$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft File: D31DE8192962A403BB6809455D9C0776F79CC527.mft (raw, json) Hash identifier: InhAo7TdkCa845TJOh25VTTu1gk+dWYa0r/yiRVmLRo= Subject key identifier: FA:62:21:8C:7D:F8:55:40:E2:2A:16:E9:DE:28:A9:C0:70:6C:76:E7 Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527 Certificate serial: 53B4037B4B73CF87B723BDC6FAB126D60F9A5A44 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft Manifest number: 87 Signing time: Fri 14 Aug 2026 10:56:35 +0000 Manifest this update: Fri 14 Aug 2026 10:51:35 +0000 Manifest next update: Sat 15 Aug 2026 14:26:35 +0000 Files and hashes: 1: 3131392e33302e31362e302f32302d3230203d3e203138343131.roa (hash: VDIgNrS0Bj4C/eZLO2BtqOoH9/X324CutCA0RmZUaVs=) 2: 36312e35362e31382e302f32342d3234203d3e203138343131.roa (hash: gjwd7BV9O1873cFPhEXU/7D/wbFE9dSEUv4zzhFHYw8=) 3: 36312e35362e31362e302f32302d3230203d3e203138343131.roa (hash: cpOU01Iw58/YmjLPrJqeRjungi3bbe0B4tFLVOzxjxc=) 4: 36312e35362e32362e302f32342d3234203d3e203138343131.roa (hash: nzkDFeWq9DKB8SnYVh/zKHjUR7e4Y9fE95qdnDZlMiI=) 5: D31DE8192962A403BB6809455D9C0776F79CC527.crl (hash: q4EFet+UL/SAdr9wPE6YNVRcG+0xT6ITBfgI7MD59A0=) 6: 3131392e33302e31362e302f32302d3234203d3e203138343131.roa (hash: b/aL5o5ZJ2+jJ6WA1q4dCKtGxzeUgsNC1ybEW3+mJZY=) 7: 36312e35362e32342e302f32342d3234203d3e203138343131.roa (hash: 4W+qJBNLOJOWIRvtB6qDddjGArtbipAJUnwCauAbtiw=) 8: 36312e35362e32352e302f32342d3234203d3e203138343131.roa (hash: qLfcOZVogzNc0fPW8DS0BFg+aXm72rn141irJHfF/2A=) 9: 36312e35362e31362e302f32302d3234203d3e203138343131.roa (hash: OaBE8mWI96DAhvnsCUNb1Lo3ZA5eC1WiiVCLBOSaZW4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b4:03:7b:4b:73:cf:87:b7:23:bd:c6:fa:b1:26:d6:0f:9a:5a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527 Validity Not Before: Aug 14 10:51:35 2026 GMT Not After : Aug 15 14:26:35 2026 GMT Subject: CN=FA62218C7DF85540E22A16E9DE28A9C0706C76E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:97:d3:78:a3:81:22:fd:b4:72:74:72:6d:e3: 9c:91:f8:99:34:4f:b4:fc:7a:be:f3:15:73:cb:db: 5e:1a:1a:b6:f7:8b:17:ae:37:7d:1f:5d:50:3c:e8: 83:1e:ea:94:d6:b9:55:36:a8:66:52:6b:dc:10:18: ec:27:8f:ce:ea:f0:67:00:75:23:79:04:b1:d0:08: 03:e2:59:c5:79:f8:76:09:f1:ea:9c:44:ff:d1:49: c1:0c:33:24:a4:85:dc:2f:d4:45:49:90:fc:bf:12: e9:07:5b:61:1b:0e:21:d7:63:a1:00:bd:6b:95:4b: 88:3c:2c:63:42:84:17:ee:4c:a0:8f:dc:a3:2e:05: 6e:0b:91:ed:2e:51:92:51:f8:62:31:2d:4e:4f:d8: 07:de:ed:08:a7:a8:32:c0:6a:16:1f:27:71:25:ba: ed:28:9a:98:b1:e6:a1:2e:a1:a4:cf:10:bd:12:d2: 29:ae:cc:a2:ff:b3:b2:56:af:93:f9:79:c6:42:6b: 7e:89:82:9b:df:6f:ae:e3:9d:c4:21:6c:88:09:f6: 12:47:f2:19:15:ec:66:58:c0:69:2e:e2:02:76:aa: e9:29:f0:78:30:3a:a3:a5:5b:3d:64:0f:ab:a5:6e: 2d:6b:f7:9c:61:81:7b:24:e6:59:19:16:8b:2d:96: bd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:62:21:8C:7D:F8:55:40:E2:2A:16:E9:DE:28:A9:C0:70:6C:76:E7 X509v3 Authority Key Identifier: keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8a:52:94:a4:40:29:4d:21:ab:63:ac:b5:bb:4b:2a:6b:1e: 92:a4:b3:e7:63:1b:76:d6:36:9a:96:9c:bf:03:57:d7:eb:b9: 2d:a0:2c:9a:ca:e7:ae:c4:52:f3:91:7a:a8:96:cc:3d:25:a6: 70:bd:e6:39:3b:47:98:c3:7e:e9:c7:c0:aa:85:8f:74:e3:28: da:dc:48:89:1c:5b:03:e6:a3:60:6b:b5:c7:c1:be:a3:59:c6: 5c:4a:49:27:ce:88:c9:bc:69:ec:bc:32:c0:d0:e3:6f:fc:1c: 9c:88:bf:58:1f:f5:45:f9:ee:50:55:70:d2:1e:18:cb:32:85: f7:0b:f0:a1:81:1f:e8:51:6c:05:0b:4d:a3:ea:d8:fd:df:9c: 4a:7d:df:38:23:6c:c7:b6:a7:9a:be:d0:31:2b:94:d2:28:b7: 97:79:bd:36:02:89:2f:7a:37:b9:c6:f7:a5:dc:49:a2:14:14: b1:6f:85:1f:0c:04:2b:8f:78:cd:8b:a7:6b:ec:50:f2:64:e6: 13:f3:15:7a:a1:cf:c7:b1:ac:d3:67:d6:8e:5c:47:ab:33:26: 66:1c:af:85:b3:83:fe:00:8a:a4:b7:2d:16:61:37:09:de:24: b3:d9:bc:c1:ee:50:66:56:a8:26:d4:57:99:9c:8d:a6:7f:9a: 32:c7:5d:46 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUU7QDe0tzz4e3I73G+rEm1g+aWkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxREU4MTkyOTYyQTQwM0JCNjgwOTQ1NUQ5QzA3NzZG NzlDQzUyNzAeFw0yNjA4MTQxMDUxMzVaFw0yNjA4MTUxNDI2MzVaMDMxMTAvBgNV BAMTKEZBNjIyMThDN0RGODU1NDBFMjJBMTZFOURFMjhBOUMwNzA2Qzc2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDol9N4o4Ei/bRydHJt45yR+Jk0 T7T8er7zFXPL214aGrb3ixeuN30fXVA86IMe6pTWuVU2qGZSa9wQGOwnj87q8GcA dSN5BLHQCAPiWcV5+HYJ8eqcRP/RScEMMySkhdwv1EVJkPy/EukHW2EbDiHXY6EA vWuVS4g8LGNChBfuTKCP3KMuBW4Lke0uUZJR+GIxLU5P2Afe7QinqDLAahYfJ3El uu0ompix5qEuoaTPEL0S0imuzKL/s7JWr5P5ecZCa36Jgpvfb67jncQhbIgJ9hJH 8hkV7GZYwGku4gJ2qukp8HgwOqOlWz1kD6ulbi1r95xhgXsk5lkZFostlr2RAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU+mIhjH34VUDiKhbp3iipwHBsducwHwYDVR0j BBgwFoAU0x3oGSlipAO7aAlFXZwHdvecxScwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRURUTlMv MC9EMzFERTgxOTI5NjJBNDAzQkI2ODA5NDU1RDlDMDc3NkY3OUNDNTI3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0QzMURFODE5Mjk2MkE0MDNCQjY4MDk0NTVEOUMw Nzc2Rjc5Q0M1MjcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FRFROUy8wL0QzMURFODE5Mjk2MkE0 MDNCQjY4MDk0NTVEOUMwNzc2Rjc5Q0M1MjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPilKUpEApTSGr Y6y1u0sqax6SpLPnYxt21jaalpy/A1fX67ktoCyayueuxFLzkXqolsw9JaZwveY5 O0eYw37px8CqhY904yja3EiJHFsD5qNga7XHwb6jWcZcSkknzojJvGnsvDLA0ONv /ByciL9YH/VF+e5QVXDSHhjLMoX3C/ChgR/oUWwFC02j6tj935xKfd84I2zHtqea vtAxK5TSKLeXeb02Aokveje5xvel3EmiFBSxb4UfDAQrj3jNi6dr7FDyZOYT8xV6 oc/HsazTZ9aOXEerMyZmHK+Fs4P+AIqkty0WYTcJ3iSz2bzB7lBmVqgm1FeZnI2m f5oyx11G -----END CERTIFICATE-----Generated at Sat Aug 15 05:29:09 2026 by rpki-client