$ rpki-client -vvf rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft File: AAED3548B647C9B95804411BAB19736F229C5A54.mft (raw, json) Hash identifier: KwfauV08CEt7Nkh623a3c2MFzhesncPIff4mnGaidUA= Subject key identifier: DA:DA:EC:33:A3:F0:D8:C8:CD:70:B5:87:4A:39:4A:48:68:34:9B:C5 Authority key identifier: AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54 Certificate issuer: /CN=AAED3548B647C9B95804411BAB19736F229C5A54 Certificate serial: 3D357A928795B865F339330E0D03AD27A08B4747 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft Manifest number: 45 Signing time: Tue 30 Jun 2026 12:53:56 +0000 Manifest this update: Tue 30 Jun 2026 12:48:56 +0000 Manifest next update: Wed 01 Jul 2026 13:31:56 +0000 Files and hashes: 1: 3231312e37362e302e302f31392d3139203d3e2037343738.roa (hash: kS4UeB9bSZUO5PaEgviQEGNKSk9y0LCLxXLeAUQgMz0=) 2: 3231302e3234342e3139322e302f31392d3230203d3e2037343738.roa (hash: W335AiMtYbmtyFJ/6qInNtRm+Ld5a3fuzl0Q/nTZ7Xs=) 3: AAED3548B647C9B95804411BAB19736F229C5A54.crl (hash: gR7CYn4vJ48jh8gs9iV1oCVYBizdNttwZP3sAaujess=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 13:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:35:7a:92:87:95:b8:65:f3:39:33:0e:0d:03:ad:27:a0:8b:47:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAED3548B647C9B95804411BAB19736F229C5A54 Validity Not Before: Jun 30 12:48:56 2026 GMT Not After : Jul 1 13:31:56 2026 GMT Subject: CN=DADAEC33A3F0D8C8CD70B5874A394A4868349BC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c4:80:5a:5d:e9:63:cb:29:b6:6e:09:eb:dc: 75:bb:bc:a5:82:22:04:a9:29:85:d9:b7:f4:58:6f: 3d:95:ff:f8:f5:9b:ae:b6:a1:c3:0a:fe:93:b3:6a: c4:29:62:5e:b1:82:a7:1e:ee:5a:d7:3b:fc:3e:18: 13:16:4d:9b:97:8a:b8:d7:75:b1:b7:b6:c0:b9:58: 2f:3b:a6:7a:9b:84:5f:26:fd:25:47:20:c3:1d:ff: cf:83:47:5d:11:83:7f:ce:ac:fa:f7:84:c0:08:61: a9:3e:74:1b:1e:a8:e6:e6:70:17:b0:2a:88:ff:e7: 39:b9:4c:fb:d6:c7:41:0d:6f:98:c9:f8:78:9f:67: eb:b3:27:43:50:83:c9:41:6e:91:cb:aa:61:3e:4f: f1:f7:d8:01:1d:c4:80:c8:af:5c:e4:d6:e8:e5:53: 6d:32:9c:97:e6:1a:45:f2:61:1c:e6:0b:b5:3e:d5: a2:1a:d5:35:e9:52:70:44:be:5e:82:8c:11:c4:8f: ad:5b:84:4b:65:37:47:da:c8:36:b6:ff:04:20:a3: a5:1d:0c:85:6b:8a:3a:39:8a:7a:17:96:e8:dd:80: 54:fe:dc:81:21:f9:a4:63:49:56:5d:8f:fb:e6:e1: 94:32:af:e4:4e:03:9a:47:20:86:91:3b:3a:d3:74: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DA:EC:33:A3:F0:D8:C8:CD:70:B5:87:4A:39:4A:48:68:34:9B:C5 X509v3 Authority Key Identifier: keyid:AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e0:b2:96:f8:b3:ae:ee:9b:c9:87:3a:96:86:4e:9d:1a:e4: 79:9a:00:bf:f7:6c:6e:98:19:b1:ec:fc:78:7f:58:ee:61:67: 42:da:65:07:b3:f7:76:55:07:b9:5f:81:d0:dd:84:08:af:92: c5:c8:39:ec:df:4a:e1:e4:5b:9d:3e:70:d6:56:47:54:5a:ee: 34:7c:6b:db:10:ce:64:3f:0e:46:f3:3c:5a:31:37:6c:29:70: f1:16:d4:e9:92:e5:5b:87:d3:23:f2:93:31:f2:65:3f:e9:59: 98:d6:f4:f3:ef:97:ac:7d:49:e6:43:7d:8c:14:18:95:07:bc: fc:ec:a9:ae:e0:b9:16:4a:f1:29:d6:d0:4d:9c:57:03:3f:4b: ac:92:46:a4:e2:e4:bf:fc:51:d9:f7:1d:a8:9c:9d:d7:6b:c7: 43:eb:df:fd:21:1c:da:a1:25:e3:d7:21:b0:ce:6b:ce:8d:9a: 13:c8:26:fe:9b:e5:4c:5f:5d:78:58:74:06:3d:e5:b1:ee:64: c3:68:56:71:09:01:e2:f2:24:9c:b2:8d:1d:be:8d:6d:2d:59: 82:7e:75:85:49:6a:ea:26:3e:dd:27:7b:48:e8:2e:69:85:c2: 60:a8:1b:3a:b6:ca:6d:8e:ba:db:a4:3d:e5:5a:34:04:07:ef: 3f:a9:b5:39 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUPTV6koeVuGXzOTMODQOtJ6CLR0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYy MjlDNUE1NDAeFw0yNjA2MzAxMjQ4NTZaFw0yNjA3MDExMzMxNTZaMDMxMTAvBgNV BAMTKERBREFFQzMzQTNGMEQ4QzhDRDcwQjU4NzRBMzk0QTQ4NjgzNDlCQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxIBaXeljyym2bgnr3HW7vKWC IgSpKYXZt/RYbz2V//j1m662ocMK/pOzasQpYl6xgqce7lrXO/w+GBMWTZuXirjX dbG3tsC5WC87pnqbhF8m/SVHIMMd/8+DR10Rg3/OrPr3hMAIYak+dBseqObmcBew Koj/5zm5TPvWx0ENb5jJ+HifZ+uzJ0NQg8lBbpHLqmE+T/H32AEdxIDIr1zk1ujl U20ynJfmGkXyYRzmC7U+1aIa1TXpUnBEvl6CjBHEj61bhEtlN0fayDa2/wQgo6Ud DIVrijo5inoXlujdgFT+3IEh+aRjSVZdj/vm4ZQyr+ROA5pHIIaROzrTdNq/AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU2trsM6Pw2MjNcLWHSjlKSGg0m8UwHwYDVR0j BBgwFoAUqu01SLZHyblYBEEbqxlzbyKcWlQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAv QUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9BQUVEMzU0OEI2NDdDOUI5NTgwNDQxMUJBQjE5NzM2 RjIyOUM1QTU0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAvQUFFRDM1NDhCNjQ3QzlCOTU4 MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGTgspb4s67um8mHOpaG Tp0a5HmaAL/3bG6YGbHs/Hh/WO5hZ0LaZQez93ZVB7lfgdDdhAivksXIOezfSuHk W50+cNZWR1Ra7jR8a9sQzmQ/DkbzPFoxN2wpcPEW1OmS5VuH0yPykzHyZT/pWZjW 9PPvl6x9SeZDfYwUGJUHvPzsqa7guRZK8SnW0E2cVwM/S6ySRqTi5L/8Udn3Haic nddrx0Pr3/0hHNqhJePXIbDOa86NmhPIJv6b5UxfXXhYdAY95bHuZMNoVnEJAeLy JJyyjR2+jW0tWYJ+dYVJauomPt0ne0joLmmFwmCoGzq2ym2OutukPeVaNAQH7z+p tTk= -----END CERTIFICATE-----Generated at Tue Jun 30 19:09:43 2026 by rpki-client