$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft File: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft (raw, json) Hash identifier: 2gaynsQY58czTFRkXQjdyCq4dntd2bstDk95z4EP65M= Subject key identifier: 47:B2:F0:E4:D3:83:27:77:D1:D5:32:83:99:AF:78:17:23:3B:7F:88 Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 41906CB1FA71E034A611960C35166A1A51E1F4C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft Manifest number: 6F Signing time: Sun 26 Jul 2026 10:06:15 +0000 Manifest this update: Sun 26 Jul 2026 10:01:15 +0000 Manifest next update: Mon 27 Jul 2026 11:59:15 +0000 Files and hashes: 1: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl (hash: SXUV78fNNZ6xd8eTPGipQsMz/4y3YuJaXTOnMhUDhRs=) 2: 3138372e37392e3234372e302f32342d3234203d3e203134383734.roa (hash: xrdOBfPyCEULsjixsbr/Px/rQubD5zMfCzYg1CD5bIk=) 3: 3138372e37392e3234302e302f32312d3332203d3e20313331363432.roa (hash: 3hkv3oIEXxYKcJ6+wpyKK8B+zNNvwWzz7gTiuX5XoeM=) 4: 3138372e37392e3234362e302f32332d3234203d3e203138313738.roa (hash: lvDvOodv8M6LrOgAyDJTwNdJGzoBoLeykAhTF1kRzCI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 11:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:90:6c:b1:fa:71:e0:34:a6:11:96:0c:35:16:6a:1a:51:e1:f4:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Jul 26 10:01:15 2026 GMT Not After : Jul 27 11:59:15 2026 GMT Subject: CN=47B2F0E4D3832777D1D5328399AF7817233B7F88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ac:51:3b:65:90:50:ef:10:c9:c9:72:70:e2: 9c:dc:f2:f5:f5:82:ea:ed:ea:8b:d7:d7:07:96:a0: 91:f5:99:1d:7c:34:c1:0d:77:3f:62:03:b7:11:65: 8e:4d:25:cf:27:2d:1b:c2:4b:2f:7d:31:6e:23:6b: 76:a5:7f:68:6f:13:b2:74:e1:e8:9b:60:8f:50:b0: 95:ea:89:46:4a:82:08:42:2f:10:63:4f:b6:ad:2f: a1:ba:04:76:20:08:7c:98:90:cc:4e:c7:74:f7:90: 8c:f2:60:90:ee:e8:a0:62:70:42:5a:eb:f9:bd:f4: 7d:ea:0b:f9:47:70:60:a8:17:16:0b:4b:93:c3:47: ee:2f:71:46:be:de:50:38:b3:ce:23:2a:d4:6e:69: ba:8e:4c:0d:c1:d6:19:89:c7:37:ab:95:e9:71:2c: 57:cf:b7:20:2c:e7:06:06:e0:b1:f1:13:94:04:c5: fe:80:39:16:cf:46:fd:81:79:12:d7:7f:97:b5:ae: 32:4d:e4:0e:9f:b3:24:28:73:85:d6:c9:eb:55:24: ca:99:5d:9c:82:ae:28:2e:6a:b0:ac:23:be:39:2b: 1e:63:02:2c:7e:09:3c:a8:b7:ec:02:fb:02:ff:5c: 18:71:2b:29:9f:a5:57:a0:65:ee:51:b8:6c:8b:71: f4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B2:F0:E4:D3:83:27:77:D1:D5:32:83:99:AF:78:17:23:3B:7F:88 X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:45:a3:4a:29:41:ad:36:0b:c3:2a:91:39:38:13:79:be:72: d1:18:fb:8d:c2:38:50:19:f8:9d:c0:c9:8c:ae:a0:d3:ca:82: fa:55:ff:0f:c0:17:4a:fd:c1:fc:eb:c7:f9:8a:98:11:1b:ce: cb:03:b5:b5:d1:69:ae:1f:62:1d:30:31:04:72:23:7e:ad:c7: d3:e5:b1:77:fc:2f:17:83:48:09:e2:9e:73:c6:bc:2e:8b:78: 1a:77:8a:5a:26:43:6c:c8:0d:99:08:e3:ea:43:de:25:38:86: 89:7d:b9:09:ab:39:24:02:23:88:cd:4f:8f:03:ff:25:03:5c: 0f:d0:46:c3:d3:25:02:c5:8f:a6:6f:a0:c8:71:69:3b:20:2d: aa:0b:55:02:b2:07:9f:b6:1e:3b:ad:43:84:d2:2c:11:48:fa: 32:0f:0d:a9:55:72:9f:e6:2b:b8:f6:5e:85:fe:bc:11:a1:f7: f6:70:88:42:0d:5b:02:ce:64:94:ee:22:b4:a4:6b:17:c6:19: 32:34:83:9a:e0:ad:ef:a9:d5:9a:f0:28:36:99:6d:86:ba:b3: 7b:5c:51:d7:80:c4:57:df:1b:38:7a:af:ee:39:dd:72:77:c3: 64:e4:0e:2c:18:ae:57:1a:e3:89:b4:be:d9:0b:78:d7:66:4c: 95:11:f1:8e -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUQZBssfpx4DSmEZYMNRZqGlHh9MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA3MjYxMDAxMTVaFw0yNjA3MjcxMTU5MTVaMDMxMTAvBgNV BAMTKDQ3QjJGMEU0RDM4MzI3NzdEMUQ1MzI4Mzk5QUY3ODE3MjMzQjdGODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rFE7ZZBQ7xDJyXJw4pzc8vX1 gurt6ovX1weWoJH1mR18NMENdz9iA7cRZY5NJc8nLRvCSy99MW4ja3alf2hvE7J0 4eibYI9QsJXqiUZKgghCLxBjT7atL6G6BHYgCHyYkMxOx3T3kIzyYJDu6KBicEJa 6/m99H3qC/lHcGCoFxYLS5PDR+4vcUa+3lA4s84jKtRuabqOTA3B1hmJxzerlelx LFfPtyAs5wYG4LHxE5QExf6AORbPRv2BeRLXf5e1rjJN5A6fsyQoc4XWyetVJMqZ XZyCriguarCsI745Kx5jAix+CTyot+wC+wL/XBhxKymfpVegZe5RuGyLcfSrAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUR7Lw5NODJ3fR1TKDma94FyM7f4gwHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvM0MyMTkyNjNGMjZCOTlFMkRC Mzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMpFo0opQa02C8MqkTk4 E3m+ctEY+43COFAZ+J3AyYyuoNPKgvpV/w/AF0r9wfzrx/mKmBEbzssDtbXRaa4f Yh0wMQRyI36tx9PlsXf8LxeDSAninnPGvC6LeBp3ilomQ2zIDZkI4+pD3iU4hol9 uQmrOSQCI4jNT48D/yUDXA/QRsPTJQLFj6ZvoMhxaTsgLaoLVQKyB5+2HjutQ4TS LBFI+jIPDalVcp/mK7j2XoX+vBGh9/ZwiEINWwLOZJTuIrSkaxfGGTI0g5rgre+p 1ZrwKDaZbYa6s3tcUdeAxFffGzh6r+453XJ3w2TkDiwYrlca44m0vtkLeNdmTJUR 8Y4= -----END CERTIFICATE-----Generated at Mon Jul 27 04:18:29 2026 by rpki-client