$ rpki-client -vvf rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.mft File: 084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.mft (raw, json) Hash identifier: tevVyymGFaxQrxvhVCb4rdS4Gcp3FA7TYyiI7JHAhJg= Subject key identifier: 1C:AB:F3:86:2F:1B:A8:05:2B:50:EA:97:68:0B:9B:B2:06:4B:E7:A1 Authority key identifier: 08:4F:CA:ED:B5:0B:B0:39:5F:4B:B9:1B:91:C0:F2:E4:E8:4C:B7:BD Certificate issuer: /CN=084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD Certificate serial: 035C2970D1E0A146059CEC48D8D0552F254637C2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.mft Manifest number: 47 Signing time: Tue 30 Jun 2026 09:38:36 +0000 Manifest this update: Tue 30 Jun 2026 09:33:36 +0000 Manifest next update: Wed 01 Jul 2026 11:57:36 +0000 Files and hashes: 1: 084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.crl (hash: QaBZrNWAxxb/bShlcfLSPfvf/F57TGHVugDZKiqIEok=) 2: 3230322e34372e3137322e302f32332d3332203d3e203134383734.roa (hash: z5ttCw1NDbIiW26b4wnwRq+YuLtgcLQsIT0yR4YwdOc=) 3: 3230322e34372e3137322e302f32332d3332203d3e20313331363432.roa (hash: jG91Krj1u+UI6h33hZ+oxVLH/EozDMQyfvuXwZfwC/k=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.crl rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 11:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5c:29:70:d1:e0:a1:46:05:9c:ec:48:d8:d0:55:2f:25:46:37:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD Validity Not Before: Jun 30 09:33:36 2026 GMT Not After : Jul 1 11:57:36 2026 GMT Subject: CN=1CABF3862F1BA8052B50EA97680B9BB2064BE7A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:99:7c:a1:4a:ce:f9:74:51:30:76:37:20: 12:4f:04:ea:5e:5f:62:a3:4f:08:55:60:64:d7:69: 4f:ab:6c:c6:1d:36:ed:f7:c5:fe:e0:cc:2e:79:dc: 9b:95:03:44:07:7b:5b:17:2f:f9:5e:32:74:ad:a4: 50:a9:7a:47:82:2c:be:9e:90:8c:7a:53:60:67:02: 8f:92:ec:e7:13:1a:2e:3e:1d:d4:49:aa:8e:0a:a4: 0f:b0:29:06:1b:8c:b6:24:d2:09:8c:a7:07:b9:9c: dd:51:e3:48:03:e0:ff:16:48:1c:38:40:94:90:2e: 5c:0f:f3:5b:e1:2d:d0:71:77:68:a6:1e:ce:51:7c: fa:cc:ff:78:c7:fb:3e:06:d8:c6:1c:0d:9e:1a:b9: 15:0d:e1:f9:e4:91:db:5b:69:51:18:10:68:b7:39: 17:f5:a5:ae:4b:4e:6a:21:21:18:12:f0:1c:90:c2: 6e:31:d1:3a:d9:fc:18:90:60:2a:7f:48:11:ac:2f: e1:b9:f1:54:23:08:44:f5:15:05:ba:6a:ce:d6:92: 80:38:c1:c1:06:9b:b6:86:b5:db:c0:36:a1:68:df: bb:64:68:f1:eb:3c:ff:57:74:c7:79:89:a2:92:e6: be:6a:8e:1f:32:95:15:aa:a2:60:cd:82:f4:0b:3d: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AB:F3:86:2F:1B:A8:05:2B:50:EA:97:68:0B:9B:B2:06:4B:E7:A1 X509v3 Authority Key Identifier: keyid:08:4F:CA:ED:B5:0B:B0:39:5F:4B:B9:1B:91:C0:F2:E4:E8:4C:B7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:b9:4f:e5:42:90:5b:14:df:a6:79:43:98:56:a4:6d:ec:0a: 67:f5:7c:f3:5c:dc:5c:03:b8:3b:8a:0a:4b:01:b9:ba:25:84: a7:9f:b8:de:8d:92:e0:0f:be:03:2a:84:ce:a8:56:a5:00:af: 8b:8d:38:36:71:1b:20:a6:62:0c:2a:52:77:3e:5a:c4:64:be: 96:96:ea:33:47:c2:5e:11:c7:3a:fd:e9:f2:e7:fe:d2:11:e8: c6:25:65:9f:89:cf:17:5f:9d:82:70:56:4d:85:b3:4a:48:65: 5f:57:92:1f:f7:76:c9:3b:5d:2e:49:c9:99:2e:57:5e:75:ca: 48:e6:e7:23:22:ec:29:d9:c6:75:21:94:52:4c:dd:a5:7a:9a: 7c:57:e6:1f:cf:d2:62:dd:8d:ae:2d:47:f9:29:0b:a3:ad:fc: 5a:84:dc:cd:84:d6:d5:7c:0b:47:c9:09:db:11:a2:c6:da:49: ba:f2:18:a2:1f:97:cb:58:4a:a0:62:c0:18:33:15:4c:8d:8b: c2:f1:22:98:52:91:99:5e:51:e8:48:db:ef:80:44:46:6c:f0: 85:52:64:c5:7c:ac:41:8a:2a:04:7c:0c:68:c1:7c:f9:cb:75: 9e:9a:0e:05:7d:27:a0:6e:6e:29:3f:00:e8:ff:60:a7:fd:fc: 79:2a:62:1e -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUA1wpcNHgoUYFnOxI2NBVLyVGN8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0RkNBRURCNTBCQjAzOTVGNEJCOTFCOTFDMEYyRTRF ODRDQjdCRDAeFw0yNjA2MzAwOTMzMzZaFw0yNjA3MDExMTU3MzZaMDMxMTAvBgNV BAMTKDFDQUJGMzg2MkYxQkE4MDUyQjUwRUE5NzY4MEI5QkIyMDY0QkU3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqJl8oUrO+XRRMHY3IBJPBOpe X2KjTwhVYGTXaU+rbMYdNu33xf7gzC553JuVA0QHe1sXL/leMnStpFCpekeCLL6e kIx6U2BnAo+S7OcTGi4+HdRJqo4KpA+wKQYbjLYk0gmMpwe5nN1R40gD4P8WSBw4 QJSQLlwP81vhLdBxd2imHs5RfPrM/3jH+z4G2MYcDZ4auRUN4fnkkdtbaVEYEGi3 ORf1pa5LTmohIRgS8ByQwm4x0TrZ/BiQYCp/SBGsL+G58VQjCET1FQW6as7WkoA4 wcEGm7aGtdvANqFo37tkaPHrPP9XdMd5iaKS5r5qjh8ylRWqomDNgvQLPX+JAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUHKvzhi8bqAUrUOqXaAubsgZL56EwHwYDVR0j BBgwFoAUCE/K7bULsDlfS7kbkcDy5OhMt70wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FJV0VJ LzAvMDg0RkNBRURCNTBCQjAzOTVGNEJCOTFCOTFDMEYyRTRFODRDQjdCRC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8wODRGQ0FFREI1MEJCMDM5NUY0QkI5MUI5MUMw RjJFNEU4NENCN0JELmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FJV0VJLzAvMDg0RkNBRURCNTBC QjAzOTVGNEJCOTFCOTFDMEYyRTRFODRDQjdCRC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMi5T+VCkFsU 36Z5Q5hWpG3sCmf1fPNc3FwDuDuKCksBubolhKefuN6NkuAPvgMqhM6oVqUAr4uN ODZxGyCmYgwqUnc+WsRkvpaW6jNHwl4Rxzr96fLn/tIR6MYlZZ+JzxdfnYJwVk2F s0pIZV9Xkh/3dsk7XS5JyZkuV151ykjm5yMi7CnZxnUhlFJM3aV6mnxX5h/P0mLd ja4tR/kpC6Ot/FqE3M2E1tV8C0fJCdsRosbaSbryGKIfl8tYSqBiwBgzFUyNi8Lx IphSkZleUehI2++AREZs8IVSZMV8rEGKKgR8DGjBfPnLdZ6aDgV9J6Bubik/AOj/ YKf9/HkqYh4= -----END CERTIFICATE-----Generated at Tue Jun 30 19:09:53 2026 by rpki-client