$ rpki-client -vvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft File: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json) Hash identifier: K/VbZGE4ZTto25NfQKomq5/Yv7bTx0vOyBWzSvXb678= Subject key identifier: F0:0E:25:D3:9B:6E:3C:13:51:7D:5C:CD:6D:70:38:90:9E:BA:24:70 Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Certificate serial: 0FF4845B80F876CE15EDEBA7E2D616255C48C7AB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft Manifest number: 85 Signing time: Sat 15 Aug 2026 02:04:04 +0000 Manifest this update: Sat 15 Aug 2026 01:59:04 +0000 Manifest next update: Sun 16 Aug 2026 02:56:04 +0000 Files and hashes: 1: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=) 2: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=) 3: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: FTZzOZSxPS5CDKTydpZNAGrWfPCPOUaggz8z2dMSTyw=) 4: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=) 5: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 02:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f4:84:5b:80:f8:76:ce:15:ed:eb:a7:e2:d6:16:25:5c:48:c7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Validity Not Before: Aug 15 01:59:04 2026 GMT Not After : Aug 16 02:56:04 2026 GMT Subject: CN=F00E25D39B6E3C13517D5CCD6D7038909EBA2470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:57:7a:72:d7:26:48:9e:53:15:60:e6:9c: 06:4d:d2:f4:53:c8:0b:4d:de:26:83:7a:07:75:1c: ea:58:cb:0e:bc:45:90:44:0e:b3:bc:26:f9:b3:3b: 74:ca:94:bd:d8:bc:cf:58:78:29:09:e4:4f:f8:51: d5:02:e7:68:f0:3c:ab:25:56:87:9b:9c:5e:14:2c: 9b:3b:2c:80:b1:a2:1d:77:1e:9a:a4:ba:7a:1a:1d: a0:32:da:a1:d5:30:d8:88:00:4e:14:6d:52:36:b2: 3a:79:80:60:1c:35:38:af:59:f5:4c:29:90:fa:4e: 8b:12:af:c2:5e:94:a5:22:71:fc:f4:79:be:8c:d5: 6a:c3:87:9b:38:40:2d:a1:53:9c:fa:37:f7:c9:61: b1:e0:11:ae:a1:9e:98:e0:8c:07:76:6d:1c:25:5e: 8b:e5:d1:fa:c6:86:51:df:f8:a2:da:c7:5d:c5:73: 44:ab:e7:75:f9:19:31:4d:0d:24:c6:d0:f0:93:fd: 1e:fc:b0:1f:68:e3:d0:1f:73:68:65:f5:fd:4a:58: 3a:19:06:3d:93:14:f2:b9:4f:32:c8:71:7f:67:f5: 73:c6:7e:9b:99:e9:00:84:43:96:21:ca:35:11:b6: 62:cc:14:63:8e:c1:fc:c7:9c:16:46:de:68:2c:6d: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0E:25:D3:9B:6E:3C:13:51:7D:5C:CD:6D:70:38:90:9E:BA:24:70 X509v3 Authority Key Identifier: keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9f:d2:3a:ad:fd:33:6d:59:94:3d:e2:70:50:eb:cf:e8:5a: 4c:28:e4:b6:e7:09:63:ea:b0:4b:6b:f9:d2:0b:b7:e1:17:5c: e2:9d:3a:ed:a8:57:3b:51:a4:3c:c4:4b:1c:a7:1e:b5:fc:45: 8c:7c:73:58:20:80:22:2f:2c:f6:48:61:de:f0:3b:9e:2d:98: db:1e:fc:15:bb:57:40:b4:73:57:63:30:81:b9:90:06:a6:4e: 7c:82:5a:15:06:29:1e:3f:af:04:f9:7c:12:d0:16:c4:2f:63: 09:2a:c4:b1:6b:01:55:d1:46:2f:30:f0:6c:17:f0:f4:eb:b6: 50:f1:30:bf:8c:06:32:d0:1c:91:e4:56:ec:7c:58:7f:db:77: 35:1e:b8:5a:2b:72:92:a5:21:f3:9e:78:7e:81:8e:ff:f6:64: bc:9b:02:20:0f:a1:25:2f:8f:35:ac:11:17:ae:32:a6:68:2e: d2:4d:37:9c:a2:c5:ac:cb:27:b2:d2:4d:35:e7:a2:09:fe:17: 72:5a:3f:b8:f1:1f:37:8b:c7:a2:23:87:b4:b5:f0:57:fd:76: 19:a8:ee:c6:dd:de:29:2b:1e:c0:4c:83:31:1d:4c:2f:5d:87: ae:e0:5d:4f:28:47:33:28:0f:12:e3:ba:c0:3f:7c:3c:1a:8d: bc:1f:cd:b3 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUD/SEW4D4ds4V7eun4tYWJVxIx6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFDMjdENTI0 NjZBQzdFNjAeFw0yNjA4MTUwMTU5MDRaFw0yNjA4MTYwMjU2MDRaMDMxMTAvBgNV BAMTKEYwMEUyNUQzOUI2RTNDMTM1MTdENUNDRDZENzAzODkwOUVCQTI0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhld6ctcmSJ5TFWDmnAZN0vRT yAtN3iaDegd1HOpYyw68RZBEDrO8JvmzO3TKlL3YvM9YeCkJ5E/4UdUC52jwPKsl VoebnF4ULJs7LICxoh13HpqkunoaHaAy2qHVMNiIAE4UbVI2sjp5gGAcNTivWfVM KZD6TosSr8JelKUicfz0eb6M1WrDh5s4QC2hU5z6N/fJYbHgEa6hnpjgjAd2bRwl Xovl0frGhlHf+KLax13Fc0Sr53X5GTFNDSTG0PCT/R78sB9o49Afc2hl9f1KWDoZ Bj2TFPK5TzLIcX9n9XPGfpuZ6QCEQ5YhyjURtmLMFGOOwfzHnBZG3mgsbZ6bAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQU8A4l05tuPBNRfVzNbXA4kJ66JHAwHwYDVR0j BBgwFoAUTU29KLvriSCzeqYEisJ9UkZqx+YwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VDVU5F VC8wLzRENERCRDI4QkJFQjg5MjBCMzdBQTYwNDhBQzI3RDUyNDY2QUM3RTYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFD MjdENTI0NjZBQzdFNi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NFQ1VORVQvMC80RDREQkQyOEJC RUI4OTIwQjM3QUE2MDQ4QUMyN0Q1MjQ2NkFDN0U2Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJ/SOq39 M21ZlD3icFDrz+haTCjktucJY+qwS2v50gu34Rdc4p067ahXO1GkPMRLHKcetfxF jHxzWCCAIi8s9khh3vA7ni2Y2x78FbtXQLRzV2MwgbmQBqZOfIJaFQYpHj+vBPl8 EtAWxC9jCSrEsWsBVdFGLzDwbBfw9Ou2UPEwv4wGMtAckeRW7HxYf9t3NR64Wity kqUh8554foGO//ZkvJsCIA+hJS+PNawRF64ypmgu0k03nKLFrMsnstJNNeeiCf4X clo/uPEfN4vHoiOHtLXwV/12Gajuxt3eKSsewEyDMR1ML12HruBdTyhHMygPEuO6 wD98PBqNvB/Nsw== -----END CERTIFICATE-----Generated at Sat Aug 15 05:21:29 2026 by rpki-client