$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft File: 4DC8A0E80696AD1A2419ACE881334BE812506228.mft (raw, json) Hash identifier: GNsq86uJ41mLttEyZMwOPUpXZAgrb07urVr+PV8tTjY= Subject key identifier: 20:E5:B4:42:C6:AE:13:7E:55:9B:07:C1:95:BC:4E:10:04:09:29:E6 Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 45B5D3B00CEA7220D7D57196B10EBAC8FE288C90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft Manifest number: 47 Signing time: Tue 28 Jul 2026 10:53:14 +0000 Manifest this update: Tue 28 Jul 2026 10:48:14 +0000 Manifest next update: Wed 29 Jul 2026 14:31:14 +0000 Files and hashes: 1: 3136322e342e3233372e302f32342d3234203d3e20323136313338.roa (hash: iHPBbo6GY/OiVgx3tWQE5WWeIebeHvBdmG8NcpKpNvA=) 2: 3136322e342e3233362e302f32342d3234203d3e20323032373336.roa (hash: dfD2OtCiIrSPgIlzeqY7nYIoRL0d0Rm5WuZ+VoPuEIc=) 3: 3136322e342e3233362e302f32342d3234203d3e20323136313338.roa (hash: KUa2XsqZOPgJ781I73XluMs/ebzGtEQhMS4Dy5L8rXs=) 4: 3136322e342e3233372e302f32342d3234203d3e20313937353337.roa (hash: 1bHqJJ3DE9NMijQ59MuD8OFFyw3UfsZ36yCMVQaeUME=) 5: 3136322e342e3233372e302f32342d3234203d3e20323032373336.roa (hash: w52thh8Ebtpos+XU7qjpIWopgPCDyo6UfDelxnyPqdM=) 6: 4DC8A0E80696AD1A2419ACE881334BE812506228.crl (hash: i7zC6pJjZVektV3oYar2lOd1tF9Mcs0pJnYyQrL3z30=) 7: 3136322e342e3233362e302f32342d3234203d3e20313937353337.roa (hash: +tTGktskMMOWc8Ety/WMBt1UkK/mDxd3gLrUS6bHiGw=) 8: 3136322e342e3233362e302f32332d3233203d3e20313331363330.roa (hash: W1CiJP1fcJGIBc6vJyxp+aVBKQhzLI93m00Pia4UGPk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b5:d3:b0:0c:ea:72:20:d7:d5:71:96:b1:0e:ba:c8:fe:28:8c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Jul 28 10:48:14 2026 GMT Not After : Jul 29 14:31:14 2026 GMT Subject: CN=20E5B442C6AE137E559B07C195BC4E10040929E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:55:61:17:5c:fd:34:ec:4a:07:20:9c:a5: a4:0d:44:c6:b7:37:b9:65:08:7a:28:af:26:4c:02: 1c:21:e0:74:6d:1a:96:6f:57:3e:d2:e6:cb:08:72: eb:f9:c3:69:d7:2c:e8:72:3f:a4:4d:9a:38:da:6d: a9:ee:09:ac:c9:85:df:4b:9c:4e:b7:a5:1a:b0:b3: ae:d9:3b:99:e1:0c:e2:11:fb:37:7c:48:d3:d1:d2: 4a:39:2d:b2:0a:4d:ea:ff:6a:74:42:03:2d:07:7e: db:80:2b:c8:3a:12:6e:9e:05:1b:e5:81:79:ce:77: b1:ba:c6:e9:ed:7f:8a:22:ce:16:d7:c0:6d:0e:2d: 76:e9:ad:67:51:88:a1:95:77:b3:30:5d:bb:86:54: 21:e1:9b:f0:4d:19:5d:df:a8:d3:f9:1b:78:98:55: 45:f0:75:ea:01:56:b2:d5:e0:39:fb:16:ff:85:45: 64:b8:b4:49:58:aa:04:24:6f:07:35:7d:22:1c:ea: ad:00:ba:18:04:89:ac:b3:0e:1b:89:2c:08:3c:71: 29:20:62:14:a4:3d:46:d8:4d:c9:3f:f3:bb:de:23: 0e:a6:ca:7f:50:1a:d6:17:43:91:1d:9a:aa:b9:e0: a3:24:d8:69:a7:c6:95:cf:00:00:5f:c5:01:9b:b7: 25:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E5:B4:42:C6:AE:13:7E:55:9B:07:C1:95:BC:4E:10:04:09:29:E6 X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5f:74:06:0b:50:f4:a3:38:91:d5:df:89:3c:5f:8b:97:21: b1:f1:d8:ee:6d:e3:63:83:61:83:7f:19:08:8f:84:e4:e3:26: 1a:6f:3e:04:7e:af:83:33:45:01:39:3b:a4:b2:2d:b0:36:23: e2:71:04:4b:3a:aa:9c:64:b6:bc:b4:e7:76:3f:fa:d6:c8:86: 22:70:77:b4:ea:84:81:8c:9c:64:f7:16:cb:0c:df:b1:c1:e0: f1:5b:24:9a:1a:c7:92:ac:9d:c5:f4:b9:c0:f1:6a:df:4e:47: 56:68:63:fd:2e:b2:0b:41:cb:4a:34:34:e9:81:0b:d1:df:56: 48:17:28:19:34:73:73:a3:3a:ab:58:1c:61:ee:0c:31:e7:63: 1f:22:6a:ac:4e:64:8d:58:99:47:b1:21:d7:b9:77:a0:dd:53: b7:91:ff:01:69:09:a4:5f:a8:c7:42:f8:b2:71:52:73:b6:1c: 4c:ff:fe:c5:1e:fb:ab:d1:12:c8:1d:79:91:a9:9d:91:f7:e9: 12:b4:7e:6b:08:64:44:12:3e:06:0a:d0:5f:f7:04:da:a4:09: 5f:4f:bd:dc:e2:ef:a2:4b:3a:84:42:78:8e:c8:14:ef:e7:2c: 79:20:4f:2d:dc:05:3a:70:4c:64:6e:a5:94:0f:53:61:b5:e5: 2c:a5:86:b6 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIURbXTsAzqciDX1XGWsQ66yP4ojJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA3MjgxMDQ4MTRaFw0yNjA3MjkxNDMxMTRaMDMxMTAvBgNV BAMTKDIwRTVCNDQyQzZBRTEzN0U1NTlCMDdDMTk1QkM0RTEwMDQwOTI5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1J1VhF1z9NOxKByCcpaQNRMa3 N7llCHooryZMAhwh4HRtGpZvVz7S5ssIcuv5w2nXLOhyP6RNmjjabanuCazJhd9L nE63pRqws67ZO5nhDOIR+zd8SNPR0ko5LbIKTer/anRCAy0HftuAK8g6Em6eBRvl gXnOd7G6xuntf4oizhbXwG0OLXbprWdRiKGVd7MwXbuGVCHhm/BNGV3fqNP5G3iY VUXwdeoBVrLV4Dn7Fv+FRWS4tElYqgQkbwc1fSIc6q0AuhgEiayzDhuJLAg8cSkg YhSkPUbYTck/87veIw6myn9QGtYXQ5Edmqq54KMk2GmnxpXPAABfxQGbtyWRAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUIOW0QsauE35VmwfBlbxOEAQJKeYwHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvNERDOEEwRTgwNjk2 QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI9fdAYLUPSj OJHV34k8X4uXIbHx2O5t42ODYYN/GQiPhOTjJhpvPgR+r4MzRQE5O6SyLbA2I+Jx BEs6qpxktry053Y/+tbIhiJwd7TqhIGMnGT3FssM37HB4PFbJJoax5KsncX0ucDx at9OR1ZoY/0usgtBy0o0NOmBC9HfVkgXKBk0c3OjOqtYHGHuDDHnYx8iaqxOZI1Y mUexIde5d6DdU7eR/wFpCaRfqMdC+LJxUnO2HEz//sUe+6vREsgdeZGpnZH36RK0 fmsIZEQSPgYK0F/3BNqkCV9Pvdzi76JLOoRCeI7IFO/nLHkgTy3cBTpwTGRupZQP U2G15SylhrY= -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:04 2026 by rpki-client