$ rpki-client -vvf rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft File: 67919719E801E94CCA89D7569D37B67D252A261F.mft (raw, json) Hash identifier: PCOGgPh+aUmz2qQxalg/DO56IprT3W4fS6/H4Q69Ves= Subject key identifier: 0F:79:04:5C:3F:22:A2:5C:7F:52:AE:A2:38:8B:63:49:A4:09:A4:AA Authority key identifier: 67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F Certificate issuer: /CN=67919719E801E94CCA89D7569D37B67D252A261F Certificate serial: 45DA45ADC6A0DDAE3C3E706A3DAD071649D58E84 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft Manifest number: 45 Signing time: Tue 30 Jun 2026 04:58:07 +0000 Manifest this update: Tue 30 Jun 2026 04:53:07 +0000 Manifest next update: Wed 01 Jul 2026 06:08:07 +0000 Files and hashes: 1: 67919719E801E94CCA89D7569D37B67D252A261F.crl (hash: 2zB8s2CRCv03+YNUTlrarnWFUEKinEufx4nl3YO6ZqI=) 2: 323430303a353065303a3a2f33322d3634203d3e203633383933.roa (hash: W+Ffc6VUEComE7wKXCSRqfcLvgJdlvoiPW+6XMV3r6s=) 3: 3130332e3138302e31382e302f32332d3234203d3e203633383933.roa (hash: YHu6xUiyV20ecZfxOWBbvKCz1hQvQ5fZsJlGMsXnUjk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 06:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:da:45:ad:c6:a0:dd:ae:3c:3e:70:6a:3d:ad:07:16:49:d5:8e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67919719E801E94CCA89D7569D37B67D252A261F Validity Not Before: Jun 30 04:53:07 2026 GMT Not After : Jul 1 06:08:07 2026 GMT Subject: CN=0F79045C3F22A25C7F52AEA2388B6349A409A4AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:07:50:82:67:13:69:b7:3e:66:fc:94:fb:bd: 0c:78:9a:14:76:a0:93:3d:42:a3:92:81:60:10:c1: 43:3c:83:d7:b4:2a:7f:0a:7b:f9:09:95:3f:2c:32: 74:b4:81:74:40:c8:4d:5c:89:62:23:b2:fe:9a:40: d3:08:cb:c2:a0:f2:5b:d6:6b:e3:c5:90:8b:ce:9f: d5:af:6d:f0:37:5d:62:c1:3c:76:f5:f6:65:f8:07: 38:8e:da:d9:01:25:5e:66:60:20:01:62:31:9a:8d: 5c:88:0e:d5:5f:a7:60:7d:c9:3f:9f:78:95:e8:6e: ea:55:90:7d:f7:a6:d5:79:67:bd:b2:ed:5f:07:5d: 5a:68:fd:e4:a3:22:9a:e2:30:f6:d6:a6:48:30:35: 20:d5:4d:de:45:8f:d3:0c:be:29:cf:a3:34:13:d2: 22:da:66:05:38:61:d3:8d:d5:58:31:76:c6:5e:52: a1:30:61:46:6a:09:4a:98:6b:b0:1b:65:fa:41:f6: 8e:d3:24:f2:9c:4b:f3:80:ae:f1:a7:bc:7a:39:74: 42:4f:e3:4c:1a:b1:6e:80:cd:d3:ca:1a:38:54:66: c8:8a:2b:d4:40:e0:f3:c1:08:27:1c:f9:11:f5:8b: d4:44:74:3f:38:2e:d8:06:e4:6f:3f:ce:23:e7:b4: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:79:04:5C:3F:22:A2:5C:7F:52:AE:A2:38:8B:63:49:A4:09:A4:AA X509v3 Authority Key Identifier: keyid:67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:41:58:12:e7:2c:92:a6:96:32:26:6b:f2:8e:15:00:1c:ce: a9:0f:1a:71:49:67:c4:3c:95:fe:91:c0:39:24:39:ab:86:2d: 5b:1d:ac:2a:9a:0b:8e:1e:ad:3d:86:f3:5a:cf:ce:27:8f:16: ea:97:20:6c:0a:a9:ce:02:5e:c4:16:27:e8:40:6f:d8:50:c1: 97:f6:43:7b:96:65:72:0a:de:83:d4:3d:38:1a:f4:86:c2:2b: 13:a5:07:4b:45:2e:de:37:5c:c5:d5:c5:f2:df:2c:0e:3a:61: f3:c4:ef:88:bb:9c:6a:78:e0:f1:9d:8d:55:e7:e4:5c:08:1b: af:bb:05:b5:07:17:89:b5:d7:b3:82:b6:51:a5:de:35:f5:67: 5a:ae:0b:41:d6:fe:2e:17:7b:e7:89:d2:ff:e8:3d:31:c9:e1: db:a0:b7:74:a8:66:a0:2a:98:4c:cb:98:ad:7c:70:3b:60:ce: f0:7d:14:0c:5e:43:f1:2a:7a:dc:85:bb:d1:ec:be:cc:8e:92: 21:87:f8:d9:af:43:ef:d2:5b:fc:67:2b:d6:06:8b:61:4c:70: 16:59:84:01:51:c7:0f:2c:8e:69:22:fa:37:cc:7a:fd:a7:a5: 51:b0:fa:8c:8f:66:64:10:57:34:02:a3:aa:e1:7a:78:bb:2b: c7:a8:82:02 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIURdpFrcag3a48PnBqPa0HFknVjoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2OUQzN0I2N0Qy NTJBMjYxRjAeFw0yNjA2MzAwNDUzMDdaFw0yNjA3MDEwNjA4MDdaMDMxMTAvBgNV BAMTKDBGNzkwNDVDM0YyMkEyNUM3RjUyQUVBMjM4OEI2MzQ5QTQwOUE0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYB1CCZxNptz5m/JT7vQx4mhR2 oJM9QqOSgWAQwUM8g9e0Kn8Ke/kJlT8sMnS0gXRAyE1ciWIjsv6aQNMIy8Kg8lvW a+PFkIvOn9WvbfA3XWLBPHb19mX4BziO2tkBJV5mYCABYjGajVyIDtVfp2B9yT+f eJXobupVkH33ptV5Z72y7V8HXVpo/eSjIpriMPbWpkgwNSDVTd5Fj9MMvinPozQT 0iLaZgU4YdON1VgxdsZeUqEwYUZqCUqYa7AbZfpB9o7TJPKcS/OArvGnvHo5dEJP 40wasW6AzdPKGjhUZsiKK9RA4PPBCCcc+RH1i9REdD84LtgG5G8/ziPntIFtAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUD3kEXD8iolx/Uq6iOItjSaQJpKowHwYDVR0j BBgwFoAUZ5GXGegB6UzKiddWnTe2fSUqJh8wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENDMTIy MzM0Mi8wLzY3OTE5NzE5RTgwMUU5NENDQTg5RDc1NjlEMzdCNjdEMjUyQTI2MUYu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2 OUQzN0I2N0QyNTJBMjYxRi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RDQzEyMjMzNDIvMC82Nzkx OTcxOUU4MDFFOTRDQ0E4OUQ3NTY5RDM3QjY3RDI1MkEyNjFGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA mkFYEucskqaWMiZr8o4VABzOqQ8acUlnxDyV/pHAOSQ5q4YtWx2sKpoLjh6tPYbz Ws/OJ48W6pcgbAqpzgJexBYn6EBv2FDBl/ZDe5Zlcgreg9Q9OBr0hsIrE6UHS0Uu 3jdcxdXF8t8sDjph88TviLucanjg8Z2NVefkXAgbr7sFtQcXibXXs4K2UaXeNfVn Wq4LQdb+Lhd754nS/+g9Mcnh26C3dKhmoCqYTMuYrXxwO2DO8H0UDF5D8Sp63IW7 0ey+zI6SIYf42a9D79Jb/Gcr1gaLYUxwFlmEAVHHDyyOaSL6N8x6/aelUbD6jI9m ZBBXNAKjquF6eLsrx6iCAg== -----END CERTIFICATE-----Generated at Tue Jun 30 19:12:30 2026 by rpki-client