:9e:43:7d:77:96:94:72:e2:78: 77:22:22:01:0d:3e:cc:da:cc:48:5a:d8:c8:6d:78:70:3e:86: c0:4b:83:57:6b:50:54:6c:40:69:dd:37:00:12:8c:49:1b:2c: 42:06:21:cf:89:37:e3:c9:46:f2:22:a0:c7:90:a4:25:0d:83: ea:85:1c:b9:d6:78:ff:1c:95:fc:31:cc:81:54:dc:fe:8a:b9: 49:18:e2:e9 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUboIPhrdUzRPyavjv9537flE4sM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2OUQzN0I2N0Qy NTJBMjYxRjAeFw0yNjA1MTQxNTA0NTFaFw0yNjA1MTUxODExNTFaMDMxMTAvBgNV BAMTKDg0OTI5NTY0QTBGQkI2RkIwMjI5NTBEQTM0MjRBQTIxNTQ0NTRCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEDuSivT1KQpkdVjjODePkld5 Xhtrs55K3R4NrBaNqYtyIKST3jMU8MLyFhNzL2SmQJHe2ixCc0ZBrJm6ptC10K1R 5Ad0IozQgbN9sGM4UBdRmQRNWNz8SzBDP+a1sl4p6cPeaMfOTY3WnivvVUC2VLX9 H1rabK5yBlz3IcDxZo9PhYtRdLGa5r/XoQd2+Ol5x3yJrM9bwc63USSrnrQABA+J rqcI2BNv0PAurz2R8IwmsIdXdxqM1+yldNOZSDR6Kv9Y3A6Bs3GpxG/Tk3S2QGUG GZX+1I3CUIkxX9f7x5E1kR1rWT8atGLqBcVnqBDBtSOFshB+foJ//F7MUeprAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUhJKVZKD7tvsCKVDaNCSqIVRFS2YwHwYDVR0j BBgwFoAUZ5GXGegB6UzKiddWnTe2fSUqJh8wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENDMTIy MzM0Mi8wLzY3OTE5NzE5RTgwMUU5NENDQTg5RDc1NjlEMzdCNjdEMjUyQTI2MUYu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2 OUQzN0I2N0QyNTJBMjYxRi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RDQzEyMjMzNDIvMC82Nzkx OTcxOUU4MDFFOTRDQ0E4OUQ3NTY5RDM3QjY3RDI1MkEyNjFGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA ER1zUfpfEASxORylVQ9FbSFDq++bw6XF7zcnGKggvSsfIFtVuvs4Fe+MijdFrPNa 9r5/+r5pKciOUC9G1CgYN5xMJp584AuTDvd547FJVFpLeixv0j9mONPyyi/iJBzW TFg3i3o/SJSPdk06m4nXzelunvVzdxXjFYav3DsgMDm+OWT4HEwXQlLib1tzTomQ +s6d4yR2fGmVujpQr/fFipVxeY29QhF+yVmhnkN9d5aUcuJ4dyIiAQ0+zNrMSFrY yG14cD6GwEuDV2tQVGxAad03ABKMSRssQgYhz4k348lG8iKgx5CkJQ2D6oUcudZ4 /xyV/DHMgVTc/oq5SRji6Q== -----END CERTIFICATE-----Generated at Fri May 15 08:23:46 2026 by rpki-client