$ rpki-client -vvf rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft File: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft (raw, json) Hash identifier: X38eWs5z28OHwLV9rE02dEsF/xxiSfduVJjxJnZoLUk= Subject key identifier: 9E:9B:68:1E:5D:A9:7D:3D:F8:ED:6B:DA:29:A2:01:1C:89:73:0B:3E Authority key identifier: 82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8 Certificate issuer: /CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8 Certificate serial: 3C4E91DA6B28B806CAC45D2860DB3B1EFC76FA29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft Manifest number: 33 Signing time: Sat 13 Jun 2026 18:55:17 +0000 Manifest this update: Sat 13 Jun 2026 18:50:17 +0000 Manifest next update: Sun 14 Jun 2026 19:45:17 +0000 Files and hashes: 1: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl (hash: 4qDwjA1MMIP1SEqXJNHoReKoW2hv92TrHCfRACYeNDs=) 2: 3136302e3139312e392e302f32342d3234203d3e20313530373636.roa (hash: Fdjjfm1fJnNWkVxu2u3fwQcxaiitdeQENtBg51jTLAs=) 3: 3136302e3139312e382e302f32342d3332203d3e20313530373636.roa (hash: rnSZ0yRJQ87LO3K66pUprLSWzMYNldm6q1qbJoiJRVA=) 4: 3136302e3139312e382e302f32332d3234203d3e20313530373636.roa (hash: BxOTrJ4kAeU/jIshca7/vnqFH5T34oiHpb989w5ilgs=) 5: 3136302e3139312e392e302f32342d3332203d3e20313530373636.roa (hash: iobSCigwHPXsmKPAiv0Cm9wPrYmBsLfhPZWAEKgfxoc=) 6: 3136302e3139312e382e302f32342d3234203d3e20313530373636.roa (hash: 23kEX/05VYapgUwuItpshBmqk2zUM39bNJvI89JH27Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4e:91:da:6b:28:b8:06:ca:c4:5d:28:60:db:3b:1e:fc:76:fa:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8 Validity Not Before: Jun 13 18:50:17 2026 GMT Not After : Jun 14 19:45:17 2026 GMT Subject: CN=9E9B681E5DA97D3DF8ED6BDA29A2011C89730B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:e5:9c:5e:7b:cb:45:fa:c9:ed:92:bc:46: 6b:db:30:8c:2a:d2:87:5b:89:23:2a:94:b5:b6:6f: 35:1f:4c:1a:0b:a6:ab:45:3a:cf:77:74:1a:35:4f: 3d:16:e8:80:e5:66:49:38:7b:64:c4:9f:0c:95:59: d0:ab:30:e8:f9:1c:82:d6:b2:5a:bb:b9:c4:b0:ed: 45:d2:83:0d:eb:fb:78:34:92:af:0f:01:9b:35:2c: 59:3d:d1:39:9a:3d:b5:d9:b4:2a:de:9c:82:c2:08: 28:a4:9d:cd:ec:8a:36:df:c3:85:47:60:1e:d7:3f: 6f:d4:9b:f7:2e:c6:6c:48:20:95:46:ff:ee:cd:b9: 5c:5d:6b:5f:65:69:fc:bd:89:9b:a5:70:da:e1:9e: 46:bc:26:14:54:0b:a3:ff:ee:7a:e8:b1:0d:c5:c3: be:d9:70:97:2b:8b:69:eb:c2:c8:a7:df:0c:a4:fa: 42:3d:f1:69:6b:fb:f9:f3:ee:96:c7:cd:7f:19:39: d8:1a:9d:a9:be:c2:fa:34:87:e8:3c:3c:74:5b:c8: 60:2e:19:67:ce:a3:18:30:b2:ce:c6:78:13:64:e8: 18:bf:dd:f5:23:f7:72:81:a8:2e:a7:37:4d:b2:c6: 66:6f:ef:43:9a:f4:c1:e7:9d:9b:b6:11:39:a2:6b: 98:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9B:68:1E:5D:A9:7D:3D:F8:ED:6B:DA:29:A2:01:1C:89:73:0B:3E X509v3 Authority Key Identifier: keyid:82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ce:46:bc:86:bf:5b:c4:0a:ec:4b:be:b9:c6:d7:97:85:82: 78:3f:07:27:48:0f:58:61:73:20:8e:1e:76:34:08:a9:2f:8e: 1b:ce:c0:74:c0:52:2b:79:01:f1:ec:88:0c:9c:d7:dd:ff:ba: bf:1e:6b:85:64:bd:74:13:5a:3d:1c:1b:e5:7e:8e:3c:14:1a: 7d:9f:af:86:4d:24:89:69:39:89:98:29:d2:92:36:0b:47:e6: 3f:5c:5b:4d:13:9a:23:d8:3d:79:d6:d0:6f:96:d1:f2:da:2e: ff:45:23:bb:fc:e7:d1:3e:35:7f:c7:e6:be:92:df:8b:93:ca: 98:dd:c8:7e:0c:d4:62:a3:05:dd:71:e6:a8:fc:ca:44:0d:b4: 5c:e5:dc:d3:35:46:6e:2a:63:56:db:3e:c0:a8:36:76:97:57: ab:9e:4e:9b:4e:41:38:4d:30:6a:68:0d:fa:26:5d:c7:58:bc: fc:65:f4:e9:50:c3:2a:6c:5c:bb:7f:89:ac:db:83:4a:cb:0d: c0:65:e0:04:5b:b2:86:79:6a:9a:9a:d0:8f:7d:77:5c:ac:77: 2e:94:a1:1c:4c:4a:49:63:9e:6c:12:26:5b:5d:7b:3a:65:1e: b3:6b:8d:51:5f:96:92:39:e4:2f:c5:8c:59:64:0f:56:1f:fd: f4:5d:7c:59 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUPE6R2msouAbKxF0oYNs7Hvx2+ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI0MkEzOUUwNTc3RThFODJCRjg2M0QwMTI0RkY1QUYy RjUzQzlDODAeFw0yNjA2MTMxODUwMTdaFw0yNjA2MTQxOTQ1MTdaMDMxMTAvBgNV BAMTKDlFOUI2ODFFNURBOTdEM0RGOEVENkJEQTI5QTIwMTFDODk3MzBCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRquWcXnvLRfrJ7ZK8RmvbMIwq 0odbiSMqlLW2bzUfTBoLpqtFOs93dBo1Tz0W6IDlZkk4e2TEnwyVWdCrMOj5HILW slq7ucSw7UXSgw3r+3g0kq8PAZs1LFk90TmaPbXZtCrenILCCCiknc3sijbfw4VH YB7XP2/Um/cuxmxIIJVG/+7NuVxda19lafy9iZulcNrhnka8JhRUC6P/7nrosQ3F w77ZcJcri2nrwsin3wyk+kI98Wlr+/nz7pbHzX8ZOdganam+wvo0h+g8PHRbyGAu GWfOoxgwss7GeBNk6Bi/3fUj93KBqC6nN02yxmZv70Oa9MHnnZu2ETmia5hFAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUnptoHl2pfT347WvaKaIBHIlzCz4wHwYDVR0j BBgwFoAUgkKjngV36Ogr+GPQEk/1ry9TycgwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE LzEvODI0MkEzOUUwNTc3RThFODJCRjg2M0QwMTI0RkY1QUYyRjUzQzlDOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC84MjQyQTM5RTA1NzdFOEU4MkJGODYzRDAxMjRG RjVBRjJGNTNDOUM4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzEvODI0MkEzOUUwNTc3 RThFODJCRjg2M0QwMTI0RkY1QUYyRjUzQzlDOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHLORryGv1vE CuxLvrnG15eFgng/BydID1hhcyCOHnY0CKkvjhvOwHTAUit5AfHsiAyc193/ur8e a4VkvXQTWj0cG+V+jjwUGn2fr4ZNJIlpOYmYKdKSNgtH5j9cW00TmiPYPXnW0G+W 0fLaLv9FI7v859E+NX/H5r6S34uTypjdyH4M1GKjBd1x5qj8ykQNtFzl3NM1Rm4q Y1bbPsCoNnaXV6ueTptOQThNMGpoDfomXcdYvPxl9OlQwypsXLt/iazbg0rLDcBl 4ARbsoZ5apqa0I99d1ysdy6UoRxMSkljnmwSJltdezplHrNrjVFflpI55C/FjFlk D1Yf/fRdfFk= -----END CERTIFICATE-----Generated at Sat Jun 13 23:12:38 2026 by rpki-client