$ rpki-client -vvf rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft File: 3D576C4841082805B3CDBD7337F3963A8833174B.mft (raw, json) Hash identifier: S645GIbhjQKiqRsgdhTsCMfJPkDtDpS+UQyo89r6md8= Subject key identifier: 5E:DE:4E:D4:FB:71:E7:11:22:8F:BB:B5:DE:FF:99:A4:F0:DF:90:C2 Authority key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B Certificate issuer: /CN=3D576C4841082805B3CDBD7337F3963A8833174B Certificate serial: 56E5FACA4C364EF787C131BBCB05F1133E4B3CD1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft Manifest number: 70 Signing time: Tue 28 Jul 2026 12:03:50 +0000 Manifest this update: Tue 28 Jul 2026 11:58:50 +0000 Manifest next update: Wed 29 Jul 2026 14:51:50 +0000 Files and hashes: 1: 3130332e3131392e3231332e302f32342d3234203d3e20313331363239.roa (hash: EJjmwH6YAXPBMwmijz6eL3wQvRP4K1M4tTn06rZJrIA=) 2: 3130332e3131392e3231342e302f32342d3234203d3e20313331363239.roa (hash: ATTGrI+LdxvHy7tZZvIf74Pi92V/OccZmHc6iAFqFXM=) 3: 3130332e3131392e3231322e302f32322d3234203d3e20313331363239.roa (hash: eXsmebarUaems23bSj2ZcVD8dLS2085WCpxoaq88x4M=) 4: 3130332e3131392e3231332e302f32342d3234203d3e203136353039.roa (hash: PL2cz2Hbk/JdNHMN06li8HzqoQzLhVGaxZWqRcHi6hM=) 5: 3130332e3131392e3231322e302f32322d3234203d3e20313333373437.roa (hash: zPQusnanznelCXG1KdOD21zkqA+VphGwDoshIYxRbJ0=) 6: 3130332e3131392e3231342e302f32342d3234203d3e20313339363337.roa (hash: BkQPXEKbvmbpHuwtKiewh9JYhpq3BksNtpHsw33H1fI=) 7: 3130332e3131392e3231342e302f32342d3234203d3e20313333333735.roa (hash: /UvybhcLKT1KK1desdUWoCsOTWNrRkdvIjVquH9d4MA=) 8: 3130332e3131392e3231332e302f32342d3234203d3e203134363138.roa (hash: sldyxDcFqyW0yrBmnmv5iDOduZFppPbQvxaSJnOI1Vw=) 9: 3130332e3131392e3231352e302f32342d3234203d3e20313339363337.roa (hash: jPTm5d5SYsezMtn+BRkYU2/hKNSbQfuFpXU/01PcOeQ=) 10: 3D576C4841082805B3CDBD7337F3963A8833174B.crl (hash: V4YiJzT5TnJu2SNKG7BkgJsClNJfNiM7HMxCkSceyzY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e5:fa:ca:4c:36:4e:f7:87:c1:31:bb:cb:05:f1:13:3e:4b:3c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D576C4841082805B3CDBD7337F3963A8833174B Validity Not Before: Jul 28 11:58:50 2026 GMT Not After : Jul 29 14:51:50 2026 GMT Subject: CN=5EDE4ED4FB71E711228FBBB5DEFF99A4F0DF90C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:38:a1:21:cf:9f:1a:fb:63:ae:58:32:15:cc: b2:7e:87:f2:f0:bf:f4:85:38:ed:bc:61:59:99:8f: 44:05:62:66:b4:b6:54:e4:0d:68:76:75:e4:c1:f7: ce:cf:4b:7a:09:d6:dd:c9:8c:9a:f3:c8:42:4d:fa: 6b:bf:4a:f3:ea:04:36:3e:cb:6e:21:a0:f9:3a:3e: 9b:44:46:a7:88:2d:8e:ef:55:5e:b3:52:80:dd:df: 39:48:1b:50:9f:ab:0a:24:47:51:08:25:cc:d0:93: 3a:0a:4a:14:2a:0e:2c:b6:78:7c:c2:45:b2:d9:2a: 3f:2c:cd:5c:99:f3:f2:c6:5b:24:86:51:3b:cb:4a: be:fe:c5:87:39:07:93:cf:f1:2b:cd:9b:c6:5a:64: d5:8a:d6:bc:10:44:90:2f:53:66:d7:99:96:fe:0d: 32:70:d5:99:40:1c:83:ac:e7:1e:75:09:89:c9:53: ac:b7:1f:f8:9e:b6:37:08:76:4b:e1:20:cd:e3:95: a7:1d:11:31:9f:7e:c6:55:cc:19:14:4d:71:1a:5c: 4e:03:e2:a1:67:fa:ce:4d:53:d7:e9:a1:5f:27:72: db:1b:8e:67:4d:73:4b:01:e3:bf:7c:1d:de:02:32: ff:05:62:ba:81:98:65:59:4e:09:49:6f:ce:7e:60: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DE:4E:D4:FB:71:E7:11:22:8F:BB:B5:DE:FF:99:A4:F0:DF:90:C2 X509v3 Authority Key Identifier: keyid:3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:62:02:83:6b:f7:aa:e8:65:08:63:ad:e2:92:09:1b:6f:33: b8:f9:77:8c:04:f2:ab:ef:f4:a0:8e:5b:d5:f7:68:51:c9:a7: 0d:37:d5:ff:d2:ea:be:82:59:75:10:86:39:a7:ab:67:09:4e: 83:bc:89:4e:e9:5d:93:3c:57:9b:fa:1c:f5:7c:b5:f1:01:0d: 41:17:74:99:2c:e9:1b:35:21:08:af:b5:01:28:85:9a:67:ee: e1:d4:a6:8d:61:66:1b:51:87:b5:e8:2b:83:00:9e:c4:8a:a4: c0:09:91:b6:f9:35:67:f2:08:50:48:13:c4:ec:17:60:dc:49: 31:63:ab:e8:35:57:8f:7c:c0:ae:1f:77:86:69:df:82:76:80: d6:87:be:55:93:f1:74:84:fa:6e:11:67:5e:03:ee:fe:58:1b: 6f:54:a6:cb:85:cf:3e:98:80:76:c3:be:7c:63:00:e0:b1:90: 6b:f4:72:a3:c5:35:ea:ae:1b:c0:14:9c:5f:eb:bc:56:b3:de: ee:e7:8c:c5:7a:69:02:4e:94:4f:8f:b8:cc:af:a8:e8:42:31: 71:f4:c8:c8:01:c2:ca:82:4d:1c:fa:6c:ac:b2:bc:36:9b:f2: cf:6d:c4:73:5e:86:c1:f4:cf:a7:ac:12:f4:b3:eb:16:d5:de: 54:4c:74:86 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUVuX6ykw2TveHwTG7ywXxEz5LPNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1NzZDNDg0MTA4MjgwNUIzQ0RCRDczMzdGMzk2M0E4 ODMzMTc0QjAeFw0yNjA3MjgxMTU4NTBaFw0yNjA3MjkxNDUxNTBaMDMxMTAvBgNV BAMTKDVFREU0RUQ0RkI3MUU3MTEyMjhGQkJCNURFRkY5OUE0RjBERjkwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWOKEhz58a+2OuWDIVzLJ+h/Lw v/SFOO28YVmZj0QFYma0tlTkDWh2deTB987PS3oJ1t3JjJrzyEJN+mu/SvPqBDY+ y24hoPk6PptERqeILY7vVV6zUoDd3zlIG1CfqwokR1EIJczQkzoKShQqDiy2eHzC RbLZKj8szVyZ8/LGWySGUTvLSr7+xYc5B5PP8SvNm8ZaZNWK1rwQRJAvU2bXmZb+ DTJw1ZlAHIOs5x51CYnJU6y3H/ietjcIdkvhIM3jlacdETGffsZVzBkUTXEaXE4D 4qFn+s5NU9fpoV8nctsbjmdNc0sB4798Hd4CMv8FYrqBmGVZTglJb85+YPv1AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUXt5O1Ptx5xEij7u13v+ZpPDfkMIwHwYDVR0j BBgwFoAUPVdsSEEIKAWzzb1zN/OWOogzF0swDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0tNQVRF Uy8wLzNENTc2QzQ4NDEwODI4MDVCM0NEQkQ3MzM3RjM5NjNBODgzMzE3NEIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvM0Q1NzZDNDg0MTA4MjgwNUIzQ0RCRDczMzdG Mzk2M0E4ODMzMTc0Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NLTUFURVMvMC8zRDU3NkM0ODQx MDgyODA1QjNDREJENzMzN0YzOTYzQTg4MzMxNzRCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2ICg2v3 quhlCGOt4pIJG28zuPl3jATyq+/0oI5b1fdoUcmnDTfV/9LqvoJZdRCGOaerZwlO g7yJTuldkzxXm/oc9Xy18QENQRd0mSzpGzUhCK+1ASiFmmfu4dSmjWFmG1GHtegr gwCexIqkwAmRtvk1Z/IIUEgTxOwXYNxJMWOr6DVXj3zArh93hmnfgnaA1oe+VZPx dIT6bhFnXgPu/lgbb1Smy4XPPpiAdsO+fGMA4LGQa/Ryo8U16q4bwBScX+u8VrPe 7ueMxXppAk6UT4+4zK+o6EIxcfTIyAHCyoJNHPpsrLK8Npvyz23Ec16GwfTPp6wS 9LPrFtXeVEx0hg== -----END CERTIFICATE-----Generated at Wed Jul 29 02:13:00 2026 by rpki-client