$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft File: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft (raw, json) Hash identifier: NqaSY6CF00McWRfEFihdwNYuMvHxycjyWb7Aa6qLpkQ= Subject key identifier: 8C:31:A9:2B:09:03:BB:08:8A:7A:EF:7B:E9:96:71:B0:26:6E:B7:EF Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 2624F1EF032035BBCDFFB689480C28C3EBB3534F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft Manifest number: 31 Signing time: Thu 11 Jun 2026 06:02:02 +0000 Manifest this update: Thu 11 Jun 2026 05:57:02 +0000 Manifest next update: Fri 12 Jun 2026 07:43:02 +0000 Files and hashes: 1: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl (hash: T/9/mbHk0by+lX6m4HjNWNvtOhDGK/e22lbUsgSCEPY=) 2: 3138372e37392e3234302e302f32312d3332203d3e20313331363432.roa (hash: 3hkv3oIEXxYKcJ6+wpyKK8B+zNNvwWzz7gTiuX5XoeM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 07:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:24:f1:ef:03:20:35:bb:cd:ff:b6:89:48:0c:28:c3:eb:b3:53:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Jun 11 05:57:02 2026 GMT Not After : Jun 12 07:43:02 2026 GMT Subject: CN=8C31A92B0903BB088A7AEF7BE99671B0266EB7EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8d:be:8f:ff:f3:c6:ed:ed:75:a0:08:cd:08: 61:34:7f:a0:64:79:8a:d3:5c:4b:d5:03:7d:a8:66: 3b:e1:11:5d:7f:e0:91:ed:79:45:77:3c:ff:bd:67: 6d:b8:0d:fb:40:36:41:1e:7e:78:87:e2:20:c8:a4: 60:24:1e:d0:9c:a2:1b:c0:79:c5:64:61:e9:8a:27: 9a:5e:c8:c3:e9:85:d1:61:a7:88:d5:62:1e:07:c6: 66:1f:f5:4d:54:dd:57:14:92:fe:3b:24:c4:0a:85: b4:1d:aa:53:bb:3c:ef:47:d9:3c:58:63:e4:e4:9d: b2:97:31:db:c9:a1:53:08:81:0b:5d:2f:92:b4:8e: e1:8c:83:0e:cb:4c:2d:94:cb:34:35:eb:75:52:1e: cf:0a:f4:d9:94:c8:54:d3:72:ac:fd:2e:80:4f:5a: e3:d7:99:02:45:1d:c2:0a:2c:76:a6:55:bf:66:ab: 25:77:3c:82:d6:48:26:5f:63:d3:89:0e:60:ed:fe: 3d:51:98:9f:99:38:ef:8b:18:2b:bc:7e:e0:7e:43: 99:2e:54:8b:d7:1a:4a:f8:64:c6:31:cb:9c:47:1d: b4:2d:59:19:e2:28:2d:d0:18:a2:0f:a1:89:ea:59: 87:5f:dc:16:9f:51:49:ef:00:c9:b5:97:22:4e:dd: 29:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:31:A9:2B:09:03:BB:08:8A:7A:EF:7B:E9:96:71:B0:26:6E:B7:EF X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:40:fa:08:a2:b0:46:54:76:3d:aa:43:8f:07:66:c7:ea:b8: 9e:e7:95:74:ad:fe:ab:4d:be:98:5c:cd:55:19:8a:9f:55:a2: 00:39:00:1b:10:e5:02:0b:28:e4:d0:0b:2b:9f:1f:38:66:4d: 1d:2e:7d:e9:28:2d:3b:c3:91:c7:78:44:d0:ad:84:25:be:cb: d5:a9:fa:38:e3:b0:d1:cd:60:2a:5e:22:32:38:13:00:40:c1: 4b:85:c2:62:15:2b:85:66:7f:1b:d3:c8:7c:95:8a:32:b3:61: 83:30:7b:be:17:e7:86:85:bf:7a:2d:68:71:0a:ab:52:33:80: 8e:0b:07:d6:e2:dd:ed:1b:05:ad:27:48:21:3d:58:72:b8:14: e5:f8:d1:0e:06:c1:0e:52:36:70:24:ab:d2:99:72:25:9c:a1: a8:e9:ce:d2:31:d8:47:50:83:c3:bc:05:59:08:22:3d:30:7f: da:fa:b0:a3:a9:20:14:e2:ef:d0:54:69:f0:66:e6:61:4b:46: 44:e2:64:6d:45:86:68:b5:89:2f:28:2d:f9:84:df:e7:5e:5e: 89:97:0c:ad:be:57:41:8a:d5:da:44:f5:52:6b:51:6a:0d:6a: 50:1e:57:3a:89:27:6e:ea:aa:be:bc:ae:7a:a8:aa:94:ae:4b: 92:f7:83:cd -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUJiTx7wMgNbvN/7aJSAwow+uzU08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA2MTEwNTU3MDJaFw0yNjA2MTIwNzQzMDJaMDMxMTAvBgNV BAMTKDhDMzFBOTJCMDkwM0JCMDg4QTdBRUY3QkU5OTY3MUIwMjY2RUI3RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjb6P//PG7e11oAjNCGE0f6Bk eYrTXEvVA32oZjvhEV1/4JHteUV3PP+9Z224DftANkEefniH4iDIpGAkHtCcohvA ecVkYemKJ5peyMPphdFhp4jVYh4HxmYf9U1U3VcUkv47JMQKhbQdqlO7PO9H2TxY Y+TknbKXMdvJoVMIgQtdL5K0juGMgw7LTC2UyzQ163VSHs8K9NmUyFTTcqz9LoBP WuPXmQJFHcIKLHamVb9mqyV3PILWSCZfY9OJDmDt/j1RmJ+ZOO+LGCu8fuB+Q5ku VIvXGkr4ZMYxy5xHHbQtWRniKC3QGKIPoYnqWYdf3BafUUnvAMm1lyJO3Sk9AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUjDGpKwkDuwiKeu976ZZxsCZut+8wHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvM0MyMTkyNjNGMjZCOTlFMkRC Mzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMlA+giisEZUdj2qQ48H ZsfquJ7nlXSt/qtNvphczVUZip9VogA5ABsQ5QILKOTQCyufHzhmTR0ufekoLTvD kcd4RNCthCW+y9Wp+jjjsNHNYCpeIjI4EwBAwUuFwmIVK4VmfxvTyHyVijKzYYMw e74X54aFv3otaHEKq1IzgI4LB9bi3e0bBa0nSCE9WHK4FOX40Q4GwQ5SNnAkq9KZ ciWcoajpztIx2EdQg8O8BVkIIj0wf9r6sKOpIBTi79BUafBm5mFLRkTiZG1Fhmi1 iS8oLfmE3+deXomXDK2+V0GK1dpE9VJrUWoNalAeVzqJJ27qqr68rnqoqpSuS5L3 g80= -----END CERTIFICATE-----Generated at Thu Jun 11 22:50:26 2026 by rpki-client