$ rpki-client -vvf rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft File: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft (raw, json) Hash identifier: 0OIipMcBmDy6G2IhoQAxcxbD9g9947tP85q/Hw3AvIY= Subject key identifier: 08:32:8E:8A:CF:F2:05:54:7A:95:27:64:E2:C4:7C:EE:63:5A:E0:4C Authority key identifier: 4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F Certificate issuer: /CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F Certificate serial: 40DD10B4EAD9AD3D19647004B3ECB099373E6CD2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft Manifest number: 46 Signing time: Tue 30 Jun 2026 16:54:19 +0000 Manifest this update: Tue 30 Jun 2026 16:49:19 +0000 Manifest next update: Wed 01 Jul 2026 17:53:19 +0000 Files and hashes: 1: 3230332e36352e302e302f31372d3137203d3e2034373832.roa (hash: aPv3bOG1weQWYPDGkDtRVOrTNA4jAzlE7y9bBkzaAf8=) 2: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl (hash: 3jCJ+yTqf0WO4A1ISQ8ACg3WdCQ4vcu7IfmCK0MgISw=) 3: 3230332e36352e3132382e302f31392d3139203d3e2034373832.roa (hash: mjDMiNdATFHdMEjP66ppJ/Z0/1InOOtWemdYwazOi5A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 14:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:dd:10:b4:ea:d9:ad:3d:19:64:70:04:b3:ec:b0:99:37:3e:6c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F Validity Not Before: Jun 30 16:49:19 2026 GMT Not After : Jul 1 17:53:19 2026 GMT Subject: CN=08328E8ACFF205547A952764E2C47CEE635AE04C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:35:87:1a:48:e9:7c:44:04:10:c3:d5:84:3e: 1a:ad:5b:9d:ea:ee:b4:40:f0:1f:c6:b5:9e:40:dc: 56:f9:bb:b7:97:af:10:ec:de:71:e1:fe:7f:b5:e7: 05:57:e0:39:27:80:68:0a:98:a5:b5:7d:53:64:dd: 0c:b0:53:c3:f0:f0:bb:9e:46:23:b0:ce:2b:88:b2: 07:46:b7:99:bc:c0:34:50:95:cd:77:7e:7e:75:e5: 20:70:e1:e6:75:84:26:d3:0f:ea:05:ff:50:18:ac: 33:01:84:20:88:ad:51:7d:5c:4e:d0:c8:c0:a0:a7: ba:2f:65:c5:28:4d:27:d5:45:63:53:35:50:71:69: ba:ae:ae:a9:22:57:29:a0:66:be:2c:b5:4e:c9:fe: e9:d9:39:eb:05:45:95:90:f8:18:87:1d:f7:18:03: 22:f8:61:db:ad:35:65:0b:e3:ba:ee:84:35:87:b6: 7e:d8:d8:e3:ab:e5:1d:1b:87:e5:12:69:76:35:ea: dc:cb:d1:65:c1:18:4f:5b:35:fe:9d:1a:6f:63:5e: e7:d9:96:fb:90:37:75:61:49:19:17:ba:f1:cf:e4: 7f:7c:5a:51:90:87:55:09:43:9e:91:e5:72:0a:3b: 13:31:62:9a:2b:23:34:24:b3:78:99:c0:6f:1b:5e: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:32:8E:8A:CF:F2:05:54:7A:95:27:64:E2:C4:7C:EE:63:5A:E0:4C X509v3 Authority Key Identifier: keyid:4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8c:b1:fb:03:c6:ad:04:bf:48:80:cc:d6:49:8e:d4:97:9d: b0:25:45:34:8a:c3:69:8b:20:c4:bc:46:7f:9f:bf:d4:6a:16: e6:0d:10:e8:80:49:6e:cd:64:31:c1:24:9b:26:e4:0b:9e:57: a9:ef:62:1d:97:fe:92:57:9f:c5:cb:cb:ae:9d:42:e4:fa:01: 61:3e:c0:22:e2:c2:bc:6c:c7:22:ea:73:f4:f5:4a:35:06:6f: 5a:3d:b9:13:f9:16:34:cc:f4:3b:42:8d:a3:be:0c:27:5b:7d: 84:52:b8:4a:01:cd:1b:4a:b1:69:ea:67:c9:b1:c0:f5:6b:31: f4:53:8c:12:d8:6c:97:79:9b:6e:cd:39:45:14:1e:58:45:b7: d9:eb:f0:28:51:ec:04:81:8c:48:f1:bd:76:d4:70:64:9a:0a: 83:d8:7a:8c:26:70:e5:95:05:6e:be:35:4b:09:35:14:34:b1: d8:15:af:48:fd:fb:54:4a:05:27:d3:dd:73:04:28:e0:f2:c7: ac:83:da:19:e1:0a:2b:e1:a3:d3:53:af:71:20:0a:17:5c:5c: 2b:26:eb:9b:a8:2d:d0:9b:bf:8c:49:ce:c7:f5:dd:c7:90:70: ea:c4:96:fe:21:f0:97:2c:61:41:5e:de:1d:11:66:bb:04:b5: 61:6d:b4:f2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQN0QtOrZrT0ZZHAEs+ywmTc+bNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMz OUI4MTQ1RjAeFw0yNjA2MzAxNjQ5MTlaFw0yNjA3MDExNzUzMTlaMDMxMTAvBgNV BAMTKDA4MzI4RThBQ0ZGMjA1NTQ3QTk1Mjc2NEUyQzQ3Q0VFNjM1QUUwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCINYcaSOl8RAQQw9WEPhqtW53q 7rRA8B/GtZ5A3Fb5u7eXrxDs3nHh/n+15wVX4DkngGgKmKW1fVNk3QywU8Pw8Lue RiOwziuIsgdGt5m8wDRQlc13fn515SBw4eZ1hCbTD+oF/1AYrDMBhCCIrVF9XE7Q yMCgp7ovZcUoTSfVRWNTNVBxabqurqkiVymgZr4stU7J/unZOesFRZWQ+BiHHfcY AyL4YdutNWUL47ruhDWHtn7Y2OOr5R0bh+USaXY16tzL0WXBGE9bNf6dGm9jXufZ lvuQN3VhSRkXuvHP5H98WlGQh1UJQ56R5XIKOxMxYporIzQks3iZwG8bXiONAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUCDKOis/yBVR6lSdk4sR87mNa4EwwHwYDVR0j BBgwFoAUTX+s9eSGHa9FXzG8rrt2Ezm4FF8wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRI TkVULzAvNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RDdGQUNGNUU0ODYxREFGNDU1RjMxQkNB RUJCNzYxMzM5QjgxNDVGLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRITkVULzAvNEQ3RkFD RjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIyM sfsDxq0Ev0iAzNZJjtSXnbAlRTSKw2mLIMS8Rn+fv9RqFuYNEOiASW7NZDHBJJsm 5AueV6nvYh2X/pJXn8XLy66dQuT6AWE+wCLiwrxsxyLqc/T1SjUGb1o9uRP5FjTM 9DtCjaO+DCdbfYRSuEoBzRtKsWnqZ8mxwPVrMfRTjBLYbJd5m27NOUUUHlhFt9nr 8ChR7ASBjEjxvXbUcGSaCoPYeowmcOWVBW6+NUsJNRQ0sdgVr0j9+1RKBSfT3XME KODyx6yD2hnhCivho9NTr3EgChdcXCsm65uoLdCbv4xJzsf13ceQcOrElv4h8Jcs YUFe3h0RZrsEtWFttPI= -----END CERTIFICATE-----Generated at Tue Jun 30 19:07:01 2026 by rpki-client