$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft File: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft (raw, json) Hash identifier: UOxXySb9BFyOxyiH12Guk1AiqU/t3sdhSnb2aze92aY= Subject key identifier: 22:49:30:17:58:35:39:4B:AD:DA:17:3A:E7:27:93:93:5E:55:95:01 Authority key identifier: 28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07 Certificate issuer: /CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407 Certificate serial: 4E185BF0DC6123BA6322C36DDCFB988AD1D1707C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft Manifest number: 6B Signing time: Tue 28 Jul 2026 04:47:31 +0000 Manifest this update: Tue 28 Jul 2026 04:42:31 +0000 Manifest next update: Wed 29 Jul 2026 06:12:31 +0000 Files and hashes: 1: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl (hash: lVDCQf9a8AuYiFePOWTlwJxz4NS+dnVKljL+cyEjgnk=) 2: 3136302e3138372e3139382e302f32332d3234203d3e20313532363135.roa (hash: I6RgBeSwuI+mSenPcIlVAxSTnNAaaE4/xzzLMyb2FH0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 06:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:18:5b:f0:dc:61:23:ba:63:22:c3:6d:dc:fb:98:8a:d1:d1:70:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407 Validity Not Before: Jul 28 04:42:31 2026 GMT Not After : Jul 29 06:12:31 2026 GMT Subject: CN=224930175835394BADDA173AE72793935E559501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:02:55:53:ca:d5:ec:84:e2:46:66:e5:3c: 7c:4c:57:ee:cf:22:12:aa:92:3e:c7:56:58:fe:cd: fb:31:05:05:b2:36:5b:cf:cd:5c:51:81:35:24:17: 75:ff:e6:b9:b1:53:62:d0:a5:d2:15:63:84:5b:7f: 19:ae:6f:1a:7a:fe:10:ed:a7:e9:f5:78:79:52:d1: 90:f5:87:82:1d:06:98:6b:69:8c:a6:43:cf:7c:05: 20:68:fb:fa:86:95:f5:37:d0:a0:45:38:52:2d:d1: 22:42:dd:97:9e:bf:86:8e:22:23:72:99:73:22:0a: ed:7d:ed:a0:d6:de:e2:4a:8f:9d:92:d2:27:6e:f2: f3:7e:c9:88:e7:1e:fd:dd:14:e0:b3:22:80:33:79: 64:ea:64:a8:34:51:c0:f7:39:f1:f4:25:9c:54:16: f4:10:c8:66:6c:05:ba:f3:a6:7a:3f:67:fc:12:7f: cb:71:2d:4f:4f:37:27:7c:56:ec:09:04:65:96:25: f2:ed:25:a4:73:fa:e2:f2:e2:6e:7a:d6:1b:d7:6e: 59:75:2f:08:af:d7:a0:dd:4d:67:6a:25:37:ed:60: 20:c7:de:cd:da:bf:56:23:b7:8c:c0:ee:0b:70:f0: b6:ac:63:05:50:2e:0d:1f:64:aa:25:ea:88:05:f2: b1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:49:30:17:58:35:39:4B:AD:DA:17:3A:E7:27:93:93:5E:55:95:01 X509v3 Authority Key Identifier: keyid:28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4b:2a:b5:dc:f7:3c:fc:ba:f5:04:12:df:d1:56:13:46:22: 1d:40:d8:1e:33:d1:30:3e:13:f4:17:60:47:5e:98:ae:15:45: 40:d2:0b:37:da:41:06:c9:58:2f:77:c1:53:83:88:a7:9c:01: 0c:9c:60:16:1a:12:a0:6a:94:a1:7d:af:01:ff:08:3c:3f:4b: 2d:9e:0a:ec:a9:d9:3b:7e:f9:7c:e1:e4:f7:c0:74:41:5b:43: 9c:04:91:cb:95:c1:e3:64:7b:0d:81:53:fb:5f:70:9e:cf:6a: 32:c6:e1:55:d0:6c:5c:21:e6:9f:35:4c:31:7a:c9:9d:52:6e: 89:57:15:8e:0a:f4:e1:66:8d:27:8b:ea:00:38:9e:c2:2e:e1: 2b:97:d8:1b:d9:4d:f5:86:6a:0c:13:be:a5:33:02:82:3d:04: 33:fc:5c:7a:21:80:b0:db:10:92:0d:db:a3:ea:c6:c0:bf:cd: ba:21:94:cd:7a:56:66:ab:d4:df:d6:84:57:e5:c6:24:4e:c2: 78:53:34:bd:5c:da:e9:d7:57:c2:f9:a9:ea:0c:93:2e:d2:c1: af:00:c6:7c:fa:a5:d4:dd:71:e4:be:ed:3f:14:dc:c1:82:a0: df:5e:f6:cc:59:c2:ae:55:97:1f:d4:0f:ad:bf:77:f0:5e:ff: f0:d3:c4:e7 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUThhb8NxhI7pjIsNt3PuYitHRcHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMUZEMDNDOEIwNDBBOTg3NEE5MEQ0NjU0MzIyQUNE RkNBMzQwNzAeFw0yNjA3MjgwNDQyMzFaFw0yNjA3MjkwNjEyMzFaMDMxMTAvBgNV BAMTKDIyNDkzMDE3NTgzNTM5NEJBRERBMTczQUU3Mjc5MzkzNUU1NTk1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1AJVU8rV7ITiRmblPHxMV+7P IhKqkj7HVlj+zfsxBQWyNlvPzVxRgTUkF3X/5rmxU2LQpdIVY4Rbfxmubxp6/hDt p+n1eHlS0ZD1h4IdBphraYymQ898BSBo+/qGlfU30KBFOFIt0SJC3Zeev4aOIiNy mXMiCu197aDW3uJKj52S0idu8vN+yYjnHv3dFOCzIoAzeWTqZKg0UcD3OfH0JZxU FvQQyGZsBbrzpno/Z/wSf8txLU9PNyd8VuwJBGWWJfLtJaRz+uLy4m561hvXbll1 Lwiv16DdTWdqJTftYCDH3s3av1Yjt4zA7gtw8LasYwVQLg0fZKol6ogF8rHdAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUIkkwF1g1OUut2hc65yeTk15VlQEwHwYDVR0j BBgwFoAUKOH9A8iwQKmHSpDUZUMirN/KNAcwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVTU1Z VEVDSC8xLzI4RTFGRDAzQzhCMDQwQTk4NzRBOTBENDY1NDMyMkFDREZDQTM0MDcu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzAvMjhFMUZEMDNDOEIwNDBBOTg3NEE5MEQ0 NjU0MzIyQUNERkNBMzQwNy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NIVU1NWVRFQ0gvMS8yOEUx RkQwM0M4QjA0MEE5ODc0QTkwRDQ2NTQzMjJBQ0RGQ0EzNDA3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA fUsqtdz3PPy69QQS39FWE0YiHUDYHjPRMD4T9BdgR16YrhVFQNILN9pBBslYL3fB U4OIp5wBDJxgFhoSoGqUoX2vAf8IPD9LLZ4K7KnZO375fOHk98B0QVtDnASRy5XB 42R7DYFT+19wns9qMsbhVdBsXCHmnzVMMXrJnVJuiVcVjgr04WaNJ4vqADiewi7h K5fYG9lN9YZqDBO+pTMCgj0EM/xceiGAsNsQkg3bo+rGwL/NuiGUzXpWZqvU39aE V+XGJE7CeFM0vVza6ddXwvmp6gyTLtLBrwDGfPql1N1x5L7tPxTcwYKg3172zFnC rlWXH9QPrb938F7/8NPE5w== -----END CERTIFICATE-----Generated at Tue Jul 28 21:51:12 2026 by rpki-client