$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft File: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft (raw, json) Hash identifier: LGgNYkHEFD254qxBUj7m0brmEhutQ/A0bOk9asVCYBM= Subject key identifier: B2:17:5D:A5:BC:1E:47:99:6C:29:D3:6F:AB:F4:1F:60:59:25:D3:2B Authority key identifier: 19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3 Certificate issuer: /CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3 Certificate serial: 5F676B9D32A2B52F97F953861A786F5C3E6832CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft Manifest number: 2D Signing time: Sat 13 Jun 2026 05:39:08 +0000 Manifest this update: Sat 13 Jun 2026 05:34:08 +0000 Manifest next update: Sun 14 Jun 2026 09:28:08 +0000 Files and hashes: 1: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl (hash: 92z4dMt2zSszWXi8rPDy06EnkizeDkF+xPtv2t0pwTk=) 2: 3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa (hash: Q23OYg/snKDMZT/GrhFuy0UWILnudHwqtr4/Nhp9Yqo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:67:6b:9d:32:a2:b5:2f:97:f9:53:86:1a:78:6f:5c:3e:68:32:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3 Validity Not Before: Jun 13 05:34:08 2026 GMT Not After : Jun 14 09:28:08 2026 GMT Subject: CN=B2175DA5BC1E47996C29D36FABF41F605925D32B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f1:1d:bb:7f:23:4e:24:e6:33:71:49:60:f8: e9:f0:5c:31:a0:7d:9e:78:27:79:e2:e9:7f:0f:a7: 64:0e:11:eb:58:2a:ad:a0:18:8f:92:c7:a0:6a:24: 18:dc:e1:e5:5b:5c:7b:f8:23:d8:85:5f:b3:28:ad: b8:1d:b3:b4:63:85:87:d7:c9:36:08:3e:b9:aa:07: eb:3c:8c:30:b9:fe:62:13:0d:f8:21:5a:c3:36:42: 67:17:47:87:00:47:0e:c1:9a:a6:ca:1a:7b:2a:a6: 35:af:c9:b0:8a:02:ef:5e:b2:db:95:2d:69:b1:d7: bc:de:8e:69:e9:1d:20:b7:bf:d7:47:94:d5:b7:71: c3:87:6b:3f:7c:41:95:9b:a0:83:fb:80:8a:27:45: ee:8e:55:f3:ae:43:02:91:34:8a:c6:31:87:df:63: 33:c4:d5:dc:9e:4e:bc:df:bb:a9:94:4f:a7:48:88: 38:f3:de:f1:8f:d0:cf:c3:d9:0b:59:f9:a7:09:14: 4d:f1:8b:df:37:c6:38:92:6b:82:28:53:f7:c7:32: 40:b5:55:cc:96:66:62:4e:91:96:e2:01:61:5a:d6: 82:9e:d6:61:7f:6a:3b:43:c7:a1:0d:9e:64:14:55: 57:6f:05:3f:ea:2d:da:57:36:03:0a:7a:e2:fd:6c: d2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:17:5D:A5:BC:1E:47:99:6C:29:D3:6F:AB:F4:1F:60:59:25:D3:2B X509v3 Authority Key Identifier: keyid:19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:52:9a:32:04:15:be:36:77:4a:19:c1:c7:76:04:09:2c:cf: 94:1e:67:5e:8c:86:b5:df:d7:f9:7c:fc:9f:c3:8f:23:24:53: 1a:87:c7:cc:a3:23:76:2c:1b:2b:89:d1:f4:d1:8c:18:d8:7a: c3:68:6c:3b:e0:9f:7c:b5:8d:9f:ba:19:12:30:af:25:17:c5: 9f:87:c9:c1:ce:15:45:93:81:94:f7:3c:1c:42:20:b0:f3:3b: a7:28:d8:b1:f8:a0:c5:0c:39:be:bf:38:3b:26:f7:b1:30:c9: 0f:e2:2a:21:3b:99:c8:f1:16:e7:1f:5a:0c:3e:3f:40:dc:5d: 87:5a:f1:7b:76:de:94:2e:c9:6a:93:be:de:12:c7:22:b7:47: 37:1b:17:d0:cc:a6:a0:2e:a8:d4:24:01:13:1d:da:4a:27:17: e3:d1:4c:f4:c5:c0:40:c8:d5:6a:70:e8:d8:6c:23:57:b2:a4: 63:65:63:15:1b:39:c6:b2:8a:cb:b3:e6:53:6e:dd:89:57:e4: fe:97:de:99:ac:1b:22:50:04:3c:f9:7c:1a:20:86:57:2f:19: 7c:39:47:18:cd:07:26:ce:b7:aa:38:98:4f:6c:b1:f2:35:f4: c6:75:8e:eb:6a:b9:13:92:3d:72:90:3a:9c:85:f3:19:b3:6b: 93:7e:68:b9 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUX2drnTKitS+X+VOGGnhvXD5oMsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlDMjRENjRBNTYzN0YxRjY4MzdEMDZCQTc3RjEwMDBG RjlFNTREMzAeFw0yNjA2MTMwNTM0MDhaFw0yNjA2MTQwOTI4MDhaMDMxMTAvBgNV BAMTKEIyMTc1REE1QkMxRTQ3OTk2QzI5RDM2RkFCRjQxRjYwNTkyNUQzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY8R27fyNOJOYzcUlg+OnwXDGg fZ54J3ni6X8Pp2QOEetYKq2gGI+Sx6BqJBjc4eVbXHv4I9iFX7Morbgds7RjhYfX yTYIPrmqB+s8jDC5/mITDfghWsM2QmcXR4cARw7BmqbKGnsqpjWvybCKAu9estuV LWmx17zejmnpHSC3v9dHlNW3ccOHaz98QZWboIP7gIonRe6OVfOuQwKRNIrGMYff YzPE1dyeTrzfu6mUT6dIiDjz3vGP0M/D2QtZ+acJFE3xi983xjiSa4IoU/fHMkC1 VcyWZmJOkZbiAWFa1oKe1mF/ajtDx6ENnmQUVVdvBT/qLdpXNgMKeuL9bNJxAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUshddpbweR5lsKdNvq/QfYFkl0yswHwYDVR0j BBgwFoAUGcJNZKVjfx9oN9Brp38QAP+eVNMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRVJBWS8w LzE5QzI0RDY0QTU2MzdGMUY2ODM3RDA2QkE3N0YxMDAwRkY5RTU0RDMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMTlDMjRENjRBNTYzN0YxRjY4MzdEMDZCQTc3RjEw MDBGRjlFNTREMy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0VSQVkvMC8xOUMyNEQ2NEE1NjM3RjFG NjgzN0QwNkJBNzdGMTAwMEZGOUU1NEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFKaMgQVvjZ3ShnB x3YECSzPlB5nXoyGtd/X+Xz8n8OPIyRTGofHzKMjdiwbK4nR9NGMGNh6w2hsO+Cf fLWNn7oZEjCvJRfFn4fJwc4VRZOBlPc8HEIgsPM7pyjYsfigxQw5vr84Oyb3sTDJ D+IqITuZyPEW5x9aDD4/QNxdh1rxe3belC7JapO+3hLHIrdHNxsX0MymoC6o1CQB Ex3aSicX49FM9MXAQMjVanDo2GwjV7KkY2VjFRs5xrKKy7PmU27diVfk/pfemawb IlAEPPl8GiCGVy8ZfDlHGM0HJs63qjiYT2yx8jX0xnWO62q5E5I9cpA6nIXzGbNr k35ouQ== -----END CERTIFICATE-----Generated at Sat Jun 13 09:05:17 2026 by rpki-client