$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft File: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft (raw, json) Hash identifier: /V7EjhTh9kC6nBuS0bk4uLbCXjgPYhwOyDMyB8xovoc= Subject key identifier: 23:7F:D2:CC:E7:AB:2C:3A:DC:A1:59:D9:43:B4:A2:F6:6E:C4:84:1C Authority key identifier: 80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D Certificate issuer: /CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Certificate serial: 5C3DD6A59C6B3B47D20EB402AE49839F05C803E2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft Manifest number: 2F Signing time: Fri 12 Jun 2026 15:37:12 +0000 Manifest this update: Fri 12 Jun 2026 15:32:12 +0000 Manifest next update: Sat 13 Jun 2026 17:45:12 +0000 Files and hashes: 1: 3137352e3138342e3234302e302f32312d3234203d3e20313331313433.roa (hash: 0QQUBFrsQpXXTYt4aIh8/MbRTgI4V9RhZAxoH9bVt18=) 2: 323430353a333330303a3a2f33322d3936203d3e20313331313433.roa (hash: ZKiaer8NjI3ngd1EbZw69ZFOR2ZlmwyGwjPK8gzDQck=) 3: 3130332e3132362e3136342e302f32322d3234203d3e20313331313433.roa (hash: GE6WCLDpaYk350arhm6T0hTObeMU3HA8Pi8MilsnVwk=) 4: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl (hash: 1K5x/+P87g6dPpv6954EMQCVOk4Hh6MqgZWDYUxL5e4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 17:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:3d:d6:a5:9c:6b:3b:47:d2:0e:b4:02:ae:49:83:9f:05:c8:03:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Validity Not Before: Jun 12 15:32:12 2026 GMT Not After : Jun 13 17:45:12 2026 GMT Subject: CN=237FD2CCE7AB2C3ADCA159D943B4A2F66EC4841C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:24:4f:8c:24:fa:f1:68:4a:b5:83:55:c9: a1:29:6c:df:b8:f6:e6:90:51:62:f5:9a:ea:84:01: b4:48:b2:63:ed:3b:ac:8b:6f:fa:4f:b9:a4:9c:ec: db:82:4c:6c:28:6b:b9:6d:82:75:8e:56:3f:29:bb: 9c:1e:84:02:0f:97:c7:6a:8d:31:17:17:a1:08:79: 7a:5e:e6:e0:e1:3d:3a:cf:f3:b7:2d:48:6e:d1:ed: 54:76:95:1d:2d:bd:58:c9:02:55:6d:0f:b1:5c:d6: ef:97:40:88:0f:de:ef:c1:41:a0:23:f9:11:fe:b3: a5:7f:dd:7a:54:b2:7d:77:dc:58:48:c7:32:d6:61: 16:6f:26:6a:71:8b:13:80:e4:87:1d:11:ff:9e:ea: 6d:71:85:44:7e:95:d4:ec:95:fc:f3:4b:1b:03:fe: 79:bd:73:5e:bc:a9:b2:35:a6:6c:0b:61:b7:cf:fc: f5:8c:9d:ac:5c:58:9f:c0:2e:ed:de:0b:a3:ad:9d: 0b:e5:68:39:7a:b1:a6:a1:96:f3:6d:d0:59:d9:08: 7e:c3:a6:12:a2:02:a8:fb:fa:3f:d2:2b:66:8c:a9: 6d:7f:2a:e8:3f:04:a4:29:44:72:17:2b:6c:07:c2: 7d:7e:3f:ea:dd:c6:db:b1:4e:de:6b:0b:71:98:84: 7e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7F:D2:CC:E7:AB:2C:3A:DC:A1:59:D9:43:B4:A2:F6:6E:C4:84:1C X509v3 Authority Key Identifier: keyid:80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:27:98:99:4b:70:d1:33:1b:a4:ff:62:6a:b3:90:99:52:c0: 68:ce:2c:3e:b8:4f:fc:07:9d:c8:bd:99:51:a2:2a:0b:8d:34: fb:ef:e5:ed:96:87:5b:85:65:e2:d5:6e:5b:a4:ad:aa:9b:a0: 5e:85:a0:e1:6e:d7:80:ca:05:5a:2d:f7:eb:eb:3c:2e:37:43: 68:bc:c6:56:52:89:04:a4:12:f8:6f:67:6e:55:cc:96:1d:88: 4e:d5:9f:98:a5:cc:eb:08:0e:f7:d3:ac:37:3c:07:c4:49:ae: 58:21:6e:af:f5:fc:f2:2b:4b:70:9e:38:25:3a:50:d1:b2:3a: ba:b7:e1:b5:9d:43:ae:e8:c2:8a:6a:52:fc:76:05:02:32:c1: 89:28:d4:d7:25:42:5e:79:f3:dc:f5:a7:8e:f4:9e:35:7b:ee: b3:cc:01:ce:2d:8f:95:ba:24:a3:d3:23:98:70:41:cd:dc:27: 3b:cf:21:6c:b9:30:87:59:35:ab:d5:1b:2d:37:50:b1:88:66: 2b:a6:6b:08:62:44:8d:e4:54:83:1a:7f:52:29:20:99:7e:2f: 35:e8:95:99:96:82:e7:c8:ea:74:c2:14:75:48:09:1b:b6:3c: 3d:1b:6a:40:f0:b6:f6:c3:76:03:b2:cd:a6:95:f5:c2:cc:4f: 65:64:86:25 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUXD3WpZxrO0fSDrQCrkmDnwXIA+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1RUEzMTRDQzlB ODY3N0YyRDAeFw0yNjA2MTIxNTMyMTJaFw0yNjA2MTMxNzQ1MTJaMDMxMTAvBgNV BAMTKDIzN0ZEMkNDRTdBQjJDM0FEQ0ExNTlEOTQzQjRBMkY2NkVDNDg0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtASRPjCT68WhKtYNVyaEpbN+4 9uaQUWL1muqEAbRIsmPtO6yLb/pPuaSc7NuCTGwoa7ltgnWOVj8pu5wehAIPl8dq jTEXF6EIeXpe5uDhPTrP87ctSG7R7VR2lR0tvVjJAlVtD7Fc1u+XQIgP3u/BQaAj +RH+s6V/3XpUsn133FhIxzLWYRZvJmpxixOA5IcdEf+e6m1xhUR+ldTslfzzSxsD /nm9c168qbI1pmwLYbfP/PWMnaxcWJ/ALu3eC6OtnQvlaDl6saahlvNt0FnZCH7D phKiAqj7+j/SK2aMqW1/Kug/BKQpRHIXK2wHwn1+P+rdxtuxTt5rC3GYhH7PAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUI3/SzOerLDrcoVnZQ7Si9m7EhBwwHwYDVR0j BBgwFoAUgJnfwM/IPF3f2Qyl6jFMyahnfy0wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU UlVTVC8wLzgwOTlERkMwQ0ZDODNDNURERkQ5MENBNUVBMzE0Q0M5QTg2NzdGMkQu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1 RUEzMTRDQzlBODY3N0YyRC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NISU5BVFJVU1QvMC84MDk5 REZDMENGQzgzQzVEREZEOTBDQTVFQTMxNENDOUE4Njc3RjJELm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA QCeYmUtw0TMbpP9iarOQmVLAaM4sPrhP/AedyL2ZUaIqC400++/l7ZaHW4Vl4tVu W6StqpugXoWg4W7XgMoFWi336+s8LjdDaLzGVlKJBKQS+G9nblXMlh2ITtWfmKXM 6wgO99OsNzwHxEmuWCFur/X88itLcJ44JTpQ0bI6urfhtZ1DrujCimpS/HYFAjLB iSjU1yVCXnnz3PWnjvSeNXvus8wBzi2Plboko9MjmHBBzdwnO88hbLkwh1k1q9Ub LTdQsYhmK6ZrCGJEjeRUgxp/UikgmX4vNeiVmZaC58jqdMIUdUgJG7Y8PRtqQPC2 9sN2A7LNppX1wsxPZWSGJQ== -----END CERTIFICATE-----Generated at Sat Jun 13 11:29:04 2026 by rpki-client