$ rpki-client -vvf rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft File: 68C2C435D736FC21F07F0FD09824C8408E615E50.mft (raw, json) Hash identifier: SRRrypAz852SWWQG7WTluAkm299CvaXnAyH4Duzs+ac= Subject key identifier: 14:7C:29:66:BB:05:F2:1A:9A:BA:9B:D0:D1:C9:53:F3:88:51:84:98 Authority key identifier: 68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 Certificate issuer: /CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Certificate serial: 31ECFB7169E9911E984F66351B846EBCEFC1F51D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft Manifest number: 84 Signing time: Fri 14 Aug 2026 15:12:08 +0000 Manifest this update: Fri 14 Aug 2026 15:07:08 +0000 Manifest next update: Sat 15 Aug 2026 15:16:08 +0000 Files and hashes: 1: 323430323a346465303a3a2f33322d3438203d3e20323135393933.roa (hash: hn8g2szDRcwiFI4NluomCU2oCcAtBWUgOMXavAqk71Y=) 2: 323430323a346465303a3a2f33322d3438203d3e20313432303436.roa (hash: utFWN+nIe6ybPW2ARjXAofwG1zRBUaKHEqvyyRToBOU=) 3: 68C2C435D736FC21F07F0FD09824C8408E615E50.crl (hash: uLoBBayaCzV+OGGRUg2jNuVcMYhNWr1wSZUL5Vfrnl0=) 4: 323430323a346465303a3a2f33322d3438203d3e20313331363331.roa (hash: OfflDa5KhbNli0ingnwLTuILzm6N60MY2kq1CLNfkuU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 15:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ec:fb:71:69:e9:91:1e:98:4f:66:35:1b:84:6e:bc:ef:c1:f5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Validity Not Before: Aug 14 15:07:08 2026 GMT Not After : Aug 15 15:16:08 2026 GMT Subject: CN=147C2966BB05F21A9ABA9BD0D1C953F388518498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c0:38:97:a6:43:22:99:78:6c:5a:c6:f3:ba: 95:ea:1b:96:cc:20:fb:8b:9f:4c:0e:9a:61:07:2f: 27:8f:3f:91:22:43:d1:ca:65:d4:e0:be:95:ee:58: 1e:69:7c:5f:88:b7:a9:7a:d4:6c:e3:f5:0b:30:cf: 89:e6:62:69:97:c7:82:56:6e:43:8e:b7:7d:5c:13: f5:0f:c2:0c:87:a9:eb:51:1c:2d:fe:9a:4c:dc:5f: e1:49:7f:c8:2a:e9:7d:39:07:41:99:d6:30:2f:58: fe:4a:9b:e2:5d:cd:c2:4f:a0:41:c2:7e:b9:86:ab: 3d:f7:f1:44:8e:eb:6f:2e:05:08:76:d0:11:15:67: b2:72:6c:18:da:da:2d:30:57:20:87:2b:e1:2a:34: 8c:cd:63:72:71:74:e4:15:fa:f7:da:d6:c1:89:88: c4:63:1c:aa:c0:7b:ad:21:b5:3f:66:5f:ff:07:71: c2:90:f4:a5:72:38:e9:25:e7:64:7c:5c:cd:8c:8f: af:d4:72:b4:0c:59:b4:c5:d5:78:02:c9:f0:14:7a: ff:9c:e2:60:e7:3b:58:8e:f6:09:8f:a0:ef:d6:90: a3:73:6e:20:e2:86:75:8e:d5:fe:c3:7b:44:56:7f: b3:08:97:ff:b2:79:56:0c:f4:d4:9b:30:66:4c:c9: 12:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7C:29:66:BB:05:F2:1A:9A:BA:9B:D0:D1:C9:53:F3:88:51:84:98 X509v3 Authority Key Identifier: keyid:68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:c2:d0:08:32:53:7a:21:f5:09:22:35:03:93:6c:db:36:a2: 38:84:6f:2a:95:e6:ab:9d:19:c9:dd:e9:0d:7c:09:f0:e8:24: 1b:77:58:a5:14:60:c8:66:81:6f:04:6c:a8:09:d9:32:96:a6: 0c:ab:1c:c6:05:7c:9a:f8:3f:6d:7b:89:75:c4:1b:3f:75:d3: b5:47:64:ec:20:42:fb:a6:7e:f4:13:32:9f:ea:1b:df:72:85: af:95:26:2d:ae:91:fb:89:78:90:73:69:8d:6f:d5:ca:cd:15: 39:be:9b:4a:4d:e5:94:82:66:84:1a:5a:f6:84:6f:2c:bb:8b: 42:df:5e:3b:26:d8:fe:b0:d2:1b:6a:05:59:d8:ff:ad:75:27: fd:53:90:b2:79:5c:ba:10:44:39:d7:8a:e8:fd:99:3e:32:d3: 5a:68:eb:97:05:16:ec:62:31:12:1a:46:f4:50:d8:eb:f4:5f: 6b:f6:06:14:2d:59:bc:3e:13:92:7b:63:fa:5c:eb:c5:b7:48: 53:6f:c9:45:f6:60:e5:55:4b:e6:be:8e:49:5d:c1:f0:b8:b1: 43:bb:46:ac:20:d5:f3:c3:63:5c:be:86:8e:59:26:08:88:e6: 14:0f:f5:e2:83:8e:6b:c9:3d:d9:26:41:d9:e1:c8:11:68:fd: 00:97:b0:22 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUMez7cWnpkR6YT2Y1G4RuvO/B9R0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4 RTYxNUU1MDAeFw0yNjA4MTQxNTA3MDhaFw0yNjA4MTUxNTE2MDhaMDMxMTAvBgNV BAMTKDE0N0MyOTY2QkIwNUYyMUE5QUJBOUJEMEQxQzk1M0YzODg1MTg0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDywDiXpkMimXhsWsbzupXqG5bM IPuLn0wOmmEHLyePP5EiQ9HKZdTgvpXuWB5pfF+It6l61Gzj9Qswz4nmYmmXx4JW bkOOt31cE/UPwgyHqetRHC3+mkzcX+FJf8gq6X05B0GZ1jAvWP5Km+JdzcJPoEHC frmGqz338USO628uBQh20BEVZ7JybBja2i0wVyCHK+EqNIzNY3JxdOQV+vfa1sGJ iMRjHKrAe60htT9mX/8HccKQ9KVyOOkl52R8XM2Mj6/UcrQMWbTF1XgCyfAUev+c 4mDnO1iO9gmPoO/WkKNzbiDihnWO1f7De0RWf7MIl/+yeVYM9NSbMGZMyRJbAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUFHwpZrsF8hqaupvQ0clT84hRhJgwHwYDVR0j BBgwFoAUaMLENdc2/CHwfw/QmCTIQI5hXlAwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz LzAvNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS82OEMyQzQzNUQ3MzZGQzIxRjA3RjBGRDA5ODI0 Qzg0MDhFNjE1RTUwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMzLzAvNjhDMkM0MzVENzM2 RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKTC0AgyU3oh 9QkiNQOTbNs2ojiEbyqV5qudGcnd6Q18CfDoJBt3WKUUYMhmgW8EbKgJ2TKWpgyr HMYFfJr4P217iXXEGz9107VHZOwgQvumfvQTMp/qG99yha+VJi2ukfuJeJBzaY1v 1crNFTm+m0pN5ZSCZoQaWvaEbyy7i0LfXjsm2P6w0htqBVnY/611J/1TkLJ5XLoQ RDnXiuj9mT4y01po65cFFuxiMRIaRvRQ2Ov0X2v2BhQtWbw+E5J7Y/pc68W3SFNv yUX2YOVVS+a+jkldwfC4sUO7Rqwg1fPDY1y+ho5ZJgiI5hQP9eKDjmvJPdkmQdnh yBFo/QCXsCI= -----END CERTIFICATE-----Generated at Sat Aug 15 05:21:31 2026 by rpki-client