$ rpki-client -vvf rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft File: 101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft (raw, json) Hash identifier: 4ticgUlu3kk4R9zXpQj2AAXkpTm3iHBypXqV+FzK7HI= Subject key identifier: B6:25:ED:BC:0C:AD:3D:C6:CA:4D:FC:DD:78:CA:C5:0F:70:25:AA:3B Authority key identifier: 10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4 Certificate issuer: /CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4 Certificate serial: 5EEDCBF3726E5223FC12D19F8805F6DAAA3534E1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft Manifest number: 4A Signing time: Tue 30 Jun 2026 00:12:38 +0000 Manifest this update: Tue 30 Jun 2026 00:07:38 +0000 Manifest next update: Wed 01 Jul 2026 02:25:38 +0000 Files and hashes: 1: 3130332e3133302e3132342e302f32342d3234203d3e20313331363336.roa (hash: VXtVToak1u7PW+U+n97OPXO4Dchb6DLpI7qRdjvNc0Q=) 2: 3130332e3133302e3132342e302f32322d3234203d3e20313331363336.roa (hash: 7MNXU7sfreKdDoH2cxg35XbGCH5NeuOsP993lyzfqsc=) 3: 3231312e37362e3138382e302f32332d3234203d3e20313331363336.roa (hash: oaNsp11upkBZ+JGYlmo3nCJ8dB+RQUZt5gJM6iJrwHk=) 4: 3130332e3133302e3132352e302f32342d3234203d3e20313331363336.roa (hash: FraePq7gvqKVgRVRs1hOCUPexz3gSr4BPRhnGrHTV3o=) 5: 3130332e3133302e3132362e302f32342d3234203d3e20313331363336.roa (hash: TLjcZQcFu7MKcP1kT7lAPY8o3wjcQeXfdOkLoUquYVA=) 6: 3130332e3133302e3132372e302f32342d3234203d3e20313331363336.roa (hash: FnT/XgOP5REsMrJKvplqM9/TZ2tdCkQ9b4citLvn+6U=) 7: 323430333a623963303a3a2f33322d3438203d3e20313331363336.roa (hash: E288eui5EN66onNVEK7Y344pLWOHjEel/MAK2S1bEhQ=) 8: 101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl (hash: 6EwVORO9me3gX8c6ppeGaH/8oUm8eXN0Ird+trbrNGc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 02:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ed:cb:f3:72:6e:52:23:fc:12:d1:9f:88:05:f6:da:aa:35:34:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4 Validity Not Before: Jun 30 00:07:38 2026 GMT Not After : Jul 1 02:25:38 2026 GMT Subject: CN=B625EDBC0CAD3DC6CA4DFCDD78CAC50F7025AA3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:a3:b9:a6:0f:37:f5:02:e9:f6:c2:a2:0d: 4e:52:6f:57:f3:9a:e9:08:05:67:41:06:92:b0:dd: ad:ce:df:ba:90:bf:76:3e:75:79:0b:f7:3f:af:89: 16:15:52:e2:02:58:10:f2:f7:a5:4c:47:0d:88:62: da:08:4f:24:18:e3:b5:12:0f:1e:7e:9a:56:73:02: 8f:1f:12:29:2d:47:75:94:d9:b6:4a:b1:10:56:6e: ab:f6:4f:36:1b:39:8b:16:ae:c5:4f:e2:7d:0f:04: 7c:7e:dc:12:70:94:f8:ca:59:16:bb:a5:27:0a:ae: 24:08:bd:2b:fa:62:9f:6d:7c:fe:26:59:0e:6d:cd: 49:81:cc:fc:96:6c:82:a6:35:ae:db:09:87:fd:bb: a9:7c:d8:93:d9:bf:8d:c2:e8:f2:82:52:f4:c5:6f: 6c:6e:ef:f8:42:40:23:81:88:f6:a8:b3:79:27:28: 30:06:c1:7e:ad:b8:ac:08:d6:d2:ce:45:a4:15:1c: 81:c1:fc:53:75:f3:4a:cc:12:ef:d8:65:33:ab:fb: 4b:9e:b9:e7:82:1a:1b:c9:0d:8b:ae:e3:44:0f:3c: 8b:08:b9:03:d7:8d:f7:8b:9b:74:cb:35:52:44:0c: e5:73:10:bd:4d:ca:bf:55:9e:c7:13:96:a9:66:50: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:25:ED:BC:0C:AD:3D:C6:CA:4D:FC:DD:78:CA:C5:0F:70:25:AA:3B X509v3 Authority Key Identifier: keyid:10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:74:94:3e:4c:b9:aa:c4:69:cc:f1:c5:33:df:3d:e5:77:6b: 7a:49:ba:06:90:a9:a3:d0:dd:f9:40:bf:0b:ec:65:73:fa:2d: 36:3c:d7:b5:df:7a:11:0a:9b:c9:6e:75:fe:33:6b:ff:bd:7a: 02:1d:d7:a7:9f:55:ca:7b:0f:d8:cc:f7:60:49:2c:0b:9f:6d: 2f:b2:65:a1:c3:c8:8d:9a:5f:47:44:5f:bd:56:2b:3e:06:db: 11:72:07:55:b8:fa:14:48:95:39:4e:5e:f8:4d:19:8b:c6:bd: ae:1e:e6:6b:4a:3f:9c:02:23:5b:7a:18:bc:9a:6c:e2:e5:1d: 06:66:cf:7c:d2:66:86:ca:f8:b1:b6:55:73:5f:a1:87:e7:34: 87:cf:4e:09:15:29:74:3a:f8:dc:21:1b:59:ee:3e:0d:ef:7f: 15:4b:1b:2f:70:7c:93:91:ef:cf:11:91:98:77:02:4c:cd:6d: cd:df:16:04:65:c4:b1:1e:b9:41:fa:a3:b3:c8:98:10:95:7f: 9d:98:ab:f9:d7:2f:70:74:ef:42:8c:35:c8:d7:14:e6:da:05: b4:ae:dd:a1:2d:1b:ae:35:83:25:fd:e4:00:b0:8d:1b:a8:83: 1a:f1:1b:9d:20:80:e4:32:40:5a:da:6d:c0:3e:65:76:90:f1: 62:03:68:4d -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUXu3L83JuUiP8EtGfiAX22qo1NOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAxQjBBN0Y5MEQ1ODczMUU5NjE4REM0MzI0MzhDOEJG REIyOEFGNDAeFw0yNjA2MzAwMDA3MzhaFw0yNjA3MDEwMjI1MzhaMDMxMTAvBgNV BAMTKEI2MjVFREJDMENBRDNEQzZDQTRERkNERDc4Q0FDNTBGNzAyNUFBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TaO5pg839QLp9sKiDU5Sb1fz mukIBWdBBpKw3a3O37qQv3Y+dXkL9z+viRYVUuICWBDy96VMRw2IYtoITyQY47US Dx5+mlZzAo8fEiktR3WU2bZKsRBWbqv2TzYbOYsWrsVP4n0PBHx+3BJwlPjKWRa7 pScKriQIvSv6Yp9tfP4mWQ5tzUmBzPyWbIKmNa7bCYf9u6l82JPZv43C6PKCUvTF b2xu7/hCQCOBiPaos3knKDAGwX6tuKwI1tLORaQVHIHB/FN180rMEu/YZTOr+0ue ueeCGhvJDYuu40QPPIsIuQPXjfeLm3TLNVJEDOVzEL1Nyr9VnscTlqlmUARpAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUtiXtvAytPcbKTfzdeMrFD3AlqjswHwYDVR0j BBgwFoAUEBsKf5DVhzHpYY3EMkOMi/2yivQwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0FOSU4v MC8xMDFCMEE3RjkwRDU4NzMxRTk2MThEQzQzMjQzOEM4QkZEQjI4QUY0LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzEwMUIwQTdGOTBENTg3MzFFOTYxOERDNDMyNDM4 QzhCRkRCMjhBRjQuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5JTi8wLzEwMUIwQTdGOTBENTg3 MzFFOTYxOERDNDMyNDM4QzhCRkRCMjhBRjQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmdJQ+TLmqxGnM 8cUz3z3ld2t6SboGkKmj0N35QL8L7GVz+i02PNe133oRCpvJbnX+M2v/vXoCHden n1XKew/YzPdgSSwLn20vsmWhw8iNml9HRF+9Vis+BtsRcgdVuPoUSJU5Tl74TRmL xr2uHuZrSj+cAiNbehi8mmzi5R0GZs980maGyvixtlVzX6GH5zSHz04JFSl0Ovjc IRtZ7j4N738VSxsvcHyTke/PEZGYdwJMzW3N3xYEZcSxHrlB+qOzyJgQlX+dmKv5 1y9wdO9CjDXI1xTm2gW0rt2hLRuuNYMl/eQAsI0bqIMa8RudIIDkMkBa2m3APmV2 kPFiA2hN -----END CERTIFICATE-----Generated at Tue Jun 30 19:08:28 2026 by rpki-client