$ rpki-client -vvf rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft File: 1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft (raw, json) Hash identifier: Jf1OgqTwW9gfP6Zb5+94Po4Du2nOR9TCSqFb57Bpq/o= Subject key identifier: 47:47:09:0C:EB:D8:EA:D3:FF:08:F9:DA:1F:DD:1E:E3:96:1B:7C:CF Authority key identifier: 1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94 Certificate issuer: /CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694 Certificate serial: 43B9145EF0E1E147FF5D5B1E6B86565740023B30 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft Manifest number: 07 Signing time: Wed 13 May 2026 06:12:16 +0000 Manifest this update: Wed 13 May 2026 06:07:16 +0000 Manifest next update: Thu 14 May 2026 07:45:16 +0000 Files and hashes: 1: 3130332e3133342e3132302e302f32322d3234203d3e20313331363435.roa (hash: 5YtP4S/SL4qMiPP6SO95f1XxJCbpmMediEjct/tVRs0=) 2: 3230322e3134382e3230382e302f32332d3234203d3e20313331363435.roa (hash: G2OLOqYyK8DpocEbNmGZNRoqNscoouK3uCmhiiODaHA=) 3: 1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl (hash: eS41XOQm4PNRbKyLX8l5UFlpiJNDcTVmZbPVuzTh1s4=) 4: 323430343a363363303a3a2f33322d3438203d3e20313331363435.roa (hash: IKYmTXcs/sxSdeZ8soPiKcin23Vsg+QkfcjhBMnj+D8=) 5: 3230322e3132332e3132362e302f32332d3234203d3e20313331363435.roa (hash: X5pJ+pB5W852b19TEIzFlXBOz+DsW3q2s1s2BmWLs78=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b9:14:5e:f0:e1:e1:47:ff:5d:5b:1e:6b:86:56:57:40:02:3b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694 Validity Not Before: May 13 06:07:16 2026 GMT Not After : May 14 07:45:16 2026 GMT Subject: CN=4747090CEBD8EAD3FF08F9DA1FDD1EE3961B7CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:3e:10:7c:e5:a6:2f:1d:a4:d3:16:67:ac: d8:a1:d0:04:e8:2d:f9:da:b9:94:16:cc:85:fd:d4: a1:53:85:1f:eb:e2:0f:cb:62:33:7a:92:79:d7:26: 57:b0:90:73:76:5e:2b:a4:19:4e:18:6d:37:d4:43: 4c:52:6d:43:b6:ba:4f:92:48:33:fa:26:a8:a3:21: 62:0a:03:13:86:c2:0f:49:a8:ad:88:24:0d:5f:2f: 55:67:31:b8:0a:00:31:9d:6e:67:07:57:af:7c:f3: f6:bb:34:9f:d4:ee:85:73:a6:b0:9f:17:3a:9c:ff: bc:4c:da:28:de:25:17:61:a2:f6:7f:c8:76:67:36: 92:e8:a1:a5:14:90:f9:78:33:eb:98:57:71:f7:56: b3:ef:89:fc:c0:20:8d:bc:2e:06:9a:1c:fc:8d:6b: 51:48:8b:8b:61:6b:c3:c2:8c:51:a5:45:f2:2f:3d: 83:01:e3:31:bb:0a:8c:6b:13:c8:e9:7d:5d:f9:02: fe:a7:7f:e3:67:f7:f6:b7:b2:22:12:12:95:86:ec: aa:d4:1a:df:0b:55:9c:52:eb:6f:1c:11:ad:2e:da: b0:b5:b5:13:b6:ed:a9:86:66:5b:f2:94:a5:37:af: 40:f6:77:46:e6:51:1d:75:e9:87:09:8d:ac:6c:5b: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:47:09:0C:EB:D8:EA:D3:FF:08:F9:DA:1F:DD:1E:E3:96:1B:7C:CF X509v3 Authority Key Identifier: keyid:1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c7:a0:05:e1:11:00:a4:d1:3d:df:49:83:54:17:b4:df:8d: ef:7a:75:fb:a3:ac:99:d4:e6:60:81:11:22:df:d3:30:94:34: 06:46:9a:2b:db:ad:96:76:06:09:65:64:99:a6:2c:bc:8b:09: d5:f7:ef:9b:f2:fd:da:22:68:7b:67:44:bc:be:cd:a8:c2:6a: 05:a1:f5:99:e7:cf:4a:71:5f:84:d0:74:2e:ce:4c:81:ee:78: a3:51:b5:41:7d:b6:52:53:33:3c:72:30:8e:0e:65:6b:04:cf: 98:b1:6b:8c:dc:0f:a7:64:75:09:74:fc:28:19:40:3b:77:05: c8:5f:02:bc:53:86:de:57:f6:1a:37:c6:62:05:74:74:44:7b: cf:be:ff:d3:76:29:04:e7:4c:c6:db:40:18:8f:3a:2f:2b:a7: 2c:8c:4d:e1:d3:4d:35:44:2f:35:65:3a:5f:0d:2b:ef:55:1f: 7e:b4:08:f6:30:25:ad:44:a5:14:93:c7:bb:8b:a2:e6:f5:ba: 05:9d:34:12:4f:84:cf:d5:f5:39:91:4b:54:ac:d2:ea:dd:16: 2c:5a:d9:3b:08:40:89:c2:b9:62:2d:a8:2f:77:9e:46:c9:a1: bc:74:22:ac:92:cc:31:41:3a:06:0a:5d:be:25:a2:35:e4:24: 77:bd:ac:cf -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUQ7kUXvDh4Uf/XVsea4ZWV0ACOzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNDE5NzczRDFFMTVFRUZENkNBMkJCNEU1MERCRUY3 NEFCOTY5NDAeFw0yNjA1MTMwNjA3MTZaFw0yNjA1MTQwNzQ1MTZaMDMxMTAvBgNV BAMTKDQ3NDcwOTBDRUJEOEVBRDNGRjA4RjlEQTFGREQxRUUzOTYxQjdDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd1T4QfOWmLx2k0xZnrNih0ATo LfnauZQWzIX91KFThR/r4g/LYjN6knnXJlewkHN2XiukGU4YbTfUQ0xSbUO2uk+S SDP6JqijIWIKAxOGwg9JqK2IJA1fL1VnMbgKADGdbmcHV6988/a7NJ/U7oVzprCf Fzqc/7xM2ijeJRdhovZ/yHZnNpLooaUUkPl4M+uYV3H3VrPvifzAII28LgaaHPyN a1FIi4tha8PCjFGlRfIvPYMB4zG7CoxrE8jpfV35Av6nf+Nn9/a3siISEpWG7KrU Gt8LVZxS628cEa0u2rC1tRO27amGZlvylKU3r0D2d0bmUR116YcJjaxsWw+vAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUR0cJDOvY6tP/CPnaH90e45YbfM8wHwYDVR0j BBgwFoAUG/QZdz0eFe79bKK7TlDb73SrlpQwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tDTy8w LzFCRjQxOTc3M0QxRTE1RUVGRDZDQTJCQjRFNTBEQkVGNzRBQjk2OTQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMUJGNDE5NzczRDFFMTVFRUZENkNBMkJCNEU1MERC RUY3NEFCOTY5NC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tLQ08vMC8xQkY0MTk3NzNEMUUxNUVF RkQ2Q0EyQkI0RTUwREJFRjc0QUI5Njk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecegBeERAKTRPd9J g1QXtN+N73p1+6OsmdTmYIERIt/TMJQ0BkaaK9utlnYGCWVkmaYsvIsJ1ffvm/L9 2iJoe2dEvL7NqMJqBaH1mefPSnFfhNB0Ls5Mge54o1G1QX22UlMzPHIwjg5lawTP mLFrjNwPp2R1CXT8KBlAO3cFyF8CvFOG3lf2GjfGYgV0dER7z77/03YpBOdMxttA GI86LyunLIxN4dNNNUQvNWU6Xw0r71UffrQI9jAlrUSlFJPHu4ui5vW6BZ00Ek+E z9X1OZFLVKzS6t0WLFrZOwhAicK5Yi2oL3eeRsmhvHQirJLMMUE6BgpdviWiNeQk d72szw== -----END CERTIFICATE-----Generated at Wed May 13 20:34:01 2026 by rpki-client