$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft File: 4F029ED27C82844F72C10999E3E77841D888E8A5.mft (raw, json) Hash identifier: odGoWH3+TNScj2To3MenkscwadnFAn74v48CLJsPuqo= Subject key identifier: DC:A3:B8:C5:EA:A1:75:9A:B5:4D:D1:F4:33:9B:53:22:28:60:60:9B Authority key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 Certificate issuer: /CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Certificate serial: 118FB056725B12F3086145BB35CB2163F4A07D5A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft Manifest number: 84 Signing time: Sat 15 Aug 2026 07:14:52 +0000 Manifest this update: Sat 15 Aug 2026 07:09:52 +0000 Manifest next update: Sun 16 Aug 2026 10:13:52 +0000 Files and hashes: 1: 3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa (hash: UO7gvVHXWOf9xNngHpaJcF4QjHFiPZ4bxN2SGXLKeFI=) 2: 4F029ED27C82844F72C10999E3E77841D888E8A5.crl (hash: KhZUInyAO91gxeZY6Ho1XnmC1QxOUs2y/ustxBuZ08Y=) 3: 3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa (hash: SV9WMKCo6lqqmo4TlONcJhx+nWmHLOoLn96eGrQjUkk=) 4: 3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa (hash: mrGHrLU6IhLiSFGZj4xNfph3sl5DRFLwfN+J+P0jaGY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 02:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8f:b0:56:72:5b:12:f3:08:61:45:bb:35:cb:21:63:f4:a0:7d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Validity Not Before: Aug 15 07:09:52 2026 GMT Not After : Aug 16 10:13:52 2026 GMT Subject: CN=DCA3B8C5EAA1759AB54DD1F4339B53222860609B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:3b:d5:5d:c3:9b:fa:59:8a:2a:95:7a:f0: b9:eb:f5:e0:62:63:d0:b5:48:70:ac:cd:8f:1f:23: 70:13:8a:d5:f5:41:69:1e:9b:d3:12:1f:5f:3a:d2: 58:90:90:38:28:41:f0:25:14:9f:bd:62:f3:21:48: 25:73:9d:10:53:98:1a:e5:45:72:c6:fc:38:bf:54: 9b:c3:ad:89:d5:dd:32:9a:39:3a:ea:57:12:38:76: 7f:76:71:e1:87:05:66:bf:f9:e1:ab:fc:f3:02:3d: f2:cd:39:d3:5a:bf:ca:63:b9:cd:70:2c:a5:b0:60: 81:2c:85:2a:d8:9f:da:66:f9:65:64:07:c1:89:ce: 86:eb:2c:f6:1a:01:d6:9c:ce:f0:78:2d:02:38:c9: 12:0d:b8:3c:aa:df:2c:81:de:df:96:67:73:17:0a: bc:72:86:e9:ee:67:93:f5:cd:5d:11:4a:0a:b6:7e: a5:8a:d6:33:c1:a6:fb:b1:00:d7:fd:1f:b8:ec:b9: 60:52:e5:57:51:d3:f9:b7:7f:2b:b2:dc:80:3f:bf: 28:ea:e2:e3:81:a3:ad:31:04:2c:76:dd:09:27:05: 48:75:e5:b7:24:15:bc:3d:59:e7:11:38:76:c1:12: 51:80:31:bb:f2:ae:94:e8:4d:44:6c:68:f1:95:35: 91:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A3:B8:C5:EA:A1:75:9A:B5:4D:D1:F4:33:9B:53:22:28:60:60:9B X509v3 Authority Key Identifier: keyid:4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f2:62:94:87:84:ec:a3:4a:3d:38:cd:be:42:f9:8d:12:e0: 50:ff:19:fc:28:8e:f6:eb:51:e0:57:7d:88:ce:e7:09:32:bd: fb:0f:18:9b:dc:53:22:06:a4:d3:11:7b:c1:8c:8f:ee:9a:7b: 03:9c:c8:d7:f7:9a:c8:00:cf:97:63:80:f2:bb:d8:5f:7a:58: 27:40:73:3c:b9:0e:7c:35:0c:e2:97:b1:00:c5:fc:3f:51:00: 61:c3:dd:b5:c7:67:3a:83:7c:36:4d:a7:9e:05:a7:19:1e:be: 18:71:25:a7:ac:35:e8:cb:af:6a:15:e1:56:8e:55:8a:42:06: 3b:fa:f4:08:c6:a6:56:dc:05:b6:f8:f9:93:8d:e9:5c:e4:63: 86:33:49:06:57:ef:5f:6f:d8:ed:ee:35:e5:33:49:68:3a:94: e5:d1:a2:43:88:5b:c7:b5:13:c9:5d:83:4e:c8:4f:72:2a:d8: c8:02:64:dc:77:5b:50:a6:6e:fd:51:a1:eb:1b:f6:50:06:38: 08:60:3e:7b:ca:44:72:6e:d9:bd:f8:e7:8b:9a:5d:a5:a8:4d: 5d:6b:dc:a7:04:2c:9d:5a:7b:89:39:9a:0f:42:aa:ff:35:7c: 3c:c2:5c:6f:20:85:65:5c:e9:2f:f2:a1:a1:15:ff:6e:9e:34: 64:3f:c9:78 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUEY+wVnJbEvMIYUW7NcshY/SgfVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjlFRDI3QzgyODQ0RjcyQzEwOTk5RTNFNzc4NDFE ODg4RThBNTAeFw0yNjA4MTUwNzA5NTJaFw0yNjA4MTYxMDEzNTJaMDMxMTAvBgNV BAMTKERDQTNCOEM1RUFBMTc1OUFCNTRERDFGNDMzOUI1MzIyMjg2MDYwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSNTvVXcOb+lmKKpV68Lnr9eBi Y9C1SHCszY8fI3ATitX1QWkem9MSH1860liQkDgoQfAlFJ+9YvMhSCVznRBTmBrl RXLG/Di/VJvDrYnV3TKaOTrqVxI4dn92ceGHBWa/+eGr/PMCPfLNOdNav8pjuc1w LKWwYIEshSrYn9pm+WVkB8GJzobrLPYaAdaczvB4LQI4yRINuDyq3yyB3t+WZ3MX CrxyhunuZ5P1zV0RSgq2fqWK1jPBpvuxANf9H7jsuWBS5VdR0/m3fyuy3IA/vyjq 4uOBo60xBCx23QknBUh15bckFbw9WecROHbBElGAMbvyrpToTURsaPGVNZHPAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU3KO4xeqhdZq1TdH0M5tTIihgYJswHwYDVR0j BBgwFoAUTwKe0nyChE9ywQmZ4+d4QdiI6KUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v MS80RjAyOUVEMjdDODI4NDRGNzJDMTA5OTlFM0U3Nzg0MUQ4ODhFOEE1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzRGMDI5RUQyN0M4Mjg0NEY3MkMxMDk5OUUzRTc3 ODQxRDg4OEU4QTUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8xLzRGMDI5RUQyN0M4Mjg0 NEY3MkMxMDk5OUUzRTc3ODQxRDg4OEU4QTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBY8mKUh4Tso0o9 OM2+QvmNEuBQ/xn8KI7261HgV32IzucJMr37Dxib3FMiBqTTEXvBjI/umnsDnMjX 95rIAM+XY4Dyu9hfelgnQHM8uQ58NQzil7EAxfw/UQBhw921x2c6g3w2TaeeBacZ Hr4YcSWnrDXoy69qFeFWjlWKQgY7+vQIxqZW3AW2+PmTjelc5GOGM0kGV+9fb9jt 7jXlM0loOpTl0aJDiFvHtRPJXYNOyE9yKtjIAmTcd1tQpm79UaHrG/ZQBjgIYD57 ykRybtm9+OeLml2lqE1da9ynBCydWnuJOZoPQqr/NXw8wlxvIIVlXOkv8qGhFf9u njRkP8l4 -----END CERTIFICATE-----Generated at Sat Aug 15 10:24:49 2026 by rpki-client