$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft File: D31DE8192962A403BB6809455D9C0776F79CC527.mft (raw, json) Hash identifier: tRnNmMZ/RCwLz3zs9dJQuA6SK18WJ7ph0FbaI6JCbn0= Subject key identifier: 0A:B9:F0:03:EF:C2:33:D4:03:CA:09:77:22:7B:03:0D:AF:7B:4A:79 Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527 Certificate serial: 6134AF5189AD77C8FC22515A7F5002C182DE4CD3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft Manifest number: 4B Signing time: Tue 30 Jun 2026 09:28:32 +0000 Manifest this update: Tue 30 Jun 2026 09:23:32 +0000 Manifest next update: Wed 01 Jul 2026 12:10:32 +0000 Files and hashes: 1: 36312e35362e32352e302f32342d3234203d3e203138343131.roa (hash: qLfcOZVogzNc0fPW8DS0BFg+aXm72rn141irJHfF/2A=) 2: 3131392e33302e31362e302f32302d3234203d3e203138343131.roa (hash: b/aL5o5ZJ2+jJ6WA1q4dCKtGxzeUgsNC1ybEW3+mJZY=) 3: 3131392e33302e31362e302f32302d3230203d3e203138343131.roa (hash: VDIgNrS0Bj4C/eZLO2BtqOoH9/X324CutCA0RmZUaVs=) 4: 36312e35362e32362e302f32342d3234203d3e203138343131.roa (hash: nzkDFeWq9DKB8SnYVh/zKHjUR7e4Y9fE95qdnDZlMiI=) 5: 36312e35362e31362e302f32302d3234203d3e203138343131.roa (hash: OaBE8mWI96DAhvnsCUNb1Lo3ZA5eC1WiiVCLBOSaZW4=) 6: 36312e35362e32342e302f32342d3234203d3e203138343131.roa (hash: 4W+qJBNLOJOWIRvtB6qDddjGArtbipAJUnwCauAbtiw=) 7: 36312e35362e31362e302f32302d3230203d3e203138343131.roa (hash: cpOU01Iw58/YmjLPrJqeRjungi3bbe0B4tFLVOzxjxc=) 8: 36312e35362e31382e302f32342d3234203d3e203138343131.roa (hash: gjwd7BV9O1873cFPhEXU/7D/wbFE9dSEUv4zzhFHYw8=) 9: D31DE8192962A403BB6809455D9C0776F79CC527.crl (hash: ME2cUfsU5li/OkVhnSjj/6GYDol05+ufEcRhnTjoUYI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 12:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:34:af:51:89:ad:77:c8:fc:22:51:5a:7f:50:02:c1:82:de:4c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527 Validity Not Before: Jun 30 09:23:32 2026 GMT Not After : Jul 1 12:10:32 2026 GMT Subject: CN=0AB9F003EFC233D403CA0977227B030DAF7B4A79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:be:5d:94:86:60:e2:d3:c3:8b:54:fe:b6: a9:07:26:13:ca:e0:3c:7a:69:b7:30:16:e7:be:90: ce:f9:b3:d8:bd:9b:da:33:80:00:b7:18:96:21:c7: 02:39:f5:d2:e4:9d:d2:ca:12:19:e4:4e:0f:f3:85: 2a:fb:d8:d8:0d:99:54:c2:f5:6d:6c:90:7a:49:b6: d0:d7:9f:14:d6:ee:97:0a:fb:c0:16:c7:0f:61:91: 82:97:30:49:1a:bd:d3:fa:38:0a:13:32:74:65:15: e0:dc:4f:2f:2f:b7:59:ac:79:4d:be:d9:81:77:2c: d6:a5:c8:7b:5f:7a:58:a6:f4:45:43:eb:29:06:f4: 7a:c6:9e:e8:1b:86:45:66:3a:9f:e7:72:c0:22:25: 57:98:04:6b:95:ea:8f:b1:a4:fe:a5:72:f6:e7:c4: 50:75:9d:a7:99:4e:7f:9f:e2:a9:13:9d:ff:e3:d0: ec:83:3c:62:1c:ce:c5:3b:cf:d5:00:7b:4d:31:2c: 78:4a:20:3c:df:03:ce:3b:2d:4a:44:0a:f6:89:aa: f6:1d:1d:37:19:6c:f0:e0:73:dd:69:7a:a0:cb:0f: d9:74:16:4c:69:26:1d:6a:d4:86:2c:bb:ef:77:6d: ec:cd:56:3a:ac:ba:4a:98:92:18:25:08:23:5b:9e: aa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B9:F0:03:EF:C2:33:D4:03:CA:09:77:22:7B:03:0D:AF:7B:4A:79 X509v3 Authority Key Identifier: keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:e0:e2:e4:5d:08:2e:48:90:53:db:e9:6c:cd:9c:a7:84:68: 94:65:8e:dd:69:f1:98:0a:7f:d4:0e:87:57:2b:7d:33:9f:bb: e7:ff:62:43:31:a3:32:88:c6:0d:b8:4c:d8:1c:a6:0b:eb:cc: 3d:89:12:7f:26:ae:83:dc:64:36:17:af:33:07:4d:da:13:5b: 3c:9a:63:6d:3e:6c:c7:16:06:f7:06:95:d6:3e:c1:85:e9:91: 17:ae:22:a6:a8:ee:28:c3:93:83:82:73:7d:05:fe:5e:2b:09: f7:78:a1:09:a1:6a:b9:db:95:05:88:d0:6d:4c:6f:d0:3a:1f: ba:e4:a9:86:49:d1:8f:97:55:3a:74:f4:7e:fd:ad:5b:4d:5b: 0c:2d:60:c7:2e:6a:22:11:30:4e:96:d8:0a:4c:13:7f:55:f5: 1e:14:d9:79:de:b0:16:e5:53:1a:6c:29:e2:05:95:da:41:e1: 59:57:02:29:44:06:92:bf:b6:5d:5c:0c:e8:84:98:50:69:0b: 4b:e7:cc:1d:7a:96:43:a8:24:aa:18:f9:41:31:64:76:9a:47: dd:91:ea:a7:7d:ee:06:91:02:13:ce:d9:8b:df:d5:2e:56:b9: 2b:a1:40:06:f7:ab:ac:2f:49:e0:ba:69:8b:ea:e6:bf:90:b4: a8:ee:85:84 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUYTSvUYmtd8j8IlFaf1ACwYLeTNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxREU4MTkyOTYyQTQwM0JCNjgwOTQ1NUQ5QzA3NzZG NzlDQzUyNzAeFw0yNjA2MzAwOTIzMzJaFw0yNjA3MDExMjEwMzJaMDMxMTAvBgNV BAMTKDBBQjlGMDAzRUZDMjMzRDQwM0NBMDk3NzIyN0IwMzBEQUY3QjRBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeL5dlIZg4tPDi1T+tqkHJhPK 4Dx6abcwFue+kM75s9i9m9ozgAC3GJYhxwI59dLkndLKEhnkTg/zhSr72NgNmVTC 9W1skHpJttDXnxTW7pcK+8AWxw9hkYKXMEkavdP6OAoTMnRlFeDcTy8vt1mseU2+ 2YF3LNalyHtfelim9EVD6ykG9HrGnugbhkVmOp/ncsAiJVeYBGuV6o+xpP6lcvbn xFB1naeZTn+f4qkTnf/j0OyDPGIczsU7z9UAe00xLHhKIDzfA847LUpECvaJqvYd HTcZbPDgc91peqDLD9l0FkxpJh1q1IYsu+93bezNVjqsukqYkhglCCNbnqpZAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUCrnwA+/CM9QDygl3InsDDa97SnkwHwYDVR0j BBgwFoAU0x3oGSlipAO7aAlFXZwHdvecxScwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRURUTlMv MC9EMzFERTgxOTI5NjJBNDAzQkI2ODA5NDU1RDlDMDc3NkY3OUNDNTI3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0QzMURFODE5Mjk2MkE0MDNCQjY4MDk0NTVEOUMw Nzc2Rjc5Q0M1MjcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FRFROUy8wL0QzMURFODE5Mjk2MkE0 MDNCQjY4MDk0NTVEOUMwNzc2Rjc5Q0M1MjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDK4OLkXQguSJBT 2+lszZynhGiUZY7dafGYCn/UDodXK30zn7vn/2JDMaMyiMYNuEzYHKYL68w9iRJ/ Jq6D3GQ2F68zB03aE1s8mmNtPmzHFgb3BpXWPsGF6ZEXriKmqO4ow5ODgnN9Bf5e Kwn3eKEJoWq525UFiNBtTG/QOh+65KmGSdGPl1U6dPR+/a1bTVsMLWDHLmoiETBO ltgKTBN/VfUeFNl53rAW5VMabCniBZXaQeFZVwIpRAaSv7ZdXAzohJhQaQtL58wd epZDqCSqGPlBMWR2mkfdkeqnfe4GkQITztmL39UuVrkroUAG96usL0ngummL6ua/ kLSo7oWE -----END CERTIFICATE-----Generated at Tue Jun 30 19:11:52 2026 by rpki-client