$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft File: 4F029ED27C82844F72C10999E3E77841D888E8A5.mft (raw, json) Hash identifier: r/G0Of/skuSZ0x2gWWVQIE7RnPDsDoSHRcmCrX5fvSI= Subject key identifier: C2:DD:42:21:10:B0:8F:75:18:A2:97:33:07:72:85:44:BC:78:DD:0C Authority key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 Certificate issuer: /CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Certificate serial: 70541FDA6E1EE56D77ADEB199CBE1DDEFC629851 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft Manifest number: 47 Signing time: Tue 30 Jun 2026 08:28:24 +0000 Manifest this update: Tue 30 Jun 2026 08:23:24 +0000 Manifest next update: Wed 01 Jul 2026 11:15:24 +0000 Files and hashes: 1: 3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa (hash: SV9WMKCo6lqqmo4TlONcJhx+nWmHLOoLn96eGrQjUkk=) 2: 3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa (hash: mrGHrLU6IhLiSFGZj4xNfph3sl5DRFLwfN+J+P0jaGY=) 3: 3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa (hash: UO7gvVHXWOf9xNngHpaJcF4QjHFiPZ4bxN2SGXLKeFI=) 4: 4F029ED27C82844F72C10999E3E77841D888E8A5.crl (hash: 8BnN9yCHdU98e3TL5xFXPsvgiDy0nG3EJivV3sTZWDc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 11:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:54:1f:da:6e:1e:e5:6d:77:ad:eb:19:9c:be:1d:de:fc:62:98:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Validity Not Before: Jun 30 08:23:24 2026 GMT Not After : Jul 1 11:15:24 2026 GMT Subject: CN=C2DD422110B08F7518A2973307728544BC78DD0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:e6:45:ce:23:32:29:cb:d2:9e:66:70:68: 47:90:32:31:f7:2a:53:b6:59:da:28:1e:f7:7b:f2: da:8a:07:f9:62:d4:a2:0a:be:d2:09:66:7e:62:8b: 7d:2c:94:24:5c:54:23:cd:6d:80:67:11:6d:a7:8d: 7e:29:88:13:09:5e:6a:20:86:d4:89:05:1d:b1:b3: 5f:5d:58:48:32:6b:40:83:67:33:5c:b7:0d:0f:f2: 84:96:ee:a4:be:a6:4e:03:ab:ee:62:8c:f6:c4:69: 83:e6:00:44:4a:8c:0b:fc:df:c2:1e:a4:f7:83:68: 86:10:9d:10:5f:d0:b7:c7:18:a3:14:25:23:81:4e: b4:5a:99:20:57:31:74:d6:81:44:24:36:91:0a:5f: 3c:db:d7:10:08:3a:76:8e:43:0d:df:3e:8f:dd:7e: 2d:4b:53:06:cd:f3:b5:6d:46:c2:32:5c:df:de:6d: 10:a0:15:02:26:87:51:39:d0:8b:88:45:aa:c3:8b: 59:23:e9:55:12:10:2a:23:a8:b7:00:fb:d7:6e:b7: 21:33:cc:a1:00:da:37:4c:d7:3d:32:51:07:67:92: 91:a3:ae:a8:fa:cc:87:d6:05:77:d4:55:26:68:3c: 3c:77:e5:b8:69:99:47:9f:0e:64:35:13:73:f9:7d: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DD:42:21:10:B0:8F:75:18:A2:97:33:07:72:85:44:BC:78:DD:0C X509v3 Authority Key Identifier: keyid:4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:2a:6c:2f:2b:a9:99:e1:74:86:38:06:43:fb:27:46:25:06: 50:4e:05:6b:29:38:f8:3f:70:46:e5:85:30:70:03:a9:b6:d3: 3f:32:a8:8f:5a:a3:45:43:8a:1c:41:0c:4f:8f:c6:73:ae:00: 59:4e:9d:46:d6:5c:29:40:27:e5:8b:b6:ac:da:0f:e5:b4:86: 8d:34:e6:4d:62:82:2c:08:b2:55:61:8e:95:2a:02:5d:da:8c: 53:60:69:d9:19:4c:77:56:f3:b9:b7:ad:b8:58:3d:2c:2a:a4: 26:6a:c9:1c:f2:a8:4a:bd:97:b8:c4:73:7e:ee:af:27:c7:f7: 02:17:ed:5f:25:c2:c3:66:13:1f:5c:7d:ed:8a:11:6d:fd:50: 14:06:eb:9b:53:b2:67:2e:a9:65:be:45:70:8b:e2:e7:ee:e0: ee:c6:2f:69:7e:70:af:7a:1a:d2:3e:b5:f4:98:47:71:a1:8d: f4:59:e0:0c:92:6c:d6:96:92:a6:91:f7:13:33:e5:d3:a1:22: f0:c3:dc:17:22:d8:26:e2:d9:e7:a5:26:ca:b9:bf:9a:c8:ab: 58:a6:35:84:0d:54:e1:ca:07:ef:ef:89:e1:dc:00:16:09:64: 47:74:a8:87:bf:d9:a5:d4:c6:b2:10:28:c3:87:f8:ee:89:f9: fb:27:67:86 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUcFQf2m4e5W13resZnL4d3vximFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjlFRDI3QzgyODQ0RjcyQzEwOTk5RTNFNzc4NDFE ODg4RThBNTAeFw0yNjA2MzAwODIzMjRaFw0yNjA3MDExMTE1MjRaMDMxMTAvBgNV BAMTKEMyREQ0MjIxMTBCMDhGNzUxOEEyOTczMzA3NzI4NTQ0QkM3OEREMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe3uZFziMyKcvSnmZwaEeQMjH3 KlO2WdooHvd78tqKB/li1KIKvtIJZn5ii30slCRcVCPNbYBnEW2njX4piBMJXmog htSJBR2xs19dWEgya0CDZzNctw0P8oSW7qS+pk4Dq+5ijPbEaYPmAERKjAv838Ie pPeDaIYQnRBf0LfHGKMUJSOBTrRamSBXMXTWgUQkNpEKXzzb1xAIOnaOQw3fPo/d fi1LUwbN87VtRsIyXN/ebRCgFQImh1E50IuIRarDi1kj6VUSECojqLcA+9dutyEz zKEA2jdM1z0yUQdnkpGjrqj6zIfWBXfUVSZoPDx35bhpmUefDmQ1E3P5fRILAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUwt1CIRCwj3UYopczB3KFRLx43QwwHwYDVR0j BBgwFoAUTwKe0nyChE9ywQmZ4+d4QdiI6KUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v MS80RjAyOUVEMjdDODI4NDRGNzJDMTA5OTlFM0U3Nzg0MUQ4ODhFOEE1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzRGMDI5RUQyN0M4Mjg0NEY3MkMxMDk5OUUzRTc3 ODQxRDg4OEU4QTUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8xLzRGMDI5RUQyN0M4Mjg0 NEY3MkMxMDk5OUUzRTc3ODQxRDg4OEU4QTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACKmwvK6mZ4XSG OAZD+ydGJQZQTgVrKTj4P3BG5YUwcAOpttM/MqiPWqNFQ4ocQQxPj8ZzrgBZTp1G 1lwpQCfli7as2g/ltIaNNOZNYoIsCLJVYY6VKgJd2oxTYGnZGUx3VvO5t624WD0s KqQmaskc8qhKvZe4xHN+7q8nx/cCF+1fJcLDZhMfXH3tihFt/VAUBuubU7JnLqll vkVwi+Ln7uDuxi9pfnCvehrSPrX0mEdxoY30WeAMkmzWlpKmkfcTM+XToSLww9wX Itgm4tnnpSbKub+ayKtYpjWEDVThygfv74nh3AAWCWRHdKiHv9ml1MayECjDh/ju ifn7J2eG -----END CERTIFICATE-----Generated at Tue Jun 30 13:11:35 2026 by rpki-client