$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft File: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft (raw, json) Hash identifier: Gje6F7e/G7gVZiNZSdNrZScvD+AzJFXE/R2+IxVA5zw= Subject key identifier: 75:99:00:59:7B:C1:AA:8D:86:AA:4C:D0:3C:67:68:6B:28:B8:B2:85 Authority key identifier: E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 Certificate issuer: /CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Certificate serial: 3FBE56A798BFE8499CBD3E15D886F42AA09227DE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft Manifest number: 4F Signing time: Tue 04 Aug 2026 14:42:47 +0000 Manifest this update: Tue 04 Aug 2026 14:37:47 +0000 Manifest next update: Wed 05 Aug 2026 16:27:47 +0000 Files and hashes: 1: 323430323a363432303a3a2f33322d3438203d3e20313331363330.roa (hash: oxQPGNBMj2CJJd3CtDlG2Tl/miuEDB0GkZlm0cd0pJk=) 2: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl (hash: u6AjWQoBsmpLmMKrDHTgx6sgXDq6N3PgADK0ijPuSa8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 02:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:be:56:a7:98:bf:e8:49:9c:bd:3e:15:d8:86:f4:2a:a0:92:27:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Validity Not Before: Aug 4 14:37:47 2026 GMT Not After : Aug 5 16:27:47 2026 GMT Subject: CN=759900597BC1AA8D86AA4CD03C67686B28B8B285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:05:85:2e:b1:52:fe:e5:0f:00:a7:4a:fa:4a: 9a:d7:da:9d:a4:c5:eb:96:17:10:31:c9:f7:d5:f6: 1c:5c:bd:38:63:96:12:e8:01:7e:4b:29:4e:00:50: 94:c0:90:89:80:42:a0:4e:9d:1e:57:5c:6a:3d:d9: 95:8f:d3:cf:be:32:5e:a6:a5:69:76:0e:d4:27:d9: be:72:20:fa:eb:15:81:ea:80:e7:79:5f:6c:9d:65: dc:8e:91:94:bb:3f:2a:f6:e2:8b:f7:7b:53:81:5f: 46:b9:9f:fb:ee:4a:f3:53:38:f9:bc:83:7b:68:bf: bd:f8:2a:d5:1d:b3:88:2b:e1:4b:5e:84:37:ad:5e: a1:8e:25:50:82:ac:de:b8:32:7f:2a:fb:7a:8a:98: 6b:02:38:43:75:08:78:45:1b:65:8d:53:52:7d:e1: 6a:df:a7:64:d4:71:29:82:e4:0e:df:ff:c0:72:5d: 90:48:29:b0:77:ac:b4:12:93:b7:aa:3c:23:2a:54: 1d:0e:3c:8a:a6:fd:25:f8:78:3c:da:39:13:24:a1: c0:5a:b8:a6:4f:05:2d:39:0f:71:df:27:02:21:0f: f3:7f:e9:6f:c7:51:b4:a4:48:22:cf:a4:8f:5c:38: 84:00:4d:62:6c:dd:c4:c9:fd:89:53:f2:b0:a7:e8: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:99:00:59:7B:C1:AA:8D:86:AA:4C:D0:3C:67:68:6B:28:B8:B2:85 X509v3 Authority Key Identifier: keyid:E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:65:3c:b3:81:10:b1:93:a6:f6:de:64:e8:8e:3d:29:51:f7: 38:d1:86:59:2c:64:0a:00:55:74:04:7a:22:4f:17:7a:dc:77: e9:d2:30:3c:9a:8c:02:c6:25:22:9f:c2:5a:8d:f8:0e:f3:96: b2:50:5e:52:7b:a0:8e:2e:eb:b8:90:22:66:07:a0:18:83:7d: b4:09:ad:a1:f0:fe:dc:6c:6f:6f:13:29:15:fe:14:b6:ba:52: 13:3e:73:8c:e9:d2:ba:64:61:2f:7e:85:f3:8e:9e:62:1b:bf: dd:c3:6c:fb:25:55:c0:81:e0:fa:5a:a4:21:8f:5d:bc:b2:1a: a7:14:72:ca:fd:69:42:3f:2d:ee:8b:b8:5a:1a:6b:32:b4:77: 04:92:e8:6d:cb:de:65:a7:d7:73:fe:ca:73:81:0d:62:87:a9: 89:c2:c8:03:42:e5:ed:32:d3:d6:7f:f3:53:0f:61:ed:fd:69: 84:f8:7e:d5:b9:2d:ff:c3:26:1e:c1:8f:7a:d8:13:a3:9f:8c: ea:00:fa:2a:34:09:b3:ba:48:97:cc:4f:71:46:c0:2d:32:19: 90:97:36:f0:22:62:8f:21:93:38:66:c6:c3:f1:05:dd:82:20: c2:e3:e4:2d:80:9d:13:1d:0a:23:d2:fa:bc:d3:53:89:54:a0: c1:25:5b:24 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUP75Wp5i/6EmcvT4V2Ib0KqCSJ94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRD MUEzOUJCMDAeFw0yNjA4MDQxNDM3NDdaFw0yNjA4MDUxNjI3NDdaMDMxMTAvBgNV BAMTKDc1OTkwMDU5N0JDMUFBOEQ4NkFBNENEMDNDNjc2ODZCMjhCOEIyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWBYUusVL+5Q8Ap0r6SprX2p2k xeuWFxAxyffV9hxcvThjlhLoAX5LKU4AUJTAkImAQqBOnR5XXGo92ZWP08++Ml6m pWl2DtQn2b5yIPrrFYHqgOd5X2ydZdyOkZS7Pyr24ov3e1OBX0a5n/vuSvNTOPm8 g3tov734KtUds4gr4UtehDetXqGOJVCCrN64Mn8q+3qKmGsCOEN1CHhFG2WNU1J9 4Wrfp2TUcSmC5A7f/8ByXZBIKbB3rLQSk7eqPCMqVB0OPIqm/SX4eDzaORMkocBa uKZPBS05D3HfJwIhD/N/6W/HUbSkSCLPpI9cOIQATWJs3cTJ/YlT8rCn6JW9AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUdZkAWXvBqo2GqkzQPGdoayi4soUwHwYDVR0j BBgwFoAU5oxMEDApuEFCpcqz77hS/cGjm7AwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzEvRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS9FNjhDNEMxMDMwMjlCODQxNDJBNUNBQjNFRkI4 NTJGREMxQTM5QkIwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzEvRTY4QzRDMTAzMDI5 Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKxlPLOBELGT pvbeZOiOPSlR9zjRhlksZAoAVXQEeiJPF3rcd+nSMDyajALGJSKfwlqN+A7zlrJQ XlJ7oI4u67iQImYHoBiDfbQJraHw/txsb28TKRX+FLa6UhM+c4zp0rpkYS9+hfOO nmIbv93DbPslVcCB4PpapCGPXbyyGqcUcsr9aUI/Le6LuFoaazK0dwSS6G3L3mWn 13P+ynOBDWKHqYnCyANC5e0y09Z/81MPYe39aYT4ftW5Lf/DJh7Bj3rYE6OfjOoA +io0CbO6SJfMT3FGwC0yGZCXNvAiYo8hkzhmxsPxBd2CIMLj5C2AnRMdCiPS+rzT U4lUoMElWyQ= -----END CERTIFICATE-----Generated at Tue Aug 4 17:26:51 2026 by rpki-client