$ rpki-client -vvf rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft File: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft (raw, json) Hash identifier: nx0WZmOXJ+2NWMJ+AaHt0Z7yDTRxTMPenQDmWwIzPt4= Subject key identifier: AD:80:E9:34:B5:22:4E:C8:5E:0B:FD:47:63:38:1C:40:64:9C:95:3B Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 Certificate issuer: /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Certificate serial: 3CD65DA2F4A35419A86768D5454A339F58350455 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft Manifest number: 6E Signing time: Tue 28 Jul 2026 14:09:07 +0000 Manifest this update: Tue 28 Jul 2026 14:04:07 +0000 Manifest next update: Wed 29 Jul 2026 17:47:07 +0000 Files and hashes: 1: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl (hash: UUQ8DR6JpiGxMoNG4Tatqhxbs4xUvSWHTDkath5ObAk=) 2: 3231302e312e3233342e302f32332d3332203d3e20313334383233.roa (hash: HWI5VQZaFjKYV+LScUBkUhCoJacVyotR7e1ayxfccA8=) 3: 3231302e312e3233342e302f32332d3332203d3e20313331363537.roa (hash: XhpQ+C1tVRKngGZ94cXlaeW9/WXKoL5qCwvg98P9HFY=) 4: 3231302e312e3233342e302f32342d3332203d3e20313331363537.roa (hash: pYVK17zAbMWT4djhepdkPZ+a4SmhzlWvmNCdXixNe1Y=) 5: 3231302e312e3233352e302f32342d3332203d3e20313331363537.roa (hash: RLXRr3oaU8tfZv8c58D+ZW+I4V/4m7eEXGAKJ8n/Gpk=) 6: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (hash: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=) 7: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (hash: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d6:5d:a2:f4:a3:54:19:a8:67:68:d5:45:4a:33:9f:58:35:04:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Validity Not Before: Jul 28 14:04:07 2026 GMT Not After : Jul 29 17:47:07 2026 GMT Subject: CN=AD80E934B5224EC85E0BFD4763381C40649C953B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:41:a6:0a:38:fc:06:4f:c2:0b:21:87:e5: c5:ae:49:a8:14:20:2a:3e:c5:da:e8:f2:ee:b5:49: 52:a4:70:a0:eb:ee:55:98:55:7d:e2:d1:d4:ec:f8: 53:3e:b2:f9:ab:d1:0c:83:0b:69:b9:a4:b5:e3:1b: 2c:83:b8:5a:fb:19:a4:9c:28:71:c4:f1:e9:29:e2: 64:ed:86:52:b7:2d:e1:62:d6:b2:be:42:b2:65:ed: 17:f4:55:18:28:ac:c3:65:1e:16:88:b2:e2:fc:a7: 2d:58:2a:9a:80:bf:74:af:23:5f:4c:ed:f0:d2:a1: d3:f7:38:28:38:cd:dc:ea:f4:a1:2f:f7:51:76:95: 16:bc:36:1d:57:94:d2:11:27:b2:27:4e:94:60:d9: bc:91:5f:f8:f0:d8:ac:ef:93:c0:63:ba:2b:84:c7: 34:a5:4e:df:28:ea:d7:a2:90:b5:58:16:60:99:17: 1a:5e:4d:c2:06:5f:41:17:d9:6e:1b:a9:31:b0:d1: c2:d7:90:cf:43:4d:18:3f:b8:f4:c3:ce:4f:af:92: 13:bc:b5:77:f7:aa:97:af:04:b7:99:6d:a5:76:3b: 57:52:a3:d0:89:60:ef:14:19:a0:33:3b:1f:6d:34: 5a:01:0e:ba:b3:17:04:a1:5c:cf:e4:f5:0a:07:83: a9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:80:E9:34:B5:22:4E:C8:5E:0B:FD:47:63:38:1C:40:64:9C:95:3B X509v3 Authority Key Identifier: keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:97:b3:03:3d:95:72:f7:51:4e:ef:55:9e:71:28:bd:7b:de: ed:a7:05:2e:27:20:df:32:30:c3:3a:38:c0:47:46:7f:44:ab: 92:d5:02:a8:65:b7:c0:13:44:6f:86:2f:36:47:a8:45:9f:9c: 80:80:58:32:1a:ad:d7:eb:63:7d:ad:ca:75:e0:1b:10:5d:f5: 51:00:46:46:7a:e0:a4:f8:1e:8a:4b:69:53:4b:5d:c5:ab:85: 46:7b:24:51:a8:63:49:7f:51:89:75:20:60:e1:ba:9c:3d:68: 33:52:dd:60:ec:0c:5a:bb:a1:f0:2f:1e:a6:e2:76:17:ca:09: b3:e0:e0:b6:6e:2e:0b:79:c7:0f:a5:ff:01:b6:b0:be:2e:33: 8b:f3:85:c0:ca:e6:aa:e5:62:ae:4e:7f:75:a0:73:46:b5:f9: 80:72:69:f5:9d:cc:e3:2c:59:53:9e:cc:ad:fe:07:7a:3e:e7: 30:68:6a:47:e0:35:2b:3a:69:6c:be:40:30:98:ea:f8:03:4d: b4:fb:23:9f:66:3e:f3:12:f4:86:f4:53:bb:9d:78:99:a4:8b: 7d:f4:79:13:24:83:e5:b9:80:a8:f3:3b:06:c7:5c:91:6a:03: 76:0d:17:64:bb:86:f4:a9:6c:56:53:60:2f:11:89:4d:a3:ab: 19:48:df:3e -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUPNZdovSjVBmoZ2jVRUozn1g1BFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZGOEE2 RkFEQTQ2MDAeFw0yNjA3MjgxNDA0MDdaFw0yNjA3MjkxNzQ3MDdaMDMxMTAvBgNV BAMTKEFEODBFOTM0QjUyMjRFQzg1RTBCRkQ0NzYzMzgxQzQwNjQ5Qzk1M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnUGmCjj8Bk/CCyGH5cWuSagU ICo+xdro8u61SVKkcKDr7lWYVX3i0dTs+FM+svmr0QyDC2m5pLXjGyyDuFr7GaSc KHHE8ekp4mTthlK3LeFi1rK+QrJl7Rf0VRgorMNlHhaIsuL8py1YKpqAv3SvI19M 7fDSodP3OCg4zdzq9KEv91F2lRa8Nh1XlNIRJ7InTpRg2byRX/jw2Kzvk8BjuiuE xzSlTt8o6teikLVYFmCZFxpeTcIGX0EX2W4bqTGw0cLXkM9DTRg/uPTDzk+vkhO8 tXf3qpevBLeZbaV2O1dSo9CJYO8UGaAzOx9tNFoBDrqzFwShXM/k9QoHg6nbAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUrYDpNLUiTsheC/1HYzgcQGSclTswHwYDVR0j BBgwFoAUnQ9tU28FPDu1Iz5o4GNvim+tpGAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREFGVS8w LzlEMEY2RDUzNkYwNTNDM0JCNTIzM0U2OEUwNjM2RjhBNkZBREE0NjAuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZG OEE2RkFEQTQ2MC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RBRlUvMC85RDBGNkQ1MzZGMDUzQzNC QjUyMzNFNjhFMDYzNkY4QTZGQURBNDYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZezAz2VcvdRTu9V nnEovXve7acFLicg3zIwwzo4wEdGf0SrktUCqGW3wBNEb4YvNkeoRZ+cgIBYMhqt 1+tjfa3KdeAbEF31UQBGRnrgpPgeiktpU0tdxauFRnskUahjSX9RiXUgYOG6nD1o M1LdYOwMWruh8C8epuJ2F8oJs+Dgtm4uC3nHD6X/Abawvi4zi/OFwMrmquVirk5/ daBzRrX5gHJp9Z3M4yxZU57Mrf4Hej7nMGhqR+A1KzppbL5AMJjq+ANNtPsjn2Y+ 8xL0hvRTu514maSLffR5EySD5bmAqPM7BsdckWoDdg0XZLuG9KlsVlNgLxGJTaOr GUjfPg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:22:44 2026 by rpki-client