$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft File: DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft (raw, json) Hash identifier: 2RoQg2LJimmAH2jgGW7CEXZKgBAs0IW4E6Iz+Pc/5Sk= Subject key identifier: 84:64:E8:F8:FA:70:A6:86:CD:4B:FB:8B:70:94:A2:69:07:07:D3:11 Authority key identifier: DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A Certificate issuer: /CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A Certificate serial: 09524D942BD67706E3350C387864355F6B6CE554 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft Manifest number: 03 Signing time: Wed 13 May 2026 03:46:37 +0000 Manifest this update: Wed 13 May 2026 03:41:37 +0000 Manifest next update: Thu 14 May 2026 05:37:37 +0000 Files and hashes: 1: DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl (hash: OzrNwXe2yJScuUegzAbl4vph0M2v1nPE1+LvkzFLlfc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:52:4d:94:2b:d6:77:06:e3:35:0c:38:78:64:35:5f:6b:6c:e5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A Validity Not Before: May 13 03:41:37 2026 GMT Not After : May 14 05:37:37 2026 GMT Subject: CN=8464E8F8FA70A686CD4BFB8B7094A2690707D311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:ca:c2:8d:43:af:f2:7a:c7:92:b2:65:30: 0b:1e:1a:c1:2b:f9:81:34:18:e7:65:68:b0:1b:6f: 19:22:da:3b:83:52:d2:2f:fd:d4:7c:fb:19:d7:1a: 00:dc:9c:7b:d6:0c:d9:a0:75:07:a2:3e:c4:4a:54: 4a:13:09:a0:1e:db:2e:f7:8d:4f:29:ed:0e:25:53: 9a:eb:63:02:e8:00:0e:5b:7a:fd:7d:72:87:6c:ca: 65:fc:0d:26:2c:0b:f9:52:bb:2d:74:18:ac:6c:1a: ad:b7:8f:8c:da:0c:f4:ef:be:db:93:48:94:d5:35: e7:86:f6:2d:45:3e:8b:e6:2d:c3:fe:3c:f0:1f:01: cb:75:bd:e7:d9:a1:7f:35:15:6e:72:af:82:1a:69: 3a:59:c5:21:60:45:da:28:d3:e3:c7:6c:02:86:63: 94:75:fc:56:8b:e8:ad:5d:26:00:17:87:bd:89:90: 73:a9:7f:4c:0b:d8:ec:4d:1e:db:4a:d2:0d:30:c7: c7:9d:d9:6b:af:33:29:1e:3f:41:6a:53:d3:10:58: 64:9d:ed:6d:c6:86:a5:1f:6f:86:99:0b:7c:28:a0: 58:85:ad:73:85:80:4a:5d:c7:0f:d5:45:1d:2e:3f: 42:9d:32:01:b3:fd:0c:82:cd:13:84:bb:1e:19:90: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:64:E8:F8:FA:70:A6:86:CD:4B:FB:8B:70:94:A2:69:07:07:D3:11 X509v3 Authority Key Identifier: keyid:DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c9:08:ac:da:15:f6:4d:0c:7f:0e:57:36:e0:3e:85:e1:9b: 3a:8f:a2:22:b8:3c:dc:48:3f:23:40:d5:12:df:de:08:69:38: 99:fb:1d:99:82:63:93:31:cd:93:22:e3:7d:01:67:6d:36:f1: 55:f3:9b:2d:14:35:0e:52:6b:b7:7e:23:f0:1d:5d:35:10:70: c9:b4:dd:4d:ff:cd:f5:83:fd:4d:74:d0:1d:64:62:8f:5a:1c: ea:64:46:22:18:57:a1:fa:ad:02:f0:4e:9a:91:9d:5f:02:e2: 52:6d:a0:22:13:74:42:2c:3e:23:2a:f2:58:0c:62:82:8b:79: 9d:2b:70:74:5b:58:e3:82:ac:ea:7b:84:84:b2:01:6a:c4:af: 09:89:8d:e7:8f:4c:46:25:ad:0f:43:2b:3d:da:1f:31:1d:48: d2:f4:2a:a4:2f:2e:63:22:94:69:0a:92:03:41:ab:59:08:af: 0e:d0:23:47:2a:2f:c4:eb:2b:96:64:a7:98:e2:ac:41:cf:6d: 3a:2c:0d:9c:24:55:cd:80:55:ab:73:cb:c8:73:db:d3:0c:d6: c6:68:6a:56:46:36:b4:96:ca:f9:e7:30:60:1f:f8:fa:e8:27: 3e:fc:1e:0b:2b:a5:73:19:35:70:23:1a:52:65:ff:c7:d4:c4: 50:f6:5a:56 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUCVJNlCvWdwbjNQw4eGQ1X2ts5VQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzMENFOUI3Rjg1NzNCRkE4QzgxMUI4OEJDOTc5QzlC NTM3ODMxQTAeFw0yNjA1MTMwMzQxMzdaFw0yNjA1MTQwNTM3MzdaMDMxMTAvBgNV BAMTKDg0NjRFOEY4RkE3MEE2ODZDRDRCRkI4QjcwOTRBMjY5MDcwN0QzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAsrCjUOv8nrHkrJlMAseGsEr +YE0GOdlaLAbbxki2juDUtIv/dR8+xnXGgDcnHvWDNmgdQeiPsRKVEoTCaAe2y73 jU8p7Q4lU5rrYwLoAA5bev19codsymX8DSYsC/lSuy10GKxsGq23j4zaDPTvvtuT SJTVNeeG9i1FPovmLcP+PPAfAct1vefZoX81FW5yr4IaaTpZxSFgRdoo0+PHbAKG Y5R1/FaL6K1dJgAXh72JkHOpf0wL2OxNHttK0g0wx8ed2WuvMykeP0FqU9MQWGSd 7W3GhqUfb4aZC3wooFiFrXOFgEpdxw/VRR0uP0KdMgGz/QyCzROEux4ZkHNhAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUhGTo+PpwpobNS/uLcJSiaQcH0xEwHwYDVR0j BBgwFoAU2zDOm3+Fc7+oyBG4i8l5ybU3gxowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOREMv MC9EQjMwQ0U5QjdGODU3M0JGQThDODExQjg4QkM5NzlDOUI1Mzc4MzFBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0RCMzBDRTlCN0Y4NTczQkZBOEM4MTFCODhCQzk3 OUM5QjUzNzgzMUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05EQy8wL0RCMzBDRTlCN0Y4NTcz QkZBOEM4MTFCODhCQzk3OUM5QjUzNzgzMUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZyQis2hX2TQx/ Dlc24D6F4Zs6j6IiuDzcSD8jQNUS394IaTiZ+x2ZgmOTMc2TIuN9AWdtNvFV85st FDUOUmu3fiPwHV01EHDJtN1N/831g/1NdNAdZGKPWhzqZEYiGFeh+q0C8E6akZ1f AuJSbaAiE3RCLD4jKvJYDGKCi3mdK3B0W1jjgqzqe4SEsgFqxK8JiY3nj0xGJa0P Qys92h8xHUjS9CqkLy5jIpRpCpIDQatZCK8O0CNHKi/E6yuWZKeY4qxBz206LA2c JFXNgFWrc8vIc9vTDNbGaGpWRja0lsr55zBgH/j66Cc+/B4LK6VzGTVwIxpSZf/H 1MRQ9lpW -----END CERTIFICATE-----Generated at Wed May 13 20:33:28 2026 by rpki-client