$ rpki-client -vvf rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft File: 55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft (raw, json) Hash identifier: syERzyAc2x9Zj/sat7/G9rfRVgRF/BOTMk2co8pV7Y4= Subject key identifier: 78:AC:38:C7:EA:D9:D1:9A:D1:7C:EC:E1:A2:24:0A:54:F2:F4:48:2F Authority key identifier: 55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97 Certificate issuer: /CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697 Certificate serial: 1998382738728954E6B17341CE455783C2F337B4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer Subject info access: rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft Manifest number: 8B Signing time: Fri 14 Aug 2026 19:42:52 +0000 Manifest this update: Fri 14 Aug 2026 19:37:52 +0000 Manifest next update: Sat 15 Aug 2026 23:05:52 +0000 Files and hashes: 1: 3130332e3132372e3233392e302f32342d3234203d3e203633383937.roa (hash: RXB9NbnwUCoIODvg6FbjUt5jkhMEopd79EmJGHVqbuA=) 2: 55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl (hash: PUGZvxSiRPLabxylzkzYcYnwQv2KCObpf5/SLXuFz+Q=) 3: 3130332e3137382e33362e302f32342d3234203d3e203633383937.roa (hash: 2azY5QpqkCNrePgWVeAMiXZ5eEir6bAcf/jcts5dKaA=) 4: 3130332e3132372e3233372e302f32342d3234203d3e203633383937.roa (hash: hLL+Q2dyswUs44c6qgjOFEnwxGdXH4rlp2JBE4jLeaI=) 5: 323430303a343436303a3a2f33322d3332203d3e203633383937.roa (hash: E17SRJCOW39t5BmRtT7oN3GTu5stDbJU5j3SmVWuYIY=) 6: 3130332e3137382e33372e302f32342d3234203d3e203633383937.roa (hash: dBLtMtWolWPZlDBlQNEYLj3mkdf7gjz7o7zCR6CwyI8=) 7: 3130332e3132372e3233382e302f32342d3234203d3e20323038393332.roa (hash: nt3GnjyC68uevHd0pUpAVGqFmziCH3936csURlgKs7c=) 8: 3130332e3137382e33362e302f32332d3233203d3e203633383937.roa (hash: TrUjkrPBuZfmFYv7xRBVx68uC1wSPuSMTE2msjPc8Oc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 23:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:98:38:27:38:72:89:54:e6:b1:73:41:ce:45:57:83:c2:f3:37:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697 Validity Not Before: Aug 14 19:37:52 2026 GMT Not After : Aug 15 23:05:52 2026 GMT Subject: CN=78AC38C7EAD9D19AD17CECE1A2240A54F2F4482F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a7:d0:04:b1:2b:1d:db:12:7d:5c:bf:11:89: f1:da:c7:38:f5:fb:de:a5:f5:58:d2:e1:cf:fc:79: 9c:ba:f6:4d:f8:f2:91:8b:93:28:53:ff:52:24:6f: a9:2b:bf:8b:51:ef:05:c1:f1:bf:8a:e4:82:29:ee: 40:5e:f8:74:84:2e:fd:d3:cf:d8:8f:48:17:45:02: 4c:81:db:29:0e:d0:e1:11:00:c3:95:cd:4c:85:b8: df:31:1f:b5:28:15:ec:7f:d8:0a:a4:26:c1:cd:2e: eb:45:86:27:0f:3b:70:2c:20:3d:27:cd:d7:c5:a7: 26:5d:5d:61:bd:71:13:71:e1:2d:29:e6:72:fa:19: c5:4e:94:59:ba:d0:9e:e1:b2:bb:cd:2b:c0:d6:8e: 05:f7:0c:70:96:7b:81:e5:08:29:f3:2e:1e:10:4f: 53:5e:52:d3:44:7e:4e:8e:4d:b0:e1:e6:90:ff:2f: 47:76:c7:fb:16:d0:08:89:55:1c:5c:6d:7d:5c:7f: 4b:8f:0c:6e:c3:71:f8:3f:aa:ba:e7:a7:06:2c:f5: c4:a9:aa:e2:58:df:c0:c1:bf:0a:81:55:10:f5:48: a7:90:bb:42:55:4d:4b:9c:31:03:e5:b5:22:a2:89: 27:9c:a2:d6:a5:48:3d:3c:6e:d6:78:fe:d7:6b:54: cd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AC:38:C7:EA:D9:D1:9A:D1:7C:EC:E1:A2:24:0A:54:F2:F4:48:2F X509v3 Authority Key Identifier: keyid:55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f5:0b:b3:75:63:fe:6f:74:c2:41:81:e6:71:e1:ee:19:01: d3:db:42:9d:93:ce:fb:a7:9b:c5:dc:1a:20:12:75:0c:95:e5: 94:df:59:b0:c8:02:1a:4a:9e:7c:7f:b6:d0:df:07:37:e6:54: 75:fb:26:4c:1b:04:27:5a:94:87:28:be:22:41:d4:95:d1:8a: b0:ec:dd:eb:86:33:22:84:eb:f3:b5:01:1f:12:7f:79:da:c2: 0c:6c:fe:9c:4c:a8:60:eb:d0:ab:94:4e:71:56:88:1b:59:57: 9c:77:99:f1:95:b0:6e:d3:06:83:db:75:85:98:a7:ca:b1:83: 18:30:fd:ff:79:81:ee:57:4f:0d:e1:dd:2c:6f:84:5b:db:ab: 43:19:e9:24:3d:7c:25:b3:61:3a:2d:71:13:07:b7:3c:eb:8f: 3c:88:e5:47:39:62:91:a4:7a:b1:5a:52:c4:4a:d5:d9:f4:55: 22:8f:d7:2f:2e:70:d7:74:ab:cc:56:66:7e:e4:56:6b:6b:00: 98:18:cb:ed:4e:d1:34:ec:89:12:11:0b:89:01:c6:72:d3:3f: b4:45:f8:a3:cc:62:ba:83:9a:07:af:ef:d0:46:e4:e0:e5:8c: c9:f8:f4:d8:26:d2:ab:7d:d7:02:e1:0d:bc:46:0b:24:ed:e4: 0c:f5:41:13 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUGZg4JzhyiVTmsXNBzkVXg8LzN7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwNDJFNDE2QUREQzAzQTUxNjRBN0JGRkRGRjJDM0JG Mjg1RTY5NzAeFw0yNjA4MTQxOTM3NTJaFw0yNjA4MTUyMzA1NTJaMDMxMTAvBgNV BAMTKDc4QUMzOEM3RUFEOUQxOUFEMTdDRUNFMUEyMjQwQTU0RjJGNDQ4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXp9AEsSsd2xJ9XL8RifHaxzj1 +96l9VjS4c/8eZy69k348pGLkyhT/1Ikb6krv4tR7wXB8b+K5IIp7kBe+HSELv3T z9iPSBdFAkyB2ykO0OERAMOVzUyFuN8xH7UoFex/2AqkJsHNLutFhicPO3AsID0n zdfFpyZdXWG9cRNx4S0p5nL6GcVOlFm60J7hsrvNK8DWjgX3DHCWe4HlCCnzLh4Q T1NeUtNEfk6OTbDh5pD/L0d2x/sW0AiJVRxcbX1cf0uPDG7Dcfg/qrrnpwYs9cSp quJY38DBvwqBVRD1SKeQu0JVTUucMQPltSKiiSecotalSD08btZ4/tdrVM3dAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUeKw4x+rZ0ZrRfOzhoiQKVPL0SC8wHwYDVR0j BBgwFoAUVQQuQWrdwDpRZKe//f8sO/KF5pcwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVk9DT00v MC81NTA0MkU0MTZBRERDMDNBNTE2NEE3QkZGREZGMkMzQkYyODVFNjk3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzU1MDQyRTQxNkFEREMwM0E1MTY0QTdCRkZERkYy QzNCRjI4NUU2OTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WT0NPTS8wLzU1MDQyRTQxNkFEREMw M0E1MTY0QTdCRkZERkYyQzNCRjI4NUU2OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB29QuzdWP+b3TC QYHmceHuGQHT20Kdk877p5vF3BogEnUMleWU31mwyAIaSp58f7bQ3wc35lR1+yZM GwQnWpSHKL4iQdSV0Yqw7N3rhjMihOvztQEfEn952sIMbP6cTKhg69CrlE5xVogb WVecd5nxlbBu0waD23WFmKfKsYMYMP3/eYHuV08N4d0sb4Rb26tDGekkPXwls2E6 LXETB7c86488iOVHOWKRpHqxWlLEStXZ9FUij9cvLnDXdKvMVmZ+5FZrawCYGMvt TtE07IkSEQuJAcZy0z+0RfijzGK6g5oHr+/QRuTg5YzJ+PTYJtKrfdcC4Q28Rgsk 7eQM9UET -----END CERTIFICATE-----Generated at Sat Aug 15 05:34:05 2026 by rpki-client