$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft File: D31DE8192962A403BB6809455D9C0776F79CC527.mft (raw, json) Hash identifier: mFA5kuKNgZafgtEEhTpHbwWu+Giz8Aw6RAS4oE7QDbA= Subject key identifier: BD:B1:86:10:EA:EA:FF:38:5C:6F:64:30:2E:F1:EF:E0:DD:9F:55:FB Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527 Certificate serial: 4007570683ED34C6EC597C0FF8FD9FFB678E381E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft Manifest number: 70 Signing time: Tue 28 Jul 2026 04:12:29 +0000 Manifest this update: Tue 28 Jul 2026 04:07:29 +0000 Manifest next update: Wed 29 Jul 2026 06:32:29 +0000 Files and hashes: 1: D31DE8192962A403BB6809455D9C0776F79CC527.crl (hash: eAbFzxdPXJK68zsL9yDb9EUu/PecPKKuS25OVybnUgA=) 2: 36312e35362e31362e302f32302d3234203d3e203138343131.roa (hash: OaBE8mWI96DAhvnsCUNb1Lo3ZA5eC1WiiVCLBOSaZW4=) 3: 36312e35362e31362e302f32302d3230203d3e203138343131.roa (hash: cpOU01Iw58/YmjLPrJqeRjungi3bbe0B4tFLVOzxjxc=) 4: 36312e35362e32352e302f32342d3234203d3e203138343131.roa (hash: qLfcOZVogzNc0fPW8DS0BFg+aXm72rn141irJHfF/2A=) 5: 3131392e33302e31362e302f32302d3234203d3e203138343131.roa (hash: b/aL5o5ZJ2+jJ6WA1q4dCKtGxzeUgsNC1ybEW3+mJZY=) 6: 36312e35362e32362e302f32342d3234203d3e203138343131.roa (hash: nzkDFeWq9DKB8SnYVh/zKHjUR7e4Y9fE95qdnDZlMiI=) 7: 36312e35362e31382e302f32342d3234203d3e203138343131.roa (hash: gjwd7BV9O1873cFPhEXU/7D/wbFE9dSEUv4zzhFHYw8=) 8: 36312e35362e32342e302f32342d3234203d3e203138343131.roa (hash: 4W+qJBNLOJOWIRvtB6qDddjGArtbipAJUnwCauAbtiw=) 9: 3131392e33302e31362e302f32302d3230203d3e203138343131.roa (hash: VDIgNrS0Bj4C/eZLO2BtqOoH9/X324CutCA0RmZUaVs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 06:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:07:57:06:83:ed:34:c6:ec:59:7c:0f:f8:fd:9f:fb:67:8e:38:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527 Validity Not Before: Jul 28 04:07:29 2026 GMT Not After : Jul 29 06:32:29 2026 GMT Subject: CN=BDB18610EAEAFF385C6F64302EF1EFE0DD9F55FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:6e:e5:9a:91:25:ae:e4:8f:54:7b:86:31: 4e:7c:18:3d:47:38:98:b6:df:30:f2:27:52:5e:a7: 63:98:5f:09:36:21:76:0f:81:7e:d7:de:fb:8b:ec: 4a:b2:91:74:06:ef:ef:56:24:91:0c:38:ef:99:72: 81:d2:0d:83:7c:7a:71:08:e5:d7:36:99:2b:f7:10: f3:5b:1b:75:7f:33:a6:8b:ec:13:a8:fb:3b:d9:6f: 22:c7:fc:72:3e:12:ed:43:61:fd:e1:e0:d7:80:3c: 40:3e:fc:18:b7:36:69:8f:d2:a5:48:8b:66:a4:b4: 9a:11:7f:55:26:d2:c2:8b:2b:b3:f1:3b:b7:79:ed: 2e:87:6f:23:64:80:64:0b:5d:84:06:ed:d1:a8:d5: d2:56:21:e2:0f:3b:9b:b7:d4:e8:01:1c:10:2b:ef: 74:d9:ba:de:d0:bc:8e:36:6a:b4:61:7a:6b:4e:1f: d7:ef:e7:16:02:7b:08:22:ee:97:03:46:2e:e2:dc: 17:59:4d:07:2a:f8:34:10:c6:cc:3c:dc:83:3f:ff: bd:ea:75:f4:bb:08:6c:b8:73:8d:27:3a:ba:2d:98: 5c:51:fd:38:7d:ca:b0:06:a8:49:a1:0a:50:70:69: 76:13:83:15:21:49:c4:b0:73:b5:7d:84:d5:10:83: da:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B1:86:10:EA:EA:FF:38:5C:6F:64:30:2E:F1:EF:E0:DD:9F:55:FB X509v3 Authority Key Identifier: keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:bd:52:f4:78:e4:e6:27:d2:97:ce:c8:72:c5:07:91:54:7a: 7b:0d:a8:cb:65:d4:fb:92:3d:a3:32:7c:19:6c:78:3e:5b:c7: 17:6b:d1:5e:68:b3:de:61:17:ab:76:f3:3f:14:48:b6:47:bf: 3e:76:8f:83:e0:29:04:bb:13:9e:78:c6:53:8f:d3:d5:41:2f: ff:8e:42:0b:93:06:e1:4c:fd:ad:e1:69:e9:bb:f1:75:5a:3f: 1a:72:5c:c0:a7:ec:2f:7c:0a:c8:c3:c6:79:67:77:91:a2:a0: 7e:dc:3b:5a:5f:b8:bc:e1:ad:76:d5:aa:ff:51:28:cd:67:54: 77:c4:44:c5:f8:31:98:d2:1c:04:17:62:da:ec:5f:9c:a0:db: 76:80:be:10:1a:f8:0d:a7:41:37:c0:b6:b6:ac:ec:f6:4e:d8: cf:64:c7:5d:b9:7f:06:f5:14:9a:d8:05:a0:d1:b4:aa:ff:97: a3:53:78:30:a2:a1:4d:cf:9b:69:e4:b3:25:64:ad:0c:25:f0: f1:50:0d:78:1d:58:b7:6f:cd:31:b2:b1:4b:02:bd:d5:95:b9: 93:11:4e:28:b9:a4:dd:81:11:9f:a8:a9:6a:3b:6b:e7:c1:df: b9:7f:a9:fd:87:ba:1d:cc:8f:97:4d:d0:ce:b9:bf:6b:62:5c: c6:23:1c:27 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUQAdXBoPtNMbsWXwP+P2f+2eOOB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxREU4MTkyOTYyQTQwM0JCNjgwOTQ1NUQ5QzA3NzZG NzlDQzUyNzAeFw0yNjA3MjgwNDA3MjlaFw0yNjA3MjkwNjMyMjlaMDMxMTAvBgNV BAMTKEJEQjE4NjEwRUFFQUZGMzg1QzZGNjQzMDJFRjFFRkUwREQ5RjU1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt227lmpElruSPVHuGMU58GD1H OJi23zDyJ1Jep2OYXwk2IXYPgX7X3vuL7EqykXQG7+9WJJEMOO+ZcoHSDYN8enEI 5dc2mSv3EPNbG3V/M6aL7BOo+zvZbyLH/HI+Eu1DYf3h4NeAPEA+/Bi3NmmP0qVI i2aktJoRf1Um0sKLK7PxO7d57S6HbyNkgGQLXYQG7dGo1dJWIeIPO5u31OgBHBAr 73TZut7QvI42arRhemtOH9fv5xYCewgi7pcDRi7i3BdZTQcq+DQQxsw83IM//73q dfS7CGy4c40nOrotmFxR/Th9yrAGqEmhClBwaXYTgxUhScSwc7V9hNUQg9qVAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUvbGGEOrq/zhcb2QwLvHv4N2fVfswHwYDVR0j BBgwFoAU0x3oGSlipAO7aAlFXZwHdvecxScwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRURUTlMv MC9EMzFERTgxOTI5NjJBNDAzQkI2ODA5NDU1RDlDMDc3NkY3OUNDNTI3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0QzMURFODE5Mjk2MkE0MDNCQjY4MDk0NTVEOUMw Nzc2Rjc5Q0M1MjcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FRFROUy8wL0QzMURFODE5Mjk2MkE0 MDNCQjY4MDk0NTVEOUMwNzc2Rjc5Q0M1MjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDHvVL0eOTmJ9KX zshyxQeRVHp7DajLZdT7kj2jMnwZbHg+W8cXa9FeaLPeYRerdvM/FEi2R78+do+D 4CkEuxOeeMZTj9PVQS//jkILkwbhTP2t4Wnpu/F1Wj8aclzAp+wvfArIw8Z5Z3eR oqB+3DtaX7i84a121ar/USjNZ1R3xETF+DGY0hwEF2La7F+coNt2gL4QGvgNp0E3 wLa2rOz2TtjPZMdduX8G9RSa2AWg0bSq/5ejU3gwoqFNz5tp5LMlZK0MJfDxUA14 HVi3b80xsrFLAr3VlbmTEU4ouaTdgRGfqKlqO2vnwd+5f6n9h7odzI+XTdDOub9r YlzGIxwn -----END CERTIFICATE-----Generated at Tue Jul 28 20:55:21 2026 by rpki-client