$ rpki-client -vvf rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft File: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft (raw, json) Hash identifier: nZVThgLbEFo0liHclUNj/qhx167gvx7SS52WPySAQZg= Subject key identifier: A6:7A:C2:10:45:8E:D5:AA:A5:D7:33:94:21:E8:18:27:58:A8:FC:6B Authority key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 Certificate issuer: /CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Certificate serial: 7623D8D0DA9523EAA7AD4978EE9FCCFD6B81A464 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft Manifest number: 52 Signing time: Tue 30 Jun 2026 02:17:54 +0000 Manifest this update: Tue 30 Jun 2026 02:12:54 +0000 Manifest next update: Wed 01 Jul 2026 06:05:54 +0000 Files and hashes: 1: 323030313a343432303a3a2f33322d3332203d3e2034373832.roa (hash: gE5uEPlvoHn4YAIcNC7yJMhL4DCCYf0nlEOkebni8Us=) 2: 3132342e3139392e36342e302f31392d3139203d3e2034373832.roa (hash: WuXDtugnIouFSIQBa95DW12JV+9YmfPeEhQ2M/9bHLw=) 3: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl (hash: xD/qM3sh+yfKja9TOuwiCZzlSPY+lN7atoFUlgYmfmI=) 4: 36312e35372e33322e302f31392d3139203d3e2034373832.roa (hash: aqyU1VbOW0v1AFwJhVg9uuI3iSWv7CEHxJprPdp3Meo=) 5: 3232332e3230302e302e302f31362d3136203d3e2034373832.roa (hash: MA9+ajK8aX1uKUtp2sxtKQhYTLC2td1kAHyxBVTGWcc=) 6: 3231302e36392e302e302f31362d3136203d3e2034373832.roa (hash: rzzN/S5reVNYW1kngDJ9waaxaT8cnwfi4WPnhHzUC7w=) 7: 3136332e32392e302e302f31362d3136203d3e2034373832.roa (hash: pGK5XkceqKAh4/7agsjC+GWpznd78YLbOQwpm2jcRiA=) 8: 36312e35362e302e302f32302d3234203d3e203138313833.roa (hash: Z8hYEPWVHSTXdVxKiYoHCeRE+yhXuCK4vUjrYBstEPs=) 9: 3132342e3139392e39362e302f32302d3230203d3e2034373832.roa (hash: 7acpyK5V9E2LR1y17/549QCIrRIx//QUMCroyuhMnD8=) 10: 3231312e37392e3132382e302f31392d3139203d3e2034373832.roa (hash: /QiJMlPs1/pxye04spLNZHzDsoGhtgiX4yfIqbEq1wY=) 11: 36312e36372e36342e302f31392d3139203d3e2034373832.roa (hash: hP1Ce0puK87bnBkuUoZR08dKEnokYQB4baKFChuzk+E=) 12: 3231302e36392e3233342e302f32342d3234203d3e2034373832.roa (hash: 1EDOB0BRp1H67cx5ce4EUm7AGvO1r28WnpZQ75ZC5MM=) 13: 36312e36302e302e302f31372d3137203d3e2034373832.roa (hash: RxtL1JrL62KxxH9+j1ZECsfg+3xXdkmccPO6Ql29WBI=) 14: 3231302e3234312e302e302f31372d3137203d3e2034373832.roa (hash: KmWKCTE0ohasfgtfRxTrbUHfQbw/Y7nPMFINp2KhTpA=) 15: 3131372e35362e302e302f31382d3138203d3e2034373832.roa (hash: 8DMQSxYkXT39Wjc0+DxN6goaO03iNCXQLyzqirPMqAs=) 16: 3131372e35362e302e302f31362d3136203d3e2034373832.roa (hash: MFCSbHbqKYuWPiPCKMVh2kx7z7XCHdm/WXFRairBaN0=) 17: 3231312e37392e3136302e302f31392d3139203d3e2034373832.roa (hash: 1/SOl/bxT6+nXe2zhXDM2dmH5RkEj7//86PgvjmPKFQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 06:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:23:d8:d0:da:95:23:ea:a7:ad:49:78:ee:9f:cc:fd:6b:81:a4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Validity Not Before: Jun 30 02:12:54 2026 GMT Not After : Jul 1 06:05:54 2026 GMT Subject: CN=A67AC210458ED5AAA5D7339421E8182758A8FC6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:01:ff:ea:b6:da:6f:8c:47:0e:0b:02:1e:30: dc:ab:05:07:67:f1:99:1b:0f:f3:ce:61:e3:1a:fa: 7f:54:ea:64:63:27:32:f5:0a:42:00:3a:fc:b8:90: 68:eb:79:38:e2:42:a6:08:58:2e:03:60:b4:be:32: 3f:20:36:3c:d2:d9:29:85:ea:30:1d:b0:38:e0:48: 96:86:0a:75:0b:89:30:43:83:73:57:16:a2:20:0c: dd:2e:87:a3:bc:ac:2a:59:5a:ca:98:1e:82:54:0b: 92:85:a5:63:23:97:33:2b:6c:65:0a:c9:ab:f6:a4: a2:70:cc:02:65:06:f6:1a:42:b8:6f:f8:71:a2:e7: 99:c4:af:8f:f6:b2:3d:31:f6:3e:6a:3f:ea:3c:31: 32:8f:79:17:bb:b7:3d:a0:b5:a4:d0:99:85:64:3d: db:ae:2b:19:e8:68:09:23:0d:a2:6d:f2:da:5f:09: 89:45:79:f8:26:46:0c:d9:4b:cd:1d:56:bb:1f:97: 53:6f:04:1e:2c:6f:c5:ad:89:7b:d0:ec:49:c9:0f: ed:82:c9:df:b4:a3:ee:1f:5a:7e:c7:bd:49:42:19: 58:f6:4a:65:51:97:25:dd:88:0c:10:16:96:d1:93: 42:c1:35:0b:ca:56:a7:1d:08:2d:d6:a9:d5:25:1a: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7A:C2:10:45:8E:D5:AA:A5:D7:33:94:21:E8:18:27:58:A8:FC:6B X509v3 Authority Key Identifier: keyid:C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:65:e4:5f:8c:24:62:54:bb:9f:fd:d7:13:fe:69:d0:8f:34: da:76:62:40:29:ce:ec:0e:5b:ac:ae:9e:43:55:b1:b2:59:7a: 4e:f3:a5:27:0b:d2:a7:f0:22:d9:85:ba:a5:a0:14:52:de:b5: 85:83:aa:4a:eb:98:aa:e0:b8:b5:1f:eb:a1:69:19:6d:4e:1c: cb:7e:8f:96:90:c2:64:af:6d:e4:4f:e4:5e:38:e4:b7:cd:06: 56:f4:c0:cb:3b:17:7d:a8:0a:96:8e:2f:f8:2d:c0:33:ac:41: fe:58:f1:70:63:6a:b5:3b:89:1e:e1:05:5d:9b:05:d1:76:c1: 8f:ae:45:28:c3:90:e9:6d:c9:56:07:81:b6:85:53:78:53:44: 55:ef:4c:aa:e9:36:d9:61:b6:1d:8b:0a:12:a0:ad:e2:71:b9: a2:bf:29:ef:e3:af:2a:47:6c:ef:23:2d:48:6b:13:50:62:6d: 25:9d:b5:89:a7:d8:88:59:c0:99:85:4b:5f:38:f1:aa:be:a8: 38:f1:47:9d:63:ad:24:a8:01:46:96:05:83:70:52:43:84:1f: 61:9f:f9:2b:f6:59:2a:d3:9f:99:c4:a5:35:98:81:4a:70:e3: 23:1e:7e:cc:e8:1f:74:26:95:2c:a6:ed:72:2f:44:a6:b0:73: 12:c3:c2:13 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUdiPY0NqVI+qnrUl47p/M/WuBpGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2 QUZEQzM1MTAeFw0yNjA2MzAwMjEyNTRaFw0yNjA3MDEwNjA1NTRaMDMxMTAvBgNV BAMTKEE2N0FDMjEwNDU4RUQ1QUFBNUQ3MzM5NDIxRTgxODI3NThBOEZDNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAf/qttpvjEcOCwIeMNyrBQdn 8ZkbD/POYeMa+n9U6mRjJzL1CkIAOvy4kGjreTjiQqYIWC4DYLS+Mj8gNjzS2SmF 6jAdsDjgSJaGCnULiTBDg3NXFqIgDN0uh6O8rCpZWsqYHoJUC5KFpWMjlzMrbGUK yav2pKJwzAJlBvYaQrhv+HGi55nEr4/2sj0x9j5qP+o8MTKPeRe7tz2gtaTQmYVk PduuKxnoaAkjDaJt8tpfCYlFefgmRgzZS80dVrsfl1NvBB4sb8WtiXvQ7EnJD+2C yd+0o+4fWn7HvUlCGVj2SmVRlyXdiAwQFpbRk0LBNQvKVqcdCC3WqdUlGlunAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUpnrCEEWO1aql1zOUIegYJ1io/GswHwYDVR0j BBgwFoAUwDS9nHI13C0swf1+IdQ90Gr9w1EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAv QzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2QUZEQzM1MS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9DMDM0QkQ5QzcyMzVEQzJEMkNDMUZEN0UyMUQ0M0RE MDZBRkRDMzUxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAvQzAzNEJEOUM3MjM1REMyRDJD QzFGRDdFMjFENDNERDA2QUZEQzM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF5l5F+MJGJUu5/91xP+ adCPNNp2YkApzuwOW6yunkNVsbJZek7zpScL0qfwItmFuqWgFFLetYWDqkrrmKrg uLUf66FpGW1OHMt+j5aQwmSvbeRP5F445LfNBlb0wMs7F32oCpaOL/gtwDOsQf5Y 8XBjarU7iR7hBV2bBdF2wY+uRSjDkOltyVYHgbaFU3hTRFXvTKrpNtlhth2LChKg reJxuaK/Ke/jrypHbO8jLUhrE1BibSWdtYmn2IhZwJmFS1848aq+qDjxR51jrSSo AUaWBYNwUkOEH2Gf+Sv2WSrTn5nEpTWYgUpw4yMefszoH3QmlSym7XIvRKawcxLD whM= -----END CERTIFICATE-----Generated at Tue Jun 30 19:05:07 2026 by rpki-client