$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft File: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft (raw, json) Hash identifier: 01rycvNoQuHNn0jZMYcXt88vpOwwAAQ5o1NU+s5Vj38= Subject key identifier: 65:2F:67:9F:54:C7:13:51:E2:DA:75:0F:4D:59:C2:21:4F:20:5C:CC Authority key identifier: BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA Certificate issuer: /CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Certificate serial: 3988C7F26DC298ED1BCF491C71B4AB72744944B6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft Manifest number: 73 Signing time: Tue 28 Jul 2026 10:33:12 +0000 Manifest this update: Tue 28 Jul 2026 10:28:12 +0000 Manifest next update: Wed 29 Jul 2026 11:45:12 +0000 Files and hashes: 1: 323430323a346432303a313a3a2f34382d3438203d3e20313331363533.roa (hash: X9wIzhuw1c0lYPQ7mtcEb2gQt9tzHi6f24KHdsIqRUI=) 2: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl (hash: 01ehsiDQYJ5O6el/pD/RKOWCDlRz56/I8+rm6UZhgk0=) 3: 323430323a346432303a3a2f34382d3438203d3e20313532363236.roa (hash: gWGrH7k/E1wfVhOhIGsZWVZwwwOvXG8dp1buitprMVE=) 4: 323430323a346432303a3a2f34382d3438203d3e20323133343330.roa (hash: yXLG5aJYFzJQAOcQmz7saI6BueUDkIVJ2tp9ey7Y/oo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:88:c7:f2:6d:c2:98:ed:1b:cf:49:1c:71:b4:ab:72:74:49:44:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Validity Not Before: Jul 28 10:28:12 2026 GMT Not After : Jul 29 11:45:12 2026 GMT Subject: CN=652F679F54C71351E2DA750F4D59C2214F205CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:e7:7f:16:4e:8e:b1:2b:ed:5d:09:74:31: 1e:21:99:32:58:2d:40:7c:9c:5e:ad:e0:59:e1:bd: b2:84:a6:67:9f:fe:22:d3:8c:01:c3:cd:e7:41:77: cf:16:26:39:35:0c:89:e7:f4:5b:32:23:bf:cc:fb: bd:3e:35:21:c5:d3:3b:20:ab:18:74:dc:0d:54:e6: 19:10:8e:51:33:62:27:d8:b5:41:b5:0d:31:bb:87: 7d:54:f2:5e:f9:71:22:c3:94:99:6a:e6:5b:ae:cc: 82:6f:23:62:82:1a:47:4c:fd:3d:95:bd:9d:d5:fc: c0:d7:59:32:73:a3:61:31:eb:5d:7b:02:6f:3d:30: 95:2b:b2:c3:ff:65:97:43:e5:9c:d1:04:72:48:c8: 56:4a:1e:d6:ec:30:1c:a0:c7:d3:a3:73:ef:77:19: 4a:60:12:cc:d1:06:24:fc:41:c5:c4:bb:8f:e4:7b: 9a:9d:9c:c5:64:db:f1:03:d9:df:18:ec:00:26:3d: 9c:68:1f:9a:92:76:24:8b:26:0f:4b:4f:9c:83:9b: 61:df:65:52:90:19:b6:65:71:ab:32:c1:4b:b9:1f: c7:49:65:94:0d:6d:e1:3b:05:7a:00:9e:57:59:d0: 0a:8b:bd:f2:5a:f9:30:18:92:19:19:d0:ce:5c:99: 9c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2F:67:9F:54:C7:13:51:E2:DA:75:0F:4D:59:C2:21:4F:20:5C:CC X509v3 Authority Key Identifier: keyid:BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c1:a6:41:75:35:3b:5a:07:8c:66:d6:c6:18:6c:19:e3:94: ca:69:28:39:9e:44:1e:c9:d9:61:be:e4:e0:5b:fd:67:74:35: f1:f4:29:08:4c:74:d4:65:99:24:ba:10:8d:59:96:29:28:33: 4f:e3:3f:96:af:86:54:71:bb:c6:00:cc:99:ab:14:8b:11:f4: 78:5f:7b:ad:b6:89:72:a9:96:bd:12:35:15:e2:0f:19:e2:2e: 1a:63:77:10:75:c2:d8:8d:48:2d:91:25:9a:f5:56:09:b5:5c: fb:c8:d6:bc:f1:b7:74:97:f3:6d:f1:3e:dd:30:9b:c9:1c:5b: 26:16:86:f2:89:2a:b2:52:43:f1:71:0a:6a:de:a1:e5:1b:f8: 7d:1d:f7:14:db:94:60:ac:ab:ee:32:56:bb:38:93:4d:8c:56: d9:56:fd:1b:a8:f0:d1:38:fa:03:13:c2:a4:93:5e:20:73:53: 99:84:45:b9:f4:78:e4:7d:9b:6e:5d:ea:01:4e:51:78:ab:d7: 81:dd:01:a4:b7:65:75:68:8a:79:1b:c6:15:ef:70:9c:cb:17: c7:0a:2f:17:6e:6e:33:d5:b3:f7:65:7a:de:73:e3:20:c5:85: 75:3d:69:ee:c0:1d:ae:2a:30:9d:45:09:b1:8e:ac:8c:9d:e4: e0:c2:d5:e4 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUOYjH8m3CmO0bz0kccbSrcnRJRLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3 QTlFMDVEQTAeFw0yNjA3MjgxMDI4MTJaFw0yNjA3MjkxMTQ1MTJaMDMxMTAvBgNV BAMTKDY1MkY2NzlGNTRDNzEzNTFFMkRBNzUwRjRENTlDMjIxNEYyMDVDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmed/Fk6OsSvtXQl0MR4hmTJY LUB8nF6t4FnhvbKEpmef/iLTjAHDzedBd88WJjk1DInn9FsyI7/M+70+NSHF0zsg qxh03A1U5hkQjlEzYifYtUG1DTG7h31U8l75cSLDlJlq5luuzIJvI2KCGkdM/T2V vZ3V/MDXWTJzo2Ex6117Am89MJUrssP/ZZdD5ZzRBHJIyFZKHtbsMBygx9Ojc+93 GUpgEszRBiT8QcXEu4/ke5qdnMVk2/ED2d8Y7AAmPZxoH5qSdiSLJg9LT5yDm2Hf ZVKQGbZlcasywUu5H8dJZZQNbeE7BXoAnldZ0AqLvfJa+TAYkhkZ0M5cmZxbAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUZS9nn1THE1Hi2nUPTVnCIU8gXMwwHwYDVR0j BBgwFoAUvtclxBPHpDb1ogDyB/PLOnqeBdowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURC QVNFLzAvQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9CRUQ3MjVDNDEzQzdBNDM2RjVBMjAwRjIw N0YzQ0IzQTdBOUUwNURBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURCQVNFLzAvQkVENzI1 QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKHB pkF1NTtaB4xm1sYYbBnjlMppKDmeRB7J2WG+5OBb/Wd0NfH0KQhMdNRlmSS6EI1Z likoM0/jP5avhlRxu8YAzJmrFIsR9Hhfe622iXKplr0SNRXiDxniLhpjdxB1wtiN SC2RJZr1Vgm1XPvI1rzxt3SX823xPt0wm8kcWyYWhvKJKrJSQ/FxCmreoeUb+H0d 9xTblGCsq+4yVrs4k02MVtlW/Ruo8NE4+gMTwqSTXiBzU5mERbn0eOR9m25d6gFO UXir14HdAaS3ZXVoinkbxhXvcJzLF8cKLxdubjPVs/dlet5z4yDFhXU9ae7AHa4q MJ1FCbGOrIyd5ODC1eQ= -----END CERTIFICATE-----Generated at Tue Jul 28 21:46:41 2026 by rpki-client