$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft File: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft (raw, json) Hash identifier: M/Oiz09tKCZ8iYoh3gkLFqKERQmIaTZwOiiGbMsKorM= Subject key identifier: AA:98:DD:97:0C:D8:6F:8A:10:DF:8F:3F:30:11:8A:60:44:DD:6B:CA Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94 Certificate issuer: /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94 Certificate serial: 363BB6DE92DF5856F5AAD4FBB1BC6EC75F9116F6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 04:03:57 +0000 Manifest this update: Sat 13 Jun 2026 03:58:57 +0000 Manifest next update: Sun 14 Jun 2026 05:33:57 +0000 Files and hashes: 1: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (hash: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=) 2: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl (hash: oNy4LiqsSeuA9w8eYnOXvG63XePZwSpAju48EiYAe1I=) 3: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (hash: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 05:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3b:b6:de:92:df:58:56:f5:aa:d4:fb:b1:bc:6e:c7:5f:91:16:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94 Validity Not Before: Jun 13 03:58:57 2026 GMT Not After : Jun 14 05:33:57 2026 GMT Subject: CN=AA98DD970CD86F8A10DF8F3F30118A6044DD6BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:f5:1f:26:b3:7a:04:cf:e3:fc:4d:2a:44: a3:25:bf:83:48:bf:8c:ba:6b:16:3c:59:98:39:8a: 46:7f:cf:68:ec:c4:bc:63:82:e6:e5:2a:6c:63:b0: c0:1f:94:7a:70:be:6e:88:77:d9:33:de:c4:98:62: 34:eb:d3:95:e4:7e:8e:8c:99:74:0f:7e:e8:a9:1d: d1:ec:57:37:3f:9b:b8:49:79:53:98:ca:a8:b3:db: e8:d3:03:c2:de:fc:8e:f9:f5:b5:e7:0e:54:2f:08: e5:c3:19:be:50:72:0a:ad:ae:55:b1:b9:60:44:bf: e6:69:47:91:6d:1e:2c:95:92:be:27:34:6b:ce:7d: dd:50:14:eb:1d:a7:16:6a:41:57:0e:66:51:60:ed: 48:e1:9a:ca:f5:3d:18:f3:50:1c:73:fc:36:08:4c: 40:75:26:dc:b1:47:a9:a2:97:93:72:77:54:38:cb: b3:88:05:91:7d:c5:e5:47:14:c1:d8:7f:2a:82:c1: 06:41:de:39:61:27:94:6b:c9:8f:07:bb:a0:c5:cb: ad:ac:be:73:56:1f:a3:24:ea:4f:19:bf:1e:88:de: 18:af:a6:d1:e7:b1:da:e5:71:31:f4:81:d6:a5:f8: 28:ab:85:b9:08:98:6f:36:61:65:2c:83:50:65:5b: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:98:DD:97:0C:D8:6F:8A:10:DF:8F:3F:30:11:8A:60:44:DD:6B:CA X509v3 Authority Key Identifier: keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6e:2b:b7:41:c2:7e:62:13:28:3a:3b:d8:b7:d7:27:0c:c1: 42:e5:28:e1:b9:d2:01:a0:1c:b1:98:22:42:4e:db:e1:22:cc: b1:59:8f:30:07:e1:7d:a6:27:ad:86:70:68:aa:0a:f7:f5:f1: f0:fe:b9:a0:70:f7:fc:54:bf:17:60:44:ff:e4:25:bb:3b:4d: a2:db:77:c2:37:b2:fd:fa:2e:f1:c4:c4:d3:33:f8:fd:9c:d9: 90:82:71:83:20:c2:81:1d:f5:bc:5f:de:a6:12:9b:a6:e9:03: 9e:7b:e9:07:c2:b1:84:42:d8:ba:6f:3b:64:c4:fd:8b:84:37: 61:dc:94:d2:f7:67:24:f7:eb:34:84:ee:11:6b:62:c5:fb:62: 13:58:ad:55:ab:33:01:e6:69:59:04:b0:b9:5f:df:c1:ea:70: 05:4d:54:d1:6a:39:83:00:6e:8f:f7:d7:c7:23:16:d5:b3:de: 26:9e:63:78:a2:79:b1:78:db:3b:a7:ad:11:97:a2:9d:c8:4b: 78:f9:dc:df:51:eb:ab:58:2d:d9:92:5a:cc:a8:da:8c:08:7d: 97:77:0b:2b:04:44:05:26:54:e1:af:83:df:55:e2:40:c2:69: e4:f7:ac:51:63:d9:0c:ec:5f:34:1b:f6:9d:f9:5d:09:1c:d2: 6f:4f:83:5b -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUNju23pLfWFb1qtT7sbxux1+RFvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFOTRDNzc4OUFEQTdFNUY1NDBGREJFOTU4MkQ4RUE3 QUE0NkE5NDAeFw0yNjA2MTMwMzU4NTdaFw0yNjA2MTQwNTMzNTdaMDMxMTAvBgNV BAMTKEFBOThERDk3MENEODZGOEExMERGOEYzRjMwMTE4QTYwNDRERDZCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLzPUfJrN6BM/j/E0qRKMlv4NI v4y6axY8WZg5ikZ/z2jsxLxjgublKmxjsMAflHpwvm6Id9kz3sSYYjTr05Xkfo6M mXQPfuipHdHsVzc/m7hJeVOYyqiz2+jTA8Le/I759bXnDlQvCOXDGb5QcgqtrlWx uWBEv+ZpR5FtHiyVkr4nNGvOfd1QFOsdpxZqQVcOZlFg7Ujhmsr1PRjzUBxz/DYI TEB1JtyxR6mil5Nyd1Q4y7OIBZF9xeVHFMHYfyqCwQZB3jlhJ5RryY8Hu6DFy62s vnNWH6Mk6k8Zvx6I3hivptHnsdrlcTH0gdal+CirhbkImG82YWUsg1BlWwoVAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUqpjdlwzYb4oQ348/MBGKYETda8owHwYDVR0j BBgwFoAUZelMd4mtp+X1QP2+lYLY6nqkapQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP TkcvMS82NUU5NEM3Nzg5QURBN0U1RjU0MEZEQkU5NTgyRDhFQTdBQTQ2QTk0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzY1RTk0Qzc3ODlBREE3RTVGNTQwRkRCRTk1 ODJEOEVBN0FBNDZBOTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8xLzY1RTk0Qzc3 ODlBREE3RTVGNTQwRkRCRTk1ODJEOEVBN0FBNDZBOTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsbiu3 QcJ+YhMoOjvYt9cnDMFC5SjhudIBoByxmCJCTtvhIsyxWY8wB+F9piethnBoqgr3 9fHw/rmgcPf8VL8XYET/5CW7O02i23fCN7L9+i7xxMTTM/j9nNmQgnGDIMKBHfW8 X96mEpum6QOee+kHwrGEQti6bztkxP2LhDdh3JTS92ck9+s0hO4Ra2LF+2ITWK1V qzMB5mlZBLC5X9/B6nAFTVTRajmDAG6P99fHIxbVs94mnmN4onmxeNs7p60Rl6Kd yEt4+dzfUeurWC3ZklrMqNqMCH2XdwsrBEQFJlThr4PfVeJAwmnk96xRY9kM7F80 G/ad+V0JHNJvT4Nb -----END CERTIFICATE-----Generated at Sat Jun 13 17:03:59 2026 by rpki-client