$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft File: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft (raw, json) Hash identifier: afDcEB3H3d5ihTXz2x5OjjXrvxQBXLCAtRf7HoLYnZo= Subject key identifier: 23:5F:07:82:F9:54:0F:FF:9D:35:0D:E3:47:BC:58:F3:02:DC:29:9B Authority key identifier: E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB Certificate issuer: /CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB Certificate serial: 75EEA22E06DA93EA440A5E8A563B54C6AC9E7DDB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft Manifest number: 6C Signing time: Tue 28 Jul 2026 10:33:12 +0000 Manifest this update: Tue 28 Jul 2026 10:28:12 +0000 Manifest next update: Wed 29 Jul 2026 14:03:12 +0000 Files and hashes: 1: 3232332e32362e31302e302f32332d3234203d3e203231383539.roa (hash: KeYIdvmIdFmXoaD7PfpE0neyX1HamQXTrD45lQIfHyQ=) 2: 3232332e32362e31302e302f32332d3234203d3e2037343833.roa (hash: KY91dZeL6/YwGvfBK0FnKFAVL/6EOM1qXx3UNjlNsSo=) 3: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl (hash: 9erZ2bDuo7vDtQ9CqPvssNktx+FdP9AWdXTDx5uJBqQ=) 4: 3232332e32362e31302e302f32332d3234203d3e2037353338.roa (hash: WltkBuqhKCJsRwS/4iiBwpBsyVQ3CFzN130wVvwvOIg=) 5: 3130332e3137352e3136362e302f32332d3234203d3e2037343833.roa (hash: M1t938UdIZV1R1GsREb23xynohkO0qzg0e3CIh+SGGk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ee:a2:2e:06:da:93:ea:44:0a:5e:8a:56:3b:54:c6:ac:9e:7d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB Validity Not Before: Jul 28 10:28:12 2026 GMT Not After : Jul 29 14:03:12 2026 GMT Subject: CN=235F0782F9540FFF9D350DE347BC58F302DC299B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:0c:f0:2c:91:69:f3:d5:10:42:e5:28:67: d3:84:f5:62:c6:cc:33:7b:89:1a:b8:7a:98:c6:ac: 6d:e8:75:42:68:24:31:fc:57:d0:06:10:c4:1d:2f: 00:92:dd:69:e9:c4:e0:a6:de:28:41:d0:46:67:ee: 1b:91:25:6e:17:71:48:12:94:22:35:4a:46:54:49: 4f:4e:d7:32:65:92:b5:26:82:77:b9:16:77:8a:ff: 5d:17:68:e6:ae:80:64:bb:33:1f:0a:78:72:87:3d: d1:a5:80:79:77:d5:b9:7a:2b:c5:3c:63:86:80:f2: 37:52:63:73:0e:28:c8:fe:67:30:b8:2e:5a:2b:3c: 35:c3:16:1a:1c:27:ac:8f:37:4e:85:49:5e:94:e5: 34:a9:85:84:90:3b:37:e2:7f:77:4e:5b:f7:de:c9: 28:ab:d2:75:a2:0d:d7:e1:00:cc:d2:ec:8c:c8:56: 32:1a:cf:47:c9:26:4d:34:ef:59:a9:d1:33:13:f3: fb:7d:f5:ee:34:52:b6:45:eb:8c:0c:9a:5d:70:9f: 8a:f4:94:4b:50:95:38:00:42:03:6e:53:bb:1d:1f: 21:29:59:c4:99:d0:d1:be:16:2c:af:6d:e6:15:e1: 3c:ce:7e:fd:7b:0c:9f:41:78:38:9e:ad:53:94:92: 4b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5F:07:82:F9:54:0F:FF:9D:35:0D:E3:47:BC:58:F3:02:DC:29:9B X509v3 Authority Key Identifier: keyid:E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:60:e2:0f:4a:92:bf:fc:4b:e6:f3:d1:ae:fb:f6:1b:cb:e0: 90:f3:03:90:b7:22:16:23:da:f6:78:50:6d:d3:7a:b1:9e:23: 6c:91:15:fd:eb:7a:c9:3a:c5:ae:3d:5b:36:7c:d8:58:6c:31: d2:93:7a:13:76:ff:01:e2:d9:1d:f3:c0:61:58:9b:3e:ef:46: 77:f1:98:15:2b:6a:2a:de:0a:60:88:99:ad:6a:1a:84:19:81: c3:65:2f:3e:9e:d6:7b:6c:41:c4:83:13:16:e8:6f:c8:96:e0: 97:85:a7:93:4b:73:cf:2c:f8:00:80:91:3e:32:70:4c:97:c5: 45:7d:d2:80:43:d6:2d:1d:60:9d:9d:c3:4f:87:3b:37:fa:52: 96:23:ba:3d:ee:9b:91:c8:ec:33:10:5f:df:7e:5a:be:52:23: 19:a1:e5:68:2a:41:ef:02:a1:7f:84:29:ba:a4:d7:2b:0f:d0: 24:3d:35:7a:d1:d6:88:ec:42:ca:bc:ee:29:b4:83:8e:48:63: 2b:5c:dc:fe:43:97:ce:36:d7:da:50:cf:62:9d:37:38:bc:c6: 79:75:75:61:69:82:42:31:d4:5d:80:8a:17:99:f5:51:f7:ee: f5:a3:24:b5:e4:21:28:2a:17:b9:06:7f:51:8f:62:7b:79:a0: 85:fb:9f:06 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUde6iLgbak+pECl6KVjtUxqyefdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MjNERkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMx RTM4N0VDQjAeFw0yNjA3MjgxMDI4MTJaFw0yNjA3MjkxNDAzMTJaMDMxMTAvBgNV BAMTKDIzNUYwNzgyRjk1NDBGRkY5RDM1MERFMzQ3QkM1OEYzMDJEQzI5OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbAzwLJFp89UQQuUoZ9OE9WLG zDN7iRq4epjGrG3odUJoJDH8V9AGEMQdLwCS3WnpxOCm3ihB0EZn7huRJW4XcUgS lCI1SkZUSU9O1zJlkrUmgne5FneK/10XaOaugGS7Mx8KeHKHPdGlgHl31bl6K8U8 Y4aA8jdSY3MOKMj+ZzC4LlorPDXDFhocJ6yPN06FSV6U5TSphYSQOzfif3dOW/fe ySir0nWiDdfhAMzS7IzIVjIaz0fJJk0071mp0TMT8/t99e40UrZF64wMml1wn4r0 lEtQlTgAQgNuU7sdHyEpWcSZ0NG+FiyvbeYV4TzOfv17DJ9BeDierVOUkkv5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUI18HgvlUD/+dNQ3jR7xY8wLcKZswHwYDVR0j BBgwFoAU44I9/qIf7wTjJp65rMO9rB44fsswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURO T0RFLzAvRTM4MjNERkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMxRTM4N0VDQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FMzgyM0RGRUEyMUZFRjA0RTMyNjlFQjlB Q0MzQkRBQzFFMzg3RUNCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVUROT0RFLzAvRTM4MjNE RkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMxRTM4N0VDQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALhg 4g9Kkr/8S+bz0a779hvL4JDzA5C3IhYj2vZ4UG3TerGeI2yRFf3resk6xa49WzZ8 2FhsMdKTehN2/wHi2R3zwGFYmz7vRnfxmBUraireCmCIma1qGoQZgcNlLz6e1nts QcSDExbob8iW4JeFp5NLc88s+ACAkT4ycEyXxUV90oBD1i0dYJ2dw0+HOzf6UpYj uj3um5HI7DMQX99+Wr5SIxmh5WgqQe8CoX+EKbqk1ysP0CQ9NXrR1ojsQsq87im0 g45IYytc3P5Dl84219pQz2KdNzi8xnl1dWFpgkIx1F2AiheZ9VH37vWjJLXkISgq F7kGf1GPYnt5oIX7nwY= -----END CERTIFICATE-----Generated at Tue Jul 28 17:09:15 2026 by rpki-client