$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft File: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json) Hash identifier: Je4XRKLRnd8flmYghPSv1tQSc9jUfHk4hB7L35LCIf4= Subject key identifier: B3:92:09:58:2B:6D:91:40:12:B9:C4:15:D4:7F:5D:A5:00:59:79:92 Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05 Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005 Certificate serial: 39977A0EA46180C402CCE0D107AD46673E3B0057 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft Manifest number: 01AB Signing time: Wed 27 May 2026 11:32:42 +0000 Manifest this update: Wed 27 May 2026 11:27:42 +0000 Manifest next update: Thu 28 May 2026 12:21:42 +0000 Files and hashes: 1: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=) 2: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=) 3: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=) 4: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=) 5: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=) 6: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: HvpHf+drKsq1nt9L74tcFHR+tPkq0PZIOI+6fNrrqjA=) 7: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=) 8: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=) 9: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 12:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:97:7a:0e:a4:61:80:c4:02:cc:e0:d1:07:ad:46:67:3e:3b:00:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005 Validity Not Before: May 27 11:27:42 2026 GMT Not After : May 28 12:21:42 2026 GMT Subject: CN=B39209582B6D914012B9C415D47F5DA500597992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:92:4a:6a:b9:cb:c1:a0:ed:71:23:a5:ef:78: 78:1e:e2:7f:1d:77:2c:d1:c0:2d:ff:d7:f3:54:70: a7:51:0e:ef:dc:ce:4e:f3:61:ab:38:12:6a:b3:c2: bc:63:cd:8f:f0:6d:6c:fe:2e:5d:38:ce:b1:d6:06: 33:3c:cd:76:43:4e:44:de:0e:94:a1:06:a5:09:09: 1e:20:34:b5:08:0c:40:e0:b2:8f:aa:7c:2f:13:61: af:8b:47:d4:f9:e2:10:23:b0:6f:46:93:8c:7f:39: fc:f1:5f:ed:83:68:83:45:77:72:89:25:9d:47:03: 8c:90:d4:ee:d7:01:74:dd:e3:77:31:8f:9f:08:2c: 3d:e5:fd:d7:c0:d6:e0:38:57:63:d3:df:3e:eb:22: 3c:ee:80:63:19:7d:51:8a:09:8e:28:1e:b3:4d:a5: c3:eb:3b:99:35:9c:3e:bd:f3:27:89:d0:34:38:4c: 42:b7:85:d0:43:db:7e:18:50:0c:e9:df:20:82:8b: 07:98:6c:c8:94:b2:98:8b:86:64:ef:d2:44:de:10: 6c:dc:ee:6f:bd:7b:bd:6b:63:43:09:9a:f3:d7:78: 71:76:9a:8a:64:65:6b:30:4b:e5:2c:21:28:e5:71: 0c:49:fb:ec:13:af:3c:b8:33:b1:08:a1:69:35:d3: 65:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:92:09:58:2B:6D:91:40:12:B9:C4:15:D4:7F:5D:A5:00:59:79:92 X509v3 Authority Key Identifier: keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f9:17:1d:36:3d:f0:a8:a6:02:ff:a3:5a:09:4f:2c:92:82: dd:85:36:75:7f:fd:19:d5:b3:07:4d:03:50:d7:f0:f5:03:d5: 76:00:00:f7:5a:eb:47:0e:b5:88:98:d8:10:00:a1:bd:31:0e: fc:11:c8:98:4f:aa:1d:80:cb:8d:9b:cd:5e:24:5b:f3:17:e9: 37:ea:7f:fe:5b:3d:9e:73:65:e3:ee:a0:22:45:f6:5c:02:db: 57:e2:65:b5:e8:af:f8:f2:f6:4c:bc:f9:0e:55:a6:67:c8:e5: 37:4e:97:cd:92:f9:fe:72:4d:c8:9d:33:e8:7d:ff:06:4e:db: 58:9d:fc:8c:c6:b6:c5:49:a7:43:fd:45:a2:3e:b4:ad:65:26: 11:dc:70:43:56:03:6c:c4:e5:37:68:84:b8:f3:19:d1:5c:2c: 3e:69:e8:8d:f0:2b:18:56:f7:2c:f6:ed:12:8c:02:4c:20:65: b3:b7:43:85:11:d2:09:e7:40:5c:80:6e:59:24:0b:55:80:44: cf:e7:73:83:e1:28:29:ed:57:e6:37:74:17:0a:73:94:58:3c: 41:d1:12:05:c7:78:9b:25:c8:73:01:28:9c:2c:a8:6a:05:14: 59:d1:f3:9a:ea:59:b4:bb:b9:1d:cb:6c:8b:4f:3b:2b:7f:00: 5d:e7:fc:51 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUOZd6DqRhgMQCzODRB61GZz47AFcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDNDlCQUUyNDMw QkVFQzM1NEMxQjE0RjIyNkU3NjFGQzlCRENGMDA1MB4XDTI2MDUyNzExMjc0MloX DTI2MDUyODEyMjE0MlowMzExMC8GA1UEAxMoQjM5MjA5NTgyQjZEOTE0MDEyQjlD NDE1RDQ3RjVEQTUwMDU5Nzk5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJWSSmq5y8Gg7XEjpe94eB7ifx13LNHALf/X81Rwp1EO79zOTvNhqzgSarPC vGPNj/BtbP4uXTjOsdYGMzzNdkNORN4OlKEGpQkJHiA0tQgMQOCyj6p8LxNhr4tH 1PniECOwb0aTjH85/PFf7YNog0V3coklnUcDjJDU7tcBdN3jdzGPnwgsPeX918DW 4DhXY9PfPusiPO6AYxl9UYoJjiges02lw+s7mTWcPr3zJ4nQNDhMQreF0EPbfhhQ DOnfIIKLB5hsyJSymIuGZO/SRN4QbNzub717vWtjQwma89d4cXaaimRlazBL5Swh KOVxDEn77BOvPLgzsQihaTXTZT0CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBSzkglY K22RQBK5xBXUf12lAFl5kjAfBgNVHSMEGDAWgBTEm64kML7sNUwbFPIm52H8m9zw BTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzMvQzQ5QkFFMjQzMEJFRUMzNTRDMUIx NEYyMjZFNzYxRkM5QkRDRjAwNS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveEp1dUpEQy03RFZNR3hUeUp1ZGhfSnZj OEFVLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8zL0M0OUJBRTI0MzBCRUVDMzU0QzFC MTRGMjI2RTc2MUZDOUJEQ0YwMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAl+RcdNj3wqKYC/6NaCU8s koLdhTZ1f/0Z1bMHTQNQ1/D1A9V2AAD3WutHDrWImNgQAKG9MQ78EciYT6odgMuN m81eJFvzF+k36n/+Wz2ec2Xj7qAiRfZcAttX4mW16K/48vZMvPkOVaZnyOU3TpfN kvn+ck3InTPoff8GTttYnfyMxrbFSadD/UWiPrStZSYR3HBDVgNsxOU3aIS48xnR XCw+aeiN8CsYVvcs9u0SjAJMIGWzt0OFEdIJ50BcgG5ZJAtVgETP53OD4Sgp7Vfm N3QXCnOUWDxB0RIFx3ibJchzASicLKhqBRRZ0fOa6lm0u7kdy2yLTzsrfwBd5/xR -----END CERTIFICATE-----Generated at Thu May 28 05:49:31 2026 by rpki-client