$ rpki-client -vvf rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft File: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft (raw, json) Hash identifier: xy2oPufzWm2WPk0zWV2slyl4sHB5ldgSOq+Syt5mZAI= Subject key identifier: 5B:56:58:33:01:A7:AF:17:29:EB:9D:A4:B5:1D:C7:51:05:6F:EE:E6 Authority key identifier: 70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D Certificate issuer: /CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D Certificate serial: 055123E43A71EB1BBC7064F0AF1A0E1E149354FD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft Manifest number: 82 Signing time: Fri 14 Aug 2026 10:31:35 +0000 Manifest this update: Fri 14 Aug 2026 10:26:35 +0000 Manifest next update: Sat 15 Aug 2026 14:18:35 +0000 Files and hashes: 1: 3232332e32362e31342e302f32332d3234203d3e2037343833.roa (hash: EeYUqixDoPSEeN8sw/ZeQjCxnACjgv6gNGFQp+CTsoM=) 2: 3232332e32362e31342e302f32332d3234203d3e203231383539.roa (hash: BY1QUUCw56EnMeP3kjSRx3onJmeURrOTVkZdX+EuukE=) 3: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl (hash: 9TGpmlnpqfh2DcSpQ1rxR4+8MY13gvkYtLzfGLOBYsw=) 4: 3130332e3137352e3139342e302f32332d3234203d3e2037343833.roa (hash: 5l2+J4Wo84X5+Yl5nqEN6UeiO9PszuY1Tb4AzIBJh3U=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 14:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:51:23:e4:3a:71:eb:1b:bc:70:64:f0:af:1a:0e:1e:14:93:54:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D Validity Not Before: Aug 14 10:26:35 2026 GMT Not After : Aug 15 14:18:35 2026 GMT Subject: CN=5B56583301A7AF1729EB9DA4B51DC751056FEEE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:fd:b0:ad:94:72:7c:42:d1:9c:c6:99:ad: 3f:42:30:74:63:45:7c:5c:92:0e:90:ec:9a:2e:76: 05:7f:05:6c:1e:9b:dd:5d:ea:ee:ed:00:f6:b2:16: 64:06:64:8c:56:31:29:75:82:b3:69:01:74:3a:25: 17:31:f2:bc:75:6b:f2:25:b0:40:f0:7a:c6:fa:55: fc:a8:05:a9:b7:92:f2:fa:4b:a2:e6:04:66:fb:03: 6c:cb:35:8e:a4:de:6d:49:e1:1e:fc:2c:1f:b4:de: 80:b3:09:49:20:5a:26:f8:6a:1b:bd:07:bb:10:ad: 0b:44:ef:0b:18:64:74:ce:c0:e0:d3:b1:a4:2d:ef: 84:b5:71:3c:73:f2:29:bf:13:31:94:eb:a3:f9:9e: e7:55:9f:07:ff:9e:e5:15:f2:c1:55:cc:e6:07:27: 2e:90:15:d4:06:f2:58:53:d3:43:f6:78:fc:e2:19: d0:65:c8:50:25:68:84:cf:74:25:17:d3:98:d2:20: b3:ac:1f:76:2d:a1:fe:3e:d4:6b:95:46:1b:cd:4e: d8:db:1c:8d:7c:83:7a:32:a2:db:1f:84:63:4d:f7: 6c:e3:50:4f:ce:6f:ad:88:a5:b9:70:67:a7:05:7d: c6:38:f7:df:9a:cc:44:f0:32:66:5d:fd:a0:d2:5d: 14:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:56:58:33:01:A7:AF:17:29:EB:9D:A4:B5:1D:C7:51:05:6F:EE:E6 X509v3 Authority Key Identifier: keyid:70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6c:03:68:c4:dc:3c:17:3c:14:29:f8:fd:e6:8f:f2:a3:6d: 6f:17:7f:fb:51:25:48:14:80:77:0e:43:00:f3:80:68:e3:b7: 17:fd:cd:e5:d1:22:86:92:05:51:56:ad:17:85:10:2f:07:89: 65:ce:1b:8e:fa:9a:a9:56:3a:d9:61:16:6f:50:56:4c:f0:34: c3:53:53:e2:21:a5:66:1a:4f:f1:9f:69:57:ec:02:c8:66:0e: 82:af:4d:7e:51:fc:78:a2:46:aa:78:6d:27:57:15:f5:cc:c4: 1f:7d:03:dd:b2:b2:4d:82:64:9b:d8:19:0e:fe:3b:de:ad:24: 4a:d3:17:75:1a:42:48:01:e4:50:04:d7:1a:ee:d7:c0:71:14: e3:07:17:a5:58:82:c4:e9:2b:39:69:22:90:7f:af:f6:55:fb: f5:fc:ea:4e:ca:3c:e9:76:4c:b0:06:67:9b:9c:b0:fc:b6:2f: 13:33:4d:1d:c1:41:08:15:e2:dd:e6:8d:c5:8c:ae:19:38:b5: 6f:b1:c8:ce:f1:02:ef:17:e4:ea:f6:92:62:0c:55:b7:bc:c9: 8b:f0:d8:2b:de:49:22:d9:12:44:d9:f1:97:8b:8a:7d:4f:f2: df:47:40:6d:64:d8:f4:63:49:ee:81:0c:9d:0b:ee:3f:78:03: e2:a3:18:e3 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUBVEj5Dpx6xu8cGTwrxoOHhSTVP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA3QzA1REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzRE Q0Q2MTQxRDAeFw0yNjA4MTQxMDI2MzVaFw0yNjA4MTUxNDE4MzVaMDMxMTAvBgNV BAMTKDVCNTY1ODMzMDFBN0FGMTcyOUVCOURBNEI1MURDNzUxMDU2RkVFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41v2wrZRyfELRnMaZrT9CMHRj RXxckg6Q7JoudgV/BWwem91d6u7tAPayFmQGZIxWMSl1grNpAXQ6JRcx8rx1a/Il sEDwesb6VfyoBam3kvL6S6LmBGb7A2zLNY6k3m1J4R78LB+03oCzCUkgWib4ahu9 B7sQrQtE7wsYZHTOwODTsaQt74S1cTxz8im/EzGU66P5nudVnwf/nuUV8sFVzOYH Jy6QFdQG8lhT00P2ePziGdBlyFAlaITPdCUX05jSILOsH3Ytof4+1GuVRhvNTtjb HI18g3oyotsfhGNN92zjUE/Ob62IpblwZ6cFfcY499+azETwMmZd/aDSXRR1AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUW1ZYMwGnrxcp652ktR3HUQVv7uYwHwYDVR0j BBgwFoAUcHwF3AaJHrSivrGGqLthxNzWFB0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFHSUND VUJFLzAvNzA3QzA1REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzREQ0Q2MTQxRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS83MDdDMDVEQzA2ODkxRUI0QTJCRUIxODZB OEJCNjFDNERDRDYxNDFELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFHSUNDVUJFLzAvNzA3QzA1 REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzREQ0Q2MTQxRC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD9s A2jE3DwXPBQp+P3mj/KjbW8Xf/tRJUgUgHcOQwDzgGjjtxf9zeXRIoaSBVFWrReF EC8HiWXOG476mqlWOtlhFm9QVkzwNMNTU+IhpWYaT/GfaVfsAshmDoKvTX5R/Hii Rqp4bSdXFfXMxB99A92ysk2CZJvYGQ7+O96tJErTF3UaQkgB5FAE1xru18BxFOMH F6VYgsTpKzlpIpB/r/ZV+/X86k7KPOl2TLAGZ5ucsPy2LxMzTR3BQQgV4t3mjcWM rhk4tW+xyM7xAu8X5Or2kmIMVbe8yYvw2CveSSLZEkTZ8ZeLin1P8t9HQG1k2PRj Se6BDJ0L7j94A+KjGOM= -----END CERTIFICATE-----Generated at Sat Aug 15 05:21:16 2026 by rpki-client