$ rpki-client -vvf rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft File: 9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft (raw, json) Hash identifier: ePdaI6N/FWP8L/PFC+RKDcImE/mE1S8n1D78tjIijH8= Subject key identifier: DF:3E:08:3A:A3:39:6F:74:75:3A:53:D0:F4:BD:FC:71:0B:7A:8F:EC Authority key identifier: 9D:00:7D:37:3F:38:1C:CA:59:6E:CE:20:FC:27:E8:D7:F7:2B:D5:C2 Certificate issuer: /CN=9D007D373F381CCA596ECE20FC27E8D7F72BD5C2 Certificate serial: 1C945D12D19C5FF2992379FC275C6F6A6141A9AF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft Manifest number: 83 Signing time: Sat 15 Aug 2026 03:49:15 +0000 Manifest this update: Sat 15 Aug 2026 03:44:15 +0000 Manifest next update: Sun 16 Aug 2026 07:25:15 +0000 Files and hashes: 1: 3130332e3136302e3232362e302f32332d3234203d3e203338383432.roa (hash: fXBUwxrpMNifp4MO+znwtVxrCjA2c4pDgmAW0x6+dMc=) 2: 9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl (hash: qY7Llcnqhjgd/R7nu2KuibM/aM5ojrgytyKokDns9ts=) 3: 323430363a663334303a3a2f33322d3634203d3e203338383432.roa (hash: dPU2RCL9922koNIK4EbftiZXNxbxs5ADbxLPZLggc34=) 4: 3130332e3136302e3232362e302f32332d3234203d3e20313331363539.roa (hash: E3rZgHSz1Z/QlxuFQ/uZkBfovj2HHfCX638SO+t2sg0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 03:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:94:5d:12:d1:9c:5f:f2:99:23:79:fc:27:5c:6f:6a:61:41:a9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D007D373F381CCA596ECE20FC27E8D7F72BD5C2 Validity Not Before: Aug 15 03:44:15 2026 GMT Not After : Aug 16 07:25:15 2026 GMT Subject: CN=DF3E083AA3396F74753A53D0F4BDFC710B7A8FEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:cf:63:3e:e4:74:24:7c:ee:6c:0f:47:9e: a8:23:2b:d9:25:08:78:3f:d9:1a:74:ba:fb:85:f5: ef:66:77:44:ea:10:7a:10:a4:9f:cc:61:37:bc:fe: f1:54:16:75:79:ac:a2:92:1c:16:27:9e:39:2b:76: dd:e8:29:22:48:a9:02:af:46:c4:a1:c9:53:42:dc: e4:26:0e:67:31:f2:e4:cf:bd:04:f6:12:e7:05:51: a7:8e:78:08:7b:66:89:80:08:13:2e:e3:a6:40:a3: 30:89:3b:83:77:3d:88:98:d1:6d:56:72:3b:7b:c9: 97:e6:57:56:a0:24:87:ad:73:9d:57:c1:59:05:8c: 99:08:e0:08:5b:e7:eb:ee:e2:9f:bd:12:11:51:59: ed:55:15:75:f1:f6:65:5f:ce:93:43:94:67:f4:09: 97:46:31:b2:da:90:4c:cb:d6:f9:53:57:a7:cb:e0: c1:f2:ef:4a:4b:ce:ae:82:ad:1f:d7:57:e2:3f:f8: a3:49:52:b4:31:43:af:a0:1c:9f:3c:c0:bb:2f:90: 05:e0:4d:68:88:af:df:a6:56:8b:82:be:1b:49:1d: c3:2b:91:8a:a2:a4:c4:73:58:3c:a8:d5:ce:e6:c2: 97:ca:64:e0:d9:d3:e3:69:7c:b1:70:f0:e2:c1:05: 03:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3E:08:3A:A3:39:6F:74:75:3A:53:D0:F4:BD:FC:71:0B:7A:8F:EC X509v3 Authority Key Identifier: keyid:9D:00:7D:37:3F:38:1C:CA:59:6E:CE:20:FC:27:E8:D7:F7:2B:D5:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:74:45:04:c6:4a:4b:93:f1:d1:65:1c:d6:3a:e8:17:95:89: 47:e5:58:68:31:1e:7b:1c:f7:af:26:a1:7b:1a:6a:ba:2e:3e: f5:da:ae:82:38:88:73:ff:5f:6f:54:a0:68:63:9b:74:a1:a1: a0:20:6c:34:f9:25:a9:33:b8:76:98:4e:e6:45:a8:49:63:e4: e5:49:a9:c9:58:28:01:f9:2c:25:98:08:a9:2a:b4:c2:ae:ea: 6e:37:e6:a2:9e:dd:03:96:12:21:9f:2b:66:ad:2e:d1:11:07: 34:0a:cf:40:f6:a1:72:ee:e3:48:41:97:fd:c4:e4:d6:a0:19: 4d:0c:04:45:4f:64:61:a1:3d:20:78:30:3a:2d:49:36:d8:86: 3a:d6:68:61:1b:51:18:b3:5c:b3:cc:1a:54:53:d5:94:6c:29: b3:00:a9:0c:24:fc:86:26:75:7d:c2:e3:f8:0e:ad:02:f7:ba: db:ab:af:a0:32:fd:d5:80:19:5d:24:b9:5a:80:33:7d:c3:73: be:df:90:5f:8b:97:8c:83:f0:f7:99:05:10:cd:3d:f6:6c:c6: 35:81:f6:9c:de:8e:e6:87:ef:e9:c7:2d:c0:42:2d:94:92:59: 34:5e:c7:e6:86:88:36:73:7b:58:75:2b:51:1b:80:7b:d0:28: 25:d1:d9:27 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUHJRdEtGcX/KZI3n8J1xvamFBqa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMDdEMzczRjM4MUNDQTU5NkVDRTIwRkMyN0U4RDdG NzJCRDVDMjAeFw0yNjA4MTUwMzQ0MTVaFw0yNjA4MTYwNzI1MTVaMDMxMTAvBgNV BAMTKERGM0UwODNBQTMzOTZGNzQ3NTNBNTNEMEY0QkRGQzcxMEI3QThGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97M9jPuR0JHzubA9HnqgjK9kl CHg/2Rp0uvuF9e9md0TqEHoQpJ/MYTe8/vFUFnV5rKKSHBYnnjkrdt3oKSJIqQKv RsShyVNC3OQmDmcx8uTPvQT2EucFUaeOeAh7ZomACBMu46ZAozCJO4N3PYiY0W1W cjt7yZfmV1agJIetc51XwVkFjJkI4Ahb5+vu4p+9EhFRWe1VFXXx9mVfzpNDlGf0 CZdGMbLakEzL1vlTV6fL4MHy70pLzq6CrR/XV+I/+KNJUrQxQ6+gHJ88wLsvkAXg TWiIr9+mVouCvhtJHcMrkYqipMRzWDyo1c7mwpfKZODZ0+NpfLFw8OLBBQPHAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU3z4IOqM5b3R1OlPQ9L38cQt6j+wwHwYDVR0j BBgwFoAUnQB9Nz84HMpZbs4g/Cfo1/cr1cIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE5TTkVU LzAvOUQwMDdEMzczRjM4MUNDQTU5NkVDRTIwRkMyN0U4RDdGNzJCRDVDMi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS85RDAwN0QzNzNGMzgxQ0NBNTk2RUNFMjBGQzI3 RThEN0Y3MkJENUMyLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE5TTkVULzAvOUQwMDdEMzczRjM4 MUNDQTU5NkVDRTIwRkMyN0U4RDdGNzJCRDVDMi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACl0RQTGSkuT 8dFlHNY66BeViUflWGgxHnsc968moXsaarouPvXaroI4iHP/X29UoGhjm3ShoaAg bDT5JakzuHaYTuZFqElj5OVJqclYKAH5LCWYCKkqtMKu6m435qKe3QOWEiGfK2at LtERBzQKz0D2oXLu40hBl/3E5NagGU0MBEVPZGGhPSB4MDotSTbYhjrWaGEbURiz XLPMGlRT1ZRsKbMAqQwk/IYmdX3C4/gOrQL3uturr6Ay/dWAGV0kuVqAM33Dc77f kF+Ll4yD8PeZBRDNPfZsxjWB9pzejuaH7+nHLcBCLZSSWTRex+aGiDZze1h1K1Eb gHvQKCXR2Sc= -----END CERTIFICATE-----Generated at Sat Aug 15 05:20:43 2026 by rpki-client