$ rpki-client -vvf rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft File: 8F1212A19454D2A49786359CAC45368F821417D6.mft (raw, json) Hash identifier: Mgc45VNJGZEmJYekM2TAjiKnQmOIFA40wZgYTmL7CO8= Subject key identifier: F1:02:02:DC:EB:23:98:C0:DD:31:BE:D7:8B:08:95:3A:9B:D5:5A:2D Authority key identifier: 8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 Certificate issuer: /CN=8F1212A19454D2A49786359CAC45368F821417D6 Certificate serial: 7DA0CFD4C7866ACA2FF0E1F5DBB48EF0B607052A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft Manifest number: 6D Signing time: Tue 28 Jul 2026 20:04:47 +0000 Manifest this update: Tue 28 Jul 2026 19:59:47 +0000 Manifest next update: Wed 29 Jul 2026 21:41:47 +0000 Files and hashes: 1: 323430363a643763303a3a2f33322d3438203d3e203338303038.roa (hash: uMtY/GmVL72No2RBdo9smGFIzi+iIhlXKaPRp7r/VTo=) 2: 323430363a643763303a3a2f33322d3438203d3e203338383339.roa (hash: Z694/6d2G+L3RUACrnL4ZOBmDtfn2t+JQdVIPZHPNRw=) 3: 3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa (hash: fgIPz4pRjg9MozWHN5C9tmdzsbKi6XEfF4wUaKsvsnA=) 4: 8F1212A19454D2A49786359CAC45368F821417D6.crl (hash: 6rq4hCKTWJBDvpxGgwCc/paGQaA+QkoC9wBOKdK929s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a0:cf:d4:c7:86:6a:ca:2f:f0:e1:f5:db:b4:8e:f0:b6:07:05:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1212A19454D2A49786359CAC45368F821417D6 Validity Not Before: Jul 28 19:59:47 2026 GMT Not After : Jul 29 21:41:47 2026 GMT Subject: CN=F10202DCEB2398C0DD31BED78B08953A9BD55A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8a:bf:31:de:14:2c:c8:7b:a2:7a:e7:d7:2f: b9:da:02:db:35:c6:14:91:b6:db:b9:45:d3:c2:fe: 98:dd:e2:e6:04:ac:0b:b3:38:63:cf:59:d6:78:11: b1:5c:b7:4a:76:48:d4:3b:15:99:eb:e9:b6:7d:64: 74:2a:5f:97:0b:11:f6:58:8d:e1:5a:be:bf:6c:b0: 8c:58:38:54:65:a2:a1:7a:fc:f3:7c:c1:4e:90:e6: 02:90:c7:3e:0d:41:89:91:27:85:84:73:a8:31:59: 0f:36:5b:71:34:82:76:11:d1:08:70:f3:49:c9:46: 44:dd:df:4d:3e:d3:a7:ff:26:22:02:3f:65:db:5e: 53:82:ef:64:97:8f:c2:fe:69:94:63:03:17:86:f2: 2d:c5:f9:31:9f:2c:0d:7e:f9:b2:27:4c:e3:8b:24: f3:6d:e7:33:74:f0:0f:3d:2f:ab:47:f0:18:f7:a6: f4:21:78:fa:0e:c9:e0:f9:59:2f:db:d9:bb:81:94: d7:37:21:08:b6:52:7e:5d:aa:17:77:6f:dd:79:c7: 1e:0f:0c:00:d2:d0:4e:78:22:ca:9e:e1:0d:c5:9b: 60:9c:63:5a:6a:1e:d5:a9:f0:57:7c:80:36:04:76: 64:aa:15:ef:b2:a7:dc:ed:6b:33:86:9c:ee:bb:8c: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:02:02:DC:EB:23:98:C0:DD:31:BE:D7:8B:08:95:3A:9B:D5:5A:2D X509v3 Authority Key Identifier: keyid:8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6e:da:91:7c:c3:43:20:b4:02:0b:ae:5b:3d:c5:5e:ae:93: 50:3c:ac:56:c5:8e:af:e7:2a:64:be:83:16:62:a2:a0:1c:a7: e0:2a:3d:3f:38:aa:18:93:e7:c9:97:22:56:26:85:3e:85:c7: 20:51:33:3e:43:55:35:84:72:96:9e:17:ea:b3:90:e9:5a:43: c7:34:57:4c:be:84:e4:bd:e1:79:0e:0f:62:4d:ab:a8:07:91: d6:cb:e7:9f:5f:0f:d3:bc:0c:76:92:e6:d4:29:ef:47:ad:4a: ab:bf:66:2c:d4:a3:39:c1:ce:be:18:51:94:1c:c6:9e:33:99: 01:f5:78:9e:bf:3f:56:32:ff:17:65:23:39:79:cf:15:e3:75: 44:ac:9d:dd:cf:e4:bb:b7:d9:64:25:d9:c6:bd:6d:20:b3:44: 28:87:e3:a7:79:ea:a8:c8:95:4f:cd:c2:49:64:85:c2:74:90: ce:b2:b7:fd:0a:54:db:f6:9f:d9:7e:ed:d3:8f:f5:f9:4e:db: 83:0c:37:72:cc:c7:bc:f8:89:f8:fb:59:29:2a:b7:f1:b5:7d: 7b:5e:cb:aa:91:5c:ea:94:cf:51:19:77:2c:fd:4e:f6:a2:c7: b2:59:59:e9:aa:69:23:cb:4e:59:e1:7b:bc:43:5f:e7:d6:80: 15:5f:0e:b5 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUfaDP1MeGasov8OH127SO8LYHBSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4 MjE0MTdENjAeFw0yNjA3MjgxOTU5NDdaFw0yNjA3MjkyMTQxNDdaMDMxMTAvBgNV BAMTKEYxMDIwMkRDRUIyMzk4QzBERDMxQkVENzhCMDg5NTNBOUJENTVBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdir8x3hQsyHuieufXL7naAts1 xhSRttu5RdPC/pjd4uYErAuzOGPPWdZ4EbFct0p2SNQ7FZnr6bZ9ZHQqX5cLEfZY jeFavr9ssIxYOFRloqF6/PN8wU6Q5gKQxz4NQYmRJ4WEc6gxWQ82W3E0gnYR0Qhw 80nJRkTd300+06f/JiICP2XbXlOC72SXj8L+aZRjAxeG8i3F+TGfLA1++bInTOOL JPNt5zN08A89L6tH8Bj3pvQhePoOyeD5WS/b2buBlNc3IQi2Un5dqhd3b915xx4P DADS0E54Isqe4Q3Fm2CcY1pqHtWp8Fd8gDYEdmSqFe+yp9ztazOGnO67jNfnAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU8QIC3OsjmMDdMb7XiwiVOpvVWi0wHwYDVR0j BBgwFoAUjxISoZRU0qSXhjWcrEU2j4IUF9YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVL LzAvOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84RjEyMTJBMTk0NTREMkE0OTc4NjM1OUNBQzQ1 MzY4RjgyMTQxN0Q2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVLLzAvOEYxMjEyQTE5NDU0 RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEpu2pF8w0Mg tAILrls9xV6uk1A8rFbFjq/nKmS+gxZioqAcp+AqPT84qhiT58mXIlYmhT6FxyBR Mz5DVTWEcpaeF+qzkOlaQ8c0V0y+hOS94XkOD2JNq6gHkdbL559fD9O8DHaS5tQp 70etSqu/ZizUoznBzr4YUZQcxp4zmQH1eJ6/P1Yy/xdlIzl5zxXjdUSsnd3P5Lu3 2WQl2ca9bSCzRCiH46d56qjIlU/NwklkhcJ0kM6yt/0KVNv2n9l+7dOP9flO24MM N3LMx7z4ifj7WSkqt/G1fXtey6qRXOqUz1EZdyz9Tvaix7JZWemqaSPLTlnhe7xD X+fWgBVfDrU= -----END CERTIFICATE-----Generated at Wed Jul 29 02:12:48 2026 by rpki-client