$ rpki-client -vvf rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft File: B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft (raw, json) Hash identifier: q92IAfele3UjspAYPmRk2nKawMsp1RSafZoc09t8LCU= Subject key identifier: 8D:85:F4:02:C6:7B:6D:9C:77:FD:2F:DB:2C:F8:54:3D:96:E5:56:E9 Authority key identifier: B7:2C:12:A5:51:5B:F3:3E:A3:5A:CD:6C:99:11:C9:AC:6D:E9:EA:05 Certificate issuer: /CN=B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05 Certificate serial: 3DEFA39C1641D1315BD3BE066B68374F385C76F7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft Manifest number: 2D Signing time: Sat 13 Jun 2026 12:30:05 +0000 Manifest this update: Sat 13 Jun 2026 12:25:05 +0000 Manifest next update: Sun 14 Jun 2026 15:41:05 +0000 Files and hashes: 1: B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl (hash: R0KScs4PlAvcjdowvCI5hzA7IwZTQyjjZwVGNCHM+ko=) 2: 3135372e31352e37302e302f32332d3233203d3e20313530373639.roa (hash: RIJKr3g2uIwf5iqGFGjqViDDGGsabsMlFTzqof1niUM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ef:a3:9c:16:41:d1:31:5b:d3:be:06:6b:68:37:4f:38:5c:76:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05 Validity Not Before: Jun 13 12:25:05 2026 GMT Not After : Jun 14 15:41:05 2026 GMT Subject: CN=8D85F402C67B6D9C77FD2FDB2CF8543D96E556E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9a:d8:bb:43:36:2e:fc:97:bf:7a:b1:08:93: 08:60:7b:fd:36:1e:b6:3d:c2:3d:71:91:09:8c:6d: 9c:f9:31:5f:80:9b:c1:9f:00:c9:6d:1d:e8:2d:ac: 22:bb:be:94:8c:db:ec:23:77:40:64:76:10:d5:1d: 0e:be:14:81:a9:f4:bd:87:2b:81:a0:c3:bf:21:99: cf:3e:c7:dc:57:e4:69:04:aa:0f:5c:43:07:68:c7: ee:68:d6:9b:ad:1b:34:5c:dd:68:b5:3f:79:46:cd: f1:5b:3b:1e:a9:38:9b:71:14:df:fa:d9:89:71:2e: 0e:b4:14:07:7f:c7:86:16:f7:a4:88:db:fc:7f:d9: 13:fa:cc:92:97:66:a3:54:6a:19:00:8a:b3:e1:30: 9e:8b:d1:d7:2f:fc:7e:03:e2:c7:1d:90:92:21:2f: 5d:85:87:28:e0:16:c8:66:f5:3b:b8:44:c6:79:32: bd:17:4c:93:14:eb:10:20:5a:66:c2:6e:fd:11:32: 9c:9a:8f:ee:88:a9:07:dd:ed:fb:b7:dc:33:16:3d: dc:8c:54:67:2e:11:71:5a:47:f2:1a:e7:fb:3b:bf: e3:a4:e2:7d:81:7f:5a:9b:0b:71:b8:36:be:93:e3: 97:26:05:e4:d8:fc:ef:ee:87:6c:d3:4d:eb:c4:e6: 70:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:85:F4:02:C6:7B:6D:9C:77:FD:2F:DB:2C:F8:54:3D:96:E5:56:E9 X509v3 Authority Key Identifier: keyid:B7:2C:12:A5:51:5B:F3:3E:A3:5A:CD:6C:99:11:C9:AC:6D:E9:EA:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:96:36:b3:b6:03:ad:ae:4a:e0:bd:2e:be:3a:a2:24:28:36: cd:3a:c5:46:b8:2f:ee:c6:a4:dd:77:29:ea:3d:45:60:58:81: 1c:09:1f:ec:7f:e5:f2:0c:c2:91:1e:e9:49:4e:3c:0e:7c:79: f6:de:8e:ca:e8:51:4a:a4:f2:d7:cb:88:55:a5:9b:14:8b:97: ba:ed:6c:a6:1c:6c:9c:05:e0:a4:a4:9d:34:03:0f:c4:5f:38: 3c:fc:51:c8:0e:47:83:51:bc:0a:da:96:98:4f:e2:76:31:30: 2d:d1:3b:29:06:c0:42:a0:50:43:39:6a:ea:1b:22:4d:c2:de: 2f:51:1a:f1:02:58:96:ac:0b:7e:45:57:d0:c4:c1:7a:b9:12: 9b:54:b3:29:6a:24:2b:c4:db:82:cd:ed:09:06:a0:e3:df:a4: 46:49:e1:9c:90:f0:c8:29:d5:6c:50:0c:7c:ff:49:d8:48:be: 27:d5:5a:eb:81:0f:1c:3d:ca:71:78:0d:9d:49:5f:b8:bf:8f: 4a:c9:fd:1e:c6:5a:66:32:bc:d7:dc:ba:f2:e4:f6:16:ec:f6: 44:77:0a:7e:f8:37:86:7f:99:5b:0d:0d:e8:f2:09:5a:ad:cd: b5:68:fb:d1:bd:72:e7:a0:08:38:58:43:87:09:9e:ab:0a:48: 40:8d:90:4a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPe+jnBZB0TFb074Ga2g3TzhcdvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyQzEyQTU1MTVCRjMzRUEzNUFDRDZDOTkxMUM5QUM2 REU5RUEwNTAeFw0yNjA2MTMxMjI1MDVaFw0yNjA2MTQxNTQxMDVaMDMxMTAvBgNV BAMTKDhEODVGNDAyQzY3QjZEOUM3N0ZEMkZEQjJDRjg1NDNEOTZFNTU2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGmti7QzYu/Je/erEIkwhge/02 HrY9wj1xkQmMbZz5MV+Am8GfAMltHegtrCK7vpSM2+wjd0BkdhDVHQ6+FIGp9L2H K4Ggw78hmc8+x9xX5GkEqg9cQwdox+5o1putGzRc3Wi1P3lGzfFbOx6pOJtxFN/6 2YlxLg60FAd/x4YW96SI2/x/2RP6zJKXZqNUahkAirPhMJ6L0dcv/H4D4scdkJIh L12FhyjgFshm9Tu4RMZ5Mr0XTJMU6xAgWmbCbv0RMpyaj+6IqQfd7fu33DMWPdyM VGcuEXFaR/Ia5/s7v+Ok4n2Bf1qbC3G4Nr6T45cmBeTY/O/uh2zTTevE5nCXAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUjYX0AsZ7bZx3/S/bLPhUPZblVukwHwYDVR0j BBgwFoAUtywSpVFb8z6jWs1smRHJrG3p6gUwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNQSVJB UFBTLzEvQjcyQzEyQTU1MTVCRjMzRUEzNUFDRDZDOTkxMUM5QUM2REU5RUEwNS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC9CNzJDMTJBNTUxNUJGMzNFQTM1QUNENkM5 OTExQzlBQzZERTlFQTA1LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNQSVJBUFBTLzEvQjcyQzEy QTU1MTVCRjMzRUEzNUFDRDZDOTkxMUM5QUM2REU5RUEwNS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADaW NrO2A62uSuC9Lr46oiQoNs06xUa4L+7GpN13Keo9RWBYgRwJH+x/5fIMwpEe6UlO PA58efbejsroUUqk8tfLiFWlmxSLl7rtbKYcbJwF4KSknTQDD8RfODz8UcgOR4NR vAralphP4nYxMC3ROykGwEKgUEM5auobIk3C3i9RGvECWJasC35FV9DEwXq5EptU sylqJCvE24LN7QkGoOPfpEZJ4ZyQ8Mgp1WxQDHz/SdhIvifVWuuBDxw9ynF4DZ1J X7i/j0rJ/R7GWmYyvNfcuvLk9hbs9kR3Cn74N4Z/mVsNDejyCVqtzbVo+9G9cueg CDhYQ4cJnqsKSECNkEo= -----END CERTIFICATE-----Generated at Sat Jun 13 23:12:32 2026 by rpki-client