$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft File: 71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json) Hash identifier: eVcwoK3X16NXtXNb+z5tAGiA4UaPuqSliTrv7y6yOMI= Subject key identifier: 81:71:BD:20:6A:2A:E1:50:0D:C1:BF:CF:4E:D4:15:DD:2A:CA:65:B0 Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 Certificate issuer: /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Certificate serial: 3D18B721550BA8A189F83740E6B7643FB8322A95 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft Manifest number: 0215 Signing time: Sun 26 Jul 2026 12:01:26 +0000 Manifest this update: Sun 26 Jul 2026 11:56:26 +0000 Manifest next update: Mon 27 Jul 2026 12:20:26 +0000 Files and hashes: 1: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: c+259omvb6TOWrBPXzplAlZ/uts4sigHbi6dBUFBQ78=) 2: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=) 3: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=) 4: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 12:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:18:b7:21:55:0b:a8:a1:89:f8:37:40:e6:b7:64:3f:b8:32:2a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Validity Not Before: Jul 26 11:56:26 2026 GMT Not After : Jul 27 12:20:26 2026 GMT Subject: CN=8171BD206A2AE1500DC1BFCF4ED415DD2ACA65B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:4c:63:71:f0:c4:7a:6b:0f:14:98:40:43: 13:59:15:2e:05:75:92:15:58:79:6c:eb:00:16:8e: 2b:7c:f7:98:ea:bc:17:8b:a9:50:c6:9d:d9:29:f5: ee:ca:43:4a:7b:f5:e2:6e:4f:69:1e:8c:d5:69:f2: c5:b5:9d:67:21:96:a6:38:0d:18:17:15:46:89:3b: e9:e6:d6:92:82:79:5f:99:ee:8a:d8:d6:74:15:72: af:6c:d4:c5:e2:e4:b7:56:ed:33:92:41:4a:98:23: 30:ba:e3:0a:ea:9e:f4:86:db:5d:4b:92:77:92:01: 83:26:f8:6f:ce:e1:ff:c0:b6:5e:ef:70:ff:02:7e: 17:88:da:4c:75:9d:42:47:02:c0:30:e0:86:d1:e3: f7:6a:ac:73:cd:88:5c:2e:0f:a3:39:ec:49:d2:85: 3c:46:17:e1:07:f4:50:af:00:3c:a9:83:35:33:59: 0c:46:33:62:1e:6a:ac:79:dd:34:2c:a2:35:e3:db: a2:bd:59:da:5a:d1:9b:67:93:bd:76:12:68:06:ad: 95:f7:a6:b2:98:94:66:3c:bc:dc:e9:33:37:c7:6e: 9b:ef:5a:43:4d:ac:fc:5f:2b:e1:c3:ec:b9:ae:00: db:3e:b2:82:2c:87:7d:bc:e4:a3:85:da:0d:fb:29: 19:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:71:BD:20:6A:2A:E1:50:0D:C1:BF:CF:4E:D4:15:DD:2A:CA:65:B0 X509v3 Authority Key Identifier: keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:9c:a7:50:f4:c1:5c:18:b4:bd:fb:c2:d0:5c:22:8e:25:a0: 98:2f:1e:60:cb:a0:30:2b:ee:e5:c7:fb:b6:19:72:b8:8b:6f: de:64:43:56:76:7f:14:44:3d:71:e0:41:8f:95:d5:c3:be:66: 50:e6:8b:2c:e7:c3:00:57:33:b9:f5:e4:2c:e5:08:dc:bc:04: 65:2b:5c:54:2c:fd:1a:19:65:00:2a:7e:c5:10:af:04:40:20: e3:f6:1c:fa:7d:30:62:f6:6d:5e:10:c1:6d:0a:3c:bf:3c:fb: 9e:07:fc:25:88:98:5e:c0:63:6a:86:d6:ac:1b:6e:d7:3b:29: d3:bc:4f:3d:53:9c:20:28:22:45:2a:9c:92:7c:ea:31:a7:c7: 6a:32:a0:1b:4a:31:b9:69:de:b4:4d:dd:c6:10:b4:d4:4b:5f: d1:4f:b7:4c:8a:cc:fe:50:46:bc:45:19:8f:02:53:40:16:39: e3:d5:0d:cb:f6:fc:23:a4:aa:13:7c:b2:b4:19:69:49:02:b5: 7d:b2:cc:70:cb:b9:9e:ec:8c:bf:72:c6:f4:b4:31:98:a6:f6: a7:88:97:f0:e7:7d:ad:22:52:93:59:96:bf:3f:39:7b:06:a4: 13:86:ef:9f:52:dd:35:24:c1:e1:59:7a:8b:66:02:31:c1:7c: b0:40:c1:2d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUPRi3IVULqKGJ+DdA5rdkP7gyKpUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyg3MTUyNTk3MkUz QzExNTNERTUzMDU0Nzk4RjUxQTVCRDU1Qzc1MDE5MB4XDTI2MDcyNjExNTYyNloX DTI2MDcyNzEyMjAyNlowMzExMC8GA1UEAxMoODE3MUJEMjA2QTJBRTE1MDBEQzFC RkNGNEVENDE1REQyQUNBNjVCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/uTGNx8MR6aw8UmEBDE1kVLgV1khVYeWzrABaOK3z3mOq8F4upUMad2Sn1 7spDSnv14m5PaR6M1WnyxbWdZyGWpjgNGBcVRok76ebWkoJ5X5nuitjWdBVyr2zU xeLkt1btM5JBSpgjMLrjCuqe9IbbXUuSd5IBgyb4b87h/8C2Xu9w/wJ+F4jaTHWd QkcCwDDghtHj92qsc82IXC4PoznsSdKFPEYX4Qf0UK8APKmDNTNZDEYzYh5qrHnd NCyiNePbor1Z2lrRm2eTvXYSaAatlfemspiUZjy83OkzN8dum+9aQ02s/F8r4cPs ua4A2z6ygiyHfbzko4XaDfspGR8CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBSBcb0g airhUA3Bv89O1BXdKsplsDAfBgNVHSMEGDAWgBRxUlly48EVPeUwVHmPUaW9VcdQ GTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzIvNzE1MjU5NzJFM0MxMTUzREU1MzA1 NDc5OEY1MUE1QkQ1NUM3NTAxOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYx RDY2MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvY1ZKWmN1UEJGVDNsTUZSNWoxR2x2VlhI VUJrLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8yLzcxNTI1OTcyRTNDMTE1M0RFNTMw NTQ3OThGNTFBNUJENTVDNzUwMTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVnKdQ9MFcGLS9+8LQXCKO JaCYLx5gy6AwK+7lx/u2GXK4i2/eZENWdn8URD1x4EGPldXDvmZQ5oss58MAVzO5 9eQs5QjcvARlK1xULP0aGWUAKn7FEK8EQCDj9hz6fTBi9m1eEMFtCjy/PPueB/wl iJhewGNqhtasG27XOynTvE89U5wgKCJFKpySfOoxp8dqMqAbSjG5ad60Td3GELTU S1/RT7dMisz+UEa8RRmPAlNAFjnj1Q3L9vwjpKoTfLK0GWlJArV9ssxwy7me7Iy/ csb0tDGYpvaniJfw532tIlKTWZa/Pzl7BqQThu+fUt01JMHhWXqLZgIxwXywQMEt -----END CERTIFICATE-----Generated at Mon Jul 27 00:54:06 2026 by rpki-client