$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft File: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft (raw, json) Hash identifier: 9elDVxo9Xu+9I/kmxfMfCKI1m+q/B7o3O4EInZFSE0o= Subject key identifier: 3B:40:9C:4C:36:4C:36:CA:28:2C:58:8E:2E:28:F8:B7:22:40:A1:BB Authority key identifier: E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5 Certificate issuer: /CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5 Certificate serial: 3A29D737E743881CD2C7E45FA63E52028C80539D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft Manifest number: 6E Signing time: Tue 28 Jul 2026 17:14:27 +0000 Manifest this update: Tue 28 Jul 2026 17:09:27 +0000 Manifest next update: Wed 29 Jul 2026 20:49:27 +0000 Files and hashes: 1: 3130332e3136302e3138302e302f32332d3234203d3e203338313336.roa (hash: vXSGvfe4/SHzbgc1FGIm8W7fF4FtlTo17+zWJlbEFVI=) 2: 323430363a656534303a3a2f33322d3438203d3e203138303431.roa (hash: ENdF+FZ/wshSwMngi/LeNYAxqnXtTR+JIbUWvzMtjvg=) 3: 3130332e3136302e3138302e302f32332d3234203d3e20393833.roa (hash: bSmO+jTWr7YOoJ4NGhuYgKT8sLNYWbbxkJfWN+8zotE=) 4: 3130332e3136302e3138302e302f32332d3234203d3e203536383530.roa (hash: RzAPn5btTcxQ4JmMexqs2Z3tgOn6EwRXUMKi5on2EDg=) 5: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl (hash: UPohEFesrjV8/F+7ukwnD8UV3o5cmltHDZrzeaF6NPU=) 6: 3130332e3136302e3138302e302f32332d3234203d3e203138303431.roa (hash: 18NWi1veGokF/mTHx158Mqd+r/PzLz4vX21G5OQonx8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:29:d7:37:e7:43:88:1c:d2:c7:e4:5f:a6:3e:52:02:8c:80:53:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5 Validity Not Before: Jul 28 17:09:27 2026 GMT Not After : Jul 29 20:49:27 2026 GMT Subject: CN=3B409C4C364C36CA282C588E2E28F8B72240A1BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:6d:54:e6:68:fc:f5:99:88:72:fa:6a:22: 7b:61:27:32:4a:f1:e2:6e:bb:e6:90:c0:5a:7c:48: e5:0e:d2:fe:22:cc:8a:7d:48:2c:34:05:b5:ad:8e: 65:c8:32:ee:b1:f1:3b:d6:04:9c:67:6e:90:1d:1a: 97:c9:f6:f2:9e:24:53:01:d0:f2:eb:a7:59:c2:0f: b7:e4:42:08:15:f3:99:d0:49:b6:15:ec:82:7b:ac: ba:66:51:96:f3:02:78:84:77:8c:a8:ab:46:a2:44: 10:01:1e:4a:76:77:96:85:60:b1:9d:43:a7:d8:d9: 4b:77:51:d2:b2:24:54:c6:ab:8a:ab:3e:f0:00:5e: 54:01:0f:c7:56:60:d0:7f:1d:2f:7c:f5:5b:23:8f: b5:ce:13:c9:e9:10:6c:59:e0:25:fa:1d:a9:6e:7e: a5:68:86:30:5e:58:52:a1:d4:39:45:17:01:ef:3a: af:f4:56:a1:a6:81:7d:f8:48:7d:a3:55:be:ee:a5: c0:24:7e:5e:4b:44:38:e5:f7:b9:df:76:84:a8:80: 38:1b:b7:18:07:d9:6e:28:4d:c9:7a:b0:2b:3e:71: 52:cf:e6:eb:dd:a7:ba:51:8d:63:12:8f:22:39:96: d6:29:a9:d4:ca:b1:4a:43:72:83:cd:13:a0:90:5d: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:40:9C:4C:36:4C:36:CA:28:2C:58:8E:2E:28:F8:B7:22:40:A1:BB X509v3 Authority Key Identifier: keyid:E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:59:35:07:1e:e1:59:8e:84:a3:6c:76:83:c5:3c:22:f3:28: 52:1a:99:0c:f4:13:1b:45:31:c4:b1:ef:be:25:4e:65:5f:04: 62:21:1a:82:9d:91:fa:23:24:e8:f0:2e:45:ff:01:72:1b:d5: 09:4c:97:dc:b2:a2:eb:d4:f5:9c:cb:e7:af:79:a4:dd:9f:d4: 24:39:6e:3c:ec:c2:93:a1:e6:4f:e3:0a:27:a1:99:29:5a:cb: 86:ff:ed:80:c2:7e:d1:97:0e:94:21:62:da:0f:0c:6a:aa:b4: 86:36:91:51:a0:ac:ff:a3:e2:5c:e7:84:ad:30:1b:69:b0:ed: 76:9f:58:c4:c3:fb:0d:ac:e6:9f:1c:88:04:0e:40:e4:21:a2: 6a:10:67:db:3a:76:c2:21:ae:59:b8:c9:39:9d:40:c8:90:ff: 52:04:a9:47:4c:cf:5d:8c:bc:f6:3a:ed:37:eb:bd:db:bb:6d: 6b:b8:72:1e:b4:47:81:f2:61:d6:34:a2:ce:75:9f:5b:d7:44: ab:5b:bc:ea:3b:c6:49:b0:81:c0:05:ce:c8:35:68:f9:89:70: e4:34:50:df:eb:07:04:a7:7e:b0:27:62:c1:11:65:35:9e:fd: bf:71:91:25:bf:e8:b7:5a:98:63:a6:de:12:9d:23:d3:e5:1d: 6f:74:31:ef -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUOinXN+dDiBzSx+Rfpj5SAoyAU50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY1Rjg3QzM0MTVCNzRERkJCQ0JFMDkwOUEzMjA4MzVF RTg4RTZFNTAeFw0yNjA3MjgxNzA5MjdaFw0yNjA3MjkyMDQ5MjdaMDMxMTAvBgNV BAMTKDNCNDA5QzRDMzY0QzM2Q0EyODJDNTg4RTJFMjhGOEI3MjI0MEExQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYU21U5mj89ZmIcvpqInthJzJK 8eJuu+aQwFp8SOUO0v4izIp9SCw0BbWtjmXIMu6x8TvWBJxnbpAdGpfJ9vKeJFMB 0PLrp1nCD7fkQggV85nQSbYV7IJ7rLpmUZbzAniEd4yoq0aiRBABHkp2d5aFYLGd Q6fY2Ut3UdKyJFTGq4qrPvAAXlQBD8dWYNB/HS989Vsjj7XOE8npEGxZ4CX6Halu fqVohjBeWFKh1DlFFwHvOq/0VqGmgX34SH2jVb7upcAkfl5LRDjl97nfdoSogDgb txgH2W4oTcl6sCs+cVLP5uvdp7pRjWMSjyI5ltYpqdTKsUpDcoPNE6CQXWyNAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUO0CcTDZMNsooLFiOLij4tyJAobswHwYDVR0j BBgwFoAU5l+Hw0FbdN+7y+CQmjIINe6I5uUwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRVJBWUlO Rk8vMC9FNjVGODdDMzQxNUI3NERGQkJDQkUwOTA5QTMyMDgzNUVFODhFNkU1LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0U2NUY4N0MzNDE1Qjc0REZCQkNCRTA5MDlB MzIwODM1RUU4OEU2RTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FUkFZSU5GTy8wL0U2NUY4N0Mz NDE1Qjc0REZCQkNCRTA5MDlBMzIwODM1RUU4OEU2RTUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJWTUH HuFZjoSjbHaDxTwi8yhSGpkM9BMbRTHEse++JU5lXwRiIRqCnZH6IyTo8C5F/wFy G9UJTJfcsqLr1PWcy+eveaTdn9QkOW487MKToeZP4wonoZkpWsuG/+2Awn7Rlw6U IWLaDwxqqrSGNpFRoKz/o+Jc54StMBtpsO12n1jEw/sNrOafHIgEDkDkIaJqEGfb OnbCIa5ZuMk5nUDIkP9SBKlHTM9djLz2Ou03673bu21ruHIetEeB8mHWNKLOdZ9b 10SrW7zqO8ZJsIHABc7INWj5iXDkNFDf6wcEp36wJ2LBEWU1nv2/cZElv+i3Wphj pt4SnSPT5R1vdDHv -----END CERTIFICATE-----Generated at Tue Jul 28 23:07:32 2026 by rpki-client