$ rpki-client -vvf rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft File: DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft (raw, json) Hash identifier: 02Sw4sEw8B4DZT0qh/673XFPn1OhJjhuVuGhB2XzaYA= Subject key identifier: BB:AA:DD:C2:25:F1:C5:2E:95:82:F9:BE:E7:34:74:25:D4:FF:3C:7A Authority key identifier: DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66 Certificate issuer: /CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166 Certificate serial: 52B87CA5996C32704F69978B5FD925D25FC43C86 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer Subject info access: rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft Manifest number: 43 Signing time: Tue 30 Jun 2026 10:23:40 +0000 Manifest this update: Tue 30 Jun 2026 10:18:40 +0000 Manifest next update: Wed 01 Jul 2026 12:04:40 +0000 Files and hashes: 1: DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl (hash: YNF1IC1FipYoqZRPtgCFjTaX8uDIi6B161gV0w/CoQE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 12:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b8:7c:a5:99:6c:32:70:4f:69:97:8b:5f:d9:25:d2:5f:c4:3c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166 Validity Not Before: Jun 30 10:18:40 2026 GMT Not After : Jul 1 12:04:40 2026 GMT Subject: CN=BBAADDC225F1C52E9582F9BEE7347425D4FF3C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b1:10:28:0e:13:b2:d7:c7:c8:4a:f4:57:6e: 17:7b:55:4c:ef:9f:57:78:e8:0f:d3:e2:36:83:a7: 63:71:3f:be:a3:5f:92:2a:93:c2:f4:42:fa:05:06: 3b:b7:99:71:67:b4:10:3a:b7:7d:a6:bc:fc:86:7f: c0:f7:0e:4f:86:fc:92:3b:2e:65:14:d9:db:40:a5: 50:4d:75:ba:f9:9d:23:fc:a7:83:8c:d0:1f:7e:da: 7c:8e:d8:2a:e9:6f:16:53:e7:ab:db:c2:f5:5b:b4: 87:d5:85:30:ef:fb:29:7c:ae:5b:e5:fd:5c:11:07: a0:b9:52:ad:32:3e:b7:11:e2:c7:a5:d8:3b:93:7b: bc:14:3a:65:67:62:55:44:ba:ac:ea:1b:4c:93:0f: 2f:b7:26:82:6c:52:16:26:d9:f0:25:95:33:17:e8: 79:c9:12:99:41:f1:2f:73:21:d0:f0:5d:19:45:32: ba:d3:00:96:8d:3c:53:52:a8:2b:15:5d:78:62:71: 8e:54:9d:e6:24:a7:38:cc:09:0f:ff:93:97:d3:65: 99:55:4f:cc:cd:e5:f3:b0:d7:04:eb:2b:e9:05:17: be:4f:65:c0:42:f5:ee:72:dc:6f:2f:f6:dc:d7:18: 23:d3:e8:15:5d:b0:89:e2:27:72:4b:5e:8e:58:17: 6d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AA:DD:C2:25:F1:C5:2E:95:82:F9:BE:E7:34:74:25:D4:FF:3C:7A X509v3 Authority Key Identifier: keyid:DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0e:8a:c7:ed:a8:16:01:ba:bb:8b:af:12:ed:80:4d:c5:1f: 62:ce:a7:b2:50:a0:75:13:b3:59:68:50:66:ed:cd:6e:25:d4: 09:cc:ca:d1:d4:8b:5d:4a:4b:14:16:06:39:1f:0c:90:d1:c3: b0:9a:80:e3:8b:42:95:74:09:21:12:40:a7:8b:b2:5b:57:4c: e7:73:94:6d:99:35:8c:ca:5f:19:bf:40:51:ca:ea:2f:62:9d: e9:0b:08:1f:7d:7a:e0:fe:a3:c2:cc:82:a6:a4:25:79:40:1c: 4f:12:a8:22:17:72:0e:b2:b8:e1:87:dc:26:b3:1d:b9:45:87: 3e:64:73:6f:37:a3:90:df:49:2e:2a:59:55:c0:3c:d3:c5:90: da:e0:39:72:a6:33:cf:e2:7f:f7:60:49:4b:15:b2:bd:50:69: 46:69:aa:ba:a0:b9:ae:09:99:42:da:31:20:75:27:01:17:57: cd:4d:d3:4f:c0:f9:19:a4:df:1e:87:14:43:6e:2c:3c:13:11: 25:62:fe:86:84:63:d3:47:60:f6:19:c4:6a:85:e1:d0:d1:67: fa:8d:0d:d4:61:ba:8d:ed:2e:18:4d:cb:35:31:8b:85:33:76: d4:02:3d:0b:d8:0b:9b:08:cb:ad:c3:ff:2c:b8:71:36:98:36: 7b:43:c7:38 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUUrh8pZlsMnBPaZeLX9kl0l/EPIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxN0E5RDdEMUYwQkE0OUMwOThENTc0ODdCOTc4MkIx QkM2NTE2NjAeFw0yNjA2MzAxMDE4NDBaFw0yNjA3MDExMjA0NDBaMDMxMTAvBgNV BAMTKEJCQUFEREMyMjVGMUM1MkU5NTgyRjlCRUU3MzQ3NDI1RDRGRjNDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsRAoDhOy18fISvRXbhd7VUzv n1d46A/T4jaDp2NxP76jX5Iqk8L0QvoFBju3mXFntBA6t32mvPyGf8D3Dk+G/JI7 LmUU2dtApVBNdbr5nSP8p4OM0B9+2nyO2CrpbxZT56vbwvVbtIfVhTDv+yl8rlvl /VwRB6C5Uq0yPrcR4sel2DuTe7wUOmVnYlVEuqzqG0yTDy+3JoJsUhYm2fAllTMX 6HnJEplB8S9zIdDwXRlFMrrTAJaNPFNSqCsVXXhicY5UneYkpzjMCQ//k5fTZZlV T8zN5fOw1wTrK+kFF75PZcBC9e5y3G8v9tzXGCPT6BVdsIniJ3JLXo5YF21rAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUu6rdwiXxxS6Vgvm+5zR0JdT/PHowHwYDVR0j BBgwFoAU3xep19HwuknAmNV0h7l4KxvGUWYwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWVVGRU5H LzAvREYxN0E5RDdEMUYwQkE0OUMwOThENTc0ODdCOTc4MkIxQkM2NTE2Ni5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS9ERjE3QTlEN0QxRjBCQTQ5QzA5OEQ1NzQ4N0I5 NzgyQjFCQzY1MTY2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWVVGRU5HLzAvREYxN0E5RDdEMUYw QkE0OUMwOThENTc0ODdCOTc4MkIxQkM2NTE2Ni5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB0OisftqBYB uruLrxLtgE3FH2LOp7JQoHUTs1loUGbtzW4l1AnMytHUi11KSxQWBjkfDJDRw7Ca gOOLQpV0CSESQKeLsltXTOdzlG2ZNYzKXxm/QFHK6i9inekLCB99euD+o8LMgqak JXlAHE8SqCIXcg6yuOGH3CazHblFhz5kc283o5DfSS4qWVXAPNPFkNrgOXKmM8/i f/dgSUsVsr1QaUZpqrqgua4JmULaMSB1JwEXV81N00/A+Rmk3x6HFENuLDwTESVi /oaEY9NHYPYZxGqF4dDRZ/qNDdRhuo3tLhhNyzUxi4UzdtQCPQvYC5sIy63D/yy4 cTaYNntDxzg= -----END CERTIFICATE-----Generated at Tue Jun 30 19:09:17 2026 by rpki-client