$ rpki-client -vvf rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft File: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft (raw, json) Hash identifier: oRESQXKamNEB6O0/xdj0WHQGot3KyWcvMEVd+mRl9uQ= Subject key identifier: BA:72:90:81:90:57:FF:73:65:AD:98:D9:79:3B:01:43:69:6C:CB:7A Authority key identifier: 21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF Certificate issuer: /CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF Certificate serial: 541B2B5D85A472FB1E142D0ACD36ED498A651740 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft Manifest number: 6E Signing time: Tue 28 Jul 2026 17:39:36 +0000 Manifest this update: Tue 28 Jul 2026 17:34:36 +0000 Manifest next update: Wed 29 Jul 2026 19:48:36 +0000 Files and hashes: 1: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl (hash: uak3WOObaMsagWw+4OqwH11uNyilbxD3aiiK3MMqk6I=) 2: 323430313a636436303a3a2f34302d3430203d3e20323134303330.roa (hash: 780V3DLt+Fe7Fs8V4ULwUWJozzo56xPXySO9+JGJ2W8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1b:2b:5d:85:a4:72:fb:1e:14:2d:0a:cd:36:ed:49:8a:65:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF Validity Not Before: Jul 28 17:34:36 2026 GMT Not After : Jul 29 19:48:36 2026 GMT Subject: CN=BA7290819057FF7365AD98D9793B0143696CCB7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:e4:26:d7:7b:1a:68:46:d9:42:19:74:78: 8a:cd:cc:85:7e:c7:ff:47:14:68:b6:1c:f9:ee:51: 92:fe:16:02:96:48:6e:1c:d7:78:ab:cd:77:ea:73: 83:2b:6e:93:b6:53:24:ca:47:f5:08:29:74:5a:82: ea:fa:67:55:ca:e2:f1:c4:0c:40:52:2e:a1:ea:2e: e3:73:52:de:80:26:dc:bb:8d:18:fc:42:c2:f4:a7: e5:e5:be:7a:b8:73:2c:47:ce:56:b2:a9:4c:88:dd: c0:71:d2:22:67:68:d0:68:62:b3:35:77:87:98:9e: 2a:b5:f1:68:63:74:9e:a7:a5:94:9a:7c:e0:52:e6: 57:58:04:66:92:31:c5:83:5f:fe:02:b4:cd:30:5a: 54:05:86:c3:d4:06:f4:b1:d3:92:52:ce:41:d8:c6: f3:6d:4c:b6:04:1e:1b:1e:7f:94:a6:db:45:35:a8: a9:6d:df:cb:19:f9:3d:a2:9d:1c:78:e3:92:0f:f7: 66:16:14:b6:9c:0c:bf:4a:5b:64:de:4c:07:33:8d: e1:54:b2:b2:a3:d5:72:8e:a7:76:bc:68:01:ff:9f: fb:bd:84:61:61:2b:4b:52:dd:8b:37:07:6c:06:6e: a3:df:7a:c4:d2:71:56:51:d5:89:d7:88:23:f9:4c: 72:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:90:81:90:57:FF:73:65:AD:98:D9:79:3B:01:43:69:6C:CB:7A X509v3 Authority Key Identifier: keyid:21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:19:cd:c7:47:a8:51:a2:b1:e0:be:b0:4a:c4:21:51:cd:d1: 84:f1:0d:64:07:4f:2c:1e:79:58:0e:a2:71:08:90:d7:2b:06: f9:3b:96:f5:23:03:65:dd:dc:62:5b:89:1a:16:c5:d9:43:b7: 80:4e:33:37:83:3a:a7:e8:42:0c:d1:5e:01:ea:2b:7c:90:6a: 67:7f:c5:aa:9d:ea:c6:bc:45:bd:c2:2e:48:01:ba:98:b8:be: 96:12:f0:f8:a9:ae:f5:bf:f7:71:74:4b:22:16:63:6e:b9:1d: 36:b8:a7:fb:c8:ed:c0:22:ea:8c:34:29:6e:30:12:4f:9a:0b: d7:cc:14:a2:94:cf:08:ff:12:10:82:34:43:88:00:16:ff:58: a6:e7:67:92:ed:6c:19:25:3e:8e:a0:9b:97:9c:61:1f:70:90: 86:ef:30:50:ac:8b:17:c6:a1:c5:75:fe:44:0d:cc:11:57:4d: 04:6c:60:e1:ec:bc:a7:51:8c:8d:c7:ec:b6:c6:7c:d6:4a:4c: 32:e7:1b:42:96:64:0f:74:f7:7e:c7:a8:2a:8b:2d:40:d8:81: b7:82:ef:c5:31:2b:0a:ea:02:80:63:9d:47:2d:06:3a:59:b8: c2:82:e7:19:f8:13:c5:47:53:1e:ea:ac:e2:14:f4:04:e3:a5: e0:87:b3:ef -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUVBsrXYWkcvseFC0KzTbtSYplF0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5 NDlDRDVBRjAeFw0yNjA3MjgxNzM0MzZaFw0yNjA3MjkxOTQ4MzZaMDMxMTAvBgNV BAMTKEJBNzI5MDgxOTA1N0ZGNzM2NUFEOThEOTc5M0IwMTQzNjk2Q0NCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKa+Qm13saaEbZQhl0eIrNzIV+ x/9HFGi2HPnuUZL+FgKWSG4c13irzXfqc4MrbpO2UyTKR/UIKXRagur6Z1XK4vHE DEBSLqHqLuNzUt6AJty7jRj8QsL0p+Xlvnq4cyxHzlayqUyI3cBx0iJnaNBoYrM1 d4eYniq18WhjdJ6npZSafOBS5ldYBGaSMcWDX/4CtM0wWlQFhsPUBvSx05JSzkHY xvNtTLYEHhsef5Sm20U1qKlt38sZ+T2inRx445IP92YWFLacDL9KW2TeTAczjeFU srKj1XKOp3a8aAH/n/u9hGFhK0tS3Ys3B2wGbqPfesTScVZR1YnXiCP5THKVAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUunKQgZBX/3NlrZjZeTsBQ2lsy3owHwYDVR0j BBgwFoAUIdv9GSESH3MMYUwN5iEs1pSc1a8wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE LzAvMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMURCRkQxOTIxMTIxRjczMEM2MTRDMERFNjIx MkNENjk0OUNENUFGLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzAvMjFEQkZEMTkyMTEy MUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK8ZzcdHqFGi seC+sErEIVHN0YTxDWQHTyweeVgOonEIkNcrBvk7lvUjA2Xd3GJbiRoWxdlDt4BO MzeDOqfoQgzRXgHqK3yQamd/xaqd6sa8Rb3CLkgBupi4vpYS8PiprvW/93F0SyIW Y265HTa4p/vI7cAi6ow0KW4wEk+aC9fMFKKUzwj/EhCCNEOIABb/WKbnZ5LtbBkl Po6gm5ecYR9wkIbvMFCsixfGocV1/kQNzBFXTQRsYOHsvKdRjI3H7LbGfNZKTDLn G0KWZA90937HqCqLLUDYgbeC78UxKwrqAoBjnUctBjpZuMKC5xn4E8VHUx7qrOIU 9ATjpeCHs+8= -----END CERTIFICATE-----Generated at Tue Jul 28 20:29:47 2026 by rpki-client