$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft File: A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft (raw, json) Hash identifier: pl7OTh21PMx8NDX44bhjvGGHPHnRtkpPiUiYwm1+aXg= Subject key identifier: B8:9F:D9:D0:F1:1B:E0:B0:15:84:27:53:19:C8:79:F9:44:47:15:0F Authority key identifier: A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB Certificate issuer: /CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB Certificate serial: 141DBB0D5B18528B0AA3179823DC2411C8D3A520 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft Manifest number: 69 Signing time: Tue 28 Jul 2026 23:55:15 +0000 Manifest this update: Tue 28 Jul 2026 23:50:15 +0000 Manifest next update: Thu 30 Jul 2026 03:33:15 +0000 Files and hashes: 1: A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl (hash: 4d65tJOygzi3P57FXI43c9ks9KwOv78OCgoOS+oAWBE=) 2: 3130332e3131382e3134382e302f32332d3332203d3e20313331313439.roa (hash: 37E46pfPxEq9A4RxL1D37D3fAAtA0Gnx6vMhsNaTo4A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1d:bb:0d:5b:18:52:8b:0a:a3:17:98:23:dc:24:11:c8:d3:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB Validity Not Before: Jul 28 23:50:15 2026 GMT Not After : Jul 30 03:33:15 2026 GMT Subject: CN=B89FD9D0F11BE0B01584275319C879F94447150F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:1f:a9:38:f3:32:5d:dc:0d:d4:9e:94:be: 43:5a:a6:02:77:68:8d:47:25:f5:81:29:9f:b3:72: 48:a7:f6:4b:a7:bb:ed:35:9c:7b:e6:8a:65:2c:16: 7c:8f:d5:af:ee:5e:04:e6:60:96:30:04:64:bb:e7: 6e:52:a8:d6:e5:e7:7b:6c:06:4c:5e:b1:03:da:df: f3:92:cf:5a:66:1f:8c:ea:1c:37:c8:5c:a3:d0:f0: e6:27:54:10:e4:38:6f:33:42:ec:a1:98:75:5c:e2: 3f:72:83:d0:e9:88:d0:18:6a:fa:50:ef:54:7b:ca: 4b:34:d8:a2:f5:cd:bc:d3:64:e0:ab:34:00:5b:f3: 4b:9c:4c:04:a8:f2:62:cc:ee:ae:75:9d:1b:52:42: 17:36:1a:22:0e:ae:3d:34:46:f7:19:d9:75:a9:d1: e3:d8:5c:5f:83:73:b5:c7:4a:b7:16:20:e1:5f:0f: 53:54:11:b6:02:da:42:5d:d3:e5:3f:64:84:91:83: 56:81:b2:b5:f6:ce:0a:fa:3b:f2:7f:75:b0:8c:d7: 9d:c3:cd:25:2f:fd:ad:89:a0:3f:22:57:8c:48:f3: 6e:7e:da:58:55:bb:04:6f:08:a4:9f:26:76:19:6b: ce:bd:f5:8e:ee:03:2e:dc:51:60:8d:8e:c5:cc:4e: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9F:D9:D0:F1:1B:E0:B0:15:84:27:53:19:C8:79:F9:44:47:15:0F X509v3 Authority Key Identifier: keyid:A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:82:73:11:9f:85:4d:52:ea:d8:57:52:58:8b:d1:f3:e8:ce: 8d:66:36:5c:11:fb:7b:94:ef:a2:e9:0e:13:a5:a4:19:42:82: d8:60:e0:ec:a3:52:78:bb:57:f3:0f:fe:1e:72:52:3e:f4:c1: 87:6e:87:74:f1:4d:89:7e:ac:0b:be:f2:d5:91:d4:b8:2f:29: 40:44:8f:7a:f5:fa:ec:f9:a9:4a:85:a3:e4:76:d9:30:ad:d9: 99:3d:d1:3e:8d:e9:08:17:39:9b:ec:f3:9b:3b:98:f4:f3:73: b5:e7:d0:99:1c:0d:22:2b:18:00:fc:30:37:2f:f0:c9:55:fe: f4:67:1b:01:c7:d5:25:e0:f4:6e:89:58:3a:9f:73:eb:a9:7a: 2b:8a:94:e9:c7:c6:0d:1d:c4:72:9f:da:a5:df:f4:e4:9b:a9: e5:8d:ec:e9:81:37:68:dc:4c:ea:e0:4b:1e:0c:ee:f1:c3:89: f6:e2:c4:79:c1:7a:8d:1b:41:69:04:ec:4e:2d:a3:35:31:af: e8:8d:10:45:72:1a:ac:09:74:6b:1d:b2:a8:04:62:1d:e9:98: d4:6f:91:90:1f:ed:36:6f:d0:ea:05:3d:ac:61:b1:35:93:b3: 7d:df:46:73:32:fd:55:02:d9:64:22:e7:4d:8c:eb:9f:9e:3f: 9f:1d:b6:7e -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUFB27DVsYUosKoxeYI9wkEcjTpSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA2N0E5NUNCNzg4MjkzOEJBNUVFMEJGOUU0N0MyRTAz MEVERjZGQjAeFw0yNjA3MjgyMzUwMTVaFw0yNjA3MzAwMzMzMTVaMDMxMTAvBgNV BAMTKEI4OUZEOUQwRjExQkUwQjAxNTg0Mjc1MzE5Qzg3OUY5NDQ0NzE1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hh+pOPMyXdwN1J6UvkNapgJ3 aI1HJfWBKZ+zckin9kunu+01nHvmimUsFnyP1a/uXgTmYJYwBGS7525SqNbl53ts BkxesQPa3/OSz1pmH4zqHDfIXKPQ8OYnVBDkOG8zQuyhmHVc4j9yg9DpiNAYavpQ 71R7yks02KL1zbzTZOCrNABb80ucTASo8mLM7q51nRtSQhc2GiIOrj00RvcZ2XWp 0ePYXF+Dc7XHSrcWIOFfD1NUEbYC2kJd0+U/ZISRg1aBsrX2zgr6O/J/dbCM153D zSUv/a2JoD8iV4xI825+2lhVuwRvCKSfJnYZa8699Y7uAy7cUWCNjsXMTjQnAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUuJ/Z0PEb4LAVhCdTGch5+URHFQ8wHwYDVR0j BBgwFoAUoGepXLeIKTi6XuC/nkfC4DDt9vswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XTldJ Ti8wL0EwNjdBOTVDQjc4ODI5MzhCQTVFRTBCRjlFNDdDMkUwMzBFREY2RkIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQTA2N0E5NUNCNzg4MjkzOEJBNUVFMEJGOUU0 N0MyRTAzMEVERjZGQi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPV05XSU4vMC9BMDY3QTk1Q0I3 ODgyOTM4QkE1RUUwQkY5RTQ3QzJFMDMwRURGNkZCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoJzEZ+F TVLq2FdSWIvR8+jOjWY2XBH7e5TvoukOE6WkGUKC2GDg7KNSeLtX8w/+HnJSPvTB h26HdPFNiX6sC77y1ZHUuC8pQESPevX67PmpSoWj5HbZMK3ZmT3RPo3pCBc5m+zz mzuY9PNztefQmRwNIisYAPwwNy/wyVX+9GcbAcfVJeD0bolYOp9z66l6K4qU6cfG DR3Ecp/apd/05Jup5Y3s6YE3aNxM6uBLHgzu8cOJ9uLEecF6jRtBaQTsTi2jNTGv 6I0QRXIarAl0ax2yqARiHemY1G+RkB/tNm/Q6gU9rGGxNZOzfd9GczL9VQLZZCLn TYzrn54/nx22fg== -----END CERTIFICATE-----Generated at Wed Jul 29 14:07:54 2026 by rpki-client