$ rpki-client -vvf rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft File: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft (raw, json) Hash identifier: qevM7CL7tX16txb11HvGmNq/5AuxORGDHM+qvEBR0Xo= Subject key identifier: 54:17:08:24:AA:D5:FE:FB:3F:C1:16:0E:3C:F9:5A:C2:E9:B6:29:EC Authority key identifier: 70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D Certificate issuer: /CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D Certificate serial: 79F2CE1DBC8E1F5972D13B8BD97C46155B01D760 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft Manifest number: 06 Signing time: Wed 13 May 2026 09:37:52 +0000 Manifest this update: Wed 13 May 2026 09:32:52 +0000 Manifest next update: Thu 14 May 2026 12:29:52 +0000 Files and hashes: 1: 3232332e32362e31342e302f32332d3234203d3e203231383539.roa (hash: BY1QUUCw56EnMeP3kjSRx3onJmeURrOTVkZdX+EuukE=) 2: 3130332e3137352e3139342e302f32332d3234203d3e2037343833.roa (hash: 5l2+J4Wo84X5+Yl5nqEN6UeiO9PszuY1Tb4AzIBJh3U=) 3: 3232332e32362e31342e302f32332d3234203d3e2037343833.roa (hash: EeYUqixDoPSEeN8sw/ZeQjCxnACjgv6gNGFQp+CTsoM=) 4: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl (hash: ccSSYy9uLwKcCPO9D9OQC61uMXMOljoEhZd0tQHzpHY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f2:ce:1d:bc:8e:1f:59:72:d1:3b:8b:d9:7c:46:15:5b:01:d7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D Validity Not Before: May 13 09:32:52 2026 GMT Not After : May 14 12:29:52 2026 GMT Subject: CN=54170824AAD5FEFB3FC1160E3CF95AC2E9B629EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:c9:bb:9e:9e:d4:d1:cf:2b:96:f4:84:81: f0:37:90:bd:e4:9c:1a:56:27:7b:d1:dd:25:66:14: 14:58:c5:86:02:dc:9f:69:1b:c2:7b:2c:45:e1:21: bb:8a:0c:19:ab:d8:c5:47:e5:a7:d1:75:3b:25:2c: c2:f4:23:98:60:a8:0c:54:72:40:af:e3:36:6e:19: 8c:7d:65:bb:2e:e4:bc:59:3c:18:c8:90:f5:d0:98: dd:47:46:1b:df:f3:aa:24:d3:1b:f2:bb:dc:ce:fc: ef:b7:3c:92:db:5c:3c:f2:8c:ba:86:01:d3:77:f7: 5f:98:ce:0d:80:c5:b8:da:07:0f:e4:13:f5:c0:be: cd:7a:21:8d:72:60:e0:88:1b:ec:74:23:2b:ce:53: 2d:48:cb:b7:7c:23:c5:3b:47:77:c7:66:23:27:76: f0:ae:92:db:40:fd:a7:96:df:17:38:66:2c:ad:19: 50:3d:84:b5:7a:f3:85:91:d2:bf:2b:6c:81:b2:6e: 03:db:cf:f1:e0:ad:77:cc:48:e3:87:b4:27:a0:6e: 67:aa:9c:af:0a:91:af:04:4f:10:8b:1d:c9:d1:3f: 43:fd:0c:26:8e:a0:b3:22:93:5e:cc:4f:b6:b6:1b: 6b:3a:75:48:86:28:6c:bc:0b:29:26:ad:da:bf:bb: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:17:08:24:AA:D5:FE:FB:3F:C1:16:0E:3C:F9:5A:C2:E9:B6:29:EC X509v3 Authority Key Identifier: keyid:70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:03:8d:26:70:64:79:79:30:0e:1d:9b:04:0a:85:3f:10:55: 34:e2:07:47:4d:8f:cb:99:6c:0d:d7:0f:7d:f0:5c:2c:8e:13: fc:99:21:5b:36:ac:6e:be:4a:d1:e0:88:cc:01:68:c9:0f:38: 51:1b:cd:53:e7:77:40:11:60:d3:28:a0:3a:7d:fb:3c:c8:cc: d4:fa:9e:51:1a:f7:7f:52:70:29:b2:99:9c:ca:8b:3f:86:f4: af:fb:7d:bb:9a:85:38:6f:5e:ab:32:df:9b:80:18:40:4a:f3: ee:de:ab:d7:2c:19:c7:c3:a7:a6:9e:72:83:3e:cb:bf:9a:44: 69:ef:44:68:b9:7b:38:b5:f6:b4:db:9f:7c:35:62:2f:c6:73: f4:c4:12:34:9c:4d:7c:6e:09:13:56:9f:e0:cc:7b:7e:3f:1f: 80:1e:9a:80:2e:20:6b:93:98:19:9c:03:fd:2d:9c:e1:56:4c: 48:fe:ed:53:6f:2f:a6:be:72:16:3c:2a:f3:be:57:4d:c8:0e: ce:89:2d:21:6d:d8:46:2e:b4:cf:fd:39:c9:81:1c:c2:20:a9: ec:d8:70:fd:5a:d3:0f:b0:d1:92:8d:39:a5:35:10:28:ec:4e: 1c:b6:20:45:8c:5b:ba:77:ea:b2:39:81:2c:be:05:d5:2c:49: ff:73:26:90 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUefLOHbyOH1ly0TuL2XxGFVsB12AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA3QzA1REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzRE Q0Q2MTQxRDAeFw0yNjA1MTMwOTMyNTJaFw0yNjA1MTQxMjI5NTJaMDMxMTAvBgNV BAMTKDU0MTcwODI0QUFENUZFRkIzRkMxMTYwRTNDRjk1QUMyRTlCNjI5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqEsm7np7U0c8rlvSEgfA3kL3k nBpWJ3vR3SVmFBRYxYYC3J9pG8J7LEXhIbuKDBmr2MVH5afRdTslLML0I5hgqAxU ckCv4zZuGYx9Zbsu5LxZPBjIkPXQmN1HRhvf86ok0xvyu9zO/O+3PJLbXDzyjLqG AdN391+Yzg2AxbjaBw/kE/XAvs16IY1yYOCIG+x0IyvOUy1Iy7d8I8U7R3fHZiMn dvCukttA/aeW3xc4ZiytGVA9hLV684WR0r8rbIGybgPbz/HgrXfMSOOHtCegbmeq nK8Kka8ETxCLHcnRP0P9DCaOoLMik17MT7a2G2s6dUiGKGy8Cykmrdq/uzMVAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUVBcIJKrV/vs/wRYOPPlawum2KewwHwYDVR0j BBgwFoAUcHwF3AaJHrSivrGGqLthxNzWFB0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFHSUND VUJFLzAvNzA3QzA1REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzREQ0Q2MTQxRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS83MDdDMDVEQzA2ODkxRUI0QTJCRUIxODZB OEJCNjFDNERDRDYxNDFELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFHSUNDVUJFLzAvNzA3QzA1 REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzREQ0Q2MTQxRC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEgD jSZwZHl5MA4dmwQKhT8QVTTiB0dNj8uZbA3XD33wXCyOE/yZIVs2rG6+StHgiMwB aMkPOFEbzVPnd0ARYNMooDp9+zzIzNT6nlEa939ScCmymZzKiz+G9K/7fbuahThv Xqsy35uAGEBK8+7eq9csGcfDp6aecoM+y7+aRGnvRGi5ezi19rTbn3w1Yi/Gc/TE EjScTXxuCRNWn+DMe34/H4AemoAuIGuTmBmcA/0tnOFWTEj+7VNvL6a+chY8KvO+ V03IDs6JLSFt2EYutM/9OcmBHMIgqezYcP1a0w+w0ZKNOaU1ECjsThy2IEWMW7p3 6rI5gSy+BdUsSf9zJpA= -----END CERTIFICATE-----Generated at Wed May 13 20:33:41 2026 by rpki-client