$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft File: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft (raw, json) Hash identifier: zv5cM7fFggEc7pVecPvrR26k0+8rcC+516TTM9Mu7sU= Subject key identifier: 03:15:B8:BD:FD:9C:EB:88:57:4D:1A:3F:C7:8E:01:94:5C:BE:5B:3E Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94 Certificate issuer: /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94 Certificate serial: 794B0E3D45FEF5E9FAA9F02CC4F7B67EED7391DF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 13:49:04 +0000 Manifest this update: Tue 28 Jul 2026 13:44:04 +0000 Manifest next update: Wed 29 Jul 2026 16:47:04 +0000 Files and hashes: 1: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (hash: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=) 2: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (hash: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=) 3: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl (hash: bYSPCQVKbALSJNhVgoB55de0oe3ofw4XzcrEzK8pHLE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4b:0e:3d:45:fe:f5:e9:fa:a9:f0:2c:c4:f7:b6:7e:ed:73:91:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94 Validity Not Before: Jul 28 13:44:04 2026 GMT Not After : Jul 29 16:47:04 2026 GMT Subject: CN=0315B8BDFD9CEB88574D1A3FC78E01945CBE5B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:19:f2:58:3e:6f:cf:ab:5c:73:1f:00:f8: 38:24:c7:af:46:b2:f6:f1:c6:f8:07:52:14:a2:97: 49:f8:a5:6d:55:01:80:4a:d6:94:9c:d2:fa:00:41: 72:ed:cc:1b:74:b8:f6:40:ff:14:2c:e7:5f:a9:6a: 9d:cf:76:72:7b:69:d1:08:66:68:46:fd:f9:f3:2f: df:13:6e:97:68:dd:3a:ba:47:6a:4e:e7:05:c8:0d: 4c:ac:88:1c:a7:13:ca:f7:b0:4f:df:28:42:7d:01: 19:1a:b7:3b:a9:a9:70:4a:77:25:51:9e:f1:40:e1: 2e:29:0b:20:40:7d:7e:1d:b7:0d:05:cf:41:2b:4f: 71:80:cf:85:1f:9f:4c:8c:8e:b6:68:60:40:c2:df: 1f:73:86:c1:d3:d7:c7:e2:b8:8c:dd:75:aa:44:35: e9:18:10:37:39:c7:f8:70:3c:77:1b:21:86:df:91: 2f:df:a6:ce:ed:ee:01:4e:ee:51:3f:97:63:98:98: 96:15:b5:2d:12:6e:e8:10:90:3e:d5:9f:4a:a8:d9: 68:a2:8b:bd:61:29:93:72:0e:54:c2:95:fd:5d:5f: 4b:e6:b2:0c:26:a3:f9:10:a7:96:8b:ba:a9:68:00: 78:73:f5:0d:46:3b:91:59:85:f7:14:61:7a:5a:7c: 07:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:15:B8:BD:FD:9C:EB:88:57:4D:1A:3F:C7:8E:01:94:5C:BE:5B:3E X509v3 Authority Key Identifier: keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:9e:05:16:fe:ea:f3:7b:1d:78:86:0f:63:51:8d:9a:ed:c9: 6d:0a:70:d3:95:66:e5:33:6e:59:c3:c8:5f:6d:44:0f:aa:7f: d9:57:d2:ca:cb:04:f5:18:f0:6c:79:e8:b2:4b:7a:4c:67:50: d2:8a:73:8a:63:37:fd:69:be:f5:ab:0d:20:27:a5:28:a1:e6: f9:43:05:fd:1f:21:94:ab:99:39:2c:f3:95:98:c6:57:8b:3c: c4:d7:72:15:10:f9:54:5a:8c:85:18:51:33:b8:f1:a3:b2:2b: f7:89:6e:ca:c7:2b:81:4e:82:af:2c:0b:26:d4:87:51:49:17: aa:aa:97:20:9c:34:0d:99:8a:9d:32:d9:91:4c:af:0f:a1:62: 79:51:0a:7e:81:e7:ee:39:c1:8f:bb:5c:a4:9e:b9:c3:78:78: 9d:fa:8b:63:2c:0a:f3:af:b0:dd:20:36:c5:a4:40:1e:2b:5a: 01:d3:fb:ec:82:fe:c9:90:c2:fb:97:21:a6:05:13:86:f7:e4: 91:a8:26:53:4b:89:6e:8d:3f:37:fb:28:37:a6:9d:df:a7:82: 25:ff:3c:f8:5d:6a:d1:9b:85:24:4a:c3:9a:4d:7c:a9:d6:bc: ac:02:59:31:90:0e:a8:0f:e5:34:2e:5b:56:e1:1d:0c:0c:e9: 44:05:dc:4f -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUeUsOPUX+9en6qfAsxPe2fu1zkd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFOTRDNzc4OUFEQTdFNUY1NDBGREJFOTU4MkQ4RUE3 QUE0NkE5NDAeFw0yNjA3MjgxMzQ0MDRaFw0yNjA3MjkxNjQ3MDRaMDMxMTAvBgNV BAMTKDAzMTVCOEJERkQ5Q0VCODg1NzREMUEzRkM3OEUwMTk0NUNCRTVCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetRnyWD5vz6tccx8A+Dgkx69G svbxxvgHUhSil0n4pW1VAYBK1pSc0voAQXLtzBt0uPZA/xQs51+pap3PdnJ7adEI ZmhG/fnzL98Tbpdo3Tq6R2pO5wXIDUysiBynE8r3sE/fKEJ9ARkatzupqXBKdyVR nvFA4S4pCyBAfX4dtw0Fz0ErT3GAz4Ufn0yMjrZoYEDC3x9zhsHT18fiuIzddapE NekYEDc5x/hwPHcbIYbfkS/fps7t7gFO7lE/l2OYmJYVtS0SbugQkD7Vn0qo2Wii i71hKZNyDlTClf1dX0vmsgwmo/kQp5aLuqloAHhz9Q1GO5FZhfcUYXpafAfRAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUAxW4vf2c64hXTRo/x44BlFy+Wz4wHwYDVR0j BBgwFoAUZelMd4mtp+X1QP2+lYLY6nqkapQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP TkcvMS82NUU5NEM3Nzg5QURBN0U1RjU0MEZEQkU5NTgyRDhFQTdBQTQ2QTk0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzY1RTk0Qzc3ODlBREE3RTVGNTQwRkRCRTk1 ODJEOEVBN0FBNDZBOTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8xLzY1RTk0Qzc3 ODlBREE3RTVGNTQwRkRCRTk1ODJEOEVBN0FBNDZBOTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmngUW /urzex14hg9jUY2a7cltCnDTlWblM25Zw8hfbUQPqn/ZV9LKywT1GPBseeiyS3pM Z1DSinOKYzf9ab71qw0gJ6Uooeb5QwX9HyGUq5k5LPOVmMZXizzE13IVEPlUWoyF GFEzuPGjsiv3iW7KxyuBToKvLAsm1IdRSReqqpcgnDQNmYqdMtmRTK8PoWJ5UQp+ gefuOcGPu1yknrnDeHid+otjLArzr7DdIDbFpEAeK1oB0/vsgv7JkML7lyGmBROG 9+SRqCZTS4lujT83+yg3pp3fp4Il/zz4XWrRm4UkSsOaTXyp1rysAlkxkA6oD+U0 LltW4R0MDOlEBdxP -----END CERTIFICATE-----Generated at Wed Jul 29 00:49:36 2026 by rpki-client