$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft File: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft (raw, json) Hash identifier: djD623eBtCqlgvRLTKYhziqwIOC8S0JxCWCns6p5d4M= Subject key identifier: F1:D0:BC:18:1B:18:CF:18:75:B3:03:A0:04:2F:34:22:FE:4B:99:DA Authority key identifier: 19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3 Certificate issuer: /CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3 Certificate serial: 4024309E926A3DEF001A69678651A7CAF4D42C02 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft Manifest number: 68 Signing time: Tue 28 Jul 2026 09:33:05 +0000 Manifest this update: Tue 28 Jul 2026 09:28:05 +0000 Manifest next update: Wed 29 Jul 2026 12:24:05 +0000 Files and hashes: 1: 3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa (hash: Q23OYg/snKDMZT/GrhFuy0UWILnudHwqtr4/Nhp9Yqo=) 2: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl (hash: DY0ZTBN2TZBC5Rqy5yKQi1Q70x/JMU4Y2c5/UrfwZRY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:24:30:9e:92:6a:3d:ef:00:1a:69:67:86:51:a7:ca:f4:d4:2c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3 Validity Not Before: Jul 28 09:28:05 2026 GMT Not After : Jul 29 12:24:05 2026 GMT Subject: CN=F1D0BC181B18CF1875B303A0042F3422FE4B99DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b8:6c:74:9e:ba:22:38:77:5a:27:2f:a6:a9: f9:93:aa:8d:69:7b:c0:be:6f:40:92:4d:36:4d:2f: 04:a6:23:f7:c9:6c:c5:26:19:28:0d:3a:2d:8e:50: c7:b2:15:64:5f:15:7b:cd:6c:a7:a9:a3:07:ae:b0: c6:d8:68:91:28:cf:ff:ab:3e:b2:5b:d3:7c:4d:f2: 8c:bf:02:e2:85:73:91:df:97:26:09:37:2c:fe:eb: e0:79:64:87:0e:ad:50:73:8d:75:c1:8c:1e:d4:13: 51:62:85:55:e9:a1:8f:af:d5:7a:88:23:4b:73:cc: 7d:09:ca:5b:5d:fa:35:7f:9f:43:4f:57:0c:b7:1a: e8:e6:6b:80:93:f2:8b:40:79:6c:54:e7:65:bd:c1: 8c:22:94:82:42:89:4c:aa:29:84:2b:61:aa:6a:9c: 67:e0:78:a2:14:8f:ae:d8:a3:4e:85:39:ca:5a:05: 40:bc:af:74:a0:24:0d:cf:50:e4:2f:d2:7d:46:9d: 4d:6f:31:a0:6c:cc:96:24:59:83:aa:38:9c:cd:95: 3a:6b:08:53:4f:ae:c5:84:f2:e2:68:94:85:73:46: 44:98:4d:aa:47:45:dd:07:98:d5:26:13:84:73:a7: 65:96:32:4f:4e:e1:76:a0:71:6e:1e:f9:d3:20:c2: b9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D0:BC:18:1B:18:CF:18:75:B3:03:A0:04:2F:34:22:FE:4B:99:DA X509v3 Authority Key Identifier: keyid:19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:65:7c:4b:b3:86:b5:49:a0:38:44:03:7f:d2:c1:72:b2:58: 07:ef:de:85:59:38:16:52:04:ef:6d:5e:99:1f:ff:5f:89:18: 34:bd:ed:95:e8:0f:ca:f2:35:dd:f2:d0:6d:00:fb:9a:3d:d0: 0c:89:8a:f4:a1:46:ac:66:bb:d2:7f:ae:45:64:01:ad:5b:6b: 74:44:0e:80:0d:61:8a:29:ac:d8:7f:90:2e:63:9c:c4:22:1a: cb:a1:80:43:bc:44:43:12:b3:de:4e:98:e2:24:51:a2:f9:df: 07:32:dc:5a:57:a5:b4:94:7c:e0:b3:cf:41:c7:e6:aa:f6:e7: e5:cd:43:10:eb:0f:22:f5:ce:dd:ac:c6:f7:45:bf:52:5b:0b: 70:b3:e5:7a:2a:7f:f7:ee:5c:ac:1f:da:a0:65:51:29:8c:b5: be:71:02:2f:39:ba:a1:3f:cc:ff:b2:fb:12:01:bf:11:0f:5f: 68:a1:bc:7a:44:dc:e9:ab:06:04:ab:02:ce:54:24:90:5d:39: c9:c7:49:fc:a1:5c:b5:3c:a7:3d:a1:c4:0c:43:80:c5:dd:f9: 51:85:fc:72:05:73:f1:06:91:28:cd:4b:1e:e3:af:60:e2:c0: 50:90:8c:20:b5:cb:f7:19:0d:97:20:f8:84:4b:1e:37:39:92: 89:fe:7a:5a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUQCQwnpJqPe8AGmlnhlGnyvTULAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlDMjRENjRBNTYzN0YxRjY4MzdEMDZCQTc3RjEwMDBG RjlFNTREMzAeFw0yNjA3MjgwOTI4MDVaFw0yNjA3MjkxMjI0MDVaMDMxMTAvBgNV BAMTKEYxRDBCQzE4MUIxOENGMTg3NUIzMDNBMDA0MkYzNDIyRkU0Qjk5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZuGx0nroiOHdaJy+mqfmTqo1p e8C+b0CSTTZNLwSmI/fJbMUmGSgNOi2OUMeyFWRfFXvNbKepoweusMbYaJEoz/+r PrJb03xN8oy/AuKFc5HflyYJNyz+6+B5ZIcOrVBzjXXBjB7UE1FihVXpoY+v1XqI I0tzzH0Jyltd+jV/n0NPVwy3Gujma4CT8otAeWxU52W9wYwilIJCiUyqKYQrYapq nGfgeKIUj67Yo06FOcpaBUC8r3SgJA3PUOQv0n1GnU1vMaBszJYkWYOqOJzNlTpr CFNPrsWE8uJolIVzRkSYTapHRd0HmNUmE4Rzp2WWMk9O4XagcW4e+dMgwrmfAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU8dC8GBsYzxh1swOgBC80Iv5LmdowHwYDVR0j BBgwFoAUGcJNZKVjfx9oN9Brp38QAP+eVNMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRVJBWS8w LzE5QzI0RDY0QTU2MzdGMUY2ODM3RDA2QkE3N0YxMDAwRkY5RTU0RDMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMTlDMjRENjRBNTYzN0YxRjY4MzdEMDZCQTc3RjEw MDBGRjlFNTREMy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0VSQVkvMC8xOUMyNEQ2NEE1NjM3RjFG NjgzN0QwNkJBNzdGMTAwMEZGOUU1NEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGV8S7OGtUmgOEQD f9LBcrJYB+/ehVk4FlIE721emR//X4kYNL3tlegPyvI13fLQbQD7mj3QDImK9KFG rGa70n+uRWQBrVtrdEQOgA1hiims2H+QLmOcxCIay6GAQ7xEQxKz3k6Y4iRRovnf BzLcWleltJR84LPPQcfmqvbn5c1DEOsPIvXO3azG90W/UlsLcLPleip/9+5crB/a oGVRKYy1vnECLzm6oT/M/7L7EgG/EQ9faKG8ekTc6asGBKsCzlQkkF05ycdJ/KFc tTynPaHEDEOAxd35UYX8cgVz8QaRKM1LHuOvYOLAUJCMILXL9xkNlyD4hEseNzmS if56Wg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:09:14 2026 by rpki-client