$ rpki-client -vvf rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft File: E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft (raw, json) Hash identifier: yvhUZSVVyB8Arr563xzVLlshB+7NzdWeIbgr/6vDoRs= Subject key identifier: 19:54:18:DD:5C:53:DD:4E:DD:E9:17:6D:A6:76:A4:29:3D:67:90:70 Authority key identifier: E9:65:3D:7A:C7:DC:7D:52:AB:2A:18:D7:A1:E5:34:78:38:23:C3:E8 Certificate issuer: /CN=E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8 Certificate serial: 1A8FAA16359495053BE1C3CF53CB9B1FBCC4BC04 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft Manifest number: 44 Signing time: Tue 30 Jun 2026 09:33:35 +0000 Manifest this update: Tue 30 Jun 2026 09:28:35 +0000 Manifest next update: Wed 01 Jul 2026 11:54:35 +0000 Files and hashes: 1: E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.crl (hash: fDv8HLiGx87Jnms4AiSSZwcrggvqdMe6cSIKKml2iLw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.crl rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 11:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8f:aa:16:35:94:95:05:3b:e1:c3:cf:53:cb:9b:1f:bc:c4:bc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8 Validity Not Before: Jun 30 09:28:35 2026 GMT Not After : Jul 1 11:54:35 2026 GMT Subject: CN=195418DD5C53DD4EDDE9176DA676A4293D679070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1f:77:24:f1:84:59:3f:b3:a9:20:84:14:72: 92:b9:3a:fd:3c:ce:49:62:cf:38:f7:03:57:a1:9c: 6f:2d:f9:c4:30:c8:06:42:66:9d:84:09:03:98:a3: f3:99:a4:b1:72:2a:4e:c9:9d:9d:6d:f0:ab:d9:02: 1e:b8:ae:e5:87:0a:b7:fa:b2:53:a9:0b:16:89:a6: 6e:78:b0:53:15:63:8d:80:c3:88:e1:49:05:e3:db: 71:81:92:7d:08:fb:3f:e6:60:00:8c:52:dc:c8:7e: 89:6c:97:bd:ef:44:c0:65:a5:17:ce:20:ba:6a:bb: 3d:0b:8d:08:6f:31:22:79:22:3a:08:87:57:70:32: fb:88:4b:92:f6:1b:10:a6:2e:5d:bd:65:08:87:7c: bd:d6:3b:20:0a:4b:99:7f:75:d0:40:00:14:ec:8c: 30:72:8e:a5:85:fc:bd:67:bc:1c:de:7d:3d:f0:6f: 0a:4d:a6:69:00:ce:9b:df:10:51:44:45:3c:08:ed: 31:5a:29:65:d8:e7:dd:3a:86:1e:4a:14:02:ee:70: 02:b9:40:2e:38:de:c0:a8:e6:20:51:40:0f:0e:6e: d7:c2:6c:71:fa:12:79:54:a0:0b:01:93:ab:fc:2f: 1d:95:5c:33:d2:67:fe:b7:f1:cc:1b:1f:71:55:4d: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:54:18:DD:5C:53:DD:4E:DD:E9:17:6D:A6:76:A4:29:3D:67:90:70 X509v3 Authority Key Identifier: keyid:E9:65:3D:7A:C7:DC:7D:52:AB:2A:18:D7:A1:E5:34:78:38:23:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:db:3c:21:fa:f3:9c:89:d2:d2:52:03:70:92:f2:63:41:61: 7a:18:d1:bb:17:2d:9c:5c:82:87:fb:07:b3:9f:cc:9e:23:84: c7:8f:27:39:a9:ae:81:2c:84:e0:02:52:88:fd:ef:a0:bd:54: e8:7a:e7:c4:77:fc:cc:cc:13:f6:ae:0f:ca:f3:ed:70:1c:32: 01:98:c3:91:47:95:4e:0e:4c:49:e9:24:df:16:34:59:a4:91: 39:7b:95:ab:7a:15:44:b8:e8:8b:c7:be:97:fe:bc:cb:de:33: c9:c0:70:ef:72:e8:68:eb:0a:13:60:f0:19:af:70:d8:13:f1: ee:ee:74:04:43:8d:b9:3f:c2:7c:e5:2c:c4:98:b1:cb:e0:99: ec:a9:8b:b7:0d:25:8d:45:f9:6d:f2:78:44:74:9c:29:41:b5: c8:ef:47:06:d0:de:92:b0:8b:7f:39:5c:b3:9b:22:54:a9:29: 5c:b7:3f:85:60:5d:39:de:16:20:cc:e6:77:ba:1e:76:64:83: f6:88:cb:26:9e:c1:01:45:65:06:52:a0:3c:31:6e:b7:0b:30: c0:9f:37:1f:91:35:38:55:10:bf:63:f2:09:9f:c6:76:bf:c6: ab:da:29:17:10:be:d3:cd:ea:5e:e5:9a:3a:50:f2:b2:e5:52: 35:63:d4:4d -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUGo+qFjWUlQU74cPPU8ubH7zEvAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk2NTNEN0FDN0RDN0Q1MkFCMkExOEQ3QTFFNTM0Nzgz ODIzQzNFODAeFw0yNjA2MzAwOTI4MzVaFw0yNjA3MDExMTU0MzVaMDMxMTAvBgNV BAMTKDE5NTQxOERENUM1M0RENEVEREU5MTc2REE2NzZBNDI5M0Q2NzkwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRH3ck8YRZP7OpIIQUcpK5Ov08 zklizzj3A1ehnG8t+cQwyAZCZp2ECQOYo/OZpLFyKk7JnZ1t8KvZAh64ruWHCrf6 slOpCxaJpm54sFMVY42Aw4jhSQXj23GBkn0I+z/mYACMUtzIfolsl73vRMBlpRfO ILpquz0LjQhvMSJ5IjoIh1dwMvuIS5L2GxCmLl29ZQiHfL3WOyAKS5l/ddBAABTs jDByjqWF/L1nvBzefT3wbwpNpmkAzpvfEFFERTwI7TFaKWXY5906hh5KFALucAK5 QC443sCo5iBRQA8ObtfCbHH6EnlUoAsBk6v8Lx2VXDPSZ/638cwbH3FVTYBPAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUGVQY3VxT3U7d6RdtpnakKT1nkHAwHwYDVR0j BBgwFoAU6WU9esfcfVKrKhjXoeU0eDgjw+gwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU9ORVQv MC9FOTY1M0Q3QUM3REM3RDUyQUIyQTE4RDdBMUU1MzQ3ODM4MjNDM0U4LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0U5NjUzRDdBQzdEQzdENTJBQjJBMThEN0ExRTUz NDc4MzgyM0MzRTguY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JT05FVC8wL0U5NjUzRDdBQzdEQzdE NTJBQjJBMThEN0ExRTUzNDc4MzgyM0MzRTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAf2zwh+vOcidLS UgNwkvJjQWF6GNG7Fy2cXIKH+wezn8yeI4THjyc5qa6BLITgAlKI/e+gvVToeufE d/zMzBP2rg/K8+1wHDIBmMORR5VODkxJ6STfFjRZpJE5e5WrehVEuOiLx76X/rzL 3jPJwHDvcuho6woTYPAZr3DYE/Hu7nQEQ425P8J85SzEmLHL4JnsqYu3DSWNRflt 8nhEdJwpQbXI70cG0N6SsIt/OVyzmyJUqSlctz+FYF053hYgzOZ3uh52ZIP2iMsm nsEBRWUGUqA8MW63CzDAnzcfkTU4VRC/Y/IJn8Z2v8ar2ikXEL7Tzepe5Zo6UPKy 5VI1Y9RN -----END CERTIFICATE-----Generated at Tue Jun 30 19:09:07 2026 by rpki-client