$ rpki-client -vvf rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft File: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft (raw, json) Hash identifier: xb+IOE1SLqMsyOVSrL1bZNzrJx6rU37h95wJaESlV5U= Subject key identifier: 7A:C7:6E:37:B3:F0:B3:DA:2D:81:8D:01:13:AF:C4:CD:39:2A:C7:6F Authority key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA Certificate issuer: /CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Certificate serial: 30EE014E07407DA0C73E35B62CF5C28118C49B36 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft Manifest number: 48 Signing time: Tue 30 Jun 2026 07:48:21 +0000 Manifest this update: Tue 30 Jun 2026 07:43:21 +0000 Manifest next update: Wed 01 Jul 2026 09:38:21 +0000 Files and hashes: 1: 3130332e3137332e39342e302f32342d3234203d3e2039393230.roa (hash: LLLHTnX1lDVfIT/USPcy8uRSK7AEjVy8r3OHlXaKRtA=) 2: 323430373a653463303a3a2f34382d3438203d3e20313532363134.roa (hash: vgzFcwGEYe/SuHzv/bradPPbtlCxt1g9+kfxNVcgqL0=) 3: 3130332e3137332e39342e302f32332d3234203d3e2039393230.roa (hash: 4AY9mKhgxxuuSl6y1Sy2exIP/SFNw2gXcIDmergV1Y0=) 4: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl (hash: tsigY45L5YTm7h0LZnX3oSZPCSowWhBSosbOHBio6Bo=) 5: 3130332e3137332e39352e302f32342d3234203d3e2039393230.roa (hash: GRWZ7hnM+/dWxb1R4FqblAJoXVc3WKwBr5Lvm8NY3Iw=) 6: 323430373a653463303a313a3a2f34382d3438203d3e2039393230.roa (hash: SPZzDHWF7IOGU0RefkHatr6T+UuWJ43wu5dvfPsUlBc=) 7: 3130332e3137332e39342e302f32332d3234203d3e20313532363134.roa (hash: DFwmEzDSWwn1n/LKb3VnZN0eid9zGs6vXBGXUYxrvVE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 09:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ee:01:4e:07:40:7d:a0:c7:3e:35:b6:2c:f5:c2:81:18:c4:9b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Validity Not Before: Jun 30 07:43:21 2026 GMT Not After : Jul 1 09:38:21 2026 GMT Subject: CN=7AC76E37B3F0B3DA2D818D0113AFC4CD392AC76F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:48:78:87:38:2f:4e:46:f5:1b:33:bc:42:6d: 2e:9d:9f:c9:ea:b0:bc:b7:6c:0b:d5:94:c8:b3:cf: 44:d2:8c:63:5a:0a:b0:43:37:9b:9d:5e:e3:4a:36: 5d:aa:85:ca:8e:bb:41:82:fe:14:a3:90:bb:27:da: 00:a8:e3:e0:89:b7:4f:8d:8c:30:e2:18:89:49:2a: 25:9e:af:9a:c2:1f:6d:d1:d0:80:05:9f:c2:c0:90: 66:78:17:6b:62:29:a7:cc:ca:ee:16:73:e6:da:5f: 74:d5:e1:95:e4:ed:b6:79:03:74:0d:c0:9e:11:7e: 84:b1:c5:28:90:ad:99:6a:2d:9e:f1:46:4a:a9:7d: 79:dd:31:95:d0:e2:ef:e6:e3:a1:d7:24:85:a2:4e: 72:3f:b4:60:59:a3:c7:ea:6e:9d:ed:1b:de:be:4b: 61:ea:03:7e:1b:ad:82:2d:a3:43:a3:68:05:03:d8: 65:90:5b:2f:a3:4e:cc:29:69:51:2c:7a:64:ee:f8: b5:cc:d2:4b:60:6c:c1:fc:44:54:f8:e1:3f:50:8a: 9c:0d:e0:96:79:e5:57:ce:32:36:02:8e:7c:85:ae: 57:c4:d4:72:4d:ca:5c:bf:48:db:e2:e5:4f:bc:dd: d5:31:9b:6d:aa:39:1a:ca:6b:61:38:72:db:3c:11: d1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C7:6E:37:B3:F0:B3:DA:2D:81:8D:01:13:AF:C4:CD:39:2A:C7:6F X509v3 Authority Key Identifier: keyid:41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:37:87:ed:ca:f8:46:71:3a:46:5c:c1:d3:95:b7:1d:52:f6: 71:e4:73:dd:bd:9e:e4:9c:24:9c:69:30:78:a7:6d:df:ad:fe: 88:51:18:12:50:1e:33:8e:69:05:2f:5b:2d:25:49:e8:7d:1f: 93:c0:98:07:97:e4:19:3b:22:12:4a:ee:12:2b:c9:ef:16:e4: 87:50:c6:aa:08:55:c0:50:82:58:43:dc:90:fe:9e:88:8a:4d: 07:e8:c1:6f:1e:94:fd:8a:94:65:66:f8:c0:3d:d9:a7:c9:9c: 0e:99:aa:4d:53:08:97:7f:ec:5c:4b:fb:d9:19:01:37:d6:92: 61:51:dd:d4:76:29:97:62:56:98:27:71:de:41:1a:ed:ee:32: ae:ff:6b:4c:3f:14:dc:94:55:0f:2e:31:13:49:d5:74:f1:a5: 4c:f8:08:07:ec:60:55:83:93:a1:aa:ed:1a:97:a4:0d:0e:6c: 08:bc:97:d5:12:4a:d1:42:97:43:0b:58:c8:e9:cf:0d:1a:1b: 5c:29:6f:fd:08:96:26:57:57:0b:2a:01:d5:a8:2c:1f:11:95: b9:57:ef:dc:bb:88:e7:5c:f0:fa:95:82:3f:23:55:27:8c:f4: 37:6d:1f:c3:c0:b6:1d:fa:3f:24:be:f0:39:27:ac:e5:a2:1b: 4b:b2:0f:b5 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUMO4BTgdAfaDHPjW2LPXCgRjEmzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFCRUI2NTY2OEUxNjQ5RURFOTcyOEU0RkY0ODU5MUZB MEM1ODJCQTAeFw0yNjA2MzAwNzQzMjFaFw0yNjA3MDEwOTM4MjFaMDMxMTAvBgNV BAMTKDdBQzc2RTM3QjNGMEIzREEyRDgxOEQwMTEzQUZDNENEMzkyQUM3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTSHiHOC9ORvUbM7xCbS6dn8nq sLy3bAvVlMizz0TSjGNaCrBDN5udXuNKNl2qhcqOu0GC/hSjkLsn2gCo4+CJt0+N jDDiGIlJKiWer5rCH23R0IAFn8LAkGZ4F2tiKafMyu4Wc+baX3TV4ZXk7bZ5A3QN wJ4RfoSxxSiQrZlqLZ7xRkqpfXndMZXQ4u/m46HXJIWiTnI/tGBZo8fqbp3tG96+ S2HqA34brYIto0OjaAUD2GWQWy+jTswpaVEsemTu+LXM0ktgbMH8RFT44T9QipwN 4JZ55VfOMjYCjnyFrlfE1HJNyly/SNvi5U+83dUxm22qORrKa2E4cts8EdHdAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUesduN7Pws9otgY0BE6/EzTkqx28wHwYDVR0j BBgwFoAUQb62VmjhZJ7elyjk/0hZH6DFgrowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVNUVkMv MC80MUJFQjY1NjY4RTE2NDlFREU5NzI4RTRGRjQ4NTkxRkEwQzU4MkJBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzQxQkVCNjU2NjhFMTY0OUVERTk3MjhFNEZGNDg1 OTFGQTBDNTgyQkEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JU1RWQy8wLzQxQkVCNjU2NjhFMTY0 OUVERTk3MjhFNEZGNDg1OTFGQTBDNTgyQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHN4ftyvhGcTpG XMHTlbcdUvZx5HPdvZ7knCScaTB4p23frf6IURgSUB4zjmkFL1stJUnofR+TwJgH l+QZOyISSu4SK8nvFuSHUMaqCFXAUIJYQ9yQ/p6Iik0H6MFvHpT9ipRlZvjAPdmn yZwOmapNUwiXf+xcS/vZGQE31pJhUd3UdimXYlaYJ3HeQRrt7jKu/2tMPxTclFUP LjETSdV08aVM+AgH7GBVg5Ohqu0al6QNDmwIvJfVEkrRQpdDC1jI6c8NGhtcKW/9 CJYmV1cLKgHVqCwfEZW5V+/cu4jnXPD6lYI/I1UnjPQ3bR/DwLYd+j8kvvA5J6zl ohtLsg+1 -----END CERTIFICATE-----Generated at Tue Jun 30 19:11:23 2026 by rpki-client