$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft File: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft (raw, json) Hash identifier: nRgHYjS+uioiC8PqTBnkxjyKAX7nP8SbaltoOINjosg= Subject key identifier: AD:41:EB:48:5F:40:95:D5:D7:4D:CA:A8:30:04:C3:22:63:D3:9C:7B Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Certificate serial: 43F3D8932DADADEF1E4B116A631E254D8E71310B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft Manifest number: 7C Signing time: Tue 28 Jul 2026 03:02:15 +0000 Manifest this update: Tue 28 Jul 2026 02:57:15 +0000 Manifest next update: Wed 29 Jul 2026 05:28:15 +0000 Files and hashes: 1: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl (hash: esYtKsAUbMmbKwAuHY0Ii4xkNny43DlQz14jim7g/oA=) 2: 3134342e37392e3233372e302f32342d3332203d3e203138303430.roa (hash: r6p1Am50m6SY4C22THPfAzr++Eba9JH1Hgnd4WmFLsA=) 3: 3134342e37392e3233362e302f32342d3332203d3e203138303430.roa (hash: 1FIFjMBcizShdvw6u5phvDGtZhnMBusqAuzpJLq+G90=) 4: 3134342e37392e3233362e302f32342d3234203d3e203138303430.roa (hash: ZudjpagHov1aZlrdTbsVSXtYt3YeCsmSW4h5XCZ/uzs=) 5: 3134342e37392e3233372e302f32342d3234203d3e203138303430.roa (hash: YiNfhn2rfnFW/2M2Ag4d3OUBywy0FERwAc5K7Q8vyfc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 05:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f3:d8:93:2d:ad:ad:ef:1e:4b:11:6a:63:1e:25:4d:8e:71:31:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Validity Not Before: Jul 28 02:57:15 2026 GMT Not After : Jul 29 05:28:15 2026 GMT Subject: CN=AD41EB485F4095D5D74DCAA83004C32263D39C7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:87:88:70:55:83:81:4a:fc:2d:cb:21:90: cb:bc:3e:69:b2:81:74:5c:09:07:67:c7:3c:ff:94: 9a:b9:8e:79:03:24:9c:a1:4c:f0:c6:51:64:a2:10: 05:bd:5c:13:ab:83:95:73:bd:21:a5:86:c5:2b:d3: 17:fe:1a:39:2e:c9:23:9f:b4:7c:9d:ca:71:84:20: b2:d2:dd:4e:5b:1b:06:1d:ab:9a:8f:d1:49:20:a8: 1d:c8:50:18:83:f3:fe:92:ef:87:23:a9:50:73:4e: 12:da:da:98:1b:f7:1b:5c:ce:d4:cf:f7:18:89:d3: ee:84:af:38:b4:24:8a:59:90:0c:ec:05:1d:a9:10: b9:59:0d:57:3e:1e:34:35:58:d6:48:b0:f2:16:ea: 5d:33:a6:34:10:c4:ca:07:f4:3c:53:ae:1b:81:54: bb:2e:3a:56:61:d8:56:bc:12:89:3a:c9:0d:57:f5: 9f:65:2a:77:ed:22:f1:dd:5f:95:f9:69:d2:7c:d7: 40:5f:90:52:66:87:dc:77:cd:d0:73:41:47:ca:3b: e4:db:50:5d:3d:82:b3:c7:ba:95:47:c9:0b:b6:c8: 20:9f:d5:1f:b9:88:d7:a9:15:82:f1:9a:53:f7:49: 3d:83:81:dd:39:58:0f:f9:8e:e7:16:9d:7c:8b:af: 0a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:41:EB:48:5F:40:95:D5:D7:4D:CA:A8:30:04:C3:22:63:D3:9C:7B X509v3 Authority Key Identifier: keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:71:ce:bb:84:87:5c:79:1e:4b:e7:7c:3a:4f:91:ee:99:27: 4c:9b:e4:0f:b1:73:b9:03:76:c0:62:14:47:bf:2b:bb:04:7f: 00:00:ab:fe:fe:0a:eb:40:51:78:f5:2d:c7:38:52:30:46:7e: 33:a5:86:b4:a3:53:cb:71:40:ee:64:a1:af:0b:74:33:37:99: 67:ca:12:1c:ae:28:b4:87:2a:16:3f:d8:bf:38:ea:ab:36:95: f5:83:bf:68:49:0a:68:1a:6a:cd:21:41:5e:0c:12:79:0a:ce: a4:8d:1c:38:c4:ab:f5:fe:c9:ea:b8:57:3e:26:25:f9:30:ed: 01:08:3a:de:a8:31:e0:2c:df:d9:96:e7:b0:f7:9f:86:5b:44: cd:31:7d:49:e2:c0:d9:80:61:80:f3:e4:4d:19:2e:db:ea:0e: 83:4c:b1:b3:d5:08:eb:e0:b5:74:b1:f2:a6:cf:44:bc:c4:42: af:26:26:a3:20:e5:b4:bd:d5:ad:f0:2b:07:16:bc:56:5b:9f: 15:e5:a9:fa:d5:8b:2f:34:40:41:55:9c:2b:22:e7:55:96:69: e6:8c:06:18:21:64:48:8c:e8:2c:6b:01:7b:1d:95:c0:21:83: 48:22:e4:b5:fc:7e:8d:e4:e8:53:8d:f5:e1:71:45:aa:a9:99: 8b:0f:7b:b4 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUQ/PYky2tre8eSxFqYx4lTY5xMQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC NkRFMjM0QzAeFw0yNjA3MjgwMjU3MTVaFw0yNjA3MjkwNTI4MTVaMDMxMTAvBgNV BAMTKEFENDFFQjQ4NUY0MDk1RDVENzREQ0FBODMwMDRDMzIyNjNEMzlDN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpGIeIcFWDgUr8LcshkMu8Pmmy gXRcCQdnxzz/lJq5jnkDJJyhTPDGUWSiEAW9XBOrg5VzvSGlhsUr0xf+GjkuySOf tHydynGEILLS3U5bGwYdq5qP0UkgqB3IUBiD8/6S74cjqVBzThLa2pgb9xtcztTP 9xiJ0+6Erzi0JIpZkAzsBR2pELlZDVc+HjQ1WNZIsPIW6l0zpjQQxMoH9DxTrhuB VLsuOlZh2Fa8Eok6yQ1X9Z9lKnftIvHdX5X5adJ810BfkFJmh9x3zdBzQUfKO+Tb UF09grPHupVHyQu2yCCf1R+5iNepFYLxmlP3ST2Dgd05WA/5jucWnXyLrwr3AgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUrUHrSF9AldXXTcqoMATDImPTnHswHwYDVR0j BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw QzVFQ0QzQjZERTIzNEMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xL0RCRTA2QTVG QzVBNUUyODlBQ0VCNDg3QjUwQzVFQ0QzQjZERTIzNEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6cc67 hIdceR5L53w6T5HumSdMm+QPsXO5A3bAYhRHvyu7BH8AAKv+/grrQFF49S3HOFIw Rn4zpYa0o1PLcUDuZKGvC3QzN5lnyhIcrii0hyoWP9i/OOqrNpX1g79oSQpoGmrN IUFeDBJ5Cs6kjRw4xKv1/snquFc+JiX5MO0BCDreqDHgLN/Zluew95+GW0TNMX1J 4sDZgGGA8+RNGS7b6g6DTLGz1Qjr4LV0sfKmz0S8xEKvJiajIOW0vdWt8CsHFrxW W58V5an61YsvNEBBVZwrIudVlmnmjAYYIWRIjOgsawF7HZXAIYNIIuS1/H6N5OhT jfXhcUWqqZmLD3u0 -----END CERTIFICATE-----Generated at Tue Jul 28 22:43:04 2026 by rpki-client