$ rpki-client -vvf rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft File: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft (raw, json) Hash identifier: XFFLZsXGTFWDEDNwk8Q2EBDDAwGM4ie9OvtEM1Wt2N8= Subject key identifier: 72:C9:69:07:CA:AD:76:DE:51:E0:A2:50:57:8F:A6:F7:FC:33:75:CD Authority key identifier: 7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55 Certificate issuer: /CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55 Certificate serial: 0BED2880848C73C5000C2C2F5DA401ECE87CF636 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft Manifest number: 45 Signing time: Tue 30 Jun 2026 09:33:34 +0000 Manifest this update: Tue 30 Jun 2026 09:28:34 +0000 Manifest next update: Wed 01 Jul 2026 12:25:34 +0000 Files and hashes: 1: 323430323a323865303a3a2f33322d3438203d3e2039393233.roa (hash: gHs1ooQ8UXCCXGul6QZXotFYNVwq0J8g9JJdOF3VUFM=) 2: 3230322e36362e3138342e302f32332d3234203d3e20313334383233.roa (hash: lH3p+3OX/BiDzRmprhrZQaoUetVeXRdG+n2QK86mZUo=) 3: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl (hash: h1XzL8Fg7ZRbCpb8sPJxrCogVoAZss/SMccc9Vrhk/c=) 4: 3230322e36362e3138342e302f32332d3234203d3e20313438393936.roa (hash: cgtaS2R5qGGSPzt0Mrg5ICT2U+6ReXnIE6A4ms4mJp0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 12:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ed:28:80:84:8c:73:c5:00:0c:2c:2f:5d:a4:01:ec:e8:7c:f6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55 Validity Not Before: Jun 30 09:28:34 2026 GMT Not After : Jul 1 12:25:34 2026 GMT Subject: CN=72C96907CAAD76DE51E0A250578FA6F7FC3375CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:54:e1:dc:45:ce:42:08:af:e7:f5:a8:a8: f3:7b:c5:93:a9:b7:68:5a:8f:e9:bc:5d:cd:15:b3: 05:52:fe:f8:48:4b:38:91:a3:ab:b9:37:86:a4:60: 34:f2:df:ff:33:87:c5:a2:b5:53:01:fa:a7:04:c9: c1:e9:50:13:ca:0e:71:b4:ca:51:b4:1c:49:f6:17: 45:58:3d:d2:3e:c6:72:40:a2:32:ca:8c:47:a3:50: e5:ff:82:54:10:e4:e6:8b:0a:bb:54:30:78:cb:c8: 04:8a:72:7e:a3:83:04:8b:c3:f8:67:b9:43:65:a6: 04:ad:e3:e9:cd:67:39:af:2a:1c:dc:ab:42:8c:11: c2:5b:55:4a:33:57:fb:c3:69:17:92:d9:86:82:d0: 9b:e4:55:50:ec:e4:02:05:12:e9:69:be:50:df:05: de:ea:97:58:74:5d:a5:90:6d:82:24:06:9a:53:69: 37:35:10:80:5c:5b:8a:e9:58:bc:64:b0:ae:43:58: d9:45:f3:68:dc:93:3e:f3:ec:68:49:18:68:d4:5b: e2:3e:5d:d5:f0:2d:62:b0:c3:93:e6:68:2c:df:6d: 42:e8:b7:8c:c5:a9:94:90:c0:3c:0f:46:7a:e6:db: 5b:1b:9a:7b:00:26:13:4a:dd:f4:6e:81:74:2c:3f: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C9:69:07:CA:AD:76:DE:51:E0:A2:50:57:8F:A6:F7:FC:33:75:CD X509v3 Authority Key Identifier: keyid:7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:25:5f:96:15:eb:d1:c9:2e:79:c8:51:9c:63:c5:a6:c3:c8: 76:c9:49:3e:18:16:ca:e9:3c:e3:b4:20:83:a1:30:2d:13:23: 3b:6e:29:eb:40:c3:e3:ef:c6:eb:cf:e6:ff:7d:a2:61:30:a2: a0:45:82:a0:11:8f:20:fa:e5:cb:c0:71:38:19:78:8d:f0:ed: 0d:33:87:3f:25:54:d0:45:5b:1b:af:dd:8e:6b:3c:e3:e8:83: f5:2c:0f:88:e0:0e:8a:c8:54:85:73:40:ab:6e:f3:b2:6b:fe: d4:2c:9a:8e:56:eb:08:f3:d8:8c:dd:7f:36:96:80:f6:d2:05: 2b:22:24:be:1e:98:13:a0:40:f6:fe:81:ff:4d:b8:02:f2:d1: b9:35:83:da:12:8f:5a:8f:57:48:e2:a8:8c:71:f4:58:7d:c5: 1c:81:80:7b:0c:ed:4d:fe:a1:44:d6:d4:3d:29:a8:24:a9:ab: 76:35:b0:0a:44:57:32:36:d9:e9:9e:dc:60:44:64:e7:a1:97: ee:18:a8:49:6d:90:43:21:fb:d9:02:c4:84:72:b4:48:cf:18: 10:8d:73:b8:b7:ac:92:b3:de:86:08:79:3a:25:22:e6:c9:46: 60:fb:c8:80:90:22:3f:6f:c9:ca:07:3e:ac:15:4b:b3:c9:da: 17:7c:07:02 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUC+0ogISMc8UADCwvXaQB7Oh89jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y3RTJFNUQyMEM3NDhCOEJFOUZERTQ0MDBFMDIzMjA1 OTc1RkQ1NTAeFw0yNjA2MzAwOTI4MzRaFw0yNjA3MDExMjI1MzRaMDMxMTAvBgNV BAMTKDcyQzk2OTA3Q0FBRDc2REU1MUUwQTI1MDU3OEZBNkY3RkMzMzc1Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OVTh3EXOQgiv5/WoqPN7xZOp t2haj+m8Xc0VswVS/vhISziRo6u5N4akYDTy3/8zh8WitVMB+qcEycHpUBPKDnG0 ylG0HEn2F0VYPdI+xnJAojLKjEejUOX/glQQ5OaLCrtUMHjLyASKcn6jgwSLw/hn uUNlpgSt4+nNZzmvKhzcq0KMEcJbVUozV/vDaReS2YaC0JvkVVDs5AIFEulpvlDf Bd7ql1h0XaWQbYIkBppTaTc1EIBcW4rpWLxksK5DWNlF82jckz7z7GhJGGjUW+I+ XdXwLWKww5PmaCzfbULot4zFqZSQwDwPRnrm21sbmnsAJhNK3fRugXQsP5q5AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUcslpB8qtdt5R4KJQV4+m9/wzdc0wHwYDVR0j BBgwFoAUf34uXSDHSLi+n95EAOAjIFl1/VUwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTi8w LzdGN0UyRTVEMjBDNzQ4QjhCRTlGREU0NDAwRTAyMzIwNTk3NUZENTUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvN0Y3RTJFNUQyMEM3NDhCOEJFOUZERTQ0MDBFMDIz MjA1OTc1RkQ1NS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL09QRU4vMC83RjdFMkU1RDIwQzc0OEI4 QkU5RkRFNDQwMEUwMjMyMDU5NzVGRDU1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyVflhXr0ckuechR nGPFpsPIdslJPhgWyuk847Qgg6EwLRMjO24p60DD4+/G68/m/32iYTCioEWCoBGP IPrly8BxOBl4jfDtDTOHPyVU0EVbG6/djms84+iD9SwPiOAOishUhXNAq27zsmv+ 1CyajlbrCPPYjN1/NpaA9tIFKyIkvh6YE6BA9v6B/024AvLRuTWD2hKPWo9XSOKo jHH0WH3FHIGAewztTf6hRNbUPSmoJKmrdjWwCkRXMjbZ6Z7cYERk56GX7hioSW2Q QyH72QLEhHK0SM8YEI1zuLeskrPehgh5OiUi5slGYPvIgJAiP2/Jygc+rBVLs8na F3wHAg== -----END CERTIFICATE-----Generated at Tue Jun 30 19:10:06 2026 by rpki-client