$ rpki-client -vvf rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft File: 2E8003B145695D652CFF3D58625D3B0A3535AD84.mft (raw, json) Hash identifier: YCwXP9w0r/Q8QoNFNloRlKnVYf6Jbr7IK2IOFzG2wmQ= Subject key identifier: 01:EC:A3:00:5D:45:EC:54:A0:54:EC:EF:41:1D:9B:22:44:2D:64:FB Authority key identifier: 2E:80:03:B1:45:69:5D:65:2C:FF:3D:58:62:5D:3B:0A:35:35:AD:84 Certificate issuer: /CN=2E8003B145695D652CFF3D58625D3B0A3535AD84 Certificate serial: 5FFF3EC9CF07A5E11ECDAE6CF0A23E0983D0B884 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft Manifest number: 68 Signing time: Tue 28 Jul 2026 05:17:36 +0000 Manifest this update: Tue 28 Jul 2026 05:12:36 +0000 Manifest next update: Wed 29 Jul 2026 07:39:36 +0000 Files and hashes: 1: 2E8003B145695D652CFF3D58625D3B0A3535AD84.crl (hash: 3806R4oq7rSgBitSJa7Cg8eR59AdQphAO08ux39uNeM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.crl rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ff:3e:c9:cf:07:a5:e1:1e:cd:ae:6c:f0:a2:3e:09:83:d0:b8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8003B145695D652CFF3D58625D3B0A3535AD84 Validity Not Before: Jul 28 05:12:36 2026 GMT Not After : Jul 29 07:39:36 2026 GMT Subject: CN=01ECA3005D45EC54A054ECEF411D9B22442D64FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:f4:d1:43:26:1e:30:24:85:40:d0:bd:0e: 5b:23:75:cf:ee:cf:0e:3e:3a:b5:40:74:54:47:07: 2c:21:0a:6d:f6:00:ce:20:58:bc:f5:fe:b8:56:3f: d3:b0:c3:01:ad:24:c0:35:5a:bd:78:1c:6e:42:6f: 74:39:ee:29:09:76:86:97:ae:24:3f:46:27:50:75: 20:9f:95:28:a9:2f:22:c2:dd:da:e6:9a:11:73:75: a2:8b:cd:7d:56:e9:52:4e:bf:75:71:a6:d3:f6:a1: 85:a1:c7:a6:5a:db:68:18:8b:ac:3d:a7:3e:dc:92: 84:a7:ba:14:c9:79:89:77:78:0e:de:9d:f2:15:fe: d7:79:a9:42:8f:d5:8c:5d:be:5c:0a:ba:07:20:52: 93:78:71:63:2d:b2:3c:7f:be:ae:60:ee:8c:df:83: 4e:e8:24:d5:fc:4f:6c:e7:5b:bf:f5:1e:c4:89:3e: 4d:56:be:28:7c:06:fc:e2:40:5b:ff:ce:8d:1d:1e: 76:32:c0:1f:f6:10:18:95:01:b6:93:91:1d:78:1b: e0:18:00:e8:63:31:12:f3:0b:ea:b2:a0:8f:a9:a8: 44:6d:07:ea:2a:e2:c1:d0:d1:e9:16:a3:b9:41:0a: 13:65:f7:3b:aa:ac:07:01:33:73:28:bd:69:13:e4: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EC:A3:00:5D:45:EC:54:A0:54:EC:EF:41:1D:9B:22:44:2D:64:FB X509v3 Authority Key Identifier: keyid:2E:80:03:B1:45:69:5D:65:2C:FF:3D:58:62:5D:3B:0A:35:35:AD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:72:91:3a:bb:6f:a9:51:0d:ea:c8:8a:2b:ec:5a:f2:3a:f0: e5:24:99:36:4e:b2:b8:4f:18:36:90:8f:ac:7b:9c:e2:39:2d: 6e:39:06:d1:aa:29:c6:0d:14:f4:e4:79:cf:e0:46:ee:11:9a: 4b:9e:e7:e2:41:b4:75:0f:29:31:42:39:67:51:0b:e3:fe:63: d2:f9:12:51:80:bc:fb:4a:2a:11:8d:97:19:6d:99:a2:d0:02: 04:08:95:6b:af:14:54:e4:4c:bf:cf:71:4e:e4:80:ce:20:18: 32:f8:44:c2:63:ae:89:3d:fb:5d:18:cb:b3:c1:62:a5:13:f0: 79:ed:10:39:e6:6c:24:89:7f:e8:6f:c5:e2:d7:a2:e4:9f:d6: cc:99:31:2d:f1:ac:26:bb:5b:e1:06:58:45:c7:b4:91:53:0a: aa:e8:32:55:d0:96:2c:1f:c1:c8:db:9d:da:4b:14:cf:3a:25: 94:0d:8b:50:0f:f5:c3:6b:5a:52:a2:7c:32:5d:dc:cf:a6:eb: f8:9e:49:f3:21:44:39:6e:66:53:95:c7:01:f5:b7:83:13:93: 4d:cf:06:f7:99:23:f6:d3:d4:53:1d:37:02:37:58:e4:26:c8: 38:4e:f0:20:01:15:94:bb:22:37:10:13:06:42:02:bd:f7:0e: 74:58:00:c5 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUX/8+yc8HpeEeza5s8KI+CYPQuIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4MDAzQjE0NTY5NUQ2NTJDRkYzRDU4NjI1RDNCMEEz NTM1QUQ4NDAeFw0yNjA3MjgwNTEyMzZaFw0yNjA3MjkwNzM5MzZaMDMxMTAvBgNV BAMTKDAxRUNBMzAwNUQ0NUVDNTRBMDU0RUNFRjQxMUQ5QjIyNDQyRDY0RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EPTRQyYeMCSFQNC9Dlsjdc/u zw4+OrVAdFRHBywhCm32AM4gWLz1/rhWP9OwwwGtJMA1Wr14HG5Cb3Q57ikJdoaX riQ/RidQdSCflSipLyLC3drmmhFzdaKLzX1W6VJOv3VxptP2oYWhx6Za22gYi6w9 pz7ckoSnuhTJeYl3eA7enfIV/td5qUKP1YxdvlwKugcgUpN4cWMtsjx/vq5g7ozf g07oJNX8T2znW7/1HsSJPk1Wvih8BvziQFv/zo0dHnYywB/2EBiVAbaTkR14G+AY AOhjMRLzC+qyoI+pqERtB+oq4sHQ0ekWo7lBChNl9zuqrAcBM3MovWkT5N9HAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUAeyjAF1F7FSgVOzvQR2bIkQtZPswHwYDVR0j BBgwFoAULoADsUVpXWUs/z1YYl07CjU1rYQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAv MkU4MDAzQjE0NTY5NUQ2NTJDRkYzRDU4NjI1RDNCMEEzNTM1QUQ4NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yRTgwMDNCMTQ1Njk1RDY1MkNGRjNENTg2MjVEM0Iw QTM1MzVBRDg0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAvMkU4MDAzQjE0NTY5NUQ2NTJD RkYzRDU4NjI1RDNCMEEzNTM1QUQ4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANJykTq7b6lRDerIiivs WvI68OUkmTZOsrhPGDaQj6x7nOI5LW45BtGqKcYNFPTkec/gRu4Rmkue5+JBtHUP KTFCOWdRC+P+Y9L5ElGAvPtKKhGNlxltmaLQAgQIlWuvFFTkTL/PcU7kgM4gGDL4 RMJjrok9+10Yy7PBYqUT8HntEDnmbCSJf+hvxeLXouSf1syZMS3xrCa7W+EGWEXH tJFTCqroMlXQliwfwcjbndpLFM86JZQNi1AP9cNrWlKifDJd3M+m6/ieSfMhRDlu ZlOVxwH1t4MTk03PBveZI/bT1FMdNwI3WOQmyDhO8CABFZS7IjcQEwZCAr33DnRY AMU= -----END CERTIFICATE-----Generated at Tue Jul 28 18:22:48 2026 by rpki-client