$ rpki-client -vvf rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft File: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft (raw, json) Hash identifier: uE0et/ZY3u/PVYngQ9R7J2zB84sDxqjXyG/SPhMzdUo= Subject key identifier: 4E:C3:2C:1E:71:DC:0C:A6:04:99:C6:A9:41:A1:A7:ED:B6:E0:C6:E6 Authority key identifier: 42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 Certificate issuer: /CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Certificate serial: 2BAB4847EF9693E0782D8B5BAAFE74C72C989DBC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft Manifest number: 07 Signing time: Wed 13 May 2026 04:46:55 +0000 Manifest this update: Wed 13 May 2026 04:41:55 +0000 Manifest next update: Thu 14 May 2026 05:50:55 +0000 Files and hashes: 1: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl (hash: EKuuEMai/LyJkI/XZ8bzABL61GVzGn/KMA3PtSHbkTY=) 2: 3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa (hash: GSRooEfHneMScmMay9/suUawwfISd9M2Zp/oSqWxd5c=) 3: 323430353a653463303a3a2f33322d3634203d3e20313331363734.roa (hash: R5XmHRGNRbL/JzVgicSjGM6c3avdhtCi9gHhhibn8Iw=) 4: 323430353a653463303a3a2f33322d3634203d3e20313331363737.roa (hash: 81X32lIDsqpLyEd5Xpy3ESJVHUbt39R1tegiSMqE1PY=) 5: 3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa (hash: U1mFwcarBwcENEkbti0C1yVEmBtDzRAAAqYz8mcIUOg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ab:48:47:ef:96:93:e0:78:2d:8b:5b:aa:fe:74:c7:2c:98:9d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Validity Not Before: May 13 04:41:55 2026 GMT Not After : May 14 05:50:55 2026 GMT Subject: CN=4EC32C1E71DC0CA60499C6A941A1A7EDB6E0C6E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:48:14:8d:db:ad:03:46:a3:36:22:e0:e5: 6c:53:e3:2a:5d:37:78:d3:56:47:d7:0c:44:3d:a4: 16:e9:7a:67:06:2f:d1:67:ad:0e:b4:2c:34:1b:ad: f4:07:e1:5f:d2:ac:e6:70:a8:da:d8:93:d9:a2:09: 05:38:ad:71:85:6b:7c:55:b9:63:27:38:46:15:1b: 55:31:4f:1f:b6:34:15:fa:8d:29:6e:72:db:e0:f5: aa:b5:b8:f9:3b:99:23:17:3d:5a:33:a9:e4:db:3f: 8f:c6:b7:81:dd:55:78:5f:17:a8:ea:35:b6:77:04: 5c:6c:cb:24:19:83:16:fc:57:e9:4a:41:5f:26:f6: 04:b2:49:5e:be:51:39:5e:55:6b:a9:67:53:12:6a: 2f:f8:db:85:3c:e6:7d:01:14:90:38:ae:17:d1:61: ca:8d:c0:96:28:7b:30:13:b4:a0:20:79:a8:06:4f: 17:4a:c7:3c:45:0a:88:b1:28:0a:9b:55:73:8a:0a: 5f:65:88:39:69:4a:c8:e8:fa:ca:42:06:c4:cb:eb: 68:2f:a6:f2:40:7a:81:7f:73:d7:4f:4d:88:22:78: 33:90:ab:a9:0c:f8:c8:a3:62:3a:6a:c3:99:81:e9: 7d:2c:5b:0e:90:73:f2:cf:19:61:7f:39:8b:a6:eb: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C3:2C:1E:71:DC:0C:A6:04:99:C6:A9:41:A1:A7:ED:B6:E0:C6:E6 X509v3 Authority Key Identifier: keyid:42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a3:22:a5:ff:1f:7c:af:94:11:bf:d5:e3:cf:26:a5:0f:27: 79:df:87:f7:2e:33:df:dd:cb:f8:e6:5e:54:24:a0:4d:a8:34: d8:4e:82:c4:59:53:95:a4:b8:33:d4:a1:f6:b6:07:7a:db:43: d5:a4:52:25:e5:01:30:81:45:91:b3:2f:e4:93:92:4a:0f:2a: 18:7e:c9:4a:45:d9:0d:1f:59:b2:41:51:3c:6f:f1:fd:44:83: 3c:98:4e:27:bc:56:2c:1f:75:62:f2:b8:fd:45:ca:90:fd:e9: 85:de:8f:5e:df:4c:57:14:ea:77:dc:1d:ea:d6:9d:04:4a:26: 08:7d:e8:4e:6f:8f:95:e9:66:8b:06:ad:c4:a7:b8:00:9c:11: 7f:70:55:d5:b0:3b:03:2c:b5:e8:a8:70:a0:29:95:bf:bb:7d: cf:60:0c:bc:59:ac:cc:05:40:4c:19:70:c1:9b:81:ad:5f:18: ff:4c:f7:b4:23:9b:f9:8c:4c:bf:7a:83:a3:7d:ab:5e:48:36: b4:86:2b:45:1c:d2:78:76:c6:d7:a7:de:93:d7:69:4a:f8:b7: f7:d5:0f:4e:f2:1c:36:f3:12:3f:53:35:fa:f6:98:cf:b6:16: c5:cc:76:fe:4a:57:a1:71:22:1f:bb:7c:18:e6:a3:a4:af:b4: c6:e4:b9:6c -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUK6tIR++Wk+B4LYtbqv50xyyYnbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1RTA4REVB ODYyMDE2MjAeFw0yNjA1MTMwNDQxNTVaFw0yNjA1MTQwNTUwNTVaMDMxMTAvBgNV BAMTKDRFQzMyQzFFNzFEQzBDQTYwNDk5QzZBOTQxQTFBN0VEQjZFMEM2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtEgUjdutA0ajNiLg5WxT4ypd N3jTVkfXDEQ9pBbpemcGL9FnrQ60LDQbrfQH4V/SrOZwqNrYk9miCQU4rXGFa3xV uWMnOEYVG1UxTx+2NBX6jSluctvg9aq1uPk7mSMXPVozqeTbP4/Gt4HdVXhfF6jq NbZ3BFxsyyQZgxb8V+lKQV8m9gSySV6+UTleVWupZ1MSai/424U85n0BFJA4rhfR YcqNwJYoezATtKAgeagGTxdKxzxFCoixKAqbVXOKCl9liDlpSsjo+spCBsTL62gv pvJAeoF/c9dPTYgieDOQq6kM+MijYjpqw5mB6X0sWw6Qc/LPGWF/OYum6yF/AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUTsMsHnHcDKYEmcapQaGn7bbgxuYwHwYDVR0j BBgwFoAUQsf3jp/aALnKPi0d314I3qhiAWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTkZP Ui8wLzQyQzdGNzhFOUZEQTAwQjlDQTNFMkQxRERGNUUwOERFQTg2MjAxNjIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1 RTA4REVBODYyMDE2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL09QRU5GT1IvMC80MkM3Rjc4RTlG REEwMEI5Q0EzRTJEMURERjVFMDhERUE4NjIwMTYyLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaMipf8f fK+UEb/V488mpQ8ned+H9y4z393L+OZeVCSgTag02E6CxFlTlaS4M9Sh9rYHettD 1aRSJeUBMIFFkbMv5JOSSg8qGH7JSkXZDR9ZskFRPG/x/USDPJhOJ7xWLB91YvK4 /UXKkP3phd6PXt9MVxTqd9wd6tadBEomCH3oTm+PlelmiwatxKe4AJwRf3BV1bA7 Ayy16KhwoCmVv7t9z2AMvFmszAVATBlwwZuBrV8Y/0z3tCOb+YxMv3qDo32rXkg2 tIYrRRzSeHbG16fek9dpSvi399UPTvIcNvMSP1M1+vaYz7YWxcx2/kpXoXEiH7t8 GOajpK+0xuS5bA== -----END CERTIFICATE-----Generated at Wed May 13 20:36:00 2026 by rpki-client