$ rpki-client -vvf rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft File: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft (raw, json) Hash identifier: 1JpyZyhGkaZoCKS7PjQIEAsH/5k3GStUUCb7QLsA6yA= Subject key identifier: 2A:35:8F:D6:C1:5B:3C:4E:D2:FE:54:11:2E:0D:3F:CA:09:8F:4B:11 Authority key identifier: 72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A Certificate issuer: /CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Certificate serial: 54FBC4A0B942C9B515C6D28200C19EB93448A2B9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft Manifest number: 49 Signing time: Tue 30 Jun 2026 10:58:42 +0000 Manifest this update: Tue 30 Jun 2026 10:53:42 +0000 Manifest next update: Wed 01 Jul 2026 12:38:42 +0000 Files and hashes: 1: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl (hash: eRhojWmCbQTsfDO7onL7hcCjKIcLnRsK5XvoZjH9v2s=) 2: 3130332e3235322e3132382e302f32322d3234203d3e2034373830.roa (hash: aU5nH7E+iqqE72JCSOf/syfpmIQ4Ugwf1G4zZbGiNhs=) 3: 3131342e32392e3234302e302f32322d3232203d3e203130303835.roa (hash: Iu3XM7OWOu4YExXTvgO6ZRczd2wJf5M+hq5Ui0NVDWs=) 4: 3130332e3235322e3132382e302f32322d3234203d3e20313331363032.roa (hash: nVHgvAQGfCe5GeqBJlvDWrqjtd8OwRSNjhUeOydBwUA=) 5: 3130332e3235322e3132382e302f32322d3232203d3e203130303835.roa (hash: z0gKkFBHhI3K6nHdzx65beXtOEgH8B0I5cTB2wTLt8g=) 6: 3131342e32392e3234302e302f32322d3234203d3e2034373830.roa (hash: KC1g1qM879l4ds0q/ydW26xvU61SJGGDoYP8GsPifjc=) 7: 3131342e32392e3234302e302f32322d3234203d3e20313331363032.roa (hash: 4cmNPnys0d/FtI5okidfoOFAlkFUnmuDLC94ZHnaWrA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 12:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fb:c4:a0:b9:42:c9:b5:15:c6:d2:82:00:c1:9e:b9:34:48:a2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Validity Not Before: Jun 30 10:53:42 2026 GMT Not After : Jul 1 12:38:42 2026 GMT Subject: CN=2A358FD6C15B3C4ED2FE54112E0D3FCA098F4B11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:78:00:f4:41:fa:c8:a9:4f:d4:0a:0e:f9: a2:f5:02:d8:05:63:09:06:4e:e2:1b:f5:94:db:30: 83:04:c8:70:49:57:32:1a:ca:19:e6:cf:e0:03:36: 4a:2a:3a:8f:58:40:00:92:7f:04:e8:77:60:f7:30: f6:40:92:eb:a2:79:75:94:7f:c1:f0:cb:64:f4:4b: d2:5a:21:68:44:a5:b6:48:c2:b0:fc:39:11:9c:f7: 96:79:4a:e3:db:f8:69:ff:3d:fb:39:2c:c2:99:c0: 7f:14:af:d2:28:c4:e1:7d:98:e1:ff:8a:a2:db:df: 4e:91:ba:fb:bc:f1:eb:ea:ba:95:e0:ab:e5:85:45: e5:d0:13:be:1b:be:9a:00:f1:b9:57:f4:ee:90:c8: d9:17:08:2f:0d:1c:f3:13:f3:24:2d:b2:6f:1d:08: 71:39:8f:c0:95:76:bb:2d:ec:b7:a3:ce:eb:cc:8e: b8:87:db:50:d5:21:65:27:ad:13:c0:91:13:9e:28: e9:c7:8d:35:c4:4f:8e:0a:2a:3f:46:16:e5:a3:53: 5a:e8:20:7f:e8:ae:73:90:9c:4e:f0:24:b8:ae:39: 49:cf:44:b9:2b:74:61:10:45:5c:ed:68:f2:1a:97: c1:02:2f:3e:37:5a:d9:39:74:c0:62:73:e5:c3:29: 93:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:35:8F:D6:C1:5B:3C:4E:D2:FE:54:11:2E:0D:3F:CA:09:8F:4B:11 X509v3 Authority Key Identifier: keyid:72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:84:5d:6e:9c:8e:34:ab:2a:36:32:a1:17:a2:60:73:d8:f5: cf:56:30:f1:dd:98:1b:ed:48:31:e6:9f:db:d4:96:f3:4f:59: 2e:ce:4b:e5:23:5d:dc:92:b7:70:22:75:da:08:e3:a9:a7:3a: e0:9a:8a:a3:35:57:11:76:1c:d0:c4:2e:c3:7f:f0:fb:42:e2: a6:e2:3a:8e:ff:f9:38:39:e0:3c:47:20:a4:bf:61:2e:e6:80: 3a:e9:56:0f:4a:ab:4a:5b:2e:90:6a:90:0a:4f:af:a5:de:7d: aa:c5:56:41:e6:e2:15:ec:ec:46:e7:e9:ed:82:f3:7c:c7:4e: 1c:a3:ef:bf:87:d7:0b:17:99:ac:60:5e:4c:b3:63:ca:5d:26: c6:0b:02:a7:96:87:5d:b5:2a:08:a4:17:28:48:c0:73:5d:bb: 47:1d:d5:5a:ff:1d:ab:fe:57:36:22:32:a7:71:02:20:54:14: e0:ca:ec:03:79:42:9b:49:f0:74:07:37:97:0c:23:80:c7:c3: 7c:54:56:f0:e1:3d:37:3c:a0:e5:0f:2c:29:b9:13:ee:64:f3: 8d:52:a2:a8:2e:56:19:30:78:11:23:d9:79:4a:b7:a7:f9:6a: 41:f4:9b:ff:75:eb:ee:da:53:fa:6e:b3:c0:f4:34:df:ff:c7: e4:87:86:80 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUVPvEoLlCybUVxtKCAMGeuTRIorkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4 REQzMDk5QTAeFw0yNjA2MzAxMDUzNDJaFw0yNjA3MDExMjM4NDJaMDMxMTAvBgNV BAMTKDJBMzU4RkQ2QzE1QjNDNEVEMkZFNTQxMTJFMEQzRkNBMDk4RjRCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4U3gA9EH6yKlP1AoO+aL1AtgF YwkGTuIb9ZTbMIMEyHBJVzIayhnmz+ADNkoqOo9YQACSfwTod2D3MPZAkuuieXWU f8Hwy2T0S9JaIWhEpbZIwrD8ORGc95Z5SuPb+Gn/Pfs5LMKZwH8Ur9IoxOF9mOH/ iqLb306Ruvu88evqupXgq+WFReXQE74bvpoA8blX9O6QyNkXCC8NHPMT8yQtsm8d CHE5j8CVdrst7LejzuvMjriH21DVIWUnrRPAkROeKOnHjTXET44KKj9GFuWjU1ro IH/ornOQnE7wJLiuOUnPRLkrdGEQRVztaPIal8ECLz43Wtk5dMBic+XDKZONAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUKjWP1sFbPE7S/lQRLg0/ygmPSxEwHwYDVR0j BBgwFoAUckh+F8JA1VwW6P5bC3HUSY3TCZowDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAv NzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MjQ4N0UxN0MyNDBENTVDMTZFOEZFNUIwQjcxRDQ0 OThERDMwOTlBLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAvNzI0ODdFMTdDMjQwRDU1QzE2 RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAGEXW6cjjSrKjYyoRei YHPY9c9WMPHdmBvtSDHmn9vUlvNPWS7OS+UjXdySt3AiddoI46mnOuCaiqM1VxF2 HNDELsN/8PtC4qbiOo7/+Tg54DxHIKS/YS7mgDrpVg9Kq0pbLpBqkApPr6XefarF VkHm4hXs7Ebn6e2C83zHThyj77+H1wsXmaxgXkyzY8pdJsYLAqeWh121KgikFyhI wHNdu0cd1Vr/Hav+VzYiMqdxAiBUFODK7AN5QptJ8HQHN5cMI4DHw3xUVvDhPTc8 oOUPLCm5E+5k841SoqguVhkweBEj2XlKt6f5akH0m/916+7aU/pus8D0NN//x+SH hoA= -----END CERTIFICATE-----Generated at Tue Jun 30 19:11:52 2026 by rpki-client