$ rpki-client -vvf rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft File: 5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft (raw, json) Hash identifier: 1WsFjEXUvqYwTc4dj3CZiEua7CPSkpPyvANOlrzfLVc= Subject key identifier: 77:1C:BE:35:94:EE:D2:87:37:89:ED:DA:27:7F:07:17:6E:82:FB:94 Authority key identifier: 5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C Certificate issuer: /CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C Certificate serial: 652DA76285E018A628C04F9BCAC744EDCD1727DC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft Manifest number: 04 Signing time: Wed 13 May 2026 05:06:59 +0000 Manifest this update: Wed 13 May 2026 05:01:59 +0000 Manifest next update: Thu 14 May 2026 07:27:59 +0000 Files and hashes: 1: 32372e302e3135322e302f32322d3234203d3e20313331363037.roa (hash: DvXwVOOH787nnj2iKzFJiQBBroV8f+Ma+r+Jza0TzM4=) 2: 5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl (hash: NXlLVapQnXlKqG9228JaQdfa04ZmLgAAFQNsZcYnG+I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2d:a7:62:85:e0:18:a6:28:c0:4f:9b:ca:c7:44:ed:cd:17:27:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C Validity Not Before: May 13 05:01:59 2026 GMT Not After : May 14 07:27:59 2026 GMT Subject: CN=771CBE3594EED2873789EDDA277F07176E82FB94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:f0:66:92:27:9a:df:75:33:77:b3:76:40: cf:7c:e4:f5:bb:e1:25:95:8d:1b:9c:64:cc:24:4b: 96:bd:bf:5f:e1:df:7b:54:52:77:52:17:2a:82:ed: 16:c3:6b:c7:21:e0:97:4f:b8:c4:d0:30:9e:51:f6: 5a:44:17:4a:a1:81:b5:fc:bc:48:51:c4:29:13:ec: 45:56:56:7b:ed:e8:5a:b4:e3:52:0c:94:46:d9:06: d7:2a:78:be:07:8d:67:db:ff:10:ae:1a:53:65:3a: 40:ba:31:59:8e:b4:5c:7c:0f:19:ba:12:c4:75:26: 3b:75:aa:14:94:14:10:02:91:13:e4:a6:6a:0e:d0: 3d:6a:3c:6e:b2:0b:ce:5e:e8:cb:9a:f0:7f:f7:6a: d2:46:e7:36:15:68:f0:a9:9e:95:12:72:d6:b7:fa: 85:e5:42:8e:b9:16:f3:eb:4b:9c:8f:e0:fd:c6:0b: 1c:8d:e6:ea:69:b7:32:e3:07:d7:fb:8a:dc:fe:50: 60:58:6b:c3:a8:a6:0f:1c:4b:a0:92:ab:49:b1:5e: 24:c2:a2:22:bf:7c:7a:ca:44:27:4a:9e:e8:e6:ed: 0f:cd:21:01:bd:20:99:60:5b:ed:f0:b7:af:ca:a7: fc:55:b3:4f:8d:0b:3a:54:ba:a9:fb:39:ec:c9:f3: 29:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1C:BE:35:94:EE:D2:87:37:89:ED:DA:27:7F:07:17:6E:82:FB:94 X509v3 Authority Key Identifier: keyid:5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:47:df:f7:0d:04:17:6d:91:09:c7:29:6e:7b:62:6b:79:04: f3:e7:a8:25:ea:da:91:7d:56:9b:49:0d:f6:fc:06:72:9c:8e: 64:7f:5a:54:d4:94:75:9f:8f:63:d9:69:27:45:9c:c3:64:da: b1:ce:d3:33:40:36:07:9a:ed:6c:f7:3f:a1:7f:2d:1d:30:ca: c1:11:38:6d:cb:ab:6b:08:f4:37:b8:a5:78:65:b9:45:c3:66: a7:86:5b:ef:86:54:7d:20:88:7d:7c:a4:ee:d8:b9:a5:00:94: 4c:b0:a0:92:5b:54:02:9e:3b:b1:e9:7f:31:6f:6a:d5:14:45: 00:0f:49:20:4f:4d:e7:0b:d9:eb:a9:b6:d9:19:6f:3b:d4:1c: 20:63:c1:f1:15:d2:b1:f4:09:c4:c3:9e:a8:bd:3e:0d:57:5c: c7:45:46:a7:04:f4:c2:b3:90:8f:2c:f1:37:08:18:ad:95:39: 30:d4:ee:02:23:30:21:ae:45:29:6a:87:3c:1c:24:f7:91:f1: 86:64:53:4f:ab:91:14:6b:41:b2:c7:6c:fc:e2:53:aa:b8:99: 87:c9:97:1e:46:62:54:0c:b9:06:be:96:10:cb:e2:a4:9d:66: 4c:9c:77:b9:55:d4:63:f4:35:86:c0:f4:84:1c:58:99:b2:df: cc:02:dc:a8 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUZS2nYoXgGKYowE+bysdE7c0XJ9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0QzU3MjMyNTgyNTFBMkYyMjMzN0VDNUFCRTlGMkIx QUUyRkI0QzAeFw0yNjA1MTMwNTAxNTlaFw0yNjA1MTQwNzI3NTlaMDMxMTAvBgNV BAMTKDc3MUNCRTM1OTRFRUQyODczNzg5RUREQTI3N0YwNzE3NkU4MkZCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27/Bmkiea33Uzd7N2QM985PW7 4SWVjRucZMwkS5a9v1/h33tUUndSFyqC7RbDa8ch4JdPuMTQMJ5R9lpEF0qhgbX8 vEhRxCkT7EVWVnvt6Fq041IMlEbZBtcqeL4HjWfb/xCuGlNlOkC6MVmOtFx8Dxm6 EsR1Jjt1qhSUFBACkRPkpmoO0D1qPG6yC85e6Mua8H/3atJG5zYVaPCpnpUScta3 +oXlQo65FvPrS5yP4P3GCxyN5upptzLjB9f7itz+UGBYa8Oopg8cS6CSq0mxXiTC oiK/fHrKRCdKnujm7Q/NIQG9IJlgW+3wt6/Kp/xVs0+NCzpUuqn7OezJ8ynxAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUdxy+NZTu0oc3ie3aJ38HF26C+5QwHwYDVR0j BBgwFoAUWkxXIyWCUaLyIzfsWr6fKxri+0wwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENUVi8w LzVBNEM1NzIzMjU4MjUxQTJGMjIzMzdFQzVBQkU5RjJCMUFFMkZCNEMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNUE0QzU3MjMyNTgyNTFBMkYyMjMzN0VDNUFCRTlG MkIxQUUyRkI0Qy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RDVFYvMC81QTRDNTcyMzI1ODI1MUEy RjIyMzM3RUM1QUJFOUYyQjFBRTJGQjRDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkff9w0EF22RCccp bntia3kE8+eoJerakX1Wm0kN9vwGcpyOZH9aVNSUdZ+PY9lpJ0Wcw2Tasc7TM0A2 B5rtbPc/oX8tHTDKwRE4bcurawj0N7ileGW5RcNmp4Zb74ZUfSCIfXyk7ti5pQCU TLCgkltUAp47sel/MW9q1RRFAA9JIE9N5wvZ66m22RlvO9QcIGPB8RXSsfQJxMOe qL0+DVdcx0VGpwT0wrOQjyzxNwgYrZU5MNTuAiMwIa5FKWqHPBwk95HxhmRTT6uR FGtBssds/OJTqriZh8mXHkZiVAy5Br6WEMvipJ1mTJx3uVXUY/Q1hsD0hBxYmbLf zALcqA== -----END CERTIFICATE-----Generated at Wed May 13 20:35:59 2026 by rpki-client