$ rpki-client -vvf rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft File: 5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft (raw, json) Hash identifier: Iy4NCXOoU06C42FhGvzEt/JX9mstnm0HROW/gPowMKk= Subject key identifier: C5:F2:BA:1D:8A:7F:49:0F:B6:3B:E7:33:B3:F1:BD:F4:3E:B3:0C:C8 Authority key identifier: 5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C Certificate issuer: /CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C Certificate serial: 3A386156A3688DE4A289E865D7036251CCFF6821 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft Manifest number: 44 Signing time: Mon 29 Jun 2026 22:42:31 +0000 Manifest this update: Mon 29 Jun 2026 22:37:31 +0000 Manifest next update: Wed 01 Jul 2026 01:58:31 +0000 Files and hashes: 1: 5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl (hash: dmbUimzcmRD9hVPoxq06GllK1ZFrCk4HfHay5X+0wz0=) 2: 32372e302e3135322e302f32322d3234203d3e20313331363037.roa (hash: DvXwVOOH787nnj2iKzFJiQBBroV8f+Ma+r+Jza0TzM4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 01:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:38:61:56:a3:68:8d:e4:a2:89:e8:65:d7:03:62:51:cc:ff:68:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C Validity Not Before: Jun 29 22:37:31 2026 GMT Not After : Jul 1 01:58:31 2026 GMT Subject: CN=C5F2BA1D8A7F490FB63BE733B3F1BDF43EB30CC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:eb:e3:b4:a6:9c:88:5b:97:b6:dd:57:df: ae:98:97:cc:1a:3c:a6:5e:2b:4e:4f:a0:d7:64:cd: 9d:ed:82:5e:4a:26:d9:16:7a:65:0a:11:ed:2c:26: 2e:32:07:21:a1:03:62:6a:80:f0:c1:fb:89:17:08: 14:24:94:e6:54:db:9e:b5:35:42:5f:48:fa:44:0e: af:d5:91:5c:e9:74:d1:38:91:06:5c:58:0a:62:80: 00:29:d0:70:09:e6:0e:8c:1f:ae:ad:02:2b:ee:1f: 3a:6a:72:79:de:91:fa:1d:71:86:c3:fb:0a:38:00: 43:17:f1:a2:cd:92:c6:51:54:59:9d:2d:8b:51:e5: 9e:05:3c:20:25:1e:3a:b7:a7:68:bf:a0:21:b2:e5: 40:af:7c:7f:02:6c:9c:23:ce:16:66:95:9d:92:25: 35:b9:de:e5:e4:ee:a5:71:88:18:a1:8d:06:7a:fc: d7:d7:6b:7e:f0:c9:4a:db:db:7f:2d:80:08:b9:1c: 86:0c:e7:1a:c3:d6:af:48:7b:24:31:a7:b6:da:ed: a9:6a:5d:02:6e:33:93:09:6c:03:2a:d8:77:aa:01: 0a:51:f0:0c:5b:01:e8:37:f8:cb:ec:7c:56:38:77: 2c:b8:d3:09:dd:de:06:15:8b:8a:82:8f:23:ef:21: 5d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F2:BA:1D:8A:7F:49:0F:B6:3B:E7:33:B3:F1:BD:F4:3E:B3:0C:C8 X509v3 Authority Key Identifier: keyid:5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:17:5d:f7:8a:e3:63:e9:77:3e:eb:0d:cb:8f:16:46:26:19: 61:41:d0:15:c0:8c:05:69:4e:3a:bc:c1:45:b3:b1:6c:27:44: aa:61:35:54:53:09:95:9d:ea:9e:a7:c3:ca:87:8c:0f:68:02: 9a:4f:1a:6a:16:1b:1e:d4:0b:b2:de:0d:bb:83:73:f1:35:24: 7a:fe:2f:fe:c5:e5:4b:92:6d:d7:28:77:9a:29:f9:71:8e:f6: c1:61:3b:30:ab:77:8f:ac:5f:75:f4:a4:1b:0b:e2:05:e1:53: 38:87:5d:cd:1c:79:dc:e8:5f:b0:63:ee:89:61:d9:8b:74:69: b0:27:29:0c:53:96:03:e4:02:7e:45:de:7d:99:5f:8e:c5:db: 11:29:bf:49:78:d2:1c:53:71:59:48:0c:80:4b:ae:6a:e3:de: a1:14:53:28:fb:88:4e:6c:4f:e2:8e:20:82:37:e5:fc:26:4f: 3c:32:6b:84:27:74:7d:cd:0f:7b:82:28:3d:7b:3c:e1:cc:cd: 17:a5:ea:fa:f6:de:b9:12:b1:32:10:d4:9f:b0:5d:6b:c3:1b: 88:cd:d3:bf:9c:c4:55:c6:a9:44:77:22:4f:3a:0d:2c:2f:61: bc:38:b5:ae:9c:d0:fc:be:35:6a:0c:02:a6:85:31:92:76:a6: ef:02:ec:94 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUOjhhVqNojeSiiehl1wNiUcz/aCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0QzU3MjMyNTgyNTFBMkYyMjMzN0VDNUFCRTlGMkIx QUUyRkI0QzAeFw0yNjA2MjkyMjM3MzFaFw0yNjA3MDEwMTU4MzFaMDMxMTAvBgNV BAMTKEM1RjJCQTFEOEE3RjQ5MEZCNjNCRTczM0IzRjFCREY0M0VCMzBDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzevjtKaciFuXtt1X366Yl8wa PKZeK05PoNdkzZ3tgl5KJtkWemUKEe0sJi4yByGhA2JqgPDB+4kXCBQklOZU2561 NUJfSPpEDq/VkVzpdNE4kQZcWApigAAp0HAJ5g6MH66tAivuHzpqcnnekfodcYbD +wo4AEMX8aLNksZRVFmdLYtR5Z4FPCAlHjq3p2i/oCGy5UCvfH8CbJwjzhZmlZ2S JTW53uXk7qVxiBihjQZ6/NfXa37wyUrb238tgAi5HIYM5xrD1q9IeyQxp7ba7alq XQJuM5MJbAMq2HeqAQpR8AxbAeg3+MvsfFY4dyy40wnd3gYVi4qCjyPvIV1PAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUxfK6HYp/SQ+2O+czs/G99D6zDMgwHwYDVR0j BBgwFoAUWkxXIyWCUaLyIzfsWr6fKxri+0wwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENUVi8w LzVBNEM1NzIzMjU4MjUxQTJGMjIzMzdFQzVBQkU5RjJCMUFFMkZCNEMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNUE0QzU3MjMyNTgyNTFBMkYyMjMzN0VDNUFCRTlG MkIxQUUyRkI0Qy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RDVFYvMC81QTRDNTcyMzI1ODI1MUEy RjIyMzM3RUM1QUJFOUYyQjFBRTJGQjRDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxdd94rjY+l3PusN y48WRiYZYUHQFcCMBWlOOrzBRbOxbCdEqmE1VFMJlZ3qnqfDyoeMD2gCmk8aahYb HtQLst4Nu4Nz8TUkev4v/sXlS5Jt1yh3min5cY72wWE7MKt3j6xfdfSkGwviBeFT OIddzRx53OhfsGPuiWHZi3RpsCcpDFOWA+QCfkXefZlfjsXbESm/SXjSHFNxWUgM gEuuauPeoRRTKPuITmxP4o4ggjfl/CZPPDJrhCd0fc0Pe4IoPXs84czNF6Xq+vbe uRKxMhDUn7Bda8MbiM3Tv5zEVcapRHciTzoNLC9hvDi1rpzQ/L41agwCpoUxknam 7wLslA== -----END CERTIFICATE-----Generated at Tue Jun 30 19:08:15 2026 by rpki-client