$ rpki-client -vvf rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft File: 55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft (raw, json) Hash identifier: 5e5ACTVaJCb0Aei5K4bMK8R1PXXq18tCCDlABzgjwI0= Subject key identifier: 65:A1:15:AC:BC:7F:80:94:7D:7F:18:52:58:F6:C1:E4:F8:95:26:CF Authority key identifier: 55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97 Certificate issuer: /CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697 Certificate serial: 157F9D64C4E50B2998AB10EF78600CD2CC3B2E39 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer Subject info access: rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft Manifest number: 4C Signing time: Mon 29 Jun 2026 22:27:29 +0000 Manifest this update: Mon 29 Jun 2026 22:22:29 +0000 Manifest next update: Wed 01 Jul 2026 00:45:29 +0000 Files and hashes: 1: 55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl (hash: z9TVBld3cCcDAQJ16WybH/KC2D58E+a6Cqhhu5Kn+K0=) 2: 3130332e3132372e3233392e302f32342d3234203d3e203633383937.roa (hash: RXB9NbnwUCoIODvg6FbjUt5jkhMEopd79EmJGHVqbuA=) 3: 3130332e3132372e3233362e302f32342d3234203d3e203633383937.roa (hash: 1DpKKx3LbTodUBDevtc1pgF4z8H1r44nuFzvkdn6rdk=) 4: 323430303a343436303a3a2f33322d3332203d3e203633383937.roa (hash: E17SRJCOW39t5BmRtT7oN3GTu5stDbJU5j3SmVWuYIY=) 5: 3130332e3137382e33362e302f32342d3234203d3e203633383937.roa (hash: 2azY5QpqkCNrePgWVeAMiXZ5eEir6bAcf/jcts5dKaA=) 6: 3130332e3132372e3233382e302f32342d3234203d3e20323038393332.roa (hash: nt3GnjyC68uevHd0pUpAVGqFmziCH3936csURlgKs7c=) 7: 3130332e3137382e33362e302f32332d3233203d3e203633383937.roa (hash: TrUjkrPBuZfmFYv7xRBVx68uC1wSPuSMTE2msjPc8Oc=) 8: 3130332e3132372e3233372e302f32342d3234203d3e203633383937.roa (hash: hLL+Q2dyswUs44c6qgjOFEnwxGdXH4rlp2JBE4jLeaI=) 9: 3130332e3137382e33372e302f32342d3234203d3e203633383937.roa (hash: dBLtMtWolWPZlDBlQNEYLj3mkdf7gjz7o7zCR6CwyI8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 00:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7f:9d:64:c4:e5:0b:29:98:ab:10:ef:78:60:0c:d2:cc:3b:2e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697 Validity Not Before: Jun 29 22:22:29 2026 GMT Not After : Jul 1 00:45:29 2026 GMT Subject: CN=65A115ACBC7F80947D7F185258F6C1E4F89526CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b4:66:70:e5:61:76:19:c0:a5:ba:b6:78:45: 1a:38:dc:da:8f:97:6d:04:c1:d6:2d:1d:df:c4:ed: a7:4f:4a:c2:67:e4:77:3a:05:60:6b:4e:6c:32:6b: 4f:76:1f:1f:ca:24:6e:a6:23:29:8e:7c:ec:24:41: 27:46:7a:a4:cf:78:4e:ef:d8:62:c6:d2:5c:3b:f3: 9f:2c:79:f6:a1:e2:d1:52:7d:10:2a:ae:37:03:a0: ca:63:dd:db:7b:63:9e:c8:3b:02:c6:48:32:7c:ad: 1b:78:b6:b3:01:51:8c:57:04:f5:6d:f7:db:e4:78: ab:2d:8c:3e:64:0c:d2:1f:eb:72:66:a1:c4:19:8d: 69:36:01:d1:f2:82:68:99:44:57:14:27:8d:7e:96: 7d:97:5f:95:52:12:7f:ba:31:86:05:8e:76:1f:f1: 3f:ab:03:2f:c7:d0:83:24:84:16:07:77:6c:58:a3: 94:5f:d9:19:f6:3c:ff:28:de:28:de:46:57:33:5b: a5:4e:8b:90:7c:47:90:e4:27:08:0f:d4:47:f1:2d: e1:a3:e5:cb:fb:95:6b:06:39:e9:b6:33:b5:99:96: 59:74:de:9f:c6:0a:36:b9:64:9c:f6:db:47:44:78: f4:5f:fc:30:88:e6:a1:a4:e7:ea:96:70:50:fb:36: c7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A1:15:AC:BC:7F:80:94:7D:7F:18:52:58:F6:C1:E4:F8:95:26:CF X509v3 Authority Key Identifier: keyid:55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:18:4c:ce:71:e0:27:31:e9:c4:76:2c:98:55:b6:a5:ff:b4: 62:a1:14:17:ae:4b:fd:19:19:5f:1d:84:1b:b7:9a:64:c0:ae: 3e:e3:69:4a:c7:88:1e:17:19:21:87:88:73:06:fc:0b:69:e9: 27:f0:f1:54:d8:af:70:2c:85:f4:17:6e:6c:9d:dc:88:1f:cc: a7:e2:da:1e:17:01:e5:e2:53:ef:54:8b:4c:42:53:b2:cc:cd: 03:c2:72:48:30:cd:eb:69:8b:b6:0a:da:80:e5:fb:6f:0b:fa: c9:b2:ce:52:75:ae:91:6a:d4:2c:96:34:2b:aa:46:cb:20:62: 91:09:4f:ce:8e:74:03:de:28:18:ee:43:e2:09:5f:e2:a1:c9: 1d:07:e1:5a:bd:a7:7e:01:9c:89:a1:6f:0e:b3:de:b3:7b:c6: af:61:d1:b6:da:c9:8f:e9:bb:74:ec:98:e7:19:d4:d2:85:70: 79:b2:3d:29:a3:52:98:b9:e4:d6:f2:4c:11:56:87:7a:01:fb: d8:70:06:f9:8c:af:87:b1:3c:5f:26:55:d1:b2:41:12:b0:ee: 72:83:88:9e:16:ce:19:77:9e:29:87:39:ba:f9:20:92:d4:1d: 75:7c:79:13:08:70:ca:09:7c:42:b4:82:10:45:19:a3:e7:23: 9a:5a:6f:f8 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUFX+dZMTlCymYqxDveGAM0sw7LjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwNDJFNDE2QUREQzAzQTUxNjRBN0JGRkRGRjJDM0JG Mjg1RTY5NzAeFw0yNjA2MjkyMjIyMjlaFw0yNjA3MDEwMDQ1MjlaMDMxMTAvBgNV BAMTKDY1QTExNUFDQkM3RjgwOTQ3RDdGMTg1MjU4RjZDMUU0Rjg5NTI2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltGZw5WF2GcClurZ4RRo43NqP l20EwdYtHd/E7adPSsJn5Hc6BWBrTmwya092Hx/KJG6mIymOfOwkQSdGeqTPeE7v 2GLG0lw7858sefah4tFSfRAqrjcDoMpj3dt7Y57IOwLGSDJ8rRt4trMBUYxXBPVt 99vkeKstjD5kDNIf63JmocQZjWk2AdHygmiZRFcUJ41+ln2XX5VSEn+6MYYFjnYf 8T+rAy/H0IMkhBYHd2xYo5Rf2Rn2PP8o3ijeRlczW6VOi5B8R5DkJwgP1EfxLeGj 5cv7lWsGOem2M7WZlll03p/GCja5ZJz220dEePRf/DCI5qGk5+qWcFD7NseHAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUZaEVrLx/gJR9fxhSWPbB5PiVJs8wHwYDVR0j BBgwFoAUVQQuQWrdwDpRZKe//f8sO/KF5pcwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVk9DT00v MC81NTA0MkU0MTZBRERDMDNBNTE2NEE3QkZGREZGMkMzQkYyODVFNjk3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzU1MDQyRTQxNkFEREMwM0E1MTY0QTdCRkZERkYy QzNCRjI4NUU2OTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WT0NPTS8wLzU1MDQyRTQxNkFEREMw M0E1MTY0QTdCRkZERkYyQzNCRjI4NUU2OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYGEzOceAnMenE diyYVbal/7RioRQXrkv9GRlfHYQbt5pkwK4+42lKx4geFxkhh4hzBvwLaekn8PFU 2K9wLIX0F25sndyIH8yn4toeFwHl4lPvVItMQlOyzM0DwnJIMM3raYu2CtqA5ftv C/rJss5Sda6RatQsljQrqkbLIGKRCU/OjnQD3igY7kPiCV/iockdB+Favad+AZyJ oW8Os96ze8avYdG22smP6bt07JjnGdTShXB5sj0po1KYueTW8kwRVod6AfvYcAb5 jK+HsTxfJlXRskESsO5yg4ieFs4Zd54phzm6+SCS1B11fHkTCHDKCXxCtIIQRRmj 5yOaWm/4 -----END CERTIFICATE-----Generated at Tue Jun 30 17:05:27 2026 by rpki-client