$ rpki-client -vvf rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft File: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft (raw, json) Hash identifier: i5zF238ARMyRWonDohC9eVXEbTmEpS4yuUKekqfNztA= Subject key identifier: 35:85:6E:C2:C8:19:46:FD:C3:95:00:44:04:BD:95:64:0A:D9:4F:7C Authority key identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 Certificate issuer: /CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Certificate serial: 4915642F679AC55C15EC36AB9AEBB2CBDA145561 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft Manifest number: 45 Signing time: Mon 29 Jun 2026 20:02:20 +0000 Manifest this update: Mon 29 Jun 2026 19:57:20 +0000 Manifest next update: Tue 30 Jun 2026 20:35:20 +0000 Files and hashes: 1: 3136302e3139312e342e302f32332d3234203d3e20313438393936.roa (hash: WDQ6isA31vRFBEKAPNTN2h03bliS7XG3+ZDUsxu5ekM=) 2: 3136302e3139312e342e302f32332d3234203d3e203338303432.roa (hash: uC4SAyffO7EbE3rGS0jHS6n7C39qBWkfFa7uUUduW8s=) 3: 3136302e3139312e342e302f32332d3234203d3e20313334383233.roa (hash: MvSn3+N3E0x49y2zyFZseXhPFbhPYX7FDxa/hvK0XxA=) 4: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl (hash: 7mJ43700ehOjbv1TKhjjoLKEqveFw6CLPMVpIMo/7f0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 19:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:15:64:2f:67:9a:c5:5c:15:ec:36:ab:9a:eb:b2:cb:da:14:55:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Validity Not Before: Jun 29 19:57:20 2026 GMT Not After : Jun 30 20:35:20 2026 GMT Subject: CN=35856EC2C81946FDC395004404BD95640AD94F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:e2:1b:50:4c:1e:19:82:08:fa:f1:00:08: d9:f5:bf:64:6a:d8:3b:f0:6a:0f:70:87:29:83:22: ac:c4:44:fc:80:78:83:01:0c:a3:03:5b:67:70:05: 67:11:ea:58:9d:e9:52:6c:de:ee:32:f2:54:0b:36: e7:78:b4:22:cb:2b:a2:b8:f0:f6:bd:c6:5c:b1:ed: 6e:16:06:1a:27:aa:c9:85:71:ef:90:6c:bc:25:e1: ca:7f:a8:b6:6a:40:f4:35:d6:f8:c1:34:eb:43:a0: 5d:28:b6:8f:b5:57:7a:2b:69:66:d2:58:da:6f:81: e2:49:89:3e:9c:04:97:28:8f:b0:62:0d:18:9b:e7: c0:7c:02:12:d7:3e:56:b2:04:b3:a0:c6:b6:bc:b9: d8:05:2b:a7:3c:38:8d:60:d3:e8:0e:6b:dc:29:7b: 64:83:f7:24:88:04:4e:72:5e:58:03:71:66:85:9d: e4:11:80:90:19:66:25:cd:ac:8a:f0:dc:79:ab:27: 51:b2:46:e9:3a:4c:5f:e9:38:e4:ee:ec:a8:26:14: cf:85:9e:c5:ff:3b:a5:e9:6a:53:1a:d1:a9:a8:56: ad:d4:1e:2f:bf:d7:03:35:00:7b:0a:64:b2:2a:49: 34:15:19:eb:88:39:33:04:63:fd:76:f2:0d:f3:a7: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:85:6E:C2:C8:19:46:FD:C3:95:00:44:04:BD:95:64:0A:D9:4F:7C X509v3 Authority Key Identifier: keyid:EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a0:ae:81:a3:72:19:31:67:ee:5e:ac:9b:bf:17:90:d3:82: b2:33:84:bf:bb:85:50:a5:05:4e:d6:60:9f:e0:e2:8c:8d:db: 3b:72:dc:b0:39:91:d1:22:55:58:c5:a8:15:37:fe:95:85:16: 60:b0:3f:69:76:91:6e:a3:1d:a9:c2:1c:9b:58:47:3a:33:9e: bc:75:25:9a:d1:40:60:90:d9:eb:80:fc:25:09:b6:c6:a1:91: c4:db:83:47:56:3c:43:99:b4:a2:8e:fe:ec:22:45:b8:8e:7f: f7:f2:26:35:b4:7a:6c:67:08:44:e4:45:72:54:bb:e4:c4:f2: e1:9f:ef:1f:76:b4:9d:03:1f:e0:9c:9a:2b:16:72:dc:2e:d1: 2f:ee:d5:04:7c:7f:fd:95:aa:62:0d:7f:c9:37:76:dd:c2:30: 08:25:33:d9:7f:2f:02:3b:60:84:3d:75:28:39:0b:0c:e3:ed: 51:07:52:4b:1b:f6:fa:18:74:51:22:d6:f5:b7:7e:80:00:a6: 32:f3:fb:44:ef:49:97:60:2c:65:a2:17:98:69:72:7c:39:07: 96:cb:4b:a5:bc:8b:60:b0:88:54:ba:cb:1a:00:25:1d:90:a2: 0c:24:92:37:a4:75:3d:ca:f8:f7:1b:49:b2:97:c6:eb:30:c5: 86:15:19:bc -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUSRVkL2eaxVwV7Darmuuyy9oUVWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYxRDEwNDg0RUZBNzlBQkMwMThGQTBFRkE3RjNCMEMx NkVFNDNBNzAeFw0yNjA2MjkxOTU3MjBaFw0yNjA2MzAyMDM1MjBaMDMxMTAvBgNV BAMTKDM1ODU2RUMyQzgxOTQ2RkRDMzk1MDA0NDA0QkQ5NTY0MEFEOTRGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZuIbUEweGYII+vEACNn1v2Rq 2Dvwag9whymDIqzERPyAeIMBDKMDW2dwBWcR6lid6VJs3u4y8lQLNud4tCLLK6K4 8Pa9xlyx7W4WBhonqsmFce+QbLwl4cp/qLZqQPQ11vjBNOtDoF0oto+1V3oraWbS WNpvgeJJiT6cBJcoj7BiDRib58B8AhLXPlayBLOgxra8udgFK6c8OI1g0+gOa9wp e2SD9ySIBE5yXlgDcWaFneQRgJAZZiXNrIrw3HmrJ1GyRuk6TF/pOOTu7KgmFM+F nsX/O6XpalMa0amoVq3UHi+/1wM1AHsKZLIqSTQVGeuIOTMEY/128g3zp/tVAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUNYVuwsgZRv3DlQBEBL2VZArZT3wwHwYDVR0j BBgwFoAU7x0QSE76eavAGPoO+n87DBbuQ6cwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1ZS0wv MC9FRjFEMTA0ODRFRkE3OUFCQzAxOEZBMEVGQTdGM0IwQzE2RUU0M0E3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0VGMUQxMDQ4NEVGQTc5QUJDMDE4RkEwRUZBN0Yz QjBDMTZFRTQzQTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTVlLTC8wL0VGMUQxMDQ4NEVGQTc5 QUJDMDE4RkEwRUZBN0YzQjBDMTZFRTQzQTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCoK6Bo3IZMWfu XqybvxeQ04KyM4S/u4VQpQVO1mCf4OKMjds7ctywOZHRIlVYxagVN/6VhRZgsD9p dpFuox2pwhybWEc6M568dSWa0UBgkNnrgPwlCbbGoZHE24NHVjxDmbSijv7sIkW4 jn/38iY1tHpsZwhE5EVyVLvkxPLhn+8fdrSdAx/gnJorFnLcLtEv7tUEfH/9lapi DX/JN3bdwjAIJTPZfy8CO2CEPXUoOQsM4+1RB1JLG/b6GHRRItb1t36AAKYy8/tE 70mXYCxloheYaXJ8OQeWy0ulvItgsIhUussaACUdkKIMJJI3pHU9yvj3G0myl8br MMWGFRm8 -----END CERTIFICATE-----Generated at Tue Jun 30 13:09:06 2026 by rpki-client