$ rpki-client -vvf rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft File: 86E5C9C6D878819F10BEC976A116DB8148A15794.mft (raw, json) Hash identifier: dg1N+MANbXqfOZSxMNQ3DAJLfhkG0PjfbGFnvslWiwo= Subject key identifier: DF:8B:0F:47:E7:B7:A9:15:AF:D3:D5:1E:EC:54:79:16:73:69:B0:5E Authority key identifier: 86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94 Certificate issuer: /CN=86E5C9C6D878819F10BEC976A116DB8148A15794 Certificate serial: 12710691C1B17BC94E58D497469C0A9F018AE592 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer Subject info access: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft Manifest number: 44 Signing time: Mon 29 Jun 2026 19:27:19 +0000 Manifest this update: Mon 29 Jun 2026 19:22:19 +0000 Manifest next update: Tue 30 Jun 2026 20:03:19 +0000 Files and hashes: 1: 3134302e39322e302e302f31362d3234203d3e2031363539.roa (hash: rvl3iJZidfPVj8QIpPoFpRfFHf2uQD3RRvMQXspZm6A=) 2: 86E5C9C6D878819F10BEC976A116DB8148A15794.crl (hash: ysPFjypxsXyh/WmZISQontH1NCawmdbPh8skLcyl9BU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 20:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:71:06:91:c1:b1:7b:c9:4e:58:d4:97:46:9c:0a:9f:01:8a:e5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E5C9C6D878819F10BEC976A116DB8148A15794 Validity Not Before: Jun 29 19:22:19 2026 GMT Not After : Jun 30 20:03:19 2026 GMT Subject: CN=DF8B0F47E7B7A915AFD3D51EEC5479167369B05E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:24:2f:18:94:a9:8e:fa:12:1a:7c:08:28: 29:fb:81:b9:c6:13:14:e8:b5:8d:fc:0b:fc:ce:0b: 7d:d9:5f:f5:01:eb:d0:bc:e6:8a:14:86:db:d0:13: 21:fc:40:10:ae:11:35:39:4c:45:5a:a5:d9:6c:06: 76:10:ff:7d:11:93:dc:16:32:f3:ae:72:b2:3d:1e: a3:48:66:8a:f7:f8:30:38:0f:03:99:3a:8c:05:36: 2a:9c:d4:4f:46:09:2f:56:a7:55:57:f7:12:d6:36: 69:a2:9a:87:36:36:44:6f:50:c6:67:83:c5:9d:7e: 5e:9e:99:e4:c8:2e:b6:01:3b:28:0d:a6:6b:ce:0c: ef:75:18:7f:a4:43:6a:c8:fc:32:0f:ff:81:aa:24: 2b:cf:c5:aa:25:a4:e0:4c:6f:79:5d:a0:9a:bc:78: d1:3b:50:f0:6f:1d:12:3e:ff:56:37:9a:22:96:c4: 1a:be:a3:f8:2a:1f:e7:36:d9:28:38:de:ef:b1:51: b1:4e:7b:75:cc:22:2d:1f:82:a1:fd:98:b2:fe:ce: 9b:6a:1b:0d:68:65:b1:d3:54:d7:cb:b0:1d:6f:bd: b6:fb:a5:80:50:67:4c:06:c6:f4:c5:2d:35:95:29: 75:15:b9:32:40:be:d6:f8:8e:27:22:c4:55:ee:c8: 32:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8B:0F:47:E7:B7:A9:15:AF:D3:D5:1E:EC:54:79:16:73:69:B0:5E X509v3 Authority Key Identifier: keyid:86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:10:6c:c9:e3:b3:88:08:0f:75:a2:8c:93:21:d4:a4:f8:4f: 07:a3:e7:bd:a5:64:46:c4:8f:6d:f3:ab:a5:75:76:20:6e:a2: 05:20:30:d2:94:e7:57:d1:0b:ca:5e:08:71:07:a0:22:b0:46: 49:e4:b8:f0:90:05:91:3b:fb:b1:87:67:d5:0b:99:7b:97:32: 5c:21:c0:fb:8e:9a:aa:0d:1e:ad:7c:26:23:c3:0c:f1:20:8d: bf:4c:97:0e:42:70:50:f5:20:5b:0b:76:a0:d9:49:ad:0b:8d: 67:b0:58:05:5d:51:44:12:c2:85:62:79:17:ac:d3:45:94:3a: 7a:00:97:c6:68:6a:d3:96:4c:4a:a8:6e:dd:31:4a:f7:de:43: 07:db:a1:3a:e5:ca:70:15:05:00:d7:d8:0b:e3:b3:e4:89:33: 58:6c:82:d9:12:ac:42:d4:3d:74:4f:66:fc:d6:8f:b5:9a:fa: ba:b1:aa:b1:4a:8f:c6:85:c3:3a:31:b5:73:c1:1c:ac:ff:30: 8b:e4:e2:7b:d6:50:ce:db:e4:d6:95:48:5c:a2:a0:b0:43:a9: 88:48:2a:c5:55:02:0e:da:24:69:83:97:fb:f8:95:da:73:7e: b9:92:70:6d:c5:6d:d1:30:20:1a:43:18:92:48:c2:78:a9:26: 8a:66:a2:c1 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUEnEGkcGxe8lOWNSXRpwKnwGK5ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNUM5QzZEODc4ODE5RjEwQkVDOTc2QTExNkRCODE0 OEExNTc5NDAeFw0yNjA2MjkxOTIyMTlaFw0yNjA2MzAyMDAzMTlaMDMxMTAvBgNV BAMTKERGOEIwRjQ3RTdCN0E5MTVBRkQzRDUxRUVDNTQ3OTE2NzM2OUIwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0CQvGJSpjvoSGnwIKCn7gbnG ExTotY38C/zOC33ZX/UB69C85ooUhtvQEyH8QBCuETU5TEVapdlsBnYQ/30Rk9wW MvOucrI9HqNIZor3+DA4DwOZOowFNiqc1E9GCS9Wp1VX9xLWNmmimoc2NkRvUMZn g8Wdfl6emeTILrYBOygNpmvODO91GH+kQ2rI/DIP/4GqJCvPxaolpOBMb3ldoJq8 eNE7UPBvHRI+/1Y3miKWxBq+o/gqH+c22Sg43u+xUbFOe3XMIi0fgqH9mLL+zptq Gw1oZbHTVNfLsB1vvbb7pYBQZ0wGxvTFLTWVKXUVuTJAvtb4jicixFXuyDLnAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU34sPR+e3qRWv09Ue7FR5FnNpsF4wHwYDVR0j BBgwFoAUhuXJxth4gZ8Qvsl2oRbbgUihV5QwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSUlJLzAv ODZFNUM5QzZEODc4ODE5RjEwQkVDOTc2QTExNkRCODE0OEExNTc5NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMC84NkU1QzlDNkQ4Nzg4MTlGMTBCRUM5NzZBMTE2REI4 MTQ4QTE1Nzk0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSUlJLzAvODZFNUM5QzZEODc4ODE5RjEw QkVDOTc2QTExNkRCODE0OEExNTc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAoQbMnjs4gID3WijJMh 1KT4Twej572lZEbEj23zq6V1diBuogUgMNKU51fRC8peCHEHoCKwRknkuPCQBZE7 +7GHZ9ULmXuXMlwhwPuOmqoNHq18JiPDDPEgjb9Mlw5CcFD1IFsLdqDZSa0LjWew WAVdUUQSwoVieRes00WUOnoAl8ZoatOWTEqobt0xSvfeQwfboTrlynAVBQDX2Avj s+SJM1hsgtkSrELUPXRPZvzWj7Wa+rqxqrFKj8aFwzoxtXPBHKz/MIvk4nvWUM7b 5NaVSFyioLBDqYhIKsVVAg7aJGmDl/v4ldpzfrmScG3FbdEwIBpDGJJIwnipJopm osE= -----END CERTIFICATE-----Generated at Tue Jun 30 13:10:52 2026 by rpki-client