$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft File: FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft (raw, json) Hash identifier: 0Sax3bLP/o9jgr9E86ICfpy4WZoWcU6KPXpcrz+zOqE= Subject key identifier: 0E:25:D9:67:FC:E0:DF:A2:7A:20:A9:CE:1A:D5:A1:FB:8C:7A:B4:74 Authority key identifier: FB:CC:D9:3F:0A:92:E4:9F:05:EC:18:89:0A:69:08:1E:5E:DA:63:2D Certificate issuer: /CN=FBCCD93F0A92E49F05EC18890A69081E5EDA632D Certificate serial: 50CFD0FF8B17759629FB7FD356602836C8CEBD22 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft Manifest number: 68 Signing time: Tue 28 Jul 2026 08:07:58 +0000 Manifest this update: Tue 28 Jul 2026 08:02:58 +0000 Manifest next update: Wed 29 Jul 2026 08:28:58 +0000 Files and hashes: 1: 3130332e3132372e3231382e302f32332d3332203d3e20313331363432.roa (hash: wQPbhs8yb6ZMLslmBkU07zfcO19/UJCWoWgUHvgY6JI=) 2: FBCCD93F0A92E49F05EC18890A69081E5EDA632D.crl (hash: 7kxTZESf+XFJR5hjI8PVtXSmbhk71BMpjCVL9drOQX8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.crl rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:cf:d0:ff:8b:17:75:96:29:fb:7f:d3:56:60:28:36:c8:ce:bd:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBCCD93F0A92E49F05EC18890A69081E5EDA632D Validity Not Before: Jul 28 08:02:58 2026 GMT Not After : Jul 29 08:28:58 2026 GMT Subject: CN=0E25D967FCE0DFA27A20A9CE1AD5A1FB8C7AB474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:84:7e:7e:e7:a7:2d:23:63:40:82:5e:8b: dd:22:15:5c:c6:71:ce:76:25:9e:94:d3:1e:11:2b: cd:85:af:82:7e:12:03:65:be:bb:31:29:ab:38:e4: 31:c0:14:a8:3c:b4:12:42:41:72:99:68:f8:e3:96: 9c:ed:3f:11:57:c4:33:44:37:6f:30:55:24:3f:f9: 9f:4e:50:3f:a3:64:08:c0:50:fb:96:bd:e1:39:b1: 4a:e3:a8:94:45:ab:d0:63:c9:e5:ed:68:25:d3:8c: 97:ee:84:a3:01:6c:ba:f4:1f:8b:c5:c6:7e:8a:79: ca:a5:40:a4:7e:7e:fa:13:c7:35:dd:9b:4d:b1:1b: fe:b4:0d:b1:92:2b:06:3e:8c:a3:22:3c:e8:8a:e6: bb:f5:f0:2f:17:e8:b8:e6:32:b6:f3:e1:83:39:c6: 52:06:f3:e4:62:7d:58:0d:dc:3d:e9:41:a7:fc:f7: cd:d9:4b:ad:67:02:9c:ca:6d:fb:7d:5c:b9:93:8e: 3b:14:20:66:21:a6:b9:5d:d0:75:d6:1e:bb:8f:4e: a4:be:d9:20:06:01:27:78:4e:28:9b:b4:44:d6:8e: b8:fa:f5:25:70:7a:f5:57:d2:a7:7a:57:7e:23:b6: d3:78:e8:08:8c:a2:d4:e0:40:e4:0a:58:4b:7b:a9: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:25:D9:67:FC:E0:DF:A2:7A:20:A9:CE:1A:D5:A1:FB:8C:7A:B4:74 X509v3 Authority Key Identifier: keyid:FB:CC:D9:3F:0A:92:E4:9F:05:EC:18:89:0A:69:08:1E:5E:DA:63:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:69:37:dc:bc:63:2f:89:7b:a1:b0:55:93:3f:c3:d9:65:0d: 56:58:16:4c:80:fa:22:8c:29:db:78:75:c5:02:6c:0c:1e:0e: 5b:f0:5b:df:1b:9c:ec:b7:7a:3b:40:08:90:22:ba:0b:42:61: a4:37:18:e8:8d:cf:6d:c9:9d:74:79:ad:2d:a1:cc:26:a7:b4: b9:66:b4:0f:26:d7:98:8d:77:f5:18:2f:e9:6f:65:52:a2:f0: 97:1d:4e:01:11:5b:f2:d4:ea:36:41:6a:b9:fe:1f:21:73:ad: e6:19:f2:f1:8d:91:85:29:4b:ff:8b:c0:07:93:64:ae:23:64: ea:74:23:96:a6:0d:5c:0e:37:76:5f:91:fd:a4:69:bd:0a:1d: fc:4c:99:95:4e:2d:af:7a:26:db:28:4e:93:77:0e:ed:77:55: 3c:e0:74:84:bb:2d:2b:5e:12:c1:b5:87:77:54:c9:7b:22:28: 60:bd:2a:f1:2a:56:e6:4d:0e:b7:ff:44:63:56:da:1c:2c:0d: 6e:ff:30:88:bd:20:47:4e:b7:f9:dc:1b:7e:34:5a:11:32:fb: 17:df:76:d8:26:2c:3d:10:75:15:87:17:74:b7:d0:3c:ff:f8: 53:86:f7:47:5a:b6:d6:43:ec:67:96:81:e1:a8:f5:2e:79:ea: a4:b7:b5:c9 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUUM/Q/4sXdZYp+3/TVmAoNsjOvSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJDQ0Q5M0YwQTkyRTQ5RjA1RUMxODg5MEE2OTA4MUU1 RURBNjMyRDAeFw0yNjA3MjgwODAyNThaFw0yNjA3MjkwODI4NThaMDMxMTAvBgNV BAMTKDBFMjVEOTY3RkNFMERGQTI3QTIwQTlDRTFBRDVBMUZCOEM3QUI0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4goR+fuenLSNjQIJei90iFVzG cc52JZ6U0x4RK82Fr4J+EgNlvrsxKas45DHAFKg8tBJCQXKZaPjjlpztPxFXxDNE N28wVSQ/+Z9OUD+jZAjAUPuWveE5sUrjqJRFq9BjyeXtaCXTjJfuhKMBbLr0H4vF xn6KecqlQKR+fvoTxzXdm02xG/60DbGSKwY+jKMiPOiK5rv18C8X6LjmMrbz4YM5 xlIG8+RifVgN3D3pQaf8983ZS61nApzKbft9XLmTjjsUIGYhprld0HXWHruPTqS+ 2SAGASd4TiibtETWjrj69SVwevVX0qd6V34jttN46AiMotTgQOQKWEt7qW7HAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUDiXZZ/zg36J6IKnOGtWh+4x6tHQwHwYDVR0j BBgwFoAU+8zZPwqS5J8F7BiJCmkIHl7aYy0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURX QUxLLzAvRkJDQ0Q5M0YwQTkyRTQ5RjA1RUMxODg5MEE2OTA4MUU1RURBNjMyRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GQkNDRDkzRjBBOTJFNDlGMDVFQzE4ODkw QTY5MDgxRTVFREE2MzJELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURXQUxLLzAvRkJDQ0Q5 M0YwQTkyRTQ5RjA1RUMxODg5MEE2OTA4MUU1RURBNjMyRC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGNp N9y8Yy+Je6GwVZM/w9llDVZYFkyA+iKMKdt4dcUCbAweDlvwW98bnOy3ejtACJAi ugtCYaQ3GOiNz23JnXR5rS2hzCantLlmtA8m15iNd/UYL+lvZVKi8JcdTgERW/LU 6jZBarn+HyFzreYZ8vGNkYUpS/+LwAeTZK4jZOp0I5amDVwON3Zfkf2kab0KHfxM mZVOLa96JtsoTpN3Du13VTzgdIS7LSteEsG1h3dUyXsiKGC9KvEqVuZNDrf/RGNW 2hwsDW7/MIi9IEdOt/ncG340WhEy+xffdtgmLD0QdRWHF3S30Dz/+FOG90dattZD 7GeWgeGo9S556qS3tck= -----END CERTIFICATE-----Generated at Tue Jul 28 17:09:04 2026 by rpki-client