$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft File: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft (raw, json) Hash identifier: PpKTnYyFkD4gZwN0tOzO1klAD7SyBJQntbkmxcSwBOk= Subject key identifier: F2:FD:24:66:0D:81:32:98:77:62:F0:36:93:FF:D1:EB:13:3B:37:D3 Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Certificate serial: 498C8E9D0D23FE1AE7DDCE8A253078CD67F7ADE4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft Manifest number: 59 Signing time: Tue 30 Jun 2026 12:23:50 +0000 Manifest this update: Tue 30 Jun 2026 12:18:50 +0000 Manifest next update: Wed 01 Jul 2026 12:24:50 +0000 Files and hashes: 1: 33392e312e302e302f32302d3234203d3e2039393232.roa (hash: XsN+8OXikSiKwT554Z/8JtJMRKlDNFZ1zHxkg1sQLrI=) 2: 33392e312e34382e302f32302d3234203d3e2039393232.roa (hash: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=) 3: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (hash: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=) 4: 33392e312e34372e302f32342d3234203d3e2039393232.roa (hash: Drtv5JpDCKBUTLlwm2QdYijdfjd//4f1UxcFzmvf4Yg=) 5: 33392e312e31362e302f32302d3234203d3e2039393232.roa (hash: o5tck8QLFY02tn9jNvUElQeuTpHy+ammIuF39TN/Cn4=) 6: 323430343a38303a3a2f32382d3438203d3e203138313832.roa (hash: gD1x4xXT4Z6eEJ+bwB2oDJNQCUbNjWpPyKuQClgUoNQ=) 7: 33392e312e34302e302f32322d3234203d3e2039393232.roa (hash: z5CRvkmrV5KJFcdljtPbVmXZST0Ame/3ck3rEFg8aGM=) 8: 36312e36342e36342e302f31382d3234203d3e203138313832.roa (hash: ZufTl96QJSTGjjHHnlV902JYYFFNTIDFxh070LDkULs=) 9: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (hash: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=) 10: 36312e36322e302e302f31362d3234203d3e203138313832.roa (hash: ifIFQrYUhM297jse0mQ1w+HqkUSGHCWju3weIN7aUQs=) 11: 33392e312e33322e302f32312d3234203d3e2039393232.roa (hash: VNQcRXeOE/j/rdkFQwcA1LclvGgGVBSj6YxVH+Y+B5E=) 12: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl (hash: RcLJFfMO2UU1ETSLJ1AucLx3gFuKb/ZThMKYJLaypFw=) 13: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (hash: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=) 14: 33392e312e34362e302f32342d3234203d3e2039393232.roa (hash: onwq6khytNt8j9JeiESYQPMZkrctbzkf2UmQhqWpjYw=) 15: 36312e36342e3132382e302f31372d3234203d3e203138313832.roa (hash: AP04YgE4U4X0DbCKpFBdjCNZlauxNQuycSDnxfq2LBo=) 16: 33392e312e39362e302f32302d3234203d3e203138343139.roa (hash: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=) 17: 33392e312e34352e302f32342d3234203d3e2039393232.roa (hash: ryqYKYb9ZEnNDprKt9KNFJe6hMX8qggWXnAtJIFQzic=) 18: 3231392e38352e302e302f31362d3234203d3e203138313832.roa (hash: TkTwJY6tgXdxY0w+yf0JfiJDrdGZLKSEjlzpI3ieJUU=) 19: 33392e312e34342e302f32342d3234203d3e2039393232.roa (hash: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=) 20: 33392e312e302e302f31362d3234203d3e203138313832.roa (hash: CffvCFfDEQybZwp62g5aXFZex+pvcH1gSZG/H/2FRO0=) 21: 3231392e38342e302e302f31362d3234203d3e203138313832.roa (hash: 8fiqTkiu9MOMh1suF5MiCOJuDwIsVQ34W7YS4b6Ylb8=) 22: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (hash: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=) 23: 33392e312e36342e302f32302d3234203d3e2039393232.roa (hash: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 12:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:8c:8e:9d:0d:23:fe:1a:e7:dd:ce:8a:25:30:78:cd:67:f7:ad:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Validity Not Before: Jun 30 12:18:50 2026 GMT Not After : Jul 1 12:24:50 2026 GMT Subject: CN=F2FD24660D8132987762F03693FFD1EB133B37D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f9:8c:b9:05:c5:e5:47:98:45:e5:72:07:9b: 39:7c:4c:a2:e2:45:e6:3b:b6:80:ac:3f:2c:21:89: 11:07:34:a2:2a:f9:55:f1:da:3a:34:56:cb:f2:84: 2c:3e:b0:59:42:55:0e:54:a1:14:ff:8c:c7:58:f3: 05:76:f4:98:7a:97:03:f8:1a:70:00:c7:87:84:4b: b3:40:4f:00:f2:d3:5a:33:cb:e5:fd:e5:12:d7:d6: be:d9:1b:af:b0:99:a6:a8:12:a9:be:a0:c5:91:23: bc:fc:28:ea:c8:60:bb:81:0c:2a:85:73:5c:f9:7d: 65:d5:e8:46:98:65:c7:c1:f0:44:50:1d:c9:46:78: 7c:35:b2:dc:c7:a6:d9:d9:82:55:9b:e7:e3:34:fb: c3:d0:bd:a1:61:48:cf:1a:9f:b9:61:74:93:85:6a: 6c:cd:c1:10:4a:94:14:fb:ae:cf:0b:14:7c:07:7d: 2e:1a:1b:b8:09:76:79:c1:71:00:84:d7:ba:cd:00: 03:32:c5:26:c9:31:2d:bf:2f:66:cc:ab:82:45:b7: 9a:69:cd:99:e5:d5:4a:f0:5e:6c:c9:98:40:05:46: f1:4e:5e:b9:78:19:23:c2:4f:6b:d8:15:76:23:d2: 92:4f:8a:b9:0f:5f:00:b2:e4:36:f1:f3:40:a5:6c: 4a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FD:24:66:0D:81:32:98:77:62:F0:36:93:FF:D1:EB:13:3B:37:D3 X509v3 Authority Key Identifier: keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:16:3e:56:a5:c0:1f:3f:19:3b:d4:e5:2a:48:53:d0:38:28: a4:7c:3f:0f:13:c1:d2:25:0a:14:69:4a:6d:e3:6a:a7:a1:fc: 18:8e:c2:ab:44:d7:99:a3:62:e3:97:9c:5e:9f:41:9e:35:28: 59:f8:09:f1:ef:ac:56:6b:7e:e2:55:28:7e:6c:73:fb:2e:4f: dd:b4:dd:33:7c:b8:81:85:3f:11:36:0e:ca:9a:ca:cd:8f:aa: 03:55:9d:cd:11:57:bf:26:bb:ca:10:21:68:cf:83:2c:0d:4d: 9f:53:c7:ee:a0:bc:d4:72:b3:d3:59:e2:f5:9a:58:2e:68:0f: 2a:ea:50:e8:8d:5e:bf:8c:30:2f:79:5f:28:a8:c4:6d:68:1b: c4:71:1b:90:05:19:7a:fb:d0:b1:e3:44:9b:f9:4f:e3:e9:25: 7c:aa:94:35:43:2f:55:7c:0c:81:8b:8f:34:d3:af:d3:58:61: e8:b1:bd:90:14:e3:eb:9c:61:f1:28:d0:8d:39:9c:5b:f2:74: 8b:1a:06:db:ce:26:5b:13:f8:ca:97:3d:59:f8:ed:87:ff:5e: 7f:e1:ff:c0:5d:8f:00:2a:86:a6:4a:82:16:e3:4a:e3:54:3f: 7c:92:1c:4e:45:a3:5e:f7:68:29:9c:b1:ee:9f:1e:69:d8:c3: 9c:f0:3d:76 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUSYyOnQ0j/hrn3c6KJTB4zWf3reQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB RjhDQzhFRjAeFw0yNjA2MzAxMjE4NTBaFw0yNjA3MDExMjI0NTBaMDMxMTAvBgNV BAMTKEYyRkQyNDY2MEQ4MTMyOTg3NzYyRjAzNjkzRkZEMUVCMTMzQjM3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ+Yy5BcXlR5hF5XIHmzl8TKLi ReY7toCsPywhiREHNKIq+VXx2jo0VsvyhCw+sFlCVQ5UoRT/jMdY8wV29Jh6lwP4 GnAAx4eES7NATwDy01ozy+X95RLX1r7ZG6+wmaaoEqm+oMWRI7z8KOrIYLuBDCqF c1z5fWXV6EaYZcfB8ERQHclGeHw1stzHptnZglWb5+M0+8PQvaFhSM8an7lhdJOF amzNwRBKlBT7rs8LFHwHfS4aG7gJdnnBcQCE17rNAAMyxSbJMS2/L2bMq4JFt5pp zZnl1UrwXmzJmEAFRvFOXrl4GSPCT2vYFXYj0pJPirkPXwCy5Dbx80ClbEpjAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU8v0kZg2BMph3YvA2k//R6xM7N9MwHwYDVR0j BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx RTFBQUY4Q0M4RUYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzNGNkQzM0M5QjM5Q0ZD OTUwQTJEM0RCQzc4MTMxRTFBQUY4Q0M4RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0Fj5WpcAfPxk7 1OUqSFPQOCikfD8PE8HSJQoUaUpt42qnofwYjsKrRNeZo2Ljl5xen0GeNShZ+Anx 76xWa37iVSh+bHP7Lk/dtN0zfLiBhT8RNg7KmsrNj6oDVZ3NEVe/JrvKECFoz4Ms DU2fU8fuoLzUcrPTWeL1mlguaA8q6lDojV6/jDAveV8oqMRtaBvEcRuQBRl6+9Cx 40Sb+U/j6SV8qpQ1Qy9VfAyBi48006/TWGHosb2QFOPrnGHxKNCNOZxb8nSLGgbb ziZbE/jKlz1Z+O2H/15/4f/AXY8AKoamSoIW40rjVD98khxORaNe92gpnLHunx5p 2MOc8D12 -----END CERTIFICATE-----Generated at Tue Jun 30 19:08:55 2026 by rpki-client