$ rpki-client -vvf rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft File: AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft (raw, json) Hash identifier: 0Hpt5JkbKHDiqG9yj/HJM39aqjFiicWojeqCKn0dhtY= Subject key identifier: 8D:08:79:7C:07:20:A9:C5:FD:BF:52:DF:2C:60:C0:93:BD:BE:36:14 Authority key identifier: AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A Certificate issuer: /CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A Certificate serial: 6A6C296BC457DC0ED2B556042BD032961B0F3C8F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft Manifest number: 09 Signing time: Wed 13 May 2026 03:26:32 +0000 Manifest this update: Wed 13 May 2026 03:21:32 +0000 Manifest next update: Thu 14 May 2026 06:00:32 +0000 Files and hashes: 1: 3232332e3136352e31322e302f32342d3234203d3e20313333393535.roa (hash: 9G6BmFXh8fI5XHgtWuAKkjyuUhCjr0NlC/99CzJuGCU=) 2: 3232332e3136352e31352e302f32342d3234203d3e20313333393535.roa (hash: vzvsaRt3rkqEGPQk4J2sABSExNjL19sA4MUYScGsF+g=) 3: AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl (hash: G4TSowIZ0CK5RvwqqEn0yiQlGg6LaE4x5otfSACb910=) 4: 3232332e3136352e31302e302f32342d3234203d3e20313333393535.roa (hash: 34le8Xt54+WlmHbA7MxBAZytMwZ88iAqDKmDa3GmapE=) 5: 3232332e3136352e392e302f32342d3234203d3e20313333393535.roa (hash: fVpKpRteO0VaGR3toHlP0vvzNxEFvd9ooLHtR/Rm6ss=) 6: 3232332e3136352e31332e302f32342d3234203d3e20313333393535.roa (hash: Pq+rcQBopuW70X5LeXjFWpzJbmIFP/Yyd1b9pbIm2QA=) 7: 3232332e3136352e382e302f32342d3234203d3e20313333393535.roa (hash: 211j9d7v6cqKfTJDkyYktBBdrb7sSCkBHmY96MN17tA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6c:29:6b:c4:57:dc:0e:d2:b5:56:04:2b:d0:32:96:1b:0f:3c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A Validity Not Before: May 13 03:21:32 2026 GMT Not After : May 14 06:00:32 2026 GMT Subject: CN=8D08797C0720A9C5FDBF52DF2C60C093BDBE3614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:78:29:80:a0:f5:53:c4:11:d7:7b:99:28: 41:4b:58:be:e7:b0:b3:33:90:1a:3b:69:ef:43:20: 38:b0:8a:07:14:38:ee:7d:0e:d7:57:ef:9d:80:7e: 49:3a:49:ab:70:03:fa:1f:b7:96:2c:2a:db:02:18: c1:95:8c:35:20:d2:02:5a:e7:04:d8:1e:c5:00:89: dd:0d:8a:eb:21:9c:3a:0c:91:7e:b0:7c:1e:df:b2: 97:9b:02:cf:70:23:13:b7:0f:0d:f7:b1:c6:2c:a2: f5:de:b9:e0:08:a4:af:aa:e8:4b:1a:5b:7b:0d:fa: 93:b6:03:22:23:d5:6d:c9:0e:5a:d3:cf:d9:f3:68: 43:82:68:b6:1a:58:29:f7:4f:d9:1e:d3:68:38:f4: 6d:fa:75:76:0a:76:13:3d:a1:3d:08:36:f6:ed:d1: b0:78:80:32:1f:58:08:23:50:9b:cc:55:25:86:a0: 13:86:15:da:fa:7d:f1:dd:ee:46:2b:a6:9a:06:78: 94:16:66:9a:62:62:31:41:30:75:bc:eb:17:b5:d0: f3:51:79:50:0e:92:f9:e6:b0:41:79:d6:de:70:87: 50:b3:8e:7f:0d:d7:36:fe:9d:b2:46:9d:fa:74:5e: 44:f4:85:9c:d3:fb:1a:59:88:e9:84:99:68:68:22: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:08:79:7C:07:20:A9:C5:FD:BF:52:DF:2C:60:C0:93:BD:BE:36:14 X509v3 Authority Key Identifier: keyid:AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a7:1a:3b:2e:ea:8a:bc:3f:15:5f:d9:22:0d:e3:44:48:27: dd:83:39:7a:a8:5a:53:02:4d:f5:6e:c2:42:e9:5b:3a:da:64: 4f:fd:04:33:8d:ae:4d:ec:e4:96:57:9b:18:a0:f3:91:f9:5b: 11:f0:53:c5:42:19:3e:f9:14:35:ec:8e:72:3d:b1:e2:4b:9a: ae:9b:c5:b2:18:8c:35:a5:e5:51:b8:d1:c1:3f:9f:96:6f:76: e4:7b:e5:95:f3:35:ee:0e:4a:44:27:29:53:bc:7d:b1:f9:25: 99:cd:49:dc:1e:c8:2d:3c:5b:1b:69:32:60:e9:43:6d:e4:29: 96:26:4f:c0:0b:2f:b6:db:cd:0b:5f:4b:b3:f4:5f:3b:e9:50: a2:c5:40:25:4b:28:d9:5c:05:77:94:80:8a:85:da:3a:56:ce: f5:16:1a:70:28:88:1b:50:6b:88:00:29:7a:c2:69:d0:1b:2e: 36:bb:c7:46:c5:2a:3f:cd:88:3a:38:e5:39:7a:88:06:6f:4f: 0d:c0:7a:bc:a6:b7:73:5a:51:49:ec:b9:e1:76:c1:a5:c1:97: a5:ef:01:ec:e7:96:15:ee:d6:0a:e0:0e:f0:6d:0b:cd:ea:93: 6f:c1:22:77:47:80:6a:90:17:87:4e:2f:59:79:ae:11:3a:70: 56:af:cd:63 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUamwpa8RX3A7StVYEK9AylhsPPI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ3OUNCREVCMzkxQzcwRjBBOURBRDc4ODgyMjQyMTMy OTdFRUIzQTAeFw0yNjA1MTMwMzIxMzJaFw0yNjA1MTQwNjAwMzJaMDMxMTAvBgNV BAMTKDhEMDg3OTdDMDcyMEE5QzVGREJGNTJERjJDNjBDMDkzQkRCRTM2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqu3gpgKD1U8QR13uZKEFLWL7n sLMzkBo7ae9DIDiwigcUOO59DtdX752Afkk6SatwA/oft5YsKtsCGMGVjDUg0gJa 5wTYHsUAid0NiushnDoMkX6wfB7fspebAs9wIxO3Dw33scYsovXeueAIpK+q6Esa W3sN+pO2AyIj1W3JDlrTz9nzaEOCaLYaWCn3T9ke02g49G36dXYKdhM9oT0INvbt 0bB4gDIfWAgjUJvMVSWGoBOGFdr6ffHd7kYrppoGeJQWZppiYjFBMHW86xe10PNR eVAOkvnmsEF51t5wh1Czjn8N1zb+nbJGnfp0XkT0hZzT+xpZiOmEmWhoIrLzAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUjQh5fAcgqcX9v1LfLGDAk72+NhQwHwYDVR0j BBgwFoAUrXnL3rORxw8Kna14iCJCEyl+6zowDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdELUNP TS1UVy8wL0FENzlDQkRFQjM5MUM3MEYwQTlEQUQ3ODg4MjI0MjEzMjk3RUVCM0Eu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQUQ3OUNCREVCMzkxQzcwRjBBOURBRDc4 ODgyMjQyMTMyOTdFRUIzQS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXRC1DT00tVFcvMC9BRDc5 Q0JERUIzOTFDNzBGMEE5REFENzg4ODIyNDIxMzI5N0VFQjNBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA ZqcaOy7qirw/FV/ZIg3jREgn3YM5eqhaUwJN9W7CQulbOtpkT/0EM42uTezklleb GKDzkflbEfBTxUIZPvkUNeyOcj2x4kuarpvFshiMNaXlUbjRwT+flm925HvllfM1 7g5KRCcpU7x9sfklmc1J3B7ILTxbG2kyYOlDbeQpliZPwAsvttvNC19Ls/RfO+lQ osVAJUso2VwFd5SAioXaOlbO9RYacCiIG1BriAApesJp0BsuNrvHRsUqP82IOjjl OXqIBm9PDcB6vKa3c1pRSey54XbBpcGXpe8B7OeWFe7WCuAO8G0LzeqTb8Eid0eA apAXh04vWXmuETpwVq/NYw== -----END CERTIFICATE-----Generated at Wed May 13 20:36:11 2026 by rpki-client