$ rpki-client -vvf rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft File: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft (raw, json) Hash identifier: 47adRlmJgrckB/nVNbEvNYqsv8Z9hX3JjCioZz3GNGM= Subject key identifier: 9A:B2:8D:23:CE:FE:21:ED:28:08:CD:C4:2E:BE:05:98:7A:07:17:9F Authority key identifier: 9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 Certificate issuer: /CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Certificate serial: 590867689C9036DAAEAF46278AEA8191A25C9C9E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft Manifest number: 48 Signing time: Tue 30 Jun 2026 10:43:40 +0000 Manifest this update: Tue 30 Jun 2026 10:38:40 +0000 Manifest next update: Wed 01 Jul 2026 10:46:40 +0000 Files and hashes: 1: 3133382e3235322e31332e302f32342d3234203d3e20313331363338.roa (hash: ZxFVwcoOUjiuOptQUvoMY0HJlqBq+tEMKJCTrxaADFk=) 2: 3133382e3235322e31322e302f32342d3234203d3e203633393030.roa (hash: M8obdGIsjRO1zF80aPiV/zHcUxXnNPdWJ9IvgOv18N0=) 3: 3133382e3235322e31322e302f32332d3234203d3e203633393030.roa (hash: T1G4LI5dLLgbVaIvhEyF4d3yTLg74BSvJymMPoiXRRs=) 4: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl (hash: tkbOoetWBVfETzQMHkbrlxAHWEvOMFYcwHbBaponjB0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 19:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:08:67:68:9c:90:36:da:ae:af:46:27:8a:ea:81:91:a2:5c:9c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Validity Not Before: Jun 30 10:38:40 2026 GMT Not After : Jul 1 10:46:40 2026 GMT Subject: CN=9AB28D23CEFE21ED2808CDC42EBE05987A07179F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:de:b4:7e:19:bc:6d:ef:92:6f:c5:ac:1a:22: c3:c1:33:98:8c:cf:35:72:80:28:52:2d:a9:37:45: 86:73:e3:87:d7:22:50:e5:4b:1a:b2:77:99:f6:36: 08:ab:fe:be:e1:2b:36:59:b5:83:44:97:37:fe:2d: 34:1b:a7:7a:18:33:05:ec:23:ed:c0:28:17:8a:5f: 79:4e:0b:80:79:10:21:ea:68:4c:be:a3:41:09:95: 30:fa:90:6d:63:a6:3f:32:77:21:4e:1b:93:bf:ca: 5a:e3:ca:0b:4f:2c:43:39:de:62:68:8a:bb:36:95: 95:9f:94:7d:3f:81:dc:0c:26:6e:d9:fb:c0:fb:4d: be:e5:a2:a9:64:a0:12:f0:bd:e8:d4:92:da:50:d2: da:57:de:ab:7f:a9:ea:57:c8:7a:63:88:47:24:70: 6a:26:66:6a:b6:37:a4:7a:1b:70:92:91:36:10:6f: 13:2c:13:09:11:2f:80:ab:44:5e:6e:90:91:4d:b2: 17:de:fd:59:6b:4a:b3:7e:7f:8e:0c:7f:41:a3:00: 7f:50:a2:f9:0b:e4:31:e2:da:44:35:0e:42:4d:41: c7:8c:e5:ee:79:94:b1:eb:ba:ab:44:ad:0d:34:ba: bc:31:0b:1d:c2:28:df:04:ed:1b:67:22:d3:37:08: c7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B2:8D:23:CE:FE:21:ED:28:08:CD:C4:2E:BE:05:98:7A:07:17:9F X509v3 Authority Key Identifier: keyid:9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:98:0e:fe:4d:2c:1a:76:d3:87:ee:ff:1d:f8:b8:d3:87:35: 0b:e5:80:06:ac:6f:96:39:a4:5c:ac:1f:c6:7f:bb:95:3e:c9: 73:c4:d1:17:9d:87:17:72:88:8b:5a:1b:94:ca:08:2f:ed:91: 3d:a6:0c:82:e7:4a:64:b6:f0:1a:c2:c1:fe:3b:b6:e6:94:2a: 22:d3:c2:f3:52:63:56:2e:cb:c7:75:d2:c6:ed:b2:bb:38:b8: 06:03:e5:3a:f3:06:40:76:10:7a:8b:37:de:e0:41:3c:a6:97: 12:f4:9b:e0:6a:9e:0d:46:76:31:1d:c2:b7:9e:ec:dc:88:28: fd:da:bf:af:94:48:1f:19:b3:0d:a2:ff:dd:16:de:3f:92:af: 9a:ca:b6:9d:58:ef:8e:e2:68:e7:af:7b:a3:21:9e:c8:04:ec: 34:46:5b:65:82:b1:5c:4c:51:35:7d:bf:0a:e1:9c:e6:4d:99: 90:15:86:e4:69:6a:7c:85:d6:f2:03:a8:27:13:72:a3:93:df: a6:c9:32:e6:1a:a9:a3:32:7f:bb:e9:d4:cf:de:de:e6:a1:7c: 9c:f8:d2:13:98:72:97:d6:aa:44:fb:ba:a5:d0:65:7c:5f:b9: a2:24:d9:43:97:e9:8f:1c:82:d9:f8:c2:f7:cb:12:35:50:a5: b1:3d:44:f5 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUWQhnaJyQNtqur0YniuqBkaJcnJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFBNDc3 MjdDQzFDMzAeFw0yNjA2MzAxMDM4NDBaFw0yNjA3MDExMDQ2NDBaMDMxMTAvBgNV BAMTKDlBQjI4RDIzQ0VGRTIxRUQyODA4Q0RDNDJFQkUwNTk4N0EwNzE3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN3rR+Gbxt75JvxawaIsPBM5iM zzVygChSLak3RYZz44fXIlDlSxqyd5n2Ngir/r7hKzZZtYNElzf+LTQbp3oYMwXs I+3AKBeKX3lOC4B5ECHqaEy+o0EJlTD6kG1jpj8ydyFOG5O/ylrjygtPLEM53mJo irs2lZWflH0/gdwMJm7Z+8D7Tb7loqlkoBLwvejUktpQ0tpX3qt/qepXyHpjiEck cGomZmq2N6R6G3CSkTYQbxMsEwkRL4CrRF5ukJFNshfe/VlrSrN+f44Mf0GjAH9Q ovkL5DHi2kQ1DkJNQceM5e55lLHruqtErQ00urwxCx3CKN8E7RtnItM3CMfhAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUmrKNI87+Ie0oCM3ELr4FmHoHF58wHwYDVR0j BBgwFoAUnN5QPM43CjnhV/hRms8aR3J8wcMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWlVTTy8x LzlDREU1MDNDQ0UzNzBBMzlFMTU3Rjg1MTlBQ0YxQTQ3NzI3Q0MxQzMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFB NDc3MjdDQzFDMy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1pVU08vMS85Q0RFNTAzQ0NFMzcwQTM5 RTE1N0Y4NTE5QUNGMUE0NzcyN0NDMUMzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZgO/k0sGnbTh+7/ Hfi404c1C+WABqxvljmkXKwfxn+7lT7Jc8TRF52HF3KIi1oblMoIL+2RPaYMgudK ZLbwGsLB/ju25pQqItPC81JjVi7Lx3XSxu2yuzi4BgPlOvMGQHYQeos33uBBPKaX EvSb4GqeDUZ2MR3Ct57s3Igo/dq/r5RIHxmzDaL/3RbeP5Kvmsq2nVjvjuJo5697 oyGeyATsNEZbZYKxXExRNX2/CuGc5k2ZkBWG5GlqfIXW8gOoJxNyo5Pfpsky5hqp ozJ/u+nUz97e5qF8nPjSE5hyl9aqRPu6pdBlfF+5oiTZQ5fpjxyC2fjC98sSNVCl sT1E9Q== -----END CERTIFICATE-----Generated at Tue Jun 30 13:10:12 2026 by rpki-client