$ rpki-client -vvf rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.mft File: 7667D2C6587BAA9DDECBA87F630031641DB1CA0C.mft (raw, json) Hash identifier: R1YXuxp8qoWqIaZTcb4w7yPIdJq2UF3gqmYf1V9C4iw= Subject key identifier: 09:EC:2A:FF:7A:8A:4A:9C:00:3F:F3:2C:20:76:00:6F:5E:59:CB:AC Authority key identifier: 76:67:D2:C6:58:7B:AA:9D:DE:CB:A8:7F:63:00:31:64:1D:B1:CA:0C Certificate issuer: /CN=7667D2C6587BAA9DDECBA87F630031641DB1CA0C Certificate serial: 266D663D8120EABCFB9843FBCB83405E716893FC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.mft Manifest number: 67 Signing time: Tue 28 Jul 2026 08:18:00 +0000 Manifest this update: Tue 28 Jul 2026 08:13:00 +0000 Manifest next update: Wed 29 Jul 2026 08:21:00 +0000 Files and hashes: 1: 3130332e31302e342e302f32322d3234203d3e20313331313434.roa (hash: IGtZPl0fRH7s0+p+leZ94R332KaEagWZuujznCFMAYM=) 2: 7667D2C6587BAA9DDECBA87F630031641DB1CA0C.crl (hash: qPBY4y4we+KGt5nphA/nQH6U5l0lkQTt5S1Je4Gpo18=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.crl rsync://rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6d:66:3d:81:20:ea:bc:fb:98:43:fb:cb:83:40:5e:71:68:93:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7667D2C6587BAA9DDECBA87F630031641DB1CA0C Validity Not Before: Jul 28 08:13:00 2026 GMT Not After : Jul 29 08:21:00 2026 GMT Subject: CN=09EC2AFF7A8A4A9C003FF32C2076006F5E59CBAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:5e:6a:77:3a:15:3c:81:6f:61:ea:d2:b9: ed:14:78:c8:73:d6:71:56:c6:6f:d4:d9:a3:f7:dc: 22:3e:e1:66:d9:22:60:d3:f4:d5:13:05:98:e8:10: e3:d8:d7:a4:34:9e:45:be:74:2f:4f:61:71:57:a3: 97:c8:8c:dd:71:f5:68:3a:c5:fc:d4:61:13:98:17: 01:52:af:0a:61:e5:f4:26:cc:bc:ec:62:80:e7:33: c6:1c:da:6d:41:12:e3:d0:e0:19:29:06:25:78:60: ce:7e:65:73:e2:2b:40:c0:f5:9f:8d:50:d9:e1:c8: 29:22:1e:3c:dc:01:b9:07:9c:e2:ec:82:20:a5:96: 38:13:d4:f6:0e:0c:14:ac:9f:92:56:86:74:fc:f2: 27:49:e0:e3:b6:b1:bb:56:39:a3:a4:89:6c:81:fb: 79:7d:69:ed:56:e6:d2:4a:02:47:3e:9f:4d:17:e8: c3:a7:d5:dd:af:c3:9d:d4:cd:49:52:c8:2b:13:ee: 2b:2d:17:31:91:58:dc:b6:fa:be:d1:e5:98:e3:e7: 65:41:1a:69:4b:e4:83:9f:31:fd:00:d4:2f:00:06: 5d:c4:01:68:a6:b7:2d:f5:81:ba:49:99:93:c6:b4: 83:66:70:52:30:ce:f6:17:2f:ec:1c:5b:50:66:ae: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EC:2A:FF:7A:8A:4A:9C:00:3F:F3:2C:20:76:00:6F:5E:59:CB:AC X509v3 Authority Key Identifier: keyid:76:67:D2:C6:58:7B:AA:9D:DE:CB:A8:7F:63:00:31:64:1D:B1:CA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ea:cc:46:20:31:99:2a:11:12:3d:96:c6:a2:66:10:e5:a2: 8e:ec:2e:a6:c6:91:93:93:09:c8:d9:62:4d:9a:34:f2:25:25: 67:66:84:d8:73:6c:35:f8:a5:12:8c:1c:ec:b5:2f:cf:b2:c7: 27:9a:11:24:e7:5a:e7:06:a5:33:97:56:c8:fe:69:47:52:d6: 46:37:98:78:f6:f3:d7:52:f2:bf:30:a3:04:5e:f5:96:54:02: a9:c9:11:87:e2:27:cd:da:d6:ab:65:6b:be:5f:79:b0:3e:48: 50:df:8f:85:55:27:23:2f:67:84:2f:0e:14:20:36:9e:89:1c: fa:e6:ca:a4:ad:c6:5e:0b:38:3a:a9:38:b6:17:54:ec:4a:d6: 7c:83:4c:76:1b:fa:d9:78:99:f8:01:2f:be:b6:7c:ca:b3:37: 82:fe:c8:30:6d:05:6b:32:c9:53:cf:cf:87:39:24:c9:30:af: 62:8c:0d:06:31:91:97:e0:91:49:b6:4a:30:36:5a:7f:67:c4: 87:06:1f:a2:24:3d:4e:38:32:7b:b4:75:8c:3b:c1:6a:33:7d: dc:76:bc:5e:4e:e7:3f:75:1f:5c:f9:e4:76:66:16:93:63:b8: f1:9d:bf:63:ad:10:7b:86:57:9f:07:4c:9a:d7:c1:79:4e:4a: 45:a1:3c:6a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUJm1mPYEg6rz7mEP7y4NAXnFok/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY2N0QyQzY1ODdCQUE5RERFQ0JBODdGNjMwMDMxNjQx REIxQ0EwQzAeFw0yNjA3MjgwODEzMDBaFw0yNjA3MjkwODIxMDBaMDMxMTAvBgNV BAMTKDA5RUMyQUZGN0E4QTRBOUMwMDNGRjMyQzIwNzYwMDZGNUU1OUNCQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59V5qdzoVPIFvYerSue0UeMhz 1nFWxm/U2aP33CI+4WbZImDT9NUTBZjoEOPY16Q0nkW+dC9PYXFXo5fIjN1x9Wg6 xfzUYROYFwFSrwph5fQmzLzsYoDnM8Yc2m1BEuPQ4BkpBiV4YM5+ZXPiK0DA9Z+N UNnhyCkiHjzcAbkHnOLsgiClljgT1PYODBSsn5JWhnT88idJ4OO2sbtWOaOkiWyB +3l9ae1W5tJKAkc+n00X6MOn1d2vw53UzUlSyCsT7istFzGRWNy2+r7R5Zjj52VB GmlL5IOfMf0A1C8ABl3EAWimty31gbpJmZPGtINmcFIwzvYXL+wcW1BmrufpAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUCewq/3qKSpwAP/MsIHYAb15Zy6wwHwYDVR0j BBgwFoAUdmfSxlh7qp3ey6h/YwAxZB2xygwwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNVUy8w Lzc2NjdEMkM2NTg3QkFBOURERUNCQTg3RjYzMDAzMTY0MURCMUNBMEMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNzY2N0QyQzY1ODdCQUE5RERFQ0JBODdGNjMwMDMx NjQxREIxQ0EwQy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0FTVVMvMC83NjY3RDJDNjU4N0JBQTlE REVDQkE4N0Y2MzAwMzE2NDFEQjFDQTBDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMurMRiAxmSoREj2W xqJmEOWijuwupsaRk5MJyNliTZo08iUlZ2aE2HNsNfilEowc7LUvz7LHJ5oRJOda 5walM5dWyP5pR1LWRjeYePbz11LyvzCjBF71llQCqckRh+InzdrWq2Vrvl95sD5I UN+PhVUnIy9nhC8OFCA2nokc+ubKpK3GXgs4Oqk4thdU7ErWfINMdhv62XiZ+AEv vrZ8yrM3gv7IMG0FazLJU8/PhzkkyTCvYowNBjGRl+CRSbZKMDZaf2fEhwYfoiQ9 Tjgye7R1jDvBajN93Ha8Xk7nP3UfXPnkdmYWk2O48Z2/Y60Qe4ZXnwdMmtfBeU5K RaE8ag== -----END CERTIFICATE-----Generated at Tue Jul 28 20:29:46 2026 by rpki-client