$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft File: 9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft (raw, json) Hash identifier: 6AlYOwzqs7RdBgfyw7VQwomutz3Bf/XFzhjosGD4Ars= Subject key identifier: 24:58:88:42:18:F6:63:BD:AE:30:D4:35:0E:3C:51:AF:3E:45:AA:BF Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3 Certificate issuer: /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3 Certificate serial: 57EA4B3ABAADF9749D010775B89347AA7BA215B8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft Manifest number: 72 Signing time: Tue 28 Jul 2026 21:24:56 +0000 Manifest this update: Tue 28 Jul 2026 21:19:56 +0000 Manifest next update: Wed 29 Jul 2026 23:51:56 +0000 Files and hashes: 1: 323030313a6330383a3a2f33322d3332203d3e2039323634.roa (hash: Za2eLedW7Dgj1YKn18rk+zYaiAYcT3aXmTUgI60NrbY=) 2: 3130332e3133302e3235322e302f32322d3232203d3e2039323634.roa (hash: VvHRqWxVEtxPJcjsyJFxfRKVgF0vRJqpYge9SzO33qM=) 3: 9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl (hash: 9FKsS3TBp0xpbCFVLr6yeTaEl1itfOiH25kwDVV2Dak=) 4: 3131372e3130332e39362e302f32302d3230203d3e2039323634.roa (hash: QzqhrVUHom/+44097wyR/SgbPwVIpPZtBP2vJQUQT34=) 5: 323430333a633234303a3a2f33322d3332203d3e2039323634.roa (hash: oe8xOwIqr2mO81l6+e7ZMOIERS2RYBz6q6ygl7MIFms=) 6: 323430303a343530303a3a2f33322d3332203d3e2039323634.roa (hash: KHJasWZ7ZRecfk0BbyKR1BgVi3lPmEGN9yAwpdYHKvo=) 7: 323030313a6330383a666666663a666666663a666666663a666666663a666666613a3830302f3131392d313139203d3e203138323137.roa (hash: LlmnWD7qIwStfYARyzYDm1T1rVnzOKq6b9lEjT/7ewQ=) 8: 3130332e3133302e3235322e302f32322d3234203d3e2039323634.roa (hash: ebYSyc6wu3utGCh3CfyxTzxW7KNMw2xjNw8vV6+J0FQ=) 9: 3230322e3134302e3136302e302f31392d3139203d3e2039323634.roa (hash: LA74+HRCy+YQeY35gYYWFZPH2WSKO8OariSVC3JqHzM=) 10: 3230322e3136392e3136302e302f32302d3230203d3e2039323634.roa (hash: sSOmlXcn9YAxBpR7Y/Omip1XRS2+5nTj6dTKOHSNkp4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ea:4b:3a:ba:ad:f9:74:9d:01:07:75:b8:93:47:aa:7b:a2:15:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3 Validity Not Before: Jul 28 21:19:56 2026 GMT Not After : Jul 29 23:51:56 2026 GMT Subject: CN=2458884218F663BDAE30D4350E3C51AF3E45AABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:d3:df:49:fd:df:62:d6:f7:01:7f:b4:6f: ae:2f:09:16:3a:73:f3:6d:93:32:53:c8:2d:dd:5d: 4d:99:6d:9f:f2:5b:4d:3f:ce:81:e3:3d:bf:5b:fa: 66:7f:ed:d8:ce:01:ac:b5:03:15:aa:7d:b3:91:a6: d1:99:be:52:0c:70:fe:2d:5f:a3:5d:72:99:4b:17: c9:61:a4:66:a2:c6:37:5f:8f:85:42:b2:50:b9:30: 63:ff:59:ca:c9:d2:d3:f2:bb:c8:71:3e:a4:78:60: 79:20:07:99:d2:13:7c:79:b2:77:b0:38:d8:39:ab: 53:15:ca:4b:10:ba:27:92:f5:30:59:86:3b:4b:f3: c4:a9:eb:48:0a:b3:1c:50:84:94:61:f0:88:8f:af: 87:a8:f8:e7:3d:88:ca:b1:f6:b6:71:db:c4:37:6f: 56:fe:6c:76:a9:3b:5b:d2:cf:4f:c1:95:7d:83:08: 66:b1:39:64:b9:9c:dc:fc:16:22:b0:58:84:15:74: 5d:ea:25:47:df:d6:09:cb:99:40:f3:87:4c:91:0a: 65:b7:6a:9e:6c:84:17:9f:f1:a1:22:af:33:cb:ca: 4f:4b:2f:bd:0e:5b:54:48:a8:08:3c:04:a7:5c:78: ba:81:ad:41:5c:b5:1f:27:24:9a:14:3d:c8:13:d6: cb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:58:88:42:18:F6:63:BD:AE:30:D4:35:0E:3C:51:AF:3E:45:AA:BF X509v3 Authority Key Identifier: keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:2c:b0:ff:57:cc:d8:0f:ca:81:af:94:ce:79:6e:28:94:54: b0:42:cd:44:36:38:3c:38:d8:d7:c5:1d:46:2a:9f:a9:1e:44: 2f:b7:44:87:31:4e:de:bc:1c:15:b1:4e:14:db:fa:d3:ea:27: ea:00:2f:b4:f1:19:7c:8c:9b:1f:88:97:5f:4c:09:b7:63:e8: 4a:5b:ef:10:ef:0b:39:26:88:41:37:b4:dc:c0:cd:18:93:41: 8f:ce:09:eb:b8:18:6d:fe:93:ad:38:c5:13:46:7c:1a:c1:d4: a5:3f:69:0d:6e:5d:92:e0:53:1c:a0:09:65:44:59:4b:dd:85: b8:aa:4f:87:4e:fd:2f:b4:54:1d:43:ba:eb:1f:7b:40:85:73: 48:8d:22:7b:59:06:65:79:90:ec:fe:e0:cb:74:d3:ff:dc:59: ec:8c:ea:f4:8e:58:02:49:7e:2c:8d:ca:1c:e1:ad:7f:fe:b1: eb:b2:3d:70:93:a8:58:1a:dc:28:a7:4b:b3:d2:8c:38:e7:3a: 23:d6:ef:2b:5f:18:4f:a8:93:06:23:d2:ef:3a:43:95:be:60: 19:d1:07:7e:73:82:9d:0a:b5:f3:f0:77:91:15:ae:97:47:eb: ac:be:3a:aa:17:81:c8:7f:0b:d5:cd:8e:fc:02:e0:f9:d4:68: 97:9a:09:28 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUV+pLOrqt+XSdAQd1uJNHqnuiFbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgzMkE3RTRDRjQ1NzI5RURDRDM2ODFEMDE0NkUxRUQz QTRBNDBDMzAeFw0yNjA3MjgyMTE5NTZaFw0yNjA3MjkyMzUxNTZaMDMxMTAvBgNV BAMTKDI0NTg4ODQyMThGNjYzQkRBRTMwRDQzNTBFM0M1MUFGM0U0NUFBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFI9PfSf3fYtb3AX+0b64vCRY6 c/NtkzJTyC3dXU2ZbZ/yW00/zoHjPb9b+mZ/7djOAay1AxWqfbORptGZvlIMcP4t X6NdcplLF8lhpGaixjdfj4VCslC5MGP/WcrJ0tPyu8hxPqR4YHkgB5nSE3x5snew ONg5q1MVyksQuieS9TBZhjtL88Sp60gKsxxQhJRh8IiPr4eo+Oc9iMqx9rZx28Q3 b1b+bHapO1vSz0/BlX2DCGaxOWS5nNz8FiKwWIQVdF3qJUff1gnLmUDzh0yRCmW3 ap5shBef8aEirzPLyk9LL70OW1RIqAg8BKdceLqBrUFctR8nJJoUPcgT1st7AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUJFiIQhj2Y72uMNQ1DjxRrz5Fqr8wHwYDVR0j BBgwFoAUmDKn5M9Fcp7c02gdAUbh7TpKQMMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNORVQv MC85ODMyQTdFNENGNDU3MjlFRENEMzY4MUQwMTQ2RTFFRDNBNEE0MEMzLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzk4MzJBN0U0Q0Y0NTcyOUVEQ0QzNjgxRDAxNDZF MUVEM0E0QTQwQzMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BU05FVC8wLzk4MzJBN0U0Q0Y0NTcy OUVEQ0QzNjgxRDAxNDZFMUVEM0E0QTQwQzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgLLD/V8zYD8qB r5TOeW4olFSwQs1ENjg8ONjXxR1GKp+pHkQvt0SHMU7evBwVsU4U2/rT6ifqAC+0 8Rl8jJsfiJdfTAm3Y+hKW+8Q7ws5JohBN7TcwM0Yk0GPzgnruBht/pOtOMUTRnwa wdSlP2kNbl2S4FMcoAllRFlL3YW4qk+HTv0vtFQdQ7rrH3tAhXNIjSJ7WQZleZDs /uDLdNP/3FnsjOr0jlgCSX4sjcoc4a1//rHrsj1wk6hYGtwop0uz0ow45zoj1u8r XxhPqJMGI9LvOkOVvmAZ0Qd+c4KdCrXz8HeRFa6XR+usvjqqF4HIfwvVzY78AuD5 1GiXmgko -----END CERTIFICATE-----Generated at Wed Jul 29 05:39:50 2026 by rpki-client