$ rpki-client -vvf rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft File: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft (raw, json) Hash identifier: Aod7fbD5oyZIb5Fxr79IGOnSBj7WNUif4xBaZIEG0J8= Subject key identifier: 65:6A:24:B0:C9:FB:2D:71:D8:F2:96:45:B2:41:D7:0B:E5:16:0D:10 Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 Certificate issuer: /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Certificate serial: 5B296A36324AB6861C73953D39E23DCC014C12A7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft Manifest number: 32 Signing time: Sat 13 Jun 2026 01:58:41 +0000 Manifest this update: Sat 13 Jun 2026 01:53:41 +0000 Manifest next update: Sun 14 Jun 2026 02:03:41 +0000 Files and hashes: 1: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (hash: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=) 2: 3231302e312e3233352e302f32342d3332203d3e20313331363537.roa (hash: RLXRr3oaU8tfZv8c58D+ZW+I4V/4m7eEXGAKJ8n/Gpk=) 3: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (hash: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M=) 4: 3231302e312e3233342e302f32342d3332203d3e20313331363537.roa (hash: pYVK17zAbMWT4djhepdkPZ+a4SmhzlWvmNCdXixNe1Y=) 5: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl (hash: v5GzOcWRqfH67i0FPsj68xfUK9C4V2NCWziwsnxNmW8=) 6: 3231302e312e3233342e302f32332d3332203d3e20313334383233.roa (hash: HWI5VQZaFjKYV+LScUBkUhCoJacVyotR7e1ayxfccA8=) 7: 3231302e312e3233342e302f32332d3332203d3e20313331363537.roa (hash: XhpQ+C1tVRKngGZ94cXlaeW9/WXKoL5qCwvg98P9HFY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:29:6a:36:32:4a:b6:86:1c:73:95:3d:39:e2:3d:cc:01:4c:12:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Validity Not Before: Jun 13 01:53:41 2026 GMT Not After : Jun 14 02:03:41 2026 GMT Subject: CN=656A24B0C9FB2D71D8F29645B241D70BE5160D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:42:78:17:79:16:f0:09:3f:e7:6f:bc:fe: 0a:53:47:99:42:69:fa:78:b8:da:8f:c2:5a:0c:ab: 65:17:c4:8f:9a:71:1a:d8:83:a9:a1:56:18:bd:2e: 87:31:c9:34:71:9d:a7:33:d5:b2:58:bd:49:3a:1f: 0b:86:6f:df:67:14:7c:4d:ab:c2:e2:3f:c8:ce:ba: 40:66:ca:16:10:9d:3a:79:ba:c6:92:25:5b:c1:5a: ee:70:9d:a3:89:fc:4d:2f:9f:aa:ef:b9:09:20:ca: 68:95:0f:62:e9:c0:7b:fe:cd:42:86:09:c7:f5:a3: 84:f7:1c:e3:60:2c:c7:ec:34:52:26:3c:81:3d:c1: cc:53:d3:a3:f6:e3:b6:ac:4b:ec:de:22:f2:e8:7d: ad:a6:73:83:07:c4:12:da:de:fb:b1:4c:83:ba:d8: a4:70:ed:0e:ae:78:79:5a:c1:3a:39:66:b8:1a:a6: b6:04:7f:10:cb:38:eb:69:31:fa:34:98:70:04:a5: 3c:b8:d5:ad:a0:80:91:74:e7:b7:87:2a:39:e2:04: 7c:36:8f:12:60:a8:2f:bb:02:f9:d0:01:e8:7f:a2: f6:04:94:9e:0d:5f:24:1f:fd:87:26:35:b6:20:88: 80:38:c0:98:9e:0c:d3:a5:ae:4d:68:c3:26:16:22: 4c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6A:24:B0:C9:FB:2D:71:D8:F2:96:45:B2:41:D7:0B:E5:16:0D:10 X509v3 Authority Key Identifier: keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:76:87:42:4e:81:05:94:a4:e2:72:8a:a0:55:8f:6f:d7:8a: 2c:e1:a7:3f:ac:0e:17:63:2f:11:85:62:e6:8c:23:37:e8:d2: f3:e8:58:86:98:35:f8:c2:83:09:7d:1b:e0:60:cf:1b:53:13: 63:37:59:b8:b9:6a:57:ed:f9:8c:93:e8:d5:fe:2a:80:bd:dc: 52:fe:84:2a:e7:5a:2a:5e:6c:e7:ec:b0:1b:d8:d7:53:55:67: ab:c6:e1:b1:59:6f:30:50:1f:45:7f:0f:8a:9d:2b:1d:55:23: a4:08:23:3e:2a:c2:7a:f0:9c:16:c0:05:bf:ef:ca:f1:ff:14: 6a:65:db:64:87:e0:f1:98:9a:ba:a1:33:62:3a:74:a2:22:a7: 95:cb:53:a2:0b:d9:85:74:a0:bf:93:a3:bb:ac:20:c1:e7:d9: 8e:bb:1f:49:d7:ae:82:fe:c7:72:6c:16:71:5d:e3:e4:c6:ad: 66:f6:d4:cb:a2:26:5a:8c:90:cf:f1:d7:87:a2:ed:1a:ae:f4: 43:6d:70:9a:0e:dc:81:a6:b7:91:fc:a8:5c:84:be:23:a3:09: 50:63:b0:09:6b:72:ca:d2:16:0f:80:f3:7b:a4:4f:f4:a4:44: 72:d2:4b:d5:77:23:98:8d:5b:82:b8:e4:b7:39:40:26:e4:d3: 66:58:31:60 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUWylqNjJKtoYcc5U9OeI9zAFMEqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZGOEE2 RkFEQTQ2MDAeFw0yNjA2MTMwMTUzNDFaFw0yNjA2MTQwMjAzNDFaMDMxMTAvBgNV BAMTKDY1NkEyNEIwQzlGQjJENzFEOEYyOTY0NUIyNDFENzBCRTUxNjBEMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4kJ4F3kW8Ak/52+8/gpTR5lC afp4uNqPwloMq2UXxI+acRrYg6mhVhi9LocxyTRxnacz1bJYvUk6HwuGb99nFHxN q8LiP8jOukBmyhYQnTp5usaSJVvBWu5wnaOJ/E0vn6rvuQkgymiVD2LpwHv+zUKG Ccf1o4T3HONgLMfsNFImPIE9wcxT06P247asS+zeIvLofa2mc4MHxBLa3vuxTIO6 2KRw7Q6ueHlawTo5ZrgaprYEfxDLOOtpMfo0mHAEpTy41a2ggJF057eHKjniBHw2 jxJgqC+7AvnQAeh/ovYElJ4NXyQf/YcmNbYgiIA4wJieDNOlrk1owyYWIkwVAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUZWoksMn7LXHY8pZFskHXC+UWDRAwHwYDVR0j BBgwFoAUnQ9tU28FPDu1Iz5o4GNvim+tpGAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREFGVS8w LzlEMEY2RDUzNkYwNTNDM0JCNTIzM0U2OEUwNjM2RjhBNkZBREE0NjAuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZG OEE2RkFEQTQ2MC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RBRlUvMC85RDBGNkQ1MzZGMDUzQzNC QjUyMzNFNjhFMDYzNkY4QTZGQURBNDYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXaHQk6BBZSk4nKK oFWPb9eKLOGnP6wOF2MvEYVi5owjN+jS8+hYhpg1+MKDCX0b4GDPG1MTYzdZuLlq V+35jJPo1f4qgL3cUv6EKudaKl5s5+ywG9jXU1Vnq8bhsVlvMFAfRX8Pip0rHVUj pAgjPirCevCcFsAFv+/K8f8UamXbZIfg8ZiauqEzYjp0oiKnlctTogvZhXSgv5Oj u6wgwefZjrsfSdeugv7HcmwWcV3j5MatZvbUy6ImWoyQz/HXh6LtGq70Q21wmg7c gaa3kfyoXIS+I6MJUGOwCWtyytIWD4Dze6RP9KREctJL1XcjmI1bgrjktzlAJuTT ZlgxYA== -----END CERTIFICATE-----Generated at Sat Jun 13 10:16:59 2026 by rpki-client