$ rpki-client -vvf rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft File: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft (raw, json) Hash identifier: JqOLP/Qcg55ejNjjmEtA5919jjoU1WplGAPgcKA0MHo= Subject key identifier: 5A:78:F9:44:D3:0E:93:A9:E4:7F:76:3A:43:45:BA:F4:D1:F0:5E:D4 Authority key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA Certificate issuer: /CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Certificate serial: 24AB5664F6E5CC903AAB728B8487F7B3C15ECDEB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft Manifest number: 84 Signing time: Fri 14 Aug 2026 15:37:10 +0000 Manifest this update: Fri 14 Aug 2026 15:32:10 +0000 Manifest next update: Sat 15 Aug 2026 16:06:10 +0000 Files and hashes: 1: 3130332e3137332e39342e302f32332d3234203d3e2039393230.roa (hash: 4AY9mKhgxxuuSl6y1Sy2exIP/SFNw2gXcIDmergV1Y0=) 2: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl (hash: G3R2jsjOtDvqVUl14qGFRykvvkjSFRc8whG8jM5OpRE=) 3: 323430373a653463303a313a3a2f34382d3438203d3e2039393230.roa (hash: SPZzDHWF7IOGU0RefkHatr6T+UuWJ43wu5dvfPsUlBc=) 4: 3130332e3137332e39342e302f32332d3234203d3e20313532363134.roa (hash: DFwmEzDSWwn1n/LKb3VnZN0eid9zGs6vXBGXUYxrvVE=) 5: 3130332e3137332e39352e302f32342d3234203d3e2039393230.roa (hash: GRWZ7hnM+/dWxb1R4FqblAJoXVc3WKwBr5Lvm8NY3Iw=) 6: 3130332e3137332e39342e302f32342d3234203d3e2039393230.roa (hash: LLLHTnX1lDVfIT/USPcy8uRSK7AEjVy8r3OHlXaKRtA=) 7: 323430373a653463303a3a2f34382d3438203d3e20313532363134.roa (hash: vgzFcwGEYe/SuHzv/bradPPbtlCxt1g9+kfxNVcgqL0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 16:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ab:56:64:f6:e5:cc:90:3a:ab:72:8b:84:87:f7:b3:c1:5e:cd:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Validity Not Before: Aug 14 15:32:10 2026 GMT Not After : Aug 15 16:06:10 2026 GMT Subject: CN=5A78F944D30E93A9E47F763A4345BAF4D1F05ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:1d:b0:ae:03:24:0d:4a:97:9a:70:01:d1: 5b:1a:a1:f9:50:2d:0b:1c:5f:a7:c2:88:ba:14:f4: 1b:0a:cc:b3:fb:c2:6c:5b:47:59:c3:de:9e:e5:27: 55:bb:76:95:ef:f8:05:d6:ed:18:71:01:34:74:b5: c0:cf:3f:cb:8e:da:c3:00:c7:3f:a6:6f:a6:c9:71: 0c:b1:eb:f4:82:18:03:0f:32:85:c2:65:6d:21:62: 34:94:cf:8a:92:4f:35:43:dd:99:00:6c:23:fa:31: 58:d8:8c:05:7d:7c:49:f4:4a:4f:0a:54:12:13:14: 97:1f:37:a9:93:76:4d:13:4a:0e:25:7f:e0:ea:45: 8f:2e:fc:94:06:61:a2:23:47:68:f1:1d:fb:2d:57: ec:7a:2f:ef:02:19:30:76:e1:97:05:a8:51:76:95: 1b:00:27:e2:3b:1b:01:58:e7:fd:86:3e:27:ab:0c: 01:de:a3:38:b0:2a:1f:e0:c6:0f:6d:cf:3a:62:a7: e6:46:11:53:10:8c:66:f8:6e:ac:df:85:24:fb:56: 40:6c:f2:12:50:44:13:b2:2a:0a:79:3e:50:73:7d: ae:f4:2f:b4:27:cb:4a:2d:b0:96:6d:52:a8:53:94: dc:c0:48:94:0f:b2:49:28:d7:13:9d:f0:87:97:71: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:78:F9:44:D3:0E:93:A9:E4:7F:76:3A:43:45:BA:F4:D1:F0:5E:D4 X509v3 Authority Key Identifier: keyid:41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:12:0f:28:c2:f4:cd:87:08:e6:75:a3:2e:03:ec:d8:b2:7c: 1c:ac:d8:01:35:a1:62:ab:c6:d2:81:40:83:19:78:de:e4:f2: 8f:d8:90:73:28:b8:3a:aa:56:68:01:53:81:79:bd:c4:fb:d2: 49:f3:ba:67:e6:45:21:74:8e:be:f9:3a:61:b9:d3:eb:84:23: 8b:1b:a2:9c:44:ca:ab:d3:f9:56:48:d9:f9:67:11:2b:22:78: 9c:e9:b8:02:0f:a6:ae:74:1f:10:f7:68:fb:1a:80:72:dc:e6: 0c:fe:d0:15:c4:8e:17:ad:24:b0:ec:19:7a:45:66:0c:47:4d: 71:d2:b8:d5:b2:68:5a:ab:f3:97:36:1e:7f:a3:b9:51:76:35: 16:6c:be:f9:c1:20:ea:eb:99:24:88:e5:1b:46:78:ac:af:67: b2:87:3c:61:f6:92:d3:5d:f0:00:10:86:c0:06:77:d5:a3:d7: 56:a1:4e:8c:a9:88:5e:b8:4b:af:23:c6:7f:2e:6c:fc:42:5b: cf:2a:74:c3:d6:9c:83:23:7e:de:43:1b:e8:e1:20:b2:61:6a: 09:c5:c8:96:0b:c5:1a:2b:5a:cc:70:54:1b:33:2c:e1:a9:f2: 44:a0:9a:04:6d:85:a8:98:e5:5f:5f:e3:5f:04:c5:49:6c:8a: d1:d3:3f:a8 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUJKtWZPblzJA6q3KLhIf3s8FezeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFCRUI2NTY2OEUxNjQ5RURFOTcyOEU0RkY0ODU5MUZB MEM1ODJCQTAeFw0yNjA4MTQxNTMyMTBaFw0yNjA4MTUxNjA2MTBaMDMxMTAvBgNV BAMTKDVBNzhGOTQ0RDMwRTkzQTlFNDdGNzYzQTQzNDVCQUY0RDFGMDVFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaVh2wrgMkDUqXmnAB0VsaoflQ LQscX6fCiLoU9BsKzLP7wmxbR1nD3p7lJ1W7dpXv+AXW7RhxATR0tcDPP8uO2sMA xz+mb6bJcQyx6/SCGAMPMoXCZW0hYjSUz4qSTzVD3ZkAbCP6MVjYjAV9fEn0Sk8K VBITFJcfN6mTdk0TSg4lf+DqRY8u/JQGYaIjR2jxHfstV+x6L+8CGTB24ZcFqFF2 lRsAJ+I7GwFY5/2GPierDAHeoziwKh/gxg9tzzpip+ZGEVMQjGb4bqzfhST7VkBs 8hJQRBOyKgp5PlBzfa70L7Qny0otsJZtUqhTlNzASJQPskko1xOd8IeXcQ2jAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUWnj5RNMOk6nkf3Y6Q0W69NHwXtQwHwYDVR0j BBgwFoAUQb62VmjhZJ7elyjk/0hZH6DFgrowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVNUVkMv MC80MUJFQjY1NjY4RTE2NDlFREU5NzI4RTRGRjQ4NTkxRkEwQzU4MkJBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzQxQkVCNjU2NjhFMTY0OUVERTk3MjhFNEZGNDg1 OTFGQTBDNTgyQkEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JU1RWQy8wLzQxQkVCNjU2NjhFMTY0 OUVERTk3MjhFNEZGNDg1OTFGQTBDNTgyQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkEg8owvTNhwjm daMuA+zYsnwcrNgBNaFiq8bSgUCDGXje5PKP2JBzKLg6qlZoAVOBeb3E+9JJ87pn 5kUhdI6++TphudPrhCOLG6KcRMqr0/lWSNn5ZxErInic6bgCD6audB8Q92j7GoBy 3OYM/tAVxI4XrSSw7Bl6RWYMR01x0rjVsmhaq/OXNh5/o7lRdjUWbL75wSDq65kk iOUbRnisr2eyhzxh9pLTXfAAEIbABnfVo9dWoU6MqYheuEuvI8Z/Lmz8QlvPKnTD 1pyDI37eQxvo4SCyYWoJxciWC8UaK1rMcFQbMyzhqfJEoJoEbYWomOVfX+NfBMVJ bIrR0z+o -----END CERTIFICATE-----Generated at Sat Aug 15 05:22:45 2026 by rpki-client