$ rpki-client -vvf rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft File: 7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft (raw, json) Hash identifier: xxs1Os91K3LxeUp0sLdgMBdkQPTGh7FWcMpzr53zRL8= Subject key identifier: B9:A7:58:6F:48:00:E3:D6:03:D9:42:AE:54:1C:0D:83:BF:43:75:A2 Authority key identifier: 7B:B6:44:79:6A:C0:41:88:F3:D4:CB:38:CA:A5:85:3F:53:A9:14:9B Certificate issuer: /CN=7BB644796AC04188F3D4CB38CAA5853F53A9149B Certificate serial: 5B58074FFD0DE2345DB07BB951C175E14B337A7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft Manifest number: 09 Signing time: Sat 16 May 2026 02:12:57 +0000 Manifest this update: Sat 16 May 2026 02:07:57 +0000 Manifest next update: Sun 17 May 2026 04:26:57 +0000 Files and hashes: 1: 7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl (hash: rMGxDUugCsvYIDPnJl1v+7LgvyU1SE7h1IehTQ7R6Zg=) 2: 3136302e3235302e39382e302f32332d3234203d3e203137343133.roa (hash: aVg+n0PB8wvsVwpafjv075/Ks0O6aBd5O2JNt6Uq2zQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 21:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:58:07:4f:fd:0d:e2:34:5d:b0:7b:b9:51:c1:75:e1:4b:33:7a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BB644796AC04188F3D4CB38CAA5853F53A9149B Validity Not Before: May 16 02:07:57 2026 GMT Not After : May 17 04:26:57 2026 GMT Subject: CN=B9A7586F4800E3D603D942AE541C0D83BF4375A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:d8:f0:9e:c8:70:ac:ee:a3:d8:4c:53:ee: c5:c7:47:5a:4b:3a:c7:3c:bd:17:48:f1:38:e0:a5: 67:8c:a1:3a:74:f0:7f:fd:9e:2f:9a:cb:4d:62:25: f4:74:d7:c0:68:15:39:e4:5b:81:29:ff:7d:54:ff: 18:e0:fc:5f:47:95:9a:99:3d:df:62:09:5d:1f:63: e0:93:93:79:59:3f:6d:51:5c:e2:13:32:b6:b6:60: c8:0b:4b:5a:50:16:9d:7c:d0:4a:fe:85:a7:7d:cb: b9:5e:8c:e5:d8:aa:61:db:c9:2c:b8:a2:a4:85:b9: 5f:c0:04:db:ec:67:32:9a:53:06:09:a0:ac:8d:6c: e1:9d:bd:54:7c:dd:0a:c2:1b:5d:88:2f:a3:2b:d8: d1:f1:71:12:f4:df:eb:60:16:b8:ec:30:fa:f9:11: 4e:df:07:5e:54:60:34:1b:c4:0f:61:f4:50:8d:e8: aa:b7:cb:2e:3c:5f:18:c8:2e:6d:ed:74:d9:c9:d8: 54:5d:80:a7:0c:b5:40:fb:34:83:94:3b:40:d6:cb: 88:cd:c7:99:25:ea:03:0a:0d:9d:6b:ad:bb:0b:4a: 5a:10:8e:76:93:96:d6:9c:8b:32:3d:ee:c7:1a:45: e1:93:68:6b:93:b3:58:b3:d0:77:1d:50:fd:9e:6a: 66:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A7:58:6F:48:00:E3:D6:03:D9:42:AE:54:1C:0D:83:BF:43:75:A2 X509v3 Authority Key Identifier: keyid:7B:B6:44:79:6A:C0:41:88:F3:D4:CB:38:CA:A5:85:3F:53:A9:14:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:2c:4c:01:dc:1f:80:31:f8:22:f2:52:41:f2:9b:15:c7:fe: 9f:57:42:0e:12:54:03:a5:1b:a1:88:79:f4:9d:5f:a4:1d:47: e9:6e:15:91:56:e1:f6:c1:5d:74:46:2a:a1:48:68:8b:da:0f: dc:7d:69:6c:da:9a:7a:18:bc:4b:5c:7b:87:c0:10:8e:17:ed: 12:41:39:b7:c7:89:e0:25:33:50:d2:58:d8:4d:63:e1:24:e3: f0:51:e6:ff:20:26:1b:48:0d:8e:5e:8b:cc:54:e6:94:4b:aa: 7b:d4:ed:95:81:92:89:64:2e:f0:d7:9d:24:6c:e5:16:f6:b6: bb:59:ec:58:59:31:a3:7f:2f:81:a9:9c:25:69:da:15:66:a2: 10:57:47:0d:94:e2:e8:83:4c:68:fd:ce:08:40:75:b8:9e:cd: ee:db:5c:70:bc:da:52:f1:4d:aa:cc:86:ad:fa:aa:4a:40:1d: 04:cc:12:1a:c9:60:4a:73:f6:98:60:4c:19:e9:e7:1a:5a:12: 95:7e:b8:b0:32:05:78:af:51:7e:98:99:91:79:78:43:f7:73: 5a:3f:ed:86:40:43:3d:40:04:9f:eb:60:41:8c:87:d4:09:4c: c2:e7:12:ec:dd:f5:dd:32:33:d6:2d:d2:73:19:70:23:c7:12: 62:99:24:c6 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUW1gHT/0N4jRdsHu5UcF14Uszen0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JCNjQ0Nzk2QUMwNDE4OEYzRDRDQjM4Q0FBNTg1M0Y1 M0E5MTQ5QjAeFw0yNjA1MTYwMjA3NTdaFw0yNjA1MTcwNDI2NTdaMDMxMTAvBgNV BAMTKEI5QTc1ODZGNDgwMEUzRDYwM0Q5NDJBRTU0MUMwRDgzQkY0Mzc1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7stjwnshwrO6j2ExT7sXHR1pL Osc8vRdI8TjgpWeMoTp08H/9ni+ay01iJfR018BoFTnkW4Ep/31U/xjg/F9HlZqZ Pd9iCV0fY+CTk3lZP21RXOITMra2YMgLS1pQFp180Er+had9y7lejOXYqmHbySy4 oqSFuV/ABNvsZzKaUwYJoKyNbOGdvVR83QrCG12IL6Mr2NHxcRL03+tgFrjsMPr5 EU7fB15UYDQbxA9h9FCN6Kq3yy48XxjILm3tdNnJ2FRdgKcMtUD7NIOUO0DWy4jN x5kl6gMKDZ1rrbsLSloQjnaTltacizI97scaReGTaGuTs1iz0HcdUP2eamYXAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUuadYb0gA49YD2UKuVBwNg79DdaIwHwYDVR0j BBgwFoAUe7ZEeWrAQYjz1Ms4yqWFP1OpFJswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9ET0xU RC8xLzdCQjY0NDc5NkFDMDQxODhGM0Q0Q0IzOENBQTU4NTNGNTNBOTE0OUIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzAvN0JCNjQ0Nzk2QUMwNDE4OEYzRDRDQjM4Q0FB NTg1M0Y1M0E5MTQ5Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPRE9MVEQvMS83QkI2NDQ3OTZB QzA0MTg4RjNENENCMzhDQUE1ODUzRjUzQTkxNDlCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANixMAdwf gDH4IvJSQfKbFcf+n1dCDhJUA6UboYh59J1fpB1H6W4VkVbh9sFddEYqoUhoi9oP 3H1pbNqaehi8S1x7h8AQjhftEkE5t8eJ4CUzUNJY2E1j4STj8FHm/yAmG0gNjl6L zFTmlEuqe9TtlYGSiWQu8NedJGzlFva2u1nsWFkxo38vgamcJWnaFWaiEFdHDZTi 6INMaP3OCEB1uJ7N7ttccLzaUvFNqsyGrfqqSkAdBMwSGslgSnP2mGBMGennGloS lX64sDIFeK9RfpiZkXl4Q/dzWj/thkBDPUAEn+tgQYyH1AlMwucS7N313TIz1i3S cxlwI8cSYpkkxg== -----END CERTIFICATE-----Generated at Sat May 16 04:53:39 2026 by rpki-client