$ rpki-client -vvf rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft File: 671DA95F67D703A8EBC3330E782717679AE5E9FD.mft (raw, json) Hash identifier: tB0tNaPRlQjRUe557fn14gR3Vg/3ep6Q2naA5v8au2w= Subject key identifier: 1A:CA:4A:FA:2D:89:7B:B1:4D:EF:47:CE:02:22:AA:71:FF:BF:E5:E8 Authority key identifier: 67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD Certificate issuer: /CN=671DA95F67D703A8EBC3330E782717679AE5E9FD Certificate serial: 0E88A61DBB2404A82E5E58DD4ED15787859EA460 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft Manifest number: 6F Signing time: Tue 28 Jul 2026 17:59:39 +0000 Manifest this update: Tue 28 Jul 2026 17:54:39 +0000 Manifest next update: Wed 29 Jul 2026 21:23:39 +0000 Files and hashes: 1: 671DA95F67D703A8EBC3330E782717679AE5E9FD.crl (hash: nK0e9qG0fyaMIYrsV9ihqfa01g0pGKJ6/6lFIoIudlE=) 2: 323430323a343736303a39633a3a2f34382d3438203d3e20333936393832.roa (hash: W+cJcGEBHA5nMvetfbU/MxRKQJYX8lMgJjfV6ST7azg=) 3: 323430323a343736303a3a2f34382d3438203d3e20333936393832.roa (hash: xNniVHF2D5n4PRBYJLC1H1m4ixoVY/+fUm+4DZvFSao=) 4: 323430323a343736303a3a2f33322d3438203d3e20323132393639.roa (hash: C3SLp2cLKJEoSfOCrv1QENdxIJcJ56ZPXagR0nS+hok=) 5: 323430323a343736303a3a2f33322d3438203d3e20313532363136.roa (hash: lKmthCTTisqjHpuoP2bikfzfGXpUjgsnHNJya4mfXq4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:88:a6:1d:bb:24:04:a8:2e:5e:58:dd:4e:d1:57:87:85:9e:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=671DA95F67D703A8EBC3330E782717679AE5E9FD Validity Not Before: Jul 28 17:54:39 2026 GMT Not After : Jul 29 21:23:39 2026 GMT Subject: CN=1ACA4AFA2D897BB14DEF47CE0222AA71FFBFE5E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:5c:7f:d7:a3:d5:62:e2:50:fc:64:90:c6: 36:e6:82:32:df:d4:42:19:3f:72:1d:19:50:28:91: 68:45:a1:3d:aa:6e:40:f6:b0:ef:e2:53:8f:fa:92: f2:bf:26:c6:3b:01:97:e1:3f:2d:88:a3:bc:27:9a: 8d:4b:9b:45:9c:8b:b6:af:59:1d:c3:4f:de:82:5d: 4f:ba:0c:21:5c:3f:04:47:df:9b:40:c0:60:ad:eb: 39:7a:38:38:9f:3d:b3:1b:7c:6f:c3:58:5b:01:e4: 6b:0d:ae:81:e8:69:ee:5e:a8:f6:6a:81:e2:9f:69: 31:54:d7:f9:3d:63:13:ee:5d:db:28:a7:b6:1e:f9: 4a:99:cb:6a:c9:33:f6:94:93:3e:f0:a5:35:d2:6a: d6:e2:72:24:29:65:64:31:41:3f:2f:00:bf:69:fb: b6:a5:ad:9d:eb:f5:af:04:31:95:bc:86:df:bc:a5: 25:ff:73:77:b0:8a:8a:fd:2d:c1:53:dd:70:ed:58: dc:3e:39:06:31:3b:33:32:8e:5f:3e:aa:5e:8f:eb: 4f:ee:70:d2:aa:a6:e6:66:38:a4:38:3b:eb:f8:bd: 26:67:4f:36:42:dc:93:79:1c:70:7a:0c:23:bf:49: 1e:9f:4a:c3:e0:60:4e:4e:de:00:a5:8d:5f:42:d0: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CA:4A:FA:2D:89:7B:B1:4D:EF:47:CE:02:22:AA:71:FF:BF:E5:E8 X509v3 Authority Key Identifier: keyid:67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f4:2e:65:63:cc:e5:48:cd:64:2b:7c:f1:55:14:cc:a3:13: d9:98:da:d3:2c:8c:1f:3f:8b:37:cb:61:3b:c6:46:b9:06:1e: 9a:f7:57:1b:e1:c2:e9:cb:33:7b:66:64:25:a5:89:f3:6b:c0: b1:c6:76:a1:ac:04:83:05:29:1c:2b:b5:81:82:85:ca:01:b4: 68:fe:ec:72:ed:e6:46:00:54:20:fd:8a:43:99:4b:f6:25:ab: fb:79:12:79:11:c2:cd:da:d4:a1:fd:95:d9:cb:eb:42:bc:fe: 41:a4:04:e3:96:bd:97:13:ae:f5:fa:64:cf:fd:46:b7:f2:cf: 5b:1b:40:71:15:d7:70:13:9e:24:54:d8:21:3e:1e:aa:c3:f8: ae:3e:c1:55:c2:d6:eb:df:44:f3:fa:59:71:03:56:a4:da:2c: 33:ee:3a:2c:d5:5a:f6:84:5a:73:68:2a:ca:0f:c0:bc:20:ec: 31:ab:7e:b8:0b:ba:75:42:92:3e:7f:4f:de:0c:b5:3f:ee:3e: b3:c9:ef:c2:d7:11:83:37:67:96:25:39:21:be:8b:4d:32:70: 0b:8e:08:da:ec:b1:60:c4:13:67:d6:33:b9:c7:7a:34:ae:55: ab:65:44:0b:44:a1:71:bc:1e:7a:13:d3:05:21:a0:3d:40:83: 1a:26:9d:1e -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUDoimHbskBKguXljdTtFXh4WepGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcxREE5NUY2N0Q3MDNBOEVCQzMzMzBFNzgyNzE3Njc5 QUU1RTlGRDAeFw0yNjA3MjgxNzU0MzlaFw0yNjA3MjkyMTIzMzlaMDMxMTAvBgNV BAMTKDFBQ0E0QUZBMkQ4OTdCQjE0REVGNDdDRTAyMjJBQTcxRkZCRkU1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFq1x/16PVYuJQ/GSQxjbmgjLf 1EIZP3IdGVAokWhFoT2qbkD2sO/iU4/6kvK/JsY7AZfhPy2Io7wnmo1Lm0Wci7av WR3DT96CXU+6DCFcPwRH35tAwGCt6zl6ODifPbMbfG/DWFsB5GsNroHoae5eqPZq geKfaTFU1/k9YxPuXdsop7Ye+UqZy2rJM/aUkz7wpTXSatbiciQpZWQxQT8vAL9p +7alrZ3r9a8EMZW8ht+8pSX/c3ewior9LcFT3XDtWNw+OQYxOzMyjl8+ql6P60/u cNKqpuZmOKQ4O+v4vSZnTzZC3JN5HHB6DCO/SR6fSsPgYE5O3gCljV9C0He7AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUGspK+i2Je7FN70fOAiKqcf+/5egwHwYDVR0j BBgwFoAUZx2pX2fXA6jrwzMOeCcXZ5rl6f0wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8w LzY3MURBOTVGNjdENzAzQThFQkMzMzMwRTc4MjcxNzY3OUFFNUU5RkQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNjcxREE5NUY2N0Q3MDNBOEVCQzMzMzBFNzgyNzE3 Njc5QUU1RTlGRC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMC82NzFEQTk1RjY3RDcwM0E4 RUJDMzMzMEU3ODI3MTc2NzlBRTVFOUZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPQuZWPM5UjNZCt8 8VUUzKMT2Zja0yyMHz+LN8thO8ZGuQYemvdXG+HC6csze2ZkJaWJ82vAscZ2oawE gwUpHCu1gYKFygG0aP7scu3mRgBUIP2KQ5lL9iWr+3kSeRHCzdrUof2V2cvrQrz+ QaQE45a9lxOu9fpkz/1Gt/LPWxtAcRXXcBOeJFTYIT4eqsP4rj7BVcLW699E8/pZ cQNWpNosM+46LNVa9oRac2gqyg/AvCDsMat+uAu6dUKSPn9P3gy1P+4+s8nvwtcR gzdnliU5Ib6LTTJwC44I2uyxYMQTZ9Yzucd6NK5Vq2VEC0ShcbweehPTBSGgPUCD GiadHg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:32:42 2026 by rpki-client