$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft File: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft (raw, json) Hash identifier: 68l6SNh2Dk5i8xUAgSH/sQupWcsiWNxqXJ3C67K1/FE= Subject key identifier: C0:7E:08:4B:C8:9A:2B:F2:F5:9C:4A:FE:1E:4A:E8:F8:90:A4:CF:DF Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50 Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50 Certificate serial: 2FA4FD8F7BADCCE756B5B612FF1EF85F301E9F1C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft Manifest number: 7C Signing time: Sun 26 Jul 2026 11:46:25 +0000 Manifest this update: Sun 26 Jul 2026 11:41:25 +0000 Manifest next update: Mon 27 Jul 2026 12:52:25 +0000 Files and hashes: 1: 3138372e37392e3139322e302f31392d3234203d3e203338303432.roa (hash: L/E0Yfp/GwgZgFh8cWkW12iwkjBxZmoDDFi3H0v3pY8=) 2: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl (hash: Ozdwltq/fFcUwX21w9SAS4wIEkrlXXBNLw3rgcHwZ08=) 3: 3138372e37392e3234382e302f32312d3234203d3e20313334383233.roa (hash: Zz9CvLm2AJx5rpKaFfW4V3557O2rIHrGg/E64B0gDkE=) 4: 3138372e37392e3234382e302f32312d3234203d3e20313331313531.roa (hash: 3vADVgqIF+DMqXN/Slxe4U6QenJyre1e9qbCennjH4s=) 5: 3138372e37392e3139322e302f31392d3234203d3e20313334383233.roa (hash: a8CleYW3Fkq8o8fjYWlYdkD+yxdQ7vmQublJvofR+u0=) 6: 3138372e37392e3139322e302f31392d3234203d3e20313331313531.roa (hash: 05w0uJce6h2DLQWt4ZdfTjMtpIegQ9tImqKoarYiRe8=) 7: 3138372e37392e3234382e302f32312d3234203d3e203338303432.roa (hash: /1olUNUta2jWsipkUXWKP+uzfj0Zi5YxacKqhx693kk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 12:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a4:fd:8f:7b:ad:cc:e7:56:b5:b6:12:ff:1e:f8:5f:30:1e:9f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50 Validity Not Before: Jul 26 11:41:25 2026 GMT Not After : Jul 27 12:52:25 2026 GMT Subject: CN=C07E084BC89A2BF2F59C4AFE1E4AE8F890A4CFDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:91:b1:f3:df:c7:57:be:fb:d8:d2:c3:85: 30:5b:37:76:12:26:98:ff:f6:61:63:d2:d5:4e:87: ed:e5:31:d7:bf:25:d4:e4:da:00:e9:38:7d:df:9c: a8:9f:ba:d6:5e:aa:75:b1:1d:e1:d5:52:7a:52:9d: 4c:2b:18:5e:f7:70:00:ea:6b:ed:07:4f:6c:c2:a9: 5a:e0:36:5c:32:ce:89:85:34:73:60:53:29:87:39: b7:1f:b7:68:36:14:fd:e3:3d:74:c7:07:f5:2f:39: 99:bd:d8:43:3b:1e:da:2c:f2:00:00:eb:a0:c1:b7: 9f:c5:91:1d:44:f8:93:38:52:58:d4:91:57:19:a1: 27:7c:ce:45:20:6c:29:06:45:0b:dc:02:6f:13:e5: 16:63:20:22:90:2a:53:e4:db:ee:1a:71:f5:50:9e: 0f:77:d9:4c:43:ea:4d:11:70:07:1c:85:35:2c:65: 22:c3:d9:49:23:45:fc:21:5f:35:5c:9e:0d:0e:f9: b8:9a:d7:51:42:02:ff:87:d6:af:68:70:d9:53:c9: 20:44:61:28:aa:ad:9a:6a:b7:b9:56:6b:60:83:33: c7:b8:4a:94:e4:40:0a:49:eb:8b:5e:6c:17:2a:f5: 80:9e:0e:f8:9f:eb:f9:7b:af:05:cc:83:e7:7f:bc: 1e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7E:08:4B:C8:9A:2B:F2:F5:9C:4A:FE:1E:4A:E8:F8:90:A4:CF:DF X509v3 Authority Key Identifier: keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b8:2e:c8:60:3e:4c:36:7b:f4:07:f5:96:6d:cc:14:2d:5e: 58:3a:66:95:b8:ce:5c:ca:71:c0:92:46:dd:22:06:e2:a9:ab: da:00:d5:59:3d:b1:ad:01:2a:ea:bf:94:7f:a5:53:57:27:58: 73:93:65:a5:97:b6:d7:46:fd:56:bc:12:75:5e:90:83:f9:3d: 08:c1:9e:d9:8c:6a:d9:91:08:7f:c5:1b:1f:a8:8b:27:df:d0: ca:33:7d:92:d0:cb:e0:99:f9:24:bc:dd:37:01:67:a4:de:da: 92:a4:75:15:f1:ed:b8:ba:52:1d:ea:79:b5:ac:d4:a8:8a:11: b4:d2:39:4d:5e:1b:9e:4e:b0:48:cc:2f:72:6b:ac:c5:ca:11: 7b:fa:b4:03:df:58:bf:91:54:9c:3d:cd:89:21:b5:b0:19:fd: f7:36:08:f9:85:e3:a9:30:94:36:04:c2:ab:b8:fb:f2:86:fe: 4a:b0:47:84:a4:dd:8b:77:4f:57:0d:b1:8b:d7:ee:33:7e:63: 7f:60:77:d8:a6:a2:24:5d:66:2c:32:2b:04:90:b5:b2:cd:c0: 56:3f:7d:48:48:0c:18:5f:f9:43:51:74:68:12:5e:64:98:16: 1b:2d:a0:94:3d:94:df:f9:9d:d9:32:c5:6b:58:5f:58:85:75: c2:3c:96:eb -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUL6T9j3utzOdWtbYS/x74XzAenxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBRDg3NzM1Qjk2RTM4QzVCMTY0NTBEMDZGMUUzRjA1 RDFDMEI1MDAeFw0yNjA3MjYxMTQxMjVaFw0yNjA3MjcxMjUyMjVaMDMxMTAvBgNV BAMTKEMwN0UwODRCQzg5QTJCRjJGNTlDNEFGRTFFNEFFOEY4OTBBNENGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD15Gx89/HV7772NLDhTBbN3YS Jpj/9mFj0tVOh+3lMde/JdTk2gDpOH3fnKifutZeqnWxHeHVUnpSnUwrGF73cADq a+0HT2zCqVrgNlwyzomFNHNgUymHObcft2g2FP3jPXTHB/UvOZm92EM7Htos8gAA 66DBt5/FkR1E+JM4UljUkVcZoSd8zkUgbCkGRQvcAm8T5RZjICKQKlPk2+4acfVQ ng932UxD6k0RcAcchTUsZSLD2UkjRfwhXzVcng0O+bia11FCAv+H1q9ocNlTySBE YSiqrZpqt7lWa2CDM8e4SpTkQApJ64tebBcq9YCeDvif6/l7rwXMg+d/vB6dAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUwH4IS8iaK/L1nEr+Hkro+JCkz98wHwYDVR0j BBgwFoAU362Hc1uW44xbFkUNBvHj8F0cC1AwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U Vy8xL0RGQUQ4NzczNUI5NkUzOEM1QjE2NDUwRDA2RjFFM0YwNUQxQzBCNTAuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzIvREZBRDg3NzM1Qjk2RTM4QzVCMTY0NTBEMDZG MUUzRjA1RDFDMEI1MC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMS9ERkFEODc3MzVC OTZFMzhDNUIxNjQ1MEQwNkYxRTNGMDVEMUMwQjUwLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7guyGA+ TDZ79Af1lm3MFC1eWDpmlbjOXMpxwJJG3SIG4qmr2gDVWT2xrQEq6r+Uf6VTVydY c5NlpZe210b9VrwSdV6Qg/k9CMGe2Yxq2ZEIf8UbH6iLJ9/QyjN9ktDL4Jn5JLzd NwFnpN7akqR1FfHtuLpSHep5tazUqIoRtNI5TV4bnk6wSMwvcmusxcoRe/q0A99Y v5FUnD3NiSG1sBn99zYI+YXjqTCUNgTCq7j78ob+SrBHhKTdi3dPVw2xi9fuM35j f2B32KaiJF1mLDIrBJC1ss3AVj99SEgMGF/5Q1F0aBJeZJgWGy2glD2U3/md2TLF a1hfWIV1wjyW6w== -----END CERTIFICATE-----Generated at Mon Jul 27 00:50:50 2026 by rpki-client