$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft File: 4DC8A0E80696AD1A2419ACE881334BE812506228.mft (raw, json) Hash identifier: TPnjEGBxbC3wSb6h7rRVQp4PKfKuoejWK9hS2k/9mKo= Subject key identifier: 04:64:BD:6F:73:A5:91:BD:2D:33:5F:5B:38:36:8F:86:35:64:1B:BF Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 3390867BFDA7E4678917293643C3A6DC28417037 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft Manifest number: 50 Signing time: Tue 04 Aug 2026 06:24:45 +0000 Manifest this update: Tue 04 Aug 2026 06:19:45 +0000 Manifest next update: Wed 05 Aug 2026 09:48:45 +0000 Files and hashes: 1: 3136322e342e3233372e302f32342d3234203d3e20323136313338.roa (hash: iHPBbo6GY/OiVgx3tWQE5WWeIebeHvBdmG8NcpKpNvA=) 2: 3136322e342e3233362e302f32342d3234203d3e20323136313338.roa (hash: KUa2XsqZOPgJ781I73XluMs/ebzGtEQhMS4Dy5L8rXs=) 3: 4DC8A0E80696AD1A2419ACE881334BE812506228.crl (hash: NoDxrrHH0JrUpv5BypFnM9C4rCHzHGwRt13WkmaxDms=) 4: 3136322e342e3233362e302f32332d3233203d3e20313331363330.roa (hash: W1CiJP1fcJGIBc6vJyxp+aVBKQhzLI93m00Pia4UGPk=) 5: 3136322e342e3233362e302f32342d3234203d3e20323032373336.roa (hash: dfD2OtCiIrSPgIlzeqY7nYIoRL0d0Rm5WuZ+VoPuEIc=) 6: 3136322e342e3233362e302f32342d3234203d3e20313937353337.roa (hash: +tTGktskMMOWc8Ety/WMBt1UkK/mDxd3gLrUS6bHiGw=) 7: 3136322e342e3233372e302f32342d3234203d3e20313937353337.roa (hash: 1bHqJJ3DE9NMijQ59MuD8OFFyw3UfsZ36yCMVQaeUME=) 8: 3136322e342e3233372e302f32342d3234203d3e20323032373336.roa (hash: w52thh8Ebtpos+XU7qjpIWopgPCDyo6UfDelxnyPqdM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 04:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:90:86:7b:fd:a7:e4:67:89:17:29:36:43:c3:a6:dc:28:41:70:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Aug 4 06:19:45 2026 GMT Not After : Aug 5 09:48:45 2026 GMT Subject: CN=0464BD6F73A591BD2D335F5B38368F8635641BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8f:f4:b7:5e:80:ce:97:7d:be:99:e0:5c:bc: bc:5e:47:ea:17:47:b9:4d:16:e0:14:18:c1:27:d2: 2d:32:5f:2a:a7:ad:91:ed:91:f3:ae:c6:3d:f6:fd: e7:9b:95:7a:f9:8e:06:f0:75:62:bb:cc:bf:38:0e: 61:f1:f4:4a:76:52:aa:98:5d:b5:86:db:50:65:63: 22:1b:e6:c7:d6:61:e9:bd:e3:40:7e:50:1b:5a:e5: 22:c3:83:3c:bf:79:1b:73:91:f0:42:e2:38:1e:96: d8:ad:81:29:98:37:65:f2:87:d8:04:73:8d:15:f2: 2e:85:a5:d6:84:4b:0d:04:8d:7b:14:bb:a1:1e:d9: ae:15:1e:99:f3:20:1c:d2:16:83:5d:3e:29:c6:82: 7d:cb:85:da:a9:b8:13:90:6b:c5:8d:cf:d1:2e:7f: 16:8e:bc:1d:35:43:a3:57:79:11:97:ba:98:09:60: 49:d5:78:57:62:a1:a2:d9:8c:68:b0:99:53:21:d1: 69:59:26:07:1a:da:59:a5:84:06:e7:a0:04:6a:dd: f4:0e:9c:3b:bf:98:54:1c:09:a1:66:b6:cd:e2:6c: 1a:75:7b:12:64:b9:f6:dd:ce:9d:68:e9:02:73:0b: 3f:0d:70:60:5f:04:cc:9e:b4:0d:07:23:d4:9a:2b: 9d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:64:BD:6F:73:A5:91:BD:2D:33:5F:5B:38:36:8F:86:35:64:1B:BF X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:26:c7:3b:ba:2e:92:42:94:76:bf:9f:72:57:9a:a1:2b:2e: 3e:03:49:29:bd:50:79:59:e1:fe:7a:22:66:f8:60:6c:04:3b: 56:dc:01:33:b7:ca:28:53:33:c9:bd:9e:45:1e:52:a0:ca:6c: 70:6c:4d:0f:73:f2:e4:d4:f2:48:d6:bf:58:a8:0f:d7:e6:c2: 25:81:a9:bd:77:33:f8:9b:34:13:05:ef:df:14:6b:32:bb:0d: 3d:e9:25:43:3f:b7:2c:04:79:17:13:83:8d:81:a0:dd:28:f4: ba:0d:92:9d:64:bb:d4:6a:8d:c5:9b:6a:a4:44:d0:2b:71:1a: 50:d3:e0:a6:d3:b6:42:2c:11:91:51:bb:91:2d:0b:e7:09:50: e4:01:2c:09:29:b8:3b:73:ac:8d:f6:42:c3:2b:1c:5b:44:bf: 39:4b:83:04:05:bf:28:26:72:16:cf:68:a2:91:6f:7f:8a:fa: de:ab:70:74:74:65:fe:3e:1f:ce:41:1e:d7:a3:39:2b:f6:17: 9c:4d:f0:1c:ca:45:56:c4:af:30:a0:71:bf:e3:50:44:eb:8a: d1:f0:c9:81:96:23:d4:4b:c2:07:cf:51:ca:e6:a1:d0:c8:7f: 65:42:7c:91:45:b4:94:0a:95:10:80:a9:15:08:d1:f6:9d:0f: d2:01:ee:c5 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUM5CGe/2n5GeJFyk2Q8Om3ChBcDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA4MDQwNjE5NDVaFw0yNjA4MDUwOTQ4NDVaMDMxMTAvBgNV BAMTKDA0NjRCRDZGNzNBNTkxQkQyRDMzNUY1QjM4MzY4Rjg2MzU2NDFCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkj/S3XoDOl32+meBcvLxeR+oX R7lNFuAUGMEn0i0yXyqnrZHtkfOuxj32/eeblXr5jgbwdWK7zL84DmHx9Ep2UqqY XbWG21BlYyIb5sfWYem940B+UBta5SLDgzy/eRtzkfBC4jgeltitgSmYN2Xyh9gE c40V8i6FpdaESw0EjXsUu6Ee2a4VHpnzIBzSFoNdPinGgn3LhdqpuBOQa8WNz9Eu fxaOvB01Q6NXeRGXupgJYEnVeFdioaLZjGiwmVMh0WlZJgca2lmlhAbnoARq3fQO nDu/mFQcCaFmts3ibBp1exJkufbdzp1o6QJzCz8NcGBfBMyetA0HI9SaK50FAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUBGS9b3Olkb0tM19bODaPhjVkG78wHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvNERDOEEwRTgwNjk2 QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADMmxzu6LpJC lHa/n3JXmqErLj4DSSm9UHlZ4f56Imb4YGwEO1bcATO3yihTM8m9nkUeUqDKbHBs TQ9z8uTU8kjWv1ioD9fmwiWBqb13M/ibNBMF798UazK7DT3pJUM/tywEeRcTg42B oN0o9LoNkp1ku9RqjcWbaqRE0CtxGlDT4KbTtkIsEZFRu5EtC+cJUOQBLAkpuDtz rI32QsMrHFtEvzlLgwQFvygmchbPaKKRb3+K+t6rcHR0Zf4+H85BHtejOSv2F5xN 8BzKRVbErzCgcb/jUETritHwyYGWI9RLwgfPUcrmodDIf2VCfJFFtJQKlRCAqRUI 0fadD9IB7sU= -----END CERTIFICATE-----Generated at Tue Aug 4 12:21:03 2026 by rpki-client