$ rpki-client -vvf rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft File: 28E8C034945DF0971A657E251911BBA0B2819562.mft (raw, json) Hash identifier: nNSL3f0s1o3daaylWyKnIBT8bwIrn2J89OnRxLASdVA= Subject key identifier: E3:0D:86:11:1E:12:5B:C8:9B:31:17:8C:10:F1:DF:A8:5E:5F:29:77 Authority key identifier: 28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62 Certificate issuer: /CN=28E8C034945DF0971A657E251911BBA0B2819562 Certificate serial: 188BE3AF7C90468AA71DDE253483EEC5857A658A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft Manifest number: 07 Signing time: Wed 13 May 2026 07:02:29 +0000 Manifest this update: Wed 13 May 2026 06:57:29 +0000 Manifest next update: Thu 14 May 2026 08:49:29 +0000 Files and hashes: 1: 3130332e3134362e3231322e302f32332d3234203d3e20313331363731.roa (hash: pMS5Ph8mPGJU3UpJ7IjmKfi+Ix8We0Zd68WwZnbms2Y=) 2: 3130332e3134362e3231332e302f32342d3234203d3e20313331363731.roa (hash: LYwHjGxEzckNqePKzYBLQw/Fecl7B+Zct0xOoyvOLzg=) 3: 3130332e3134362e3231322e302f32342d3234203d3e20313331363731.roa (hash: v0VyC7X7thLb1BBUBYlXdyclFoTUZxEmzXZ1GE31WD8=) 4: 28E8C034945DF0971A657E251911BBA0B2819562.crl (hash: OGU9dq7Vb4YC43RDSblZDLG9QvTFpRjDOY6QEC3xRDU=) 5: 323430353a613063303a3a2f33322d3438203d3e20313331363731.roa (hash: 6HrkEzQ2Yg1WTlAGALA+Lw5WYBWkKQgOUE2P3VYv1e4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8b:e3:af:7c:90:46:8a:a7:1d:de:25:34:83:ee:c5:85:7a:65:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E8C034945DF0971A657E251911BBA0B2819562 Validity Not Before: May 13 06:57:29 2026 GMT Not After : May 14 08:49:29 2026 GMT Subject: CN=E30D86111E125BC89B31178C10F1DFA85E5F2977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:43:85:e5:ba:6c:6a:21:96:cf:90:8c:60: 2b:a4:9a:ba:d9:12:60:f0:60:a2:d3:db:1e:ca:f2: 12:82:e1:5e:42:09:71:18:b4:d3:58:80:f8:49:21: 1c:cb:62:a8:89:dc:c1:2d:36:db:9a:f3:84:f4:b6: 29:76:fb:31:97:b8:c7:a9:fc:0e:e3:35:fd:4a:74: b1:f3:36:62:76:50:09:ff:7a:e3:26:38:d5:65:6c: e7:2c:1d:82:04:b7:ba:e2:08:00:41:32:c7:ce:d0: 2f:97:69:fd:65:64:f8:e8:9b:eb:b2:8f:0b:e6:8c: c9:1b:83:94:a2:22:fc:56:f6:80:a6:0c:86:26:a2: 1b:12:94:2e:04:8b:db:68:08:09:02:17:d6:bb:99: 82:b5:d7:13:5a:23:e3:af:ab:02:15:1c:f8:a9:00: 3d:36:4a:b3:33:c4:15:41:10:f7:61:41:e3:0f:fd: c4:76:15:57:12:75:db:8a:8d:1c:c0:21:8e:4b:7e: 1c:14:65:cd:a4:e8:9a:d9:45:3b:c9:92:4b:8b:66: f2:f9:52:d9:e8:db:f5:26:5b:65:e1:1a:94:b7:fc: 0a:ae:41:74:99:2b:04:c1:d4:b0:d5:14:0c:b0:98: 4b:ba:a5:1d:71:a5:00:29:89:8a:8d:92:5e:62:e2: 2a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0D:86:11:1E:12:5B:C8:9B:31:17:8C:10:F1:DF:A8:5E:5F:29:77 X509v3 Authority Key Identifier: keyid:28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bc:c3:b7:76:33:c4:7b:1c:02:47:36:84:a0:e1:a7:f9:bc: 2f:47:f2:92:cd:c0:2a:4f:66:3d:41:78:6f:19:6e:d4:10:99: 72:6f:2c:ea:39:63:a6:d2:b9:d3:4e:ac:b6:cc:d4:d0:19:b5: 91:b4:37:74:0e:d2:0d:51:c9:97:c1:1c:12:7e:ae:31:14:7f: 29:14:25:a5:0d:4a:dd:dd:28:84:cb:4e:13:29:1e:6e:ed:00: 1b:9c:29:33:16:65:74:03:5e:33:69:e7:d0:24:1c:62:42:0a: 7a:0c:2a:3f:52:7a:31:a0:c0:16:d2:60:41:8a:9f:e4:bb:75: 70:f7:42:37:fc:d8:fb:ea:17:0e:1e:fb:db:3c:19:0d:a3:1b: 4a:01:03:6d:d2:37:2d:24:a1:4f:88:fd:1f:ea:7e:e5:b9:5f: 22:b3:7a:5d:f6:a8:99:cd:86:ac:cd:ba:5d:64:07:61:f3:67: a7:56:c0:96:ec:bd:9d:6e:ce:e2:f7:45:81:62:6a:26:f5:cc: a9:c2:66:69:18:10:13:35:1c:84:2c:45:cc:b7:4c:97:04:97: a2:6e:8f:0e:54:38:0a:14:a3:f5:08:4c:8e:52:56:d4:27:90: 65:fb:85:28:6e:57:ba:9c:d1:c8:d0:63:49:b2:9f:03:cf:01: e1:b4:58:07 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUGIvjr3yQRoqnHd4lNIPuxYV6ZYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkxMUJCQTBC MjgxOTU2MjAeFw0yNjA1MTMwNjU3MjlaFw0yNjA1MTQwODQ5MjlaMDMxMTAvBgNV BAMTKEUzMEQ4NjExMUUxMjVCQzg5QjMxMTc4QzEwRjFERkE4NUU1RjI5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gUOF5bpsaiGWz5CMYCukmrrZ EmDwYKLT2x7K8hKC4V5CCXEYtNNYgPhJIRzLYqiJ3MEtNtua84T0til2+zGXuMep /A7jNf1KdLHzNmJ2UAn/euMmONVlbOcsHYIEt7riCABBMsfO0C+Xaf1lZPjom+uy jwvmjMkbg5SiIvxW9oCmDIYmohsSlC4Ei9toCAkCF9a7mYK11xNaI+OvqwIVHPip AD02SrMzxBVBEPdhQeMP/cR2FVcSdduKjRzAIY5LfhwUZc2k6JrZRTvJkkuLZvL5 Utno2/UmW2XhGpS3/AquQXSZKwTB1LDVFAywmEu6pR1xpQApiYqNkl5i4ipXAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQU4w2GER4SW8ibMReMEPHfqF5fKXcwHwYDVR0j BBgwFoAUKOjANJRd8JcaZX4lGRG7oLKBlWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkFOVEFT WS8wLzI4RThDMDM0OTQ1REYwOTcxQTY1N0UyNTE5MTFCQkEwQjI4MTk1NjIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkx MUJCQTBCMjgxOTU2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0ZBTlRBU1kvMC8yOEU4QzAzNDk0 NURGMDk3MUE2NTdFMjUxOTExQkJBMEIyODE5NTYyLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLzDt3Yz xHscAkc2hKDhp/m8L0fyks3AKk9mPUF4bxlu1BCZcm8s6jljptK5006stszU0Bm1 kbQ3dA7SDVHJl8EcEn6uMRR/KRQlpQ1K3d0ohMtOEykebu0AG5wpMxZldANeM2nn 0CQcYkIKegwqP1J6MaDAFtJgQYqf5Lt1cPdCN/zY++oXDh772zwZDaMbSgEDbdI3 LSShT4j9H+p+5blfIrN6Xfaomc2GrM26XWQHYfNnp1bAluy9nW7O4vdFgWJqJvXM qcJmaRgQEzUchCxFzLdMlwSXom6PDlQ4ChSj9QhMjlJW1CeQZfuFKG5XupzRyNBj SbKfA88B4bRYBw== -----END CERTIFICATE-----Generated at Wed May 13 20:35:58 2026 by rpki-client