$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft File: 4DC8A0E80696AD1A2419ACE881334BE812506228.mft (raw, json) Hash identifier: llYbN3vn4QRq6XpWq6Xzp8fZAEj94iOLBtXO5T2U1iY= Subject key identifier: 83:4B:65:CA:76:44:64:34:1B:37:5B:A7:4A:1D:62:00:B3:FD:B6:B2 Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 56F85C7CDD4B3DA27A1F4363C9A828A6D42EBD08 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft Manifest number: 05 Signing time: Sat 13 Jun 2026 04:03:50 +0000 Manifest this update: Sat 13 Jun 2026 03:58:50 +0000 Manifest next update: Sun 14 Jun 2026 04:43:50 +0000 Files and hashes: 1: 3136322e342e3233362e302f32332d3233203d3e20313331363330.roa (hash: W1CiJP1fcJGIBc6vJyxp+aVBKQhzLI93m00Pia4UGPk=) 2: 4DC8A0E80696AD1A2419ACE881334BE812506228.crl (hash: lB7++eK5/46t6okqhwTWEVAs7J4lm/qUMJmJazEZaXI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 22:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f8:5c:7c:dd:4b:3d:a2:7a:1f:43:63:c9:a8:28:a6:d4:2e:bd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Jun 13 03:58:50 2026 GMT Not After : Jun 14 04:43:50 2026 GMT Subject: CN=834B65CA764464341B375BA74A1D6200B3FDB6B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:a5:10:de:eb:6c:a0:83:ea:c8:5f:44:ba: 61:64:83:1d:fa:51:76:0e:df:30:a1:af:4f:c4:af: 6e:8a:34:9e:5b:47:fc:37:12:98:ab:15:c3:06:e8: 22:56:51:7d:10:a6:ff:31:9a:ad:e5:3b:fd:3e:1a: 61:45:22:2b:4f:71:b6:29:d0:04:57:77:c8:db:d4: 21:89:60:5f:b6:05:78:28:e8:28:08:3d:5a:92:f4: 4a:f2:1d:00:53:08:4f:72:ea:95:e2:2a:c3:05:8c: 7c:b8:45:20:db:e2:09:1f:ad:0d:67:4d:49:17:5e: c8:f9:68:31:03:bb:16:52:10:f1:16:99:69:93:7b: 2f:fd:16:05:b7:7e:cf:25:63:ab:26:8d:76:72:00: 94:e0:8c:60:93:22:88:25:6f:3a:78:b6:15:55:d6: de:ee:15:66:b7:63:ce:71:65:3d:c2:51:2a:7d:a3: 82:e7:b9:28:2a:97:12:2c:99:a9:5f:01:14:de:b4: d3:24:24:22:6b:9f:33:a9:76:e2:4c:3a:e8:d7:41: 7d:5b:be:4a:10:63:1e:f3:44:2f:cc:a6:ad:96:4a: c6:ad:0b:12:2b:a5:03:31:e1:a9:19:c7:0a:cf:0a: 75:fb:b0:66:72:49:e4:bb:39:cb:d1:87:fa:08:54: f8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4B:65:CA:76:44:64:34:1B:37:5B:A7:4A:1D:62:00:B3:FD:B6:B2 X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a0:07:ff:89:12:36:9b:a1:b0:62:fc:08:80:36:3c:3d:e7: f6:23:df:a6:3e:69:8d:ff:22:14:92:5b:ad:6f:ed:37:b7:a5: 41:09:d8:eb:ca:b0:07:67:6a:0d:aa:65:ac:5b:75:1d:83:70: 6a:22:ab:2f:89:1a:7c:0b:ad:8d:8c:03:e5:68:6e:e6:40:55: 13:30:bf:e7:cd:34:30:51:41:b8:bc:36:aa:de:23:c1:bd:d9: f6:d9:a5:fc:0e:f0:8d:8a:76:1c:c9:e0:d5:5d:37:19:cb:7c: 02:e0:fd:02:07:f5:42:26:85:5c:83:28:23:4d:75:e9:8d:6e: d9:ff:c8:9c:ab:91:1c:15:6a:2d:f4:20:cc:0f:11:04:84:cf: 69:b5:1d:da:b3:e2:2e:0b:e4:96:65:8f:ed:ee:75:00:fa:85: d0:4b:11:f4:ad:f6:c0:eb:39:d5:e6:53:54:48:a9:0f:cf:f1: 28:2d:ef:7d:00:b6:51:0a:a6:93:b7:dd:d6:8d:83:fd:7b:70: cb:6b:8f:e9:8e:99:b7:0f:f0:af:f6:31:d6:05:3b:dd:9e:43: 38:20:56:0f:6f:c1:97:da:54:87:a1:4e:bb:2c:00:40:85:39: 27:f5:9c:e4:fe:b5:de:2b:95:df:9e:77:7a:de:42:ba:d3:38: 15:a5:69:53 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUVvhcfN1LPaJ6H0NjyagoptQuvQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA2MTMwMzU4NTBaFw0yNjA2MTQwNDQzNTBaMDMxMTAvBgNV BAMTKDgzNEI2NUNBNzY0NDY0MzQxQjM3NUJBNzRBMUQ2MjAwQjNGREI2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6P6UQ3utsoIPqyF9EumFkgx36 UXYO3zChr0/Er26KNJ5bR/w3EpirFcMG6CJWUX0Qpv8xmq3lO/0+GmFFIitPcbYp 0ARXd8jb1CGJYF+2BXgo6CgIPVqS9EryHQBTCE9y6pXiKsMFjHy4RSDb4gkfrQ1n TUkXXsj5aDEDuxZSEPEWmWmTey/9FgW3fs8lY6smjXZyAJTgjGCTIoglbzp4thVV 1t7uFWa3Y85xZT3CUSp9o4LnuSgqlxIsmalfARTetNMkJCJrnzOpduJMOujXQX1b vkoQYx7zRC/Mpq2WSsatCxIrpQMx4akZxwrPCnX7sGZySeS7OcvRh/oIVPijAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUg0tlynZEZDQbN1unSh1iALP9trIwHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvNERDOEEwRTgwNjk2 QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKqgB/+JEjab obBi/AiANjw95/Yj36Y+aY3/IhSSW61v7Te3pUEJ2OvKsAdnag2qZaxbdR2DcGoi qy+JGnwLrY2MA+VobuZAVRMwv+fNNDBRQbi8NqreI8G92fbZpfwO8I2KdhzJ4NVd NxnLfALg/QIH9UImhVyDKCNNdemNbtn/yJyrkRwVai30IMwPEQSEz2m1Hdqz4i4L 5JZlj+3udQD6hdBLEfSt9sDrOdXmU1RIqQ/P8Sgt730AtlEKppO33daNg/17cMtr j+mOmbcP8K/2MdYFO92eQzggVg9vwZfaVIehTrssAECFOSf1nOT+td4rld+ed3re QrrTOBWlaVM= -----END CERTIFICATE-----Generated at Sat Jun 13 13:39:25 2026 by rpki-client