$ rpki-client -vvf rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft File: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft (raw, json) Hash identifier: FT4tCCyIjgAPpiujs9LQys5sQ/6aC5HutLa3eeuMos8= Subject key identifier: 32:AF:92:F5:FA:DA:AC:94:57:F3:E2:58:94:99:26:88:F4:48:5E:30 Authority key identifier: 21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 Certificate issuer: /CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Certificate serial: 5BC44BBFB9E78A880ECF165B25D3112E6DB93CF9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft Manifest number: 47 Signing time: Tue 30 Jun 2026 02:12:54 +0000 Manifest this update: Tue 30 Jun 2026 02:07:54 +0000 Manifest next update: Wed 01 Jul 2026 04:32:54 +0000 Files and hashes: 1: 3130332e3131372e3133322e302f32332d3234203d3e2039363737.roa (hash: L4VMPfmAF+ujWD/W3Q/uT3gBZ3GdNZkDF1QTrHGw11I=) 2: 3130332e3131372e3133322e302f32332d3234203d3e203231383539.roa (hash: V7xrPLp5f+XdiNXnNwOKJbYVBx4iv5pqsU5W1y0I9ac=) 3: 3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa (hash: yNF0rjdZhiThfjXcp9q9ny7hpelDoujpqo41tWTYbEo=) 4: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl (hash: UtzOnpj73i7btH35Q3FKqnCqvOIneHtNfF8NBtWT0BY=) 5: 3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa (hash: AS3qH/RjBUke7M3rlCKwKKx7OXc4/iKqzu9OBdcpsSg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 04:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c4:4b:bf:b9:e7:8a:88:0e:cf:16:5b:25:d3:11:2e:6d:b9:3c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Validity Not Before: Jun 30 02:07:54 2026 GMT Not After : Jul 1 04:32:54 2026 GMT Subject: CN=32AF92F5FADAAC9457F3E25894992688F4485E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b8:69:79:4f:2d:6f:06:79:76:ef:22:86:6d: 37:5a:88:29:9b:32:3e:ca:9a:da:32:dc:dd:98:05: e4:dd:a9:a9:ae:08:73:be:77:34:5e:88:73:83:51: dd:70:13:5a:17:70:9a:ec:c2:af:ed:66:63:e5:b7: bd:f7:13:8e:df:c1:9f:81:4d:71:47:83:88:af:fd: 77:09:6b:a4:ec:fd:5e:04:a6:43:9b:c3:6b:fd:31: 9b:d9:ab:c9:63:56:28:92:58:45:ae:fb:13:51:27: e0:f3:b4:5d:ce:23:a7:7c:8d:32:64:00:53:b7:49: d9:a0:f5:9a:2b:bc:5f:fe:12:b1:d0:7c:7d:d6:a8: f5:12:b1:95:b3:12:d0:dc:1f:bf:d7:f4:c7:2c:a7: a1:81:bf:a1:91:02:43:73:79:31:4e:b6:e5:55:4b: a0:8b:e7:1a:9c:c5:af:c3:51:75:2e:06:be:f8:ec: 56:fc:a1:0f:89:66:00:36:3a:c5:d1:b1:08:4b:53: 7f:9b:1b:1a:70:87:94:ac:29:00:8b:8f:ec:31:c6: 7d:34:4c:c6:a7:59:6d:de:b6:59:63:ef:43:a9:16: 29:6b:43:2a:25:01:0f:4c:49:22:6c:63:fa:45:3b: 40:93:64:fb:6e:b3:13:73:be:87:e6:b9:02:af:92: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AF:92:F5:FA:DA:AC:94:57:F3:E2:58:94:99:26:88:F4:48:5E:30 X509v3 Authority Key Identifier: keyid:21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:5f:0f:10:8b:71:85:d9:9d:25:d3:07:2e:a0:d3:02:04:29: 47:39:6e:14:ac:d5:2d:4d:ad:2d:c2:58:3a:b9:2a:04:9a:41: a9:bf:52:e3:4f:47:2d:c0:d9:a2:82:ff:f3:78:37:ba:4c:e2: 0b:9e:88:7c:7c:13:ab:44:ee:d2:1c:79:03:bd:8c:27:4b:00: 1d:98:1e:00:15:7c:59:26:9b:6b:1d:23:57:02:11:d5:1a:cf: 38:0d:b1:9d:cb:b0:36:5f:53:d8:99:58:66:31:8f:32:d9:2c: 17:73:bf:af:15:9e:fa:79:4c:5b:94:24:98:13:ca:98:b9:20: ce:d1:b7:2e:bf:70:da:40:10:6e:c5:16:2e:84:e7:5d:04:2c: 49:da:c9:d5:fa:1b:a4:60:46:85:36:1d:c8:01:92:67:d8:ae: d6:33:e9:34:36:46:06:d4:0b:35:ab:35:0c:40:24:b6:da:80: a2:1f:ab:28:6e:86:a6:9b:1e:0d:69:b8:c2:fc:ba:6e:33:30: 2a:e3:36:71:63:2b:68:7f:5d:5d:a3:e6:5b:ac:6d:9f:9b:03: 20:6d:60:dc:eb:27:58:70:f1:f8:6d:2b:0c:16:16:7d:63:d4: 6c:ba:ea:a3:78:9c:e6:27:22:4e:87:26:d1:34:33:fc:d4:d7: 61:fb:2c:47 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUW8RLv7nniogOzxZbJdMRLm25PPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQz RkNGQjVCMzAeFw0yNjA2MzAwMjA3NTRaFw0yNjA3MDEwNDMyNTRaMDMxMTAvBgNV BAMTKDMyQUY5MkY1RkFEQUFDOTQ1N0YzRTI1ODk0OTkyNjg4RjQ0ODVFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcuGl5Ty1vBnl27yKGbTdaiCmb Mj7Kmtoy3N2YBeTdqamuCHO+dzReiHODUd1wE1oXcJrswq/tZmPlt733E47fwZ+B TXFHg4iv/XcJa6Ts/V4EpkObw2v9MZvZq8ljViiSWEWu+xNRJ+DztF3OI6d8jTJk AFO3Sdmg9ZorvF/+ErHQfH3WqPUSsZWzEtDcH7/X9Mcsp6GBv6GRAkNzeTFOtuVV S6CL5xqcxa/DUXUuBr747Fb8oQ+JZgA2OsXRsQhLU3+bGxpwh5SsKQCLj+wxxn00 TManWW3etllj70OpFilrQyolAQ9MSSJsY/pFO0CTZPtusxNzvofmuQKvkhEZAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUMq+S9frarJRX8+JYlJkmiPRIXjAwHwYDVR0j BBgwFoAUIbYtYOGrU4A7IpzPg8F5/T/PtbMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAv MjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yMUI2MkQ2MEUxQUI1MzgwM0IyMjlDQ0Y4M0MxNzlG RDNGQ0ZCNUIzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAvMjFCNjJENjBFMUFCNTM4MDNC MjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHhfDxCLcYXZnSXTBy6g 0wIEKUc5bhSs1S1NrS3CWDq5KgSaQam/UuNPRy3A2aKC//N4N7pM4gueiHx8E6tE 7tIceQO9jCdLAB2YHgAVfFkmm2sdI1cCEdUazzgNsZ3LsDZfU9iZWGYxjzLZLBdz v68Vnvp5TFuUJJgTypi5IM7Rty6/cNpAEG7FFi6E510ELEnaydX6G6RgRoU2HcgB kmfYrtYz6TQ2RgbUCzWrNQxAJLbagKIfqyhuhqabHg1puML8um4zMCrjNnFjK2h/ XV2j5lusbZ+bAyBtYNzrJ1hw8fhtKwwWFn1j1Gy66qN4nOYnIk6HJtE0M/zU12H7 LEc= -----END CERTIFICATE-----Generated at Tue Jun 30 19:08:11 2026 by rpki-client