$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft File: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft (raw, json) Hash identifier: 2KhUNyH7x9UJu2hPwnaC4ab5uXwhXb7tafMIJSiIh4s= Subject key identifier: F4:27:B3:DD:A2:A3:15:D6:17:C3:3E:7B:6C:04:12:59:E8:D5:72:8F Authority key identifier: 80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D Certificate issuer: /CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Certificate serial: 1AD1DFD2E8AB33EEE40AF4313816A5093C8678C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft Manifest number: 6C Signing time: Tue 28 Jul 2026 11:03:15 +0000 Manifest this update: Tue 28 Jul 2026 10:58:15 +0000 Manifest next update: Wed 29 Jul 2026 14:08:15 +0000 Files and hashes: 1: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl (hash: I3zOnmpZJdC2HF439po58nV130E08WM/ZeStpMKbHKQ=) 2: 3130332e3132362e3136342e302f32322d3234203d3e20313331313433.roa (hash: GE6WCLDpaYk350arhm6T0hTObeMU3HA8Pi8MilsnVwk=) 3: 3137352e3138342e3234302e302f32312d3234203d3e20313331313433.roa (hash: 0QQUBFrsQpXXTYt4aIh8/MbRTgI4V9RhZAxoH9bVt18=) 4: 323430353a333330303a3a2f33322d3936203d3e20313331313433.roa (hash: ZKiaer8NjI3ngd1EbZw69ZFOR2ZlmwyGwjPK8gzDQck=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d1:df:d2:e8:ab:33:ee:e4:0a:f4:31:38:16:a5:09:3c:86:78:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Validity Not Before: Jul 28 10:58:15 2026 GMT Not After : Jul 29 14:08:15 2026 GMT Subject: CN=F427B3DDA2A315D617C33E7B6C041259E8D5728F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:41:62:89:c6:fe:af:c7:8c:60:f9:d0:76: 5d:0d:8f:45:53:60:89:3a:c7:0a:0b:48:5f:83:6e: 28:2e:62:48:ae:69:c6:1f:6f:57:85:c4:b5:a2:42: 68:86:5d:7f:ce:eb:5d:d7:17:31:7e:84:07:c4:1b: b3:27:1f:1c:91:61:4c:74:b8:62:bf:fb:2b:3f:82: 8c:83:43:d6:6a:8e:53:76:0c:16:f6:db:e1:08:a3: 50:11:c7:5f:e2:b2:10:ef:5d:97:b3:24:c2:a9:74: 94:ed:76:59:fe:e1:78:83:4e:f4:4e:98:6c:a2:bc: c4:33:99:a8:3b:02:81:60:8c:f1:51:c5:ad:cc:bf: 09:52:a1:52:37:56:c2:44:34:c7:05:0e:e2:43:41: 0d:13:e4:cd:b7:64:3f:68:f6:08:ce:72:62:b4:ad: 6a:32:70:0c:5d:aa:98:e3:f1:e3:d6:5d:ad:c5:58: be:83:33:a7:0b:89:75:35:22:04:ce:86:eb:fe:5e: b5:e3:c3:de:ea:5c:d1:a3:34:44:cf:b7:ba:17:c6: 5b:78:23:f2:c2:7b:6b:85:c3:8f:2d:51:b9:11:49: 87:ba:f8:25:70:41:41:58:76:44:68:5b:67:c9:61: ce:34:d6:3e:f7:4b:72:04:47:e4:b1:1f:cb:04:70: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:27:B3:DD:A2:A3:15:D6:17:C3:3E:7B:6C:04:12:59:E8:D5:72:8F X509v3 Authority Key Identifier: keyid:80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:56:cf:42:41:c9:94:df:48:5d:39:0f:c0:f1:f3:f1:81:6d: 6b:b3:ae:29:36:3e:2b:20:41:d4:56:e3:0d:d8:23:97:97:c4: 73:e2:5a:04:50:04:e6:b5:59:36:86:f6:7a:77:50:cf:d8:db: bb:01:f4:8a:28:69:09:49:1e:23:6c:f9:d4:34:7f:c4:f5:ae: a6:2c:f1:c2:7b:93:f9:00:7e:86:43:ee:fb:0a:df:d3:32:b8: 3d:ef:f6:5b:54:7c:73:bb:18:38:f4:4b:fc:7c:86:19:6a:89: ff:f6:0a:fe:b5:16:c9:35:a6:1c:01:d9:84:b4:94:dc:d7:46: 91:79:3a:f0:b0:21:2a:fc:6c:29:3e:8f:67:44:b2:57:8e:06: e8:69:de:ba:db:85:bd:a7:7f:c7:1a:10:61:b9:83:0c:78:04: d7:d9:68:75:58:56:bb:0a:bf:de:94:40:dd:1f:cb:91:17:98: 9c:2c:27:a0:88:08:1a:17:fb:9a:35:0f:88:37:dd:ca:c6:04: 3f:d8:b2:cd:ea:dd:15:63:a1:e7:42:e5:11:8c:aa:3e:e5:ec: 04:07:04:00:18:2b:89:06:ab:b8:11:f4:7b:7c:9b:7b:32:5a: 04:9b:63:7b:35:93:f7:89:5d:94:1d:6f:c4:35:02:c3:1d:bd: 89:cf:68:1d -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUGtHf0uirM+7kCvQxOBalCTyGeMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1RUEzMTRDQzlB ODY3N0YyRDAeFw0yNjA3MjgxMDU4MTVaFw0yNjA3MjkxNDA4MTVaMDMxMTAvBgNV BAMTKEY0MjdCM0REQTJBMzE1RDYxN0MzM0U3QjZDMDQxMjU5RThENTcyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFEFiicb+r8eMYPnQdl0Nj0VT YIk6xwoLSF+DbiguYkiuacYfb1eFxLWiQmiGXX/O613XFzF+hAfEG7MnHxyRYUx0 uGK/+ys/goyDQ9ZqjlN2DBb22+EIo1ARx1/ishDvXZezJMKpdJTtdln+4XiDTvRO mGyivMQzmag7AoFgjPFRxa3MvwlSoVI3VsJENMcFDuJDQQ0T5M23ZD9o9gjOcmK0 rWoycAxdqpjj8ePWXa3FWL6DM6cLiXU1IgTOhuv+XrXjw97qXNGjNETPt7oXxlt4 I/LCe2uFw48tUbkRSYe6+CVwQUFYdkRoW2fJYc401j73S3IER+SxH8sEcAgdAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU9Cez3aKjFdYXwz57bAQSWejVco8wHwYDVR0j BBgwFoAUgJnfwM/IPF3f2Qyl6jFMyahnfy0wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU UlVTVC8wLzgwOTlERkMwQ0ZDODNDNURERkQ5MENBNUVBMzE0Q0M5QTg2NzdGMkQu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1 RUEzMTRDQzlBODY3N0YyRC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NISU5BVFJVU1QvMC84MDk5 REZDMENGQzgzQzVEREZEOTBDQTVFQTMxNENDOUE4Njc3RjJELm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA cFbPQkHJlN9IXTkPwPHz8YFta7OuKTY+KyBB1FbjDdgjl5fEc+JaBFAE5rVZNob2 endQz9jbuwH0iihpCUkeI2z51DR/xPWupizxwnuT+QB+hkPu+wrf0zK4Pe/2W1R8 c7sYOPRL/HyGGWqJ//YK/rUWyTWmHAHZhLSU3NdGkXk68LAhKvxsKT6PZ0SyV44G 6GneutuFvad/xxoQYbmDDHgE19lodVhWuwq/3pRA3R/LkReYnCwnoIgIGhf7mjUP iDfdysYEP9iyzerdFWOh50LlEYyqPuXsBAcEABgriQaruBH0e3ybezJaBJtjezWT 94ldlB1vxDUCwx29ic9oHQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:21:41 2026 by rpki-client