$ rpki-client -vvf rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft File: 61F2C234A51074E0978404BDC79AA79130040B00.mft (raw, json) Hash identifier: DKnxT4WDiASodKW5rfHtQaMX98n1NSJbkndoyK+XAaQ= Subject key identifier: 2C:0F:C0:76:8F:64:ED:F6:00:4A:0C:02:6C:C2:FD:3F:C6:32:68:C5 Authority key identifier: 61:F2:C2:34:A5:10:74:E0:97:84:04:BD:C7:9A:A7:91:30:04:0B:00 Certificate issuer: /CN=61F2C234A51074E0978404BDC79AA79130040B00 Certificate serial: 3A174205FBA3AE83767BA28191CCB3E9FDE169B8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft Manifest number: 84 Signing time: Fri 14 Aug 2026 14:57:07 +0000 Manifest this update: Fri 14 Aug 2026 14:52:07 +0000 Manifest next update: Sat 15 Aug 2026 16:53:07 +0000 Files and hashes: 1: 61F2C234A51074E0978404BDC79AA79130040B00.crl (hash: YbnmtkJy55qFHsRwwvx4Xv8v8y7FA7UenIpTYQGKvnI=) 2: 3130332e3134372e3133302e302f32332d3234203d3e20313331363737.roa (hash: VGWA54tpU9ZSYiEjleM6DRC35GLg1lZvqOaYCzFR4yI=) 3: 323430353a623863303a3a2f33322d3634203d3e20313331363734.roa (hash: zPchVf+BzdWdK6jtiyFuKEMvAaWvPZafeIufyi+NDAU=) 4: 3130332e3134372e3133302e302f32332d3234203d3e20313331363734.roa (hash: hPsd6S2D9hMin8P77QyQ2OhAm+/bYf9j5m2G2tBdGrg=) 5: 323430353a623863303a3a2f33322d3634203d3e20313331363737.roa (hash: AnPDeDj6hR2bEdYvy6SAFA3A/pHmArnFaxzCcI0NAKA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.crl rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 16:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:17:42:05:fb:a3:ae:83:76:7b:a2:81:91:cc:b3:e9:fd:e1:69:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61F2C234A51074E0978404BDC79AA79130040B00 Validity Not Before: Aug 14 14:52:07 2026 GMT Not After : Aug 15 16:53:07 2026 GMT Subject: CN=2C0FC0768F64EDF6004A0C026CC2FD3FC63268C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:91:44:fb:88:c1:01:ad:e0:e0:87:fb:3b: ac:a0:93:82:29:6c:a0:60:fd:3e:62:80:55:4f:ae: f7:a1:6d:bf:5e:60:94:23:2d:f8:98:f2:2c:80:78: e8:13:8b:91:96:17:af:d0:cd:4e:03:f3:0d:d7:1c: b9:1c:c1:ab:f1:f4:1d:34:ae:09:73:6c:d9:fd:b5: 1f:8f:e4:4d:09:06:c4:99:55:69:ad:81:16:39:74: a8:e3:ad:a5:01:7f:65:68:3f:2f:5b:56:4c:00:d1: da:95:d0:05:a8:c4:f0:68:7e:e0:5f:6f:4e:90:79: d1:88:c6:5b:33:96:b0:e4:33:97:50:05:2f:d1:8f: c5:f4:4f:fc:25:37:38:2e:44:94:53:e9:10:67:97: 7f:ed:fc:05:1e:dd:fa:21:29:7c:63:14:66:c5:55: 2b:7e:c2:a2:26:95:88:72:70:8e:9e:dc:33:f0:a7: 70:fc:2b:95:c1:c4:17:f1:07:ae:13:0f:6b:ab:27: 45:c5:7c:ad:af:59:b9:0c:20:dc:e1:45:85:04:c4: ea:40:76:d6:77:c7:db:78:53:5e:29:31:e1:a0:1b: 5e:66:4c:9b:25:a1:3b:ab:5b:30:a2:46:df:2c:97: 49:08:33:d2:31:36:90:37:53:9e:6b:ec:99:d0:aa: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0F:C0:76:8F:64:ED:F6:00:4A:0C:02:6C:C2:FD:3F:C6:32:68:C5 X509v3 Authority Key Identifier: keyid:61:F2:C2:34:A5:10:74:E0:97:84:04:BD:C7:9A:A7:91:30:04:0B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:64:2d:3f:c8:76:47:a5:89:2e:d6:b1:98:72:ec:fb:d6:a6: 5a:39:8f:b0:3c:26:31:6a:4d:65:e9:dd:83:e1:1c:db:37:ce: a4:01:ee:e2:45:2b:f2:8e:95:80:2f:18:d6:fa:6d:2e:81:dc: 53:a1:63:aa:b3:33:ca:32:ec:49:9c:e1:6b:c0:45:43:da:69: b2:03:77:56:8e:81:2b:f6:5f:03:00:ae:23:98:54:ee:59:10: 67:4b:d7:66:8f:0f:05:0b:e7:28:44:8a:23:cb:c3:76:eb:09: 93:ee:dd:9c:ca:f8:6b:c4:18:38:29:20:f7:3e:ed:e1:9f:b7: 95:96:b4:37:1b:e0:dd:78:31:fc:5f:c8:76:ed:65:45:c9:75: fb:a2:8d:74:31:12:a0:cf:34:32:66:ea:11:ad:8e:f9:39:d2: af:b6:0c:2f:d3:01:4e:11:a4:1d:38:15:a8:d2:21:2e:23:52: a1:5f:de:e2:da:08:45:53:83:85:ce:07:ee:75:6f:98:d6:ed: 98:ff:87:ee:b7:bd:f9:c8:a8:0e:46:4c:d6:d1:dc:88:35:45: 17:86:87:e4:79:5f:db:1d:55:bf:d6:6a:e6:13:50:11:f6:ef: a9:df:05:58:a0:a2:5c:9c:90:cb:45:7f:d2:2d:9f:9c:c9:ce: 2e:29:47:80 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUOhdCBfujroN2e6KBkcyz6f3habgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGMkMyMzRBNTEwNzRFMDk3ODQwNEJEQzc5QUE3OTEz MDA0MEIwMDAeFw0yNjA4MTQxNDUyMDdaFw0yNjA4MTUxNjUzMDdaMDMxMTAvBgNV BAMTKDJDMEZDMDc2OEY2NEVERjYwMDRBMEMwMjZDQzJGRDNGQzYzMjY4QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2JFE+4jBAa3g4If7O6ygk4Ip bKBg/T5igFVPrvehbb9eYJQjLfiY8iyAeOgTi5GWF6/QzU4D8w3XHLkcwavx9B00 rglzbNn9tR+P5E0JBsSZVWmtgRY5dKjjraUBf2VoPy9bVkwA0dqV0AWoxPBofuBf b06QedGIxlszlrDkM5dQBS/Rj8X0T/wlNzguRJRT6RBnl3/t/AUe3fohKXxjFGbF VSt+wqImlYhycI6e3DPwp3D8K5XBxBfxB64TD2urJ0XFfK2vWbkMINzhRYUExOpA dtZ3x9t4U14pMeGgG15mTJsloTurWzCiRt8sl0kIM9IxNpA3U55r7JnQqpL9AgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQULA/Ado9k7fYASgwCbML9P8YyaMUwHwYDVR0j BBgwFoAUYfLCNKUQdOCXhAS9x5qnkTAECwAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTlJJ Q0gvMC82MUYyQzIzNEE1MTA3NEUwOTc4NDA0QkRDNzlBQTc5MTMwMDQwQjAwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzYxRjJDMjM0QTUxMDc0RTA5Nzg0MDRCREM3 OUFBNzkxMzAwNDBCMDAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9PUEVOUklDSC8wLzYxRjJDMjM0 QTUxMDc0RTA5Nzg0MDRCREM3OUFBNzkxMzAwNDBCMDAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsZC0/ yHZHpYku1rGYcuz71qZaOY+wPCYxak1l6d2D4RzbN86kAe7iRSvyjpWALxjW+m0u gdxToWOqszPKMuxJnOFrwEVD2mmyA3dWjoEr9l8DAK4jmFTuWRBnS9dmjw8FC+co RIojy8N26wmT7t2cyvhrxBg4KSD3Pu3hn7eVlrQ3G+DdeDH8X8h27WVFyXX7oo10 MRKgzzQyZuoRrY75OdKvtgwv0wFOEaQdOBWo0iEuI1KhX97i2ghFU4OFzgfudW+Y 1u2Y/4fut735yKgORkzW0dyINUUXhofkeV/bHVW/1mrmE1AR9u+p3wVYoKJcnJDL RX/SLZ+cyc4uKUeA -----END CERTIFICATE-----Generated at Sat Aug 15 05:29:09 2026 by rpki-client