$ rpki-client -vvf rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft File: 4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft (raw, json) Hash identifier: 9aIP2PWsEV8efpr97wvWSm9CsVwluV8lnIJFICI2CgI= Subject key identifier: 62:40:D0:8C:95:FA:7D:26:67:4B:69:74:A4:6C:47:C1:D5:75:11:2F Authority key identifier: 44:61:70:2F:D3:81:CA:C4:30:A5:B1:9A:76:2A:79:E9:CC:BD:8D:09 Certificate issuer: /CN=4461702FD381CAC430A5B19A762A79E9CCBD8D09 Certificate serial: 33136CA84D5D42CC975FAF6439CEFD76DEA9817B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft Manifest number: 04 Signing time: Wed 13 May 2026 05:52:12 +0000 Manifest this update: Wed 13 May 2026 05:47:12 +0000 Manifest next update: Thu 14 May 2026 06:51:12 +0000 Files and hashes: 1: 3130332e3138392e3130382e302f32332d3234203d3e2037353336.roa (hash: q17bFdqrhMBLjmohT4EXtTiiL79HGPyDIQggw2a0Oyc=) 2: 4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl (hash: 6qiRdsRJpRGwqvmcNIzLpxBRTsLqwfrNMjBa/Z9BLeQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:13:6c:a8:4d:5d:42:cc:97:5f:af:64:39:ce:fd:76:de:a9:81:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4461702FD381CAC430A5B19A762A79E9CCBD8D09 Validity Not Before: May 13 05:47:12 2026 GMT Not After : May 14 06:51:12 2026 GMT Subject: CN=6240D08C95FA7D26674B6974A46C47C1D575112F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:46:fb:f5:85:3f:2e:5e:33:43:17:df:ca: 88:38:f7:f0:4d:fb:f7:5e:0a:40:ad:80:e1:1f:14: dd:72:ef:d3:c0:91:34:fa:a3:45:09:4d:a9:fd:ef: f8:ff:dd:1d:90:7c:86:2e:ae:6e:86:5b:f7:45:3e: 1e:b1:97:4e:3a:2c:1d:d0:8f:c8:2e:7f:41:f2:2f: e2:a3:d1:b4:7e:6a:4d:5a:95:0f:33:63:9b:75:e0: 88:54:9a:8a:a3:1c:98:00:2b:f1:72:24:65:0e:4d: d6:7f:14:8d:55:c6:d6:d1:ad:0a:47:b5:bf:c8:22: d7:dd:13:3e:8f:3f:d5:28:58:c6:79:27:24:3a:db: b6:d6:e1:ee:7f:cc:30:2e:04:a6:56:23:38:86:2c: 16:db:42:a7:2c:a2:21:35:bc:9c:cd:c5:75:c4:84: 79:81:54:b3:c6:62:ee:09:a2:ba:ff:1b:e6:99:91: 5f:1d:b5:8b:60:ee:25:5a:0f:aa:3c:97:d1:e7:66: af:db:4e:28:f6:bf:55:b0:0e:33:20:29:48:0d:33: b3:67:98:e3:a8:4b:ca:90:42:cc:b9:8a:6e:33:53: 0a:80:bb:7c:32:78:ca:a9:71:83:d4:38:19:7f:10: 0d:87:e7:ab:77:ef:3d:84:d0:6c:b4:b2:9a:d2:27: 84:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:40:D0:8C:95:FA:7D:26:67:4B:69:74:A4:6C:47:C1:D5:75:11:2F X509v3 Authority Key Identifier: keyid:44:61:70:2F:D3:81:CA:C4:30:A5:B1:9A:76:2A:79:E9:CC:BD:8D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:12:79:c6:7c:32:cb:ba:3f:50:8a:f3:74:de:99:d1:5b:b6: 45:ad:bf:66:3d:7c:4e:24:12:05:aa:f6:5b:16:ea:25:bc:f5: fb:db:f3:af:21:10:84:06:62:86:8f:7d:65:e4:5b:9b:49:45: ce:81:6c:16:fa:5c:3d:6e:d9:bc:5e:3a:04:c2:32:de:c0:fc: 96:21:be:e9:d9:e4:d8:65:d4:ee:77:04:eb:41:7c:d2:dd:ed: 8b:0a:89:38:46:81:4c:fd:d1:30:2e:d2:03:96:21:6f:b6:57: 4a:c4:da:7c:d7:a4:0d:bc:b5:16:b1:ff:b4:84:42:cb:b5:90: be:a6:53:c8:f3:d1:75:4a:e7:b9:17:37:2d:e8:f1:4b:f4:ed: ad:b2:fd:8f:5a:f2:32:4d:b1:21:24:87:d4:96:96:09:6a:53: c5:95:69:0a:5c:52:68:22:49:01:a4:5e:3a:ef:6e:4d:bc:52: c9:26:28:11:6d:f8:35:3c:3e:c9:61:e6:23:da:02:f7:7e:0f: d0:69:a9:e6:a7:52:d7:2c:d5:32:4e:09:0e:62:75:6b:23:f5: ef:46:80:b5:7d:7d:11:88:d8:c8:a5:7b:9c:8c:cf:87:1c:e1: 04:de:8b:ba:b7:b2:35:c9:ee:59:0b:94:9e:85:b3:7e:a0:fb: 45:0c:40:9e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMxNsqE1dQsyXX69kOc79dt6pgXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ2MTcwMkZEMzgxQ0FDNDMwQTVCMTlBNzYyQTc5RTlD Q0JEOEQwOTAeFw0yNjA1MTMwNTQ3MTJaFw0yNjA1MTQwNjUxMTJaMDMxMTAvBgNV BAMTKDYyNDBEMDhDOTVGQTdEMjY2NzRCNjk3NEE0NkM0N0MxRDU3NTExMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NUb79YU/Ll4zQxffyog49/BN +/deCkCtgOEfFN1y79PAkTT6o0UJTan97/j/3R2QfIYurm6GW/dFPh6xl046LB3Q j8guf0HyL+Kj0bR+ak1alQ8zY5t14IhUmoqjHJgAK/FyJGUOTdZ/FI1VxtbRrQpH tb/IItfdEz6PP9UoWMZ5JyQ627bW4e5/zDAuBKZWIziGLBbbQqcsoiE1vJzNxXXE hHmBVLPGYu4Jorr/G+aZkV8dtYtg7iVaD6o8l9HnZq/bTij2v1WwDjMgKUgNM7Nn mOOoS8qQQsy5im4zUwqAu3wyeMqpcYPUOBl/EA2H56t37z2E0Gy0sprSJ4QrAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUYkDQjJX6fSZnS2l0pGxHwdV1ES8wHwYDVR0j BBgwFoAURGFwL9OBysQwpbGadip56cy9jQkwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFJRkVO R1RXLzAvNDQ2MTcwMkZEMzgxQ0FDNDMwQTVCMTlBNzYyQTc5RTlDQ0JEOEQwOS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80NDYxNzAyRkQzODFDQUM0MzBBNUIxOUE3 NjJBNzlFOUNDQkQ4RDA5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFJRkVOR1RXLzAvNDQ2MTcw MkZEMzgxQ0FDNDMwQTVCMTlBNzYyQTc5RTlDQ0JEOEQwOS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJAS ecZ8Msu6P1CK83TemdFbtkWtv2Y9fE4kEgWq9lsW6iW89fvb868hEIQGYoaPfWXk W5tJRc6BbBb6XD1u2bxeOgTCMt7A/JYhvunZ5Nhl1O53BOtBfNLd7YsKiThGgUz9 0TAu0gOWIW+2V0rE2nzXpA28tRax/7SEQsu1kL6mU8jz0XVK57kXNy3o8Uv07a2y /Y9a8jJNsSEkh9SWlglqU8WVaQpcUmgiSQGkXjrvbk28UskmKBFt+DU8Pslh5iPa Avd+D9BpqeanUtcs1TJOCQ5idWsj9e9GgLV9fRGI2Mile5yMz4cc4QTei7q3sjXJ 7lkLlJ6Fs36g+0UMQJ4= -----END CERTIFICATE-----Generated at Wed May 13 20:33:58 2026 by rpki-client