$ rpki-client -vvf rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft File: 9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft (raw, json) Hash identifier: gGg67jp6b8GnKZKo/3ChEW9lk1wJb9jceYuffe7AF20= Subject key identifier: 34:C5:70:B1:E7:06:3B:A2:73:17:62:DB:4C:89:C1:54:D4:7B:3A:2E Authority key identifier: 9D:00:7D:37:3F:38:1C:CA:59:6E:CE:20:FC:27:E8:D7:F7:2B:D5:C2 Certificate issuer: /CN=9D007D373F381CCA596ECE20FC27E8D7F72BD5C2 Certificate serial: 595C876A30B5A713CFF035B21A991804EFA59EAD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft Manifest number: 6B Signing time: Tue 28 Jul 2026 00:42:04 +0000 Manifest this update: Tue 28 Jul 2026 00:37:04 +0000 Manifest next update: Wed 29 Jul 2026 03:28:04 +0000 Files and hashes: 1: 3130332e3136302e3232362e302f32332d3234203d3e203338383432.roa (hash: fXBUwxrpMNifp4MO+znwtVxrCjA2c4pDgmAW0x6+dMc=) 2: 9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl (hash: TYl5DJSCdH9j3eELrdOAhp2E2E5iwhuVIIacMA3VUSI=) 3: 3130332e3136302e3232362e302f32332d3234203d3e20313331363539.roa (hash: E3rZgHSz1Z/QlxuFQ/uZkBfovj2HHfCX638SO+t2sg0=) 4: 323430363a663334303a3a2f33322d3634203d3e203338383432.roa (hash: dPU2RCL9922koNIK4EbftiZXNxbxs5ADbxLPZLggc34=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 03:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5c:87:6a:30:b5:a7:13:cf:f0:35:b2:1a:99:18:04:ef:a5:9e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D007D373F381CCA596ECE20FC27E8D7F72BD5C2 Validity Not Before: Jul 28 00:37:04 2026 GMT Not After : Jul 29 03:28:04 2026 GMT Subject: CN=34C570B1E7063BA2731762DB4C89C154D47B3A2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:13:0f:eb:52:fe:78:5b:77:f0:cb:46:78: 58:82:2a:e8:72:e8:da:93:59:59:94:7e:5a:09:6c: 03:8f:75:32:f1:e8:65:fe:80:03:06:3b:51:4f:84: a9:a8:9e:f7:06:1d:13:4f:06:e2:c5:19:2c:78:54: d6:f0:89:68:4b:9f:1c:be:ab:62:c2:6f:22:cd:e3: 7b:a6:1a:8d:7b:7d:e1:c0:c7:f2:16:95:51:05:3a: b0:0d:2f:48:ea:24:44:e1:fc:4f:99:8d:b2:4d:8b: 2d:67:ca:3c:28:03:63:50:ce:25:31:dc:02:e8:9f: 85:be:9e:60:8c:6c:44:c3:78:a5:4f:e4:1a:55:a3: 48:9d:68:b9:e8:e3:c2:f7:34:2d:31:61:19:13:e8: 6e:3d:9f:85:f4:9a:db:d5:7f:24:4c:13:2e:78:b8: 35:ba:3c:57:47:7b:d8:33:76:ea:02:ca:95:0c:f4: aa:79:a5:e7:95:b0:84:13:84:05:fd:0f:9b:b0:cc: 53:96:5f:b0:5e:92:d8:41:85:c8:67:e8:49:ba:8d: d0:71:4e:79:94:bc:a6:ad:ae:d4:d2:cb:9b:63:fd: 86:da:db:07:b6:b7:09:43:6a:0b:7d:bf:5c:c3:d9: 58:e9:0b:c2:3a:4d:59:70:96:fa:b2:bf:c1:b9:0d: 52:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C5:70:B1:E7:06:3B:A2:73:17:62:DB:4C:89:C1:54:D4:7B:3A:2E X509v3 Authority Key Identifier: keyid:9D:00:7D:37:3F:38:1C:CA:59:6E:CE:20:FC:27:E8:D7:F7:2B:D5:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d0:50:32:51:66:3e:91:e9:25:e6:b2:8d:bf:5a:29:3b:63: 52:01:b9:b8:65:35:66:04:9c:e2:f1:93:ad:c8:7c:47:53:ed: b7:67:51:c2:06:c5:4b:ec:19:14:fb:8a:95:92:e4:59:91:d0: 76:04:b1:91:1d:14:dc:5e:00:58:94:2d:4a:da:15:79:8b:74: c6:21:2b:97:36:80:3e:9e:c6:b0:b5:cb:f7:2c:db:ee:dc:13: 0e:48:48:6e:15:23:5a:93:c7:a1:31:42:53:4c:a3:85:83:e3: 37:b4:fd:07:df:cb:a7:d8:8b:de:57:6a:21:c1:96:7e:ba:17: a3:9f:64:bd:d2:3c:47:48:19:14:c9:bd:97:06:fa:75:9b:15: 13:9b:4f:77:f0:03:4c:3e:4e:ba:f5:7d:57:a5:2c:85:5b:8b: d3:d0:5e:f7:22:57:25:e6:b3:16:53:1b:c6:82:a9:1a:24:78: 13:b1:d6:4a:79:3d:cc:a9:3f:07:0d:d7:33:cb:71:fd:96:73: 29:d0:90:1f:bc:38:1e:5d:58:07:59:20:33:b1:20:eb:c2:7d: d1:aa:5d:45:2e:42:bd:27:da:6c:f8:bd:27:44:ad:b2:26:ad: 97:62:01:44:92:97:d7:8b:b8:4f:d7:c8:b9:7b:62:06:e3:04: f3:f6:88:86 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUWVyHajC1pxPP8DWyGpkYBO+lnq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMDdEMzczRjM4MUNDQTU5NkVDRTIwRkMyN0U4RDdG NzJCRDVDMjAeFw0yNjA3MjgwMDM3MDRaFw0yNjA3MjkwMzI4MDRaMDMxMTAvBgNV BAMTKDM0QzU3MEIxRTcwNjNCQTI3MzE3NjJEQjRDODlDMTU0RDQ3QjNBMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6hMP61L+eFt38MtGeFiCKuhy 6NqTWVmUfloJbAOPdTLx6GX+gAMGO1FPhKmonvcGHRNPBuLFGSx4VNbwiWhLnxy+ q2LCbyLN43umGo17feHAx/IWlVEFOrANL0jqJETh/E+ZjbJNiy1nyjwoA2NQziUx 3ALon4W+nmCMbETDeKVP5BpVo0idaLno48L3NC0xYRkT6G49n4X0mtvVfyRMEy54 uDW6PFdHe9gzduoCypUM9Kp5peeVsIQThAX9D5uwzFOWX7BekthBhchn6Em6jdBx TnmUvKatrtTSy5tj/Yba2we2twlDagt9v1zD2VjpC8I6TVlwlvqyv8G5DVK9AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUNMVwsecGO6JzF2LbTInBVNR7Oi4wHwYDVR0j BBgwFoAUnQB9Nz84HMpZbs4g/Cfo1/cr1cIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE5TTkVU LzAvOUQwMDdEMzczRjM4MUNDQTU5NkVDRTIwRkMyN0U4RDdGNzJCRDVDMi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS85RDAwN0QzNzNGMzgxQ0NBNTk2RUNFMjBGQzI3 RThEN0Y3MkJENUMyLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE5TTkVULzAvOUQwMDdEMzczRjM4 MUNDQTU5NkVDRTIwRkMyN0U4RDdGNzJCRDVDMi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADjQUDJRZj6R 6SXmso2/Wik7Y1IBubhlNWYEnOLxk63IfEdT7bdnUcIGxUvsGRT7ipWS5FmR0HYE sZEdFNxeAFiULUraFXmLdMYhK5c2gD6exrC1y/cs2+7cEw5ISG4VI1qTx6ExQlNM o4WD4ze0/Qffy6fYi95XaiHBln66F6OfZL3SPEdIGRTJvZcG+nWbFRObT3fwA0w+ Trr1fVelLIVbi9PQXvciVyXmsxZTG8aCqRokeBOx1kp5PcypPwcN1zPLcf2WcynQ kB+8OB5dWAdZIDOxIOvCfdGqXUUuQr0n2mz4vSdErbImrZdiAUSSl9eLuE/XyLl7 YgbjBPP2iIY= -----END CERTIFICATE-----Generated at Tue Jul 28 17:09:15 2026 by rpki-client