$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft File: DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft (raw, json) Hash identifier: Dz5AZhMHcu2NMPmWcKzax5N7j/26Mghj8InK/bPrkgE= Subject key identifier: 6F:34:DB:D6:5B:37:C6:34:3E:19:EF:74:8C:E6:9D:4D:89:EA:4C:B8 Authority key identifier: DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13 Certificate issuer: /CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13 Certificate serial: 0104F3A71AF0E58CC4D53E84E87100DBCBA85D44 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft Manifest number: 07 Signing time: Fri 15 May 2026 11:06:49 +0000 Manifest this update: Fri 15 May 2026 11:01:49 +0000 Manifest next update: Sat 16 May 2026 15:00:49 +0000 Files and hashes: 1: DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl (hash: 5MX5duXYs4gpisziOTdwPxEMCrY8h62S84BEA6bOoqo=) 2: 3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa (hash: H0K1ntuYrqGyMmjMc0VSqf2iYE6epJACiPRZPRlBzDo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:04:f3:a7:1a:f0:e5:8c:c4:d5:3e:84:e8:71:00:db:cb:a8:5d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13 Validity Not Before: May 15 11:01:49 2026 GMT Not After : May 16 15:00:49 2026 GMT Subject: CN=6F34DBD65B37C6343E19EF748CE69D4D89EA4CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:c8:69:48:dd:f5:ea:4b:99:58:81:c9:89: 42:06:2a:eb:3f:ec:fe:12:8a:44:66:93:96:14:5f: 63:c0:21:2f:c1:4a:d2:36:f4:17:09:35:ed:6f:a2: b4:9a:e8:73:36:b5:31:ba:6c:66:a4:6e:fb:3e:9d: d1:05:3d:ff:21:6e:07:e7:98:eb:f9:2d:7f:30:24: 68:9b:05:fa:7f:77:76:e3:6c:23:23:7b:c8:74:a4: 16:0b:21:4a:4d:d0:61:48:6a:e6:f8:4f:7a:29:41: 27:35:87:6f:38:7c:f8:4b:bc:c2:b8:d0:5b:ce:35: 6e:33:fa:dd:37:fc:7e:b2:f3:b1:83:a2:d8:1b:df: 58:c3:27:1b:f6:30:58:13:e0:db:b4:f4:96:22:39: 61:52:d4:bd:de:74:5e:82:cc:00:22:57:5e:82:f3: af:49:4e:e1:8e:12:1c:03:fd:c4:03:14:20:9b:c8: f8:bd:52:a9:50:f2:a3:e0:c3:51:fc:d4:bf:cc:45: 4f:89:e4:a2:2a:f3:4a:ec:c2:b4:ea:ac:a4:1d:8a: 35:09:46:9d:eb:e3:cb:74:ca:63:86:1b:ca:4e:be: 47:99:81:de:95:33:0b:39:93:aa:39:24:97:9c:58: ea:5b:20:35:6c:ac:20:20:49:38:99:55:07:6f:32: 16:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:34:DB:D6:5B:37:C6:34:3E:19:EF:74:8C:E6:9D:4D:89:EA:4C:B8 X509v3 Authority Key Identifier: keyid:DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b5:62:51:2d:55:2b:ad:fe:f4:b7:f3:35:d1:48:7d:e2:6d: 6f:f8:81:be:6c:11:31:42:6f:f9:37:2e:04:08:1b:66:9f:b9: 83:8e:56:71:b3:e0:95:b5:8c:7e:59:0b:b2:37:28:68:ab:a3: 9a:6b:d6:50:0b:20:1d:24:de:60:c2:1e:d5:5c:bc:18:5a:eb: 50:75:26:91:eb:0e:c4:8b:a1:a3:34:a9:07:93:08:9e:0c:6b: e1:be:1c:b6:8f:cd:12:e6:ff:2f:93:8c:f7:0e:34:5f:c0:64: fd:df:52:13:e9:c5:4e:09:8c:d9:22:be:dc:55:29:98:34:59: 27:cd:88:d4:43:09:fc:d8:fb:06:43:76:9d:f9:01:87:11:02: bf:8a:2d:ef:5d:79:7c:9e:9f:f6:87:0d:54:9d:c3:df:75:a6: ce:3a:34:ce:32:89:71:88:3c:11:30:74:2b:94:4b:4a:a5:a0: da:ca:18:07:a7:59:a5:5a:34:d9:3f:0b:8d:7a:d6:f2:43:de: e2:1c:af:53:71:80:36:4d:02:fd:df:09:7c:0b:18:12:22:33: 1a:65:3a:f0:c0:95:a1:ab:08:e7:aa:89:c4:85:cd:10:32:23: 6a:f1:84:99:d7:2d:03:cc:c4:ac:e4:99:4e:88:6e:ee:09:cd: 46:40:f9:8b -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUAQTzpxrw5YzE1T6E6HEA28uoXUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVFM0FCNEFEMjdBQTRFRUQwOUM4RTQ3NDBFOTAwRjJC MTVBOEYxMzAeFw0yNjA1MTUxMTAxNDlaFw0yNjA1MTYxNTAwNDlaMDMxMTAvBgNV BAMTKDZGMzREQkQ2NUIzN0M2MzQzRTE5RUY3NDhDRTY5RDREODlFQTRDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWchpSN316kuZWIHJiUIGKus/ 7P4SikRmk5YUX2PAIS/BStI29BcJNe1vorSa6HM2tTG6bGakbvs+ndEFPf8hbgfn mOv5LX8wJGibBfp/d3bjbCMje8h0pBYLIUpN0GFIaub4T3opQSc1h284fPhLvMK4 0FvONW4z+t03/H6y87GDotgb31jDJxv2MFgT4Nu09JYiOWFS1L3edF6CzAAiV16C 869JTuGOEhwD/cQDFCCbyPi9UqlQ8qPgw1H81L/MRU+J5KIq80rswrTqrKQdijUJ Rp3r48t0ymOGG8pOvkeZgd6VMws5k6o5JJecWOpbIDVsrCAgSTiZVQdvMhbRAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUbzTb1ls3xjQ+Ge90jOadTYnqTLgwHwYDVR0j BBgwFoAU3uOrStJ6pO7QnI5HQOkA8rFajxMwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR01JQ0xP VUQvMS9ERUUzQUI0QUQyN0FBNEVFRDA5QzhFNDc0MEU5MDBGMkIxNUE4RjEzLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RFRTNBQjRBRDI3QUE0RUVEMDlDOEU0NzQw RTkwMEYyQjE1QThGMTMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HTUlDTE9VRC8xL0RFRTNBQjRB RDI3QUE0RUVEMDlDOEU0NzQwRTkwMEYyQjE1QThGMTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFtWJR LVUrrf70t/M10Uh94m1v+IG+bBExQm/5Ny4ECBtmn7mDjlZxs+CVtYx+WQuyNyho q6Oaa9ZQCyAdJN5gwh7VXLwYWutQdSaR6w7Ei6GjNKkHkwieDGvhvhy2j80S5v8v k4z3DjRfwGT931IT6cVOCYzZIr7cVSmYNFknzYjUQwn82PsGQ3ad+QGHEQK/ii3v XXl8np/2hw1UncPfdabOOjTOMolxiDwRMHQrlEtKpaDayhgHp1mlWjTZPwuNetby Q97iHK9TcYA2TQL93wl8CxgSIjMaZTrwwJWhqwjnqonEhc0QMiNq8YSZ1y0DzMSs 5JlOiG7uCc1GQPmL -----END CERTIFICATE-----Generated at Sat May 16 04:48:08 2026 by rpki-client