$ rpki-client -vvf rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft File: 35C866BE000DEAB870C97BED72D0A7807B829E4D.mft (raw, json) Hash identifier: zTVJ11j4blclpXXYxO0Q4d5UhgGmWqgav9CbeyfxU7c= Subject key identifier: 4E:7E:33:BF:52:CF:B9:27:A3:E6:13:6E:5E:C8:5A:BA:3E:F2:CD:1B Authority key identifier: 35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D Certificate issuer: /CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Certificate serial: 5EA34589DD3E4BBE8D276C5BA40BF42009065458 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft Manifest number: 83 Signing time: Fri 14 Aug 2026 20:23:23 +0000 Manifest this update: Fri 14 Aug 2026 20:18:23 +0000 Manifest next update: Sat 15 Aug 2026 23:43:23 +0000 Files and hashes: 1: 3232332e32362e342e302f32332d3234203d3e20313532313739.roa (hash: 1KuxfqT20KEMU13K1PoNgkxwUh6tXjO/u8vuBPBbPvM=) 2: 3130332e3135322e3232302e302f32332d3234203d3e20313338393937.roa (hash: J/22PWUGVzLaEIWqIEkco35k7PiKuvioKGMBglelLtk=) 3: 3230322e3134382e3231302e302f32332d3234203d3e20313532313739.roa (hash: w66ZmETlDQxyi38rji0gzk1176tFqIfyztFJ3VNSIbg=) 4: 35C866BE000DEAB870C97BED72D0A7807B829E4D.crl (hash: 7oEWharMxrang5AOiRpgIwT4JaDqadFd6rksWbnAdC0=) 5: 323430363a326663303a3a2f33322d3332203d3e20313334383233.roa (hash: T6rxUJGmT1hptwoFyjautezkOkglfrNk05IrJlVztRE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 23:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a3:45:89:dd:3e:4b:be:8d:27:6c:5b:a4:0b:f4:20:09:06:54:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Validity Not Before: Aug 14 20:18:23 2026 GMT Not After : Aug 15 23:43:23 2026 GMT Subject: CN=4E7E33BF52CFB927A3E6136E5EC85ABA3EF2CD1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2f:25:cf:40:78:3f:3e:39:1d:da:ca:ba:14: f5:61:87:0a:71:92:0c:9e:51:35:69:01:4b:49:41: 54:37:0e:57:25:e2:9d:a0:5a:83:b7:3f:af:50:ff: 38:83:70:27:06:53:6c:bf:7b:01:fa:6b:0b:fa:ba: 7f:e1:eb:0b:73:f6:dd:5f:dc:e5:48:05:28:73:7a: 96:1e:f8:55:6f:cc:14:c4:27:7b:e7:da:f1:c3:f0: 29:96:00:f9:ab:89:40:a7:de:61:f6:3d:44:98:79: 04:91:8c:50:ad:4f:41:05:55:3a:31:9e:8b:8c:05: 9c:07:bc:8e:de:3e:ca:87:71:31:21:db:24:e3:c1: 1a:61:dd:62:bf:45:1d:be:94:4d:da:a6:47:59:10: ff:59:5f:01:e1:63:2c:41:bb:ef:e4:c5:bf:c7:fb: ba:5d:f3:80:26:32:ce:eb:a3:37:df:d7:4b:43:04: 86:a5:3e:42:16:bd:cf:6e:58:11:a8:94:33:db:b9: 16:66:d6:f3:4b:2a:5b:99:0f:a8:f4:a7:bd:55:a7: 42:1d:66:d1:0d:18:1a:bf:6e:d6:43:7b:89:c7:aa: cf:ec:32:c7:88:6c:b4:e1:06:06:89:5b:50:a6:bf: 54:44:3a:83:3e:24:bb:41:9e:7d:a6:30:5a:ff:1e: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7E:33:BF:52:CF:B9:27:A3:E6:13:6E:5E:C8:5A:BA:3E:F2:CD:1B X509v3 Authority Key Identifier: keyid:35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0e:80:dd:51:d6:13:cd:56:fe:d4:3a:9f:7c:80:03:99:be: 4c:9c:b3:5c:e5:6d:a8:c9:e8:f3:d4:e0:7c:06:ac:d2:dd:1c: bf:a3:b0:88:e6:fb:bf:04:39:72:49:b6:92:87:ef:97:9c:f5: 88:60:db:e4:df:f9:a8:0f:f7:2b:4a:1a:af:0a:0b:b9:86:1d: c2:ae:c9:f6:6c:b8:b2:38:78:92:e5:d4:ba:c3:b5:ea:bb:70: cc:39:73:82:51:8f:6e:e7:b8:09:74:ad:d9:bb:88:86:77:06: e2:e3:87:c6:c2:26:26:d8:40:eb:f6:0b:48:72:90:76:b6:ab: 8e:73:bc:ba:da:ce:a9:6a:77:85:2c:80:c3:14:24:42:a4:9d: 9e:e6:89:f3:a5:85:10:1c:0a:d2:18:7c:cf:2f:51:ce:16:ac: 54:4d:6f:1f:af:8d:53:81:12:07:36:ff:f6:eb:ef:95:08:03: ad:be:29:37:5c:76:4d:35:a9:00:04:e5:e1:30:1f:f4:06:fd: 73:33:31:be:95:03:eb:11:1b:33:48:c5:62:27:b1:80:d9:71: 7c:24:27:03:fe:06:eb:85:16:0d:e3:28:e3:53:91:55:c8:9f: 94:72:57:69:30:38:18:5a:e9:ef:56:d7:6a:58:53:af:93:1b: 85:03:86:35 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUXqNFid0+S76NJ2xbpAv0IAkGVFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3 QjgyOUU0RDAeFw0yNjA4MTQyMDE4MjNaFw0yNjA4MTUyMzQzMjNaMDMxMTAvBgNV BAMTKDRFN0UzM0JGNTJDRkI5MjdBM0U2MTM2RTVFQzg1QUJBM0VGMkNEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkLyXPQHg/Pjkd2sq6FPVhhwpx kgyeUTVpAUtJQVQ3Dlcl4p2gWoO3P69Q/ziDcCcGU2y/ewH6awv6un/h6wtz9t1f 3OVIBShzepYe+FVvzBTEJ3vn2vHD8CmWAPmriUCn3mH2PUSYeQSRjFCtT0EFVTox nouMBZwHvI7ePsqHcTEh2yTjwRph3WK/RR2+lE3apkdZEP9ZXwHhYyxBu+/kxb/H +7pd84AmMs7rozff10tDBIalPkIWvc9uWBGolDPbuRZm1vNLKluZD6j0p71Vp0Id ZtENGBq/btZDe4nHqs/sMseIbLThBgaJW1Cmv1REOoM+JLtBnn2mMFr/HpNVAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUTn4zv1LPuSej5hNuXshauj7yzRswHwYDVR0j BBgwFoAUNchmvgAN6rhwyXvtctCngHuCnk0wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAv MzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3QjgyOUU0RC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zNUM4NjZCRTAwMERFQUI4NzBDOTdCRUQ3MkQwQTc4 MDdCODI5RTRELmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAvMzVDODY2QkUwMDBERUFCODcw Qzk3QkVENzJEMEE3ODA3QjgyOUU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABwOgN1R1hPNVv7UOp98 gAOZvkycs1zlbajJ6PPU4HwGrNLdHL+jsIjm+78EOXJJtpKH75ec9Yhg2+Tf+agP 9ytKGq8KC7mGHcKuyfZsuLI4eJLl1LrDteq7cMw5c4JRj27nuAl0rdm7iIZ3BuLj h8bCJibYQOv2C0hykHa2q45zvLrazqlqd4UsgMMUJEKknZ7mifOlhRAcCtIYfM8v Uc4WrFRNbx+vjVOBEgc2//br75UIA62+KTdcdk01qQAE5eEwH/QG/XMzMb6VA+sR GzNIxWInsYDZcXwkJwP+BuuFFg3jKONTkVXIn5RyV2kwOBha6e9W12pYU6+TG4UD hjU= -----END CERTIFICATE-----Generated at Sat Aug 15 05:38:02 2026 by rpki-client