$ rpki-client -vvf rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft File: C4FE0149FC774090A5B6304E8968380A1F1B0426.mft (raw, json) Hash identifier: Sf+5Cq/vKFI5sb6Do/aU/yDCnMQrAx/QZUC1jAA4cQQ= Subject key identifier: B4:2A:9F:67:A0:53:1C:03:7C:D6:70:80:B6:29:AC:09:36:53:BD:50 Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 Certificate issuer: /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Certificate serial: 59C479AEE7C206EDAFF1B0DEF7C12FC1C77ABE9E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft Manifest number: 46 Signing time: Tue 30 Jun 2026 17:04:21 +0000 Manifest this update: Tue 30 Jun 2026 16:59:21 +0000 Manifest next update: Wed 01 Jul 2026 18:10:21 +0000 Files and hashes: 1: 323430373a643234303a3a2f33322d3438203d3e203138343238.roa (hash: rBUhV/xvRZeEelrs2jyNJogNIGW8G/cMNY2z96YxdgM=) 2: C4FE0149FC774090A5B6304E8968380A1F1B0426.crl (hash: eL/J4s+wJ9WevARgjx1FakOcXsoE+CnXh4Ns8ybs+PI=) 3: 3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa (hash: RmocfnFYGeRr/aQ5L4jWeV+BcjwmA5Wox7nbUvuA0XQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 14:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c4:79:ae:e7:c2:06:ed:af:f1:b0:de:f7:c1:2f:c1:c7:7a:be:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Validity Not Before: Jun 30 16:59:21 2026 GMT Not After : Jul 1 18:10:21 2026 GMT Subject: CN=B42A9F67A0531C037CD67080B629AC093653BD50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:f9:dc:cc:1a:64:b0:7b:99:24:a5:4c:c3: 2c:dd:c0:c3:01:30:9c:cf:1a:cc:6e:3b:2e:97:6b: ef:c8:21:2c:a6:53:d4:90:c0:78:72:2a:69:6e:0d: b0:32:95:41:a4:fd:b5:13:47:0b:a4:95:d3:c6:a8: 8f:f6:06:1e:6f:e0:1a:68:f5:2d:12:fa:6e:04:58: 9f:db:22:3e:cc:ed:65:d6:a9:be:f5:da:a1:e8:34: a3:71:b8:84:60:b1:32:1b:77:e7:7c:2a:6c:be:b0: 86:6d:ce:02:1a:71:e8:df:ce:4d:eb:84:9b:df:e3: 89:27:68:17:00:36:61:7b:4a:9d:15:8e:db:0e:95: ee:9e:5f:5c:7a:9e:92:fd:61:16:36:c2:2e:8e:73: 4d:de:58:0d:65:a6:f7:78:cb:cb:be:74:51:1f:7b: 86:b1:7c:3f:00:7b:30:cf:fc:ee:57:b5:0e:ec:77: 1d:87:79:7c:08:8d:16:c4:3b:6a:6d:11:04:a1:bd: e5:95:a9:e5:66:9a:e9:f9:63:9f:1a:62:63:c0:84: 04:11:b9:19:16:98:ab:5e:30:1d:a4:4d:21:f1:51: fb:79:b3:e0:f9:18:06:b2:a8:29:d0:67:6c:bc:56: ff:ea:c3:1f:69:56:85:9c:a4:fb:7c:40:21:dc:16: b2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2A:9F:67:A0:53:1C:03:7C:D6:70:80:B6:29:AC:09:36:53:BD:50 X509v3 Authority Key Identifier: keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:a6:1e:c0:f7:cb:b6:a2:e2:64:8d:e9:02:ae:f7:02:1a:ef: 56:01:04:af:de:66:1a:0f:55:0a:2f:3a:e4:94:14:70:0c:38: 83:64:07:af:a8:59:46:3e:7a:ab:8a:49:74:b9:62:17:2e:ef: e9:66:80:34:65:94:09:d5:ed:0f:4c:d1:e3:c6:d1:37:fb:a1: a8:06:8b:72:3c:2a:f0:81:09:ec:f6:b0:9e:55:be:93:d9:57: d9:a9:0c:c2:1a:2c:e3:4e:27:bf:e0:32:d4:7e:91:c8:d1:e7: b3:bf:74:da:51:02:38:2a:e7:8b:25:03:40:9b:b6:22:b9:0d: 08:35:6c:da:65:9a:01:15:8c:b1:a5:cb:6b:9d:4b:74:47:a6: f9:00:7e:0d:0b:4c:d5:c1:89:7b:32:95:0c:de:73:d7:03:91: 12:e5:cb:95:65:db:d1:b9:6b:ad:93:86:25:18:8f:14:53:6f: 82:5d:24:05:21:39:bf:4f:df:52:66:68:5d:51:bb:24:c9:8f: bd:6d:06:ac:e3:be:a0:d7:55:3b:e7:2a:9c:6c:48:b9:78:66: 76:cf:8e:80:9f:e4:35:9d:9c:4c:27:15:91:70:5e:40:e2:9a: 2a:87:53:f7:b8:4f:90:2d:6f:04:d1:a5:05:83:85:27:b1:72: f8:bb:4b:4f -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUWcR5rufCBu2v8bDe98Evwcd6vp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGRTAxNDlGQzc3NDA5MEE1QjYzMDRFODk2ODM4MEEx RjFCMDQyNjAeFw0yNjA2MzAxNjU5MjFaFw0yNjA3MDExODEwMjFaMDMxMTAvBgNV BAMTKEI0MkE5RjY3QTA1MzFDMDM3Q0Q2NzA4MEI2MjlBQzA5MzY1M0JENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrvnczBpksHuZJKVMwyzdwMMB MJzPGsxuOy6Xa+/IISymU9SQwHhyKmluDbAylUGk/bUTRwukldPGqI/2Bh5v4Bpo 9S0S+m4EWJ/bIj7M7WXWqb712qHoNKNxuIRgsTIbd+d8Kmy+sIZtzgIacejfzk3r hJvf44knaBcANmF7Sp0VjtsOle6eX1x6npL9YRY2wi6Oc03eWA1lpvd4y8u+dFEf e4axfD8AezDP/O5XtQ7sdx2HeXwIjRbEO2ptEQShveWVqeVmmun5Y58aYmPAhAQR uRkWmKteMB2kTSHxUft5s+D5GAayqCnQZ2y8Vv/qwx9pVoWcpPt8QCHcFrI5AgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUtCqfZ6BTHAN81nCAtimsCTZTvVAwHwYDVR0j BBgwFoAUxP4BSfx3QJCltjBOiWg4Ch8bBCYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUVSQ1lD QVQvMC9DNEZFMDE0OUZDNzc0MDkwQTVCNjMwNEU4OTY4MzgwQTFGMUIwNDI2LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0M0RkUwMTQ5RkM3NzQwOTBBNUI2MzA0RTg5 NjgzODBBMUYxQjA0MjYuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NRVJDWUNBVC8wL0M0RkUwMTQ5 RkM3NzQwOTBBNUI2MzA0RTg5NjgzODBBMUYxQjA0MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5ph7A 98u2ouJkjekCrvcCGu9WAQSv3mYaD1UKLzrklBRwDDiDZAevqFlGPnqrikl0uWIX Lu/pZoA0ZZQJ1e0PTNHjxtE3+6GoBotyPCrwgQns9rCeVb6T2VfZqQzCGizjTie/ 4DLUfpHI0eezv3TaUQI4KueLJQNAm7YiuQ0INWzaZZoBFYyxpctrnUt0R6b5AH4N C0zVwYl7MpUM3nPXA5ES5cuVZdvRuWutk4YlGI8UU2+CXSQFITm/T99SZmhdUbsk yY+9bQas476g11U75yqcbEi5eGZ2z46An+Q1nZxMJxWRcF5A4poqh1P3uE+QLW8E 0aUFg4UnsXL4u0tP -----END CERTIFICATE-----Generated at Tue Jun 30 19:10:09 2026 by rpki-client