$ rpki-client -vvf rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft File: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft (raw, json) Hash identifier: CGpjIxGq2SGXTsOmiiM04kyvA0seoSx4Jd0L5U5h2yw= Subject key identifier: 4A:F2:BD:28:0A:F8:47:C5:9A:32:8C:2F:8B:34:13:4C:6B:55:22:76 Authority key identifier: 06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF Certificate issuer: /CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF Certificate serial: 592C5C8EA761E5350CF904300286FE02CD43249F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft Manifest number: 18 Signing time: Wed 27 May 2026 18:08:18 +0000 Manifest this update: Wed 27 May 2026 18:03:18 +0000 Manifest next update: Thu 28 May 2026 19:39:18 +0000 Files and hashes: 1: 3135312e3135382e32362e302f32332d3234203d3e203138303434.roa (hash: QIY0glYph3b8eEZZ9jaZ9XB3vhAySFJ+wbIUL9Lsf2o=) 2: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl (hash: 78FwDE45S/3801cW3Sn4gSHEeJl+qHatKMQ49bUZ1QU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 19:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2c:5c:8e:a7:61:e5:35:0c:f9:04:30:02:86:fe:02:cd:43:24:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF Validity Not Before: May 27 18:03:18 2026 GMT Not After : May 28 19:39:18 2026 GMT Subject: CN=4AF2BD280AF847C59A328C2F8B34134C6B552276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:f4:ba:1f:7e:a3:94:1c:c2:e6:76:dc:eb: 02:15:fa:5e:46:27:7f:d1:76:79:f0:c1:d2:8d:49: 77:11:fd:dc:1e:a2:9e:99:62:2b:d6:23:d7:b8:ba: 87:dd:7d:2a:ef:d8:74:fa:b3:e8:5a:69:0f:ac:0b: ac:64:8b:a6:70:41:bb:39:74:3c:c7:1a:33:a4:f3: 8f:29:e1:13:51:37:f2:68:e8:fe:b5:fd:22:bd:00: a6:80:99:de:52:00:45:e2:27:9d:f8:bd:b5:80:10: 9f:dd:77:a1:e5:b0:44:32:01:1c:d9:97:e1:a0:3f: fd:d4:b6:fd:1a:05:5c:f8:47:14:e0:1e:82:8c:c6: ee:3f:20:fc:f9:c8:a3:7f:08:22:a1:7e:4e:79:f2: e0:f8:b5:ac:fd:ab:5f:da:0b:ec:77:fa:13:41:c4: a6:52:bb:9c:a5:e4:b7:11:a3:98:db:ee:5c:3a:f4: 98:a2:9a:c3:ba:18:9b:d8:c6:49:17:53:80:c1:bb: 21:0e:ae:37:58:c1:29:36:e6:27:69:cb:be:51:bb: c5:f1:3f:ea:da:23:39:d1:98:92:a1:40:27:df:65: c8:3e:5f:56:7d:4e:f9:c1:4a:ef:f8:c5:b9:0f:37: 96:95:6c:ea:7b:6e:5f:ff:f5:51:86:05:66:26:d1: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F2:BD:28:0A:F8:47:C5:9A:32:8C:2F:8B:34:13:4C:6B:55:22:76 X509v3 Authority Key Identifier: keyid:06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e6:ee:ab:74:09:1b:01:1f:c0:8c:24:1b:b1:ac:32:f0:1f: f8:9b:cb:01:67:aa:18:2e:0e:ef:37:30:3b:c1:98:94:f6:11: 7b:fb:85:b2:f5:2f:6a:80:ae:59:61:c4:85:bd:75:88:42:c1: c7:d4:31:6e:2a:bd:e5:c4:88:06:7c:99:dc:ae:11:8b:74:69: 70:c4:31:14:8d:b7:e3:a9:b5:32:e9:4e:f4:75:45:cc:df:b7: 10:d5:ce:d3:c1:34:6a:5e:db:84:ed:dc:1b:83:d2:1e:d1:36: 0a:04:af:84:a1:3d:f8:d4:0c:c7:e5:2d:bf:69:8d:12:be:ff: 95:bf:c2:13:15:67:16:84:1b:f0:77:20:73:2b:0d:9c:41:f0: 8a:20:ef:10:2a:b5:4d:27:e7:9b:e8:70:64:eb:94:bf:0f:8f: 9e:06:7d:ef:77:a5:66:c8:bc:97:0c:26:18:64:e9:eb:5f:a0: e2:a5:7d:b1:4e:c8:88:1d:d8:3b:1f:54:b5:af:50:d0:9e:f5: 80:34:b9:ec:29:0b:dd:70:98:53:94:72:4e:88:51:31:2a:d8: ff:18:f0:67:f7:b9:66:fe:35:02:c6:9d:f2:46:0d:01:14:78: 32:eb:b4:e1:0a:a8:a8:a7:35:38:f4:93:3a:94:45:26:04:0c: ed:ac:ea:13 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUWSxcjqdh5TUM+QQwAob+As1DJJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxRTYwRTlGREE1QTI1RURDOTYxNTcyQTRDQkE4QzUz OUQ3ODBBRjAeFw0yNjA1MjcxODAzMThaFw0yNjA1MjgxOTM5MThaMDMxMTAvBgNV BAMTKDRBRjJCRDI4MEFGODQ3QzU5QTMyOEMyRjhCMzQxMzRDNkI1NTIyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKn/S6H36jlBzC5nbc6wIV+l5G J3/RdnnwwdKNSXcR/dweop6ZYivWI9e4uofdfSrv2HT6s+haaQ+sC6xki6ZwQbs5 dDzHGjOk848p4RNRN/Jo6P61/SK9AKaAmd5SAEXiJ534vbWAEJ/dd6HlsEQyARzZ l+GgP/3Utv0aBVz4RxTgHoKMxu4/IPz5yKN/CCKhfk558uD4taz9q1/aC+x3+hNB xKZSu5yl5LcRo5jb7lw69JiimsO6GJvYxkkXU4DBuyEOrjdYwSk25idpy75Ru8Xx P+raIznRmJKhQCffZcg+X1Z9TvnBSu/4xbkPN5aVbOp7bl//9VGGBWYm0b9VAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUSvK9KAr4R8WaMowvizQTTGtVInYwHwYDVR0j BBgwFoAUBh5g6f2lol7clhVypMuoxTnXgK8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FOUkFZ Uy8xLzA2MUU2MEU5RkRBNUEyNUVEQzk2MTU3MkE0Q0JBOEM1MzlENzgwQUYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzMvMDYxRTYwRTlGREE1QTI1RURDOTYxNTcyQTRD QkE4QzUzOUQ3ODBBRi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tBTlJBWVMvMS8wNjFFNjBFOUZE QTVBMjVFREM5NjE1NzJBNENCQThDNTM5RDc4MEFGLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIObuq3QJ GwEfwIwkG7GsMvAf+JvLAWeqGC4O7zcwO8GYlPYRe/uFsvUvaoCuWWHEhb11iELB x9Qxbiq95cSIBnyZ3K4Ri3RpcMQxFI2346m1MulO9HVFzN+3ENXO08E0al7bhO3c G4PSHtE2CgSvhKE9+NQMx+Utv2mNEr7/lb/CExVnFoQb8HcgcysNnEHwiiDvECq1 TSfnm+hwZOuUvw+PngZ973elZsi8lwwmGGTp61+g4qV9sU7IiB3YOx9Uta9Q0J71 gDS57CkL3XCYU5RyTohRMSrY/xjwZ/e5Zv41Asad8kYNARR4Muu04QqoqKc1OPST OpRFJgQM7azqEw== -----END CERTIFICATE-----Generated at Thu May 28 07:17:03 2026 by rpki-client