$ rpki-client -vvf rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft File: 4CB3ABB1B4A024A701223CD715911D996706E3AA.mft (raw, json) Hash identifier: tnxpshXyc6rTIILnSKEKBdOCjsSjd1W3Slj0V01IEJs= Subject key identifier: 0B:4E:DF:1E:28:94:82:B8:FE:FF:61:FA:A2:08:44:62:51:58:1A:45 Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA Certificate issuer: /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Certificate serial: 0DFEFD56FDFE48A9E651444190DE6B965BE8C31C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft Manifest number: 35 Signing time: Tue 16 Jun 2026 17:45:34 +0000 Manifest this update: Tue 16 Jun 2026 17:40:34 +0000 Manifest next update: Wed 17 Jun 2026 19:56:34 +0000 Files and hashes: 1: 323430303a623061303a3a2f33322d3332203d3e203633393038.roa (hash: zreCdGN4BpY2/KXE7Xi0nbMj8CRAQTw3exmLLk8qka8=) 2: 3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa (hash: 0yV6274hzedLbyBXIX24PIgFkE/qG4nC2HGR5DvDDRk=) 3: 3130332e31342e3137302e302f32332d3234203d3e203338303432.roa (hash: 5mtwz/x5xstPzEWwV0mjjdNtyAKuFHozbJj1pgp59P4=) 4: 3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa (hash: GNYnz7E4zPrfGEpitBkpgKcXAY1dNLMFN8QmTypJQrA=) 5: 4CB3ABB1B4A024A701223CD715911D996706E3AA.crl (hash: c5Bo3ZO1TcHEHCIAKbx8/vrKa9uCcEHdssjpGbf+wzE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:fe:fd:56:fd:fe:48:a9:e6:51:44:41:90:de:6b:96:5b:e8:c3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Validity Not Before: Jun 16 17:40:34 2026 GMT Not After : Jun 17 19:56:34 2026 GMT Subject: CN=0B4EDF1E289482B8FEFF61FAA208446251581A45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:be:8f:07:0b:3c:4b:10:ae:79:b3:19:3f: 02:3d:9f:07:cf:71:14:1c:98:5c:ad:83:96:08:5f: 95:83:b1:2a:a9:cd:ba:98:18:9c:83:e8:03:9f:c5: 92:96:cf:cc:34:f3:1d:c7:12:7e:d8:8c:4d:6b:5f: e6:09:8e:91:81:69:8d:90:80:2f:8a:d4:fc:db:35: 92:7e:77:4e:30:47:b6:3f:a1:75:a6:14:e2:8a:44: 3a:70:3e:55:58:ea:09:b9:d8:fe:ef:95:bb:62:ce: df:d4:d1:94:d9:d8:97:bb:8d:82:49:3b:72:41:d7: 2c:b2:a1:e1:e8:65:a4:43:db:58:c8:00:48:56:35: af:d5:59:1f:43:f8:37:0b:c5:a5:b5:ac:47:b9:f2: e2:b0:90:aa:88:c3:57:24:bf:49:b8:2e:2b:ee:ca: 61:d0:fd:5d:6c:b6:e5:33:d7:81:d4:c5:af:47:da: 38:c6:77:26:2d:73:84:7e:ac:37:9c:95:83:9d:07: 92:cc:b6:d9:a2:67:62:c6:f6:0f:e1:db:77:14:5b: 37:f0:65:72:3f:39:0d:5a:7a:c8:a8:20:98:d7:05: 94:3a:a1:de:73:5c:e6:34:23:07:3d:0b:5b:2a:f7: 51:0d:71:2c:a6:85:28:cf:76:65:9f:42:13:bc:cf: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4E:DF:1E:28:94:82:B8:FE:FF:61:FA:A2:08:44:62:51:58:1A:45 X509v3 Authority Key Identifier: keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:49:fa:36:b9:81:7c:44:92:d9:cd:11:80:d4:ff:3a:a9:57: 9a:47:ea:b5:4d:c8:05:8a:20:78:33:90:b0:8a:95:4b:54:c1: 77:bd:f1:ee:4d:88:b4:91:7d:ab:a3:bb:d8:40:c3:35:08:79: 3d:24:a5:e4:49:76:ef:37:ab:c0:77:61:e7:4d:6f:4a:b0:9d: 51:7c:aa:7a:e6:29:1e:de:cf:69:c7:4b:9d:60:37:df:4d:3a: d6:6b:65:1a:eb:07:ec:8b:a1:a2:46:58:96:6c:0b:b0:53:05: d4:de:4c:ac:b8:82:7f:91:8e:ba:46:66:7d:77:e2:52:81:42: 5a:ee:4a:14:ef:7c:84:95:67:ed:44:c1:e3:21:71:6f:99:86: 5d:d8:20:00:b5:5f:56:b3:59:c4:39:93:7b:1e:28:47:65:f7: 05:ed:5b:c7:5d:3a:a7:a1:b9:de:d9:86:44:e7:3d:4e:57:d6: 59:9c:df:63:43:66:13:f1:94:02:3e:e4:5a:28:b2:d7:95:9e: 50:90:39:e3:df:47:37:86:81:c7:a0:2d:42:48:30:e1:45:98: 51:86:d7:44:37:ab:21:3e:f4:14:32:ed:20:43:04:b0:c9:90: bf:e4:42:38:66:66:ad:d9:05:8b:8a:ba:d6:86:a9:28:9c:26: bb:39:b7:85 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUDf79Vv3+SKnmUURBkN5rllvowxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCM0FCQjFCNEEwMjRBNzAxMjIzQ0Q3MTU5MTFEOTk2 NzA2RTNBQTAeFw0yNjA2MTYxNzQwMzRaFw0yNjA2MTcxOTU2MzRaMDMxMTAvBgNV BAMTKDBCNEVERjFFMjg5NDgyQjhGRUZGNjFGQUEyMDg0NDYyNTE1ODFBNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Yr6PBws8SxCuebMZPwI9nwfP cRQcmFytg5YIX5WDsSqpzbqYGJyD6AOfxZKWz8w08x3HEn7YjE1rX+YJjpGBaY2Q gC+K1PzbNZJ+d04wR7Y/oXWmFOKKRDpwPlVY6gm52P7vlbtizt/U0ZTZ2Je7jYJJ O3JB1yyyoeHoZaRD21jIAEhWNa/VWR9D+DcLxaW1rEe58uKwkKqIw1ckv0m4Livu ymHQ/V1stuUz14HUxa9H2jjGdyYtc4R+rDeclYOdB5LMttmiZ2LG9g/h23cUWzfw ZXI/OQ1aesioIJjXBZQ6od5zXOY0Iwc9C1sq91ENcSymhSjPdmWfQhO8z5phAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUC07fHiiUgrj+/2H6oghEYlFYGkUwHwYDVR0j BBgwFoAUTLOrsbSgJKcBIjzXFZEdmWcG46owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1BTWVMv MC80Q0IzQUJCMUI0QTAyNEE3MDEyMjNDRDcxNTkxMUQ5OTY3MDZFM0FBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzRDQjNBQkIxQjRBMDI0QTcwMTIyM0NENzE1OTEx RDk5NjcwNkUzQUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8wLzRDQjNBQkIxQjRBMDI0 QTcwMTIyM0NENzE1OTExRDk5NjcwNkUzQUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzSfo2uYF8RJLZ zRGA1P86qVeaR+q1TcgFiiB4M5CwipVLVMF3vfHuTYi0kX2ro7vYQMM1CHk9JKXk SXbvN6vAd2HnTW9KsJ1RfKp65ike3s9px0udYDffTTrWa2Ua6wfsi6GiRliWbAuw UwXU3kysuIJ/kY66RmZ9d+JSgUJa7koU73yElWftRMHjIXFvmYZd2CAAtV9Ws1nE OZN7HihHZfcF7VvHXTqnobne2YZE5z1OV9ZZnN9jQ2YT8ZQCPuRaKLLXlZ5QkDnj 30c3hoHHoC1CSDDhRZhRhtdEN6shPvQUMu0gQwSwyZC/5EI4Zmat2QWLirrWhqko nCa7ObeF -----END CERTIFICATE-----Generated at Wed Jun 17 10:09:56 2026 by rpki-client