$ rpki-client -vvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft File: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json) Hash identifier: ldwx6zDFv7h17Ty1c8/QlK8N1Ndq6eE9P4aO6idjp9A= Subject key identifier: A9:A1:20:69:81:8D:E1:49:E9:B7:63:B4:E7:26:45:A6:40:E5:5F:CB Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Certificate serial: 060A0B53E8E7B08E6E4A5752DDBB99EEAEAFCA61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft Manifest number: 47 Signing time: Tue 30 Jun 2026 01:22:48 +0000 Manifest this update: Tue 30 Jun 2026 01:17:48 +0000 Manifest next update: Wed 01 Jul 2026 02:08:48 +0000 Files and hashes: 1: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=) 2: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=) 3: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=) 4: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=) 5: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: quVyGkKboV/N4bMbtp9YjGtAg4Dp9mmqcsVvoRRjgrQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 02:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0a:0b:53:e8:e7:b0:8e:6e:4a:57:52:dd:bb:99:ee:ae:af:ca:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Validity Not Before: Jun 30 01:17:48 2026 GMT Not After : Jul 1 02:08:48 2026 GMT Subject: CN=A9A12069818DE149E9B763B4E72645A640E55FCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:e9:86:90:30:a5:34:60:a0:e5:6c:55:4c: d3:7c:2d:86:49:f5:34:be:95:92:e6:70:a6:ec:52: fd:6e:b2:10:37:c1:56:54:c8:c0:88:a7:01:f4:3e: 20:27:57:28:3d:0a:e6:3e:18:94:32:d4:ed:2f:98: c7:1d:26:58:64:35:a7:ac:6b:23:d8:66:54:ab:72: 06:65:38:e4:8b:69:0a:70:01:c5:b8:19:af:cf:4f: 57:cd:77:68:dc:2b:2f:29:b1:8a:f2:61:14:40:e1: 46:dc:b6:88:a4:bb:c6:9a:82:33:ea:ab:3d:a4:51: 38:e3:2e:9b:4e:cb:17:64:0d:30:5c:ff:e6:0c:32: 70:0b:7b:c2:c8:81:7d:43:47:ee:1c:49:c9:55:fb: 28:7e:5c:32:a4:91:b3:eb:9c:87:c4:23:21:39:e0: 15:d9:e4:60:39:d3:6c:15:51:62:a7:52:08:d3:d0: 2d:06:78:94:e3:66:27:c3:f3:51:4a:39:94:18:1f: 16:94:5b:f2:6f:46:e7:ec:24:97:65:68:c3:82:94: 97:c0:1e:7d:8e:14:9e:9e:64:57:ad:0d:3f:4e:02: 03:24:2e:ea:37:32:30:1f:98:6e:0f:7c:71:76:7f: 2e:00:a7:f8:94:9c:11:c6:25:9f:9d:32:29:a2:22: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A1:20:69:81:8D:E1:49:E9:B7:63:B4:E7:26:45:A6:40:E5:5F:CB X509v3 Authority Key Identifier: keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f3:1f:ef:52:bf:39:fe:d1:50:76:59:4d:30:f8:5f:52:e9: 07:ee:c0:41:c1:e2:0e:27:8e:80:58:70:78:ad:b7:ea:ca:5f: 0e:f1:db:ab:2e:06:0d:76:92:dc:ea:66:51:1d:fc:b8:cf:ba: d9:a5:37:3a:ab:68:d2:83:64:e2:a5:6c:a8:5d:37:0c:70:48: 49:2b:0e:74:ac:60:25:b2:01:01:95:a8:be:7c:a3:7c:e7:37: 85:a1:0f:94:a4:4a:cb:8a:56:c1:ad:c3:48:30:84:0e:55:4c: cf:63:0a:87:fc:d5:94:be:3c:c6:33:b4:c7:07:af:34:b4:5c: f9:f7:da:df:aa:b0:6b:01:3b:33:85:80:09:60:3a:e7:53:9c: ae:a9:d2:12:6d:0b:0b:db:31:50:f4:3a:f4:15:d9:c3:2e:a3: b7:b1:19:06:99:40:7b:34:b6:ed:88:19:24:1c:fa:ab:26:d3: bb:47:05:df:6c:48:20:92:33:51:33:6b:90:24:01:53:55:5b: ee:a3:05:fb:d8:f0:cb:19:96:01:42:2a:fd:05:94:09:bc:f5: 4d:67:d2:17:b3:fd:f5:47:c5:4c:2d:1d:43:87:c6:b0:0e:9f: e3:45:5a:f2:a8:6f:0b:34:57:2a:50:82:62:6c:f0:09:5f:59: 57:cf:8f:15 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUBgoLU+jnsI5uSldS3buZ7q6vymEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFDMjdENTI0 NjZBQzdFNjAeFw0yNjA2MzAwMTE3NDhaFw0yNjA3MDEwMjA4NDhaMDMxMTAvBgNV BAMTKEE5QTEyMDY5ODE4REUxNDlFOUI3NjNCNEU3MjY0NUE2NDBFNTVGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEumGkDClNGCg5WxVTNN8LYZJ 9TS+lZLmcKbsUv1ushA3wVZUyMCIpwH0PiAnVyg9CuY+GJQy1O0vmMcdJlhkNaes ayPYZlSrcgZlOOSLaQpwAcW4Ga/PT1fNd2jcKy8psYryYRRA4Ubctoiku8aagjPq qz2kUTjjLptOyxdkDTBc/+YMMnALe8LIgX1DR+4cSclV+yh+XDKkkbPrnIfEIyE5 4BXZ5GA502wVUWKnUgjT0C0GeJTjZifD81FKOZQYHxaUW/JvRufsJJdlaMOClJfA Hn2OFJ6eZFetDT9OAgMkLuo3MjAfmG4PfHF2fy4Ap/iUnBHGJZ+dMimiIoFPAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUqaEgaYGN4Unpt2O05yZFpkDlX8swHwYDVR0j BBgwFoAUTU29KLvriSCzeqYEisJ9UkZqx+YwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VDVU5F VC8wLzRENERCRDI4QkJFQjg5MjBCMzdBQTYwNDhBQzI3RDUyNDY2QUM3RTYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFD MjdENTI0NjZBQzdFNi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NFQ1VORVQvMC80RDREQkQyOEJC RUI4OTIwQjM3QUE2MDQ4QUMyN0Q1MjQ2NkFDN0U2Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfMf71K/ Of7RUHZZTTD4X1LpB+7AQcHiDieOgFhweK236spfDvHbqy4GDXaS3OpmUR38uM+6 2aU3Oqto0oNk4qVsqF03DHBISSsOdKxgJbIBAZWovnyjfOc3haEPlKRKy4pWwa3D SDCEDlVMz2MKh/zVlL48xjO0xwevNLRc+ffa36qwawE7M4WACWA651OcrqnSEm0L C9sxUPQ69BXZwy6jt7EZBplAezS27YgZJBz6qybTu0cF32xIIJIzUTNrkCQBU1Vb 7qMF+9jwyxmWAUIq/QWUCbz1TWfSF7P99UfFTC0dQ4fGsA6f40Va8qhvCzRXKlCC YmzwCV9ZV8+PFQ== -----END CERTIFICATE-----Generated at Tue Jun 30 19:09:07 2026 by rpki-client