$ rpki-client -vvf rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft File: 28E8C034945DF0971A657E251911BBA0B2819562.mft (raw, json) Hash identifier: Ym+3iEuOG9j/rMjf8sqdIGZA4kEQiN0AkOlw81eeLEg= Subject key identifier: 56:B3:D4:12:FE:71:D9:74:CB:2F:F5:1A:A3:BA:E0:EA:A9:31:B5:26 Authority key identifier: 28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62 Certificate issuer: /CN=28E8C034945DF0971A657E251911BBA0B2819562 Certificate serial: 462FD707896E2BA2E3923225297FE60E76326E56 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft Manifest number: 6D Signing time: Tue 28 Jul 2026 14:44:10 +0000 Manifest this update: Tue 28 Jul 2026 14:39:10 +0000 Manifest next update: Wed 29 Jul 2026 18:28:10 +0000 Files and hashes: 1: 3130332e3134362e3231332e302f32342d3234203d3e20313331363731.roa (hash: LYwHjGxEzckNqePKzYBLQw/Fecl7B+Zct0xOoyvOLzg=) 2: 3130332e3134362e3231322e302f32342d3234203d3e20313331363731.roa (hash: v0VyC7X7thLb1BBUBYlXdyclFoTUZxEmzXZ1GE31WD8=) 3: 323430353a613063303a3a2f33322d3438203d3e20313331363731.roa (hash: 6HrkEzQ2Yg1WTlAGALA+Lw5WYBWkKQgOUE2P3VYv1e4=) 4: 28E8C034945DF0971A657E251911BBA0B2819562.crl (hash: kd3C/ugcU6wZCxhVF9Iz8AdjPYgOQ8ijgm9A+MKyZVg=) 5: 3130332e3134362e3231322e302f32332d3234203d3e20313331363731.roa (hash: pMS5Ph8mPGJU3UpJ7IjmKfi+Ix8We0Zd68WwZnbms2Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2f:d7:07:89:6e:2b:a2:e3:92:32:25:29:7f:e6:0e:76:32:6e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E8C034945DF0971A657E251911BBA0B2819562 Validity Not Before: Jul 28 14:39:10 2026 GMT Not After : Jul 29 18:28:10 2026 GMT Subject: CN=56B3D412FE71D974CB2FF51AA3BAE0EAA931B526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:20:29:f1:5e:2c:36:7c:5a:e9:0a:54:95:b3: c3:9a:cc:a2:3b:ed:40:2c:0d:18:4e:33:25:8d:f6: 80:21:a1:39:82:29:08:2a:99:31:4b:82:07:96:b3: 6b:16:b6:ce:f0:3e:72:be:c4:03:31:7a:5b:5c:bd: 10:ad:d9:f2:46:05:bd:b7:62:b3:31:d5:df:88:35: df:c2:fe:68:97:44:91:ac:0e:5b:16:73:15:9c:a0: 9e:90:07:1b:84:1f:28:ea:c4:5c:c3:d7:46:48:a8: aa:35:99:de:88:57:07:cd:0a:4e:6d:92:6a:57:8b: fd:c4:4a:33:b9:6f:57:0b:43:25:2f:45:e5:8e:10: 6d:0c:a2:04:f5:08:c0:b1:f2:b0:e5:85:6c:75:2f: e2:38:7e:29:24:21:f5:53:d0:97:c1:58:06:ec:95: b1:a2:f1:94:02:01:0c:d1:d6:12:5c:1e:7a:77:a1: ed:7e:3e:22:37:f0:67:57:e8:e2:39:7d:bc:4c:d9: 51:8f:bd:dc:bd:ec:e5:55:e3:17:95:c3:fa:23:29: 7e:c2:c9:f5:26:fd:0e:39:f3:7e:28:b1:2b:70:82: 5e:f9:19:e3:f9:6d:6e:9e:a2:00:34:89:fa:55:78: a3:04:01:cc:68:35:bb:4d:e0:88:0e:fb:76:4a:69: 4b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B3:D4:12:FE:71:D9:74:CB:2F:F5:1A:A3:BA:E0:EA:A9:31:B5:26 X509v3 Authority Key Identifier: keyid:28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:36:7c:32:10:61:cc:92:c8:15:35:b0:0c:e9:be:cb:00:98: 67:73:fb:29:7d:ef:b8:4c:b2:62:0c:b0:f0:6f:18:da:5f:52: 97:61:2b:b5:e9:90:bf:19:46:f5:9a:97:7f:43:76:e4:9e:45: c7:f3:07:b4:17:cd:d9:32:93:1d:e4:2f:eb:06:b2:02:52:43: f3:e6:f1:a2:31:6c:f8:e8:f5:b5:01:ba:13:78:e2:38:28:16: 61:35:7a:3f:d4:05:3b:03:e8:82:32:e7:7d:f8:26:de:d4:2f: 3b:88:50:1d:11:4e:2f:72:30:9c:7d:b2:4b:39:63:b3:82:dd: 10:c7:af:83:62:4a:ba:e2:fe:dd:bd:bc:4c:9e:45:b9:83:27: 72:7c:25:da:57:c2:5f:79:ee:b2:dd:9e:36:c9:b5:73:d1:2c: 3d:1f:e6:b8:aa:26:8c:0b:21:e8:54:38:20:0f:17:2f:b0:aa: 51:7a:5f:e6:3c:b4:f3:c1:84:35:c0:94:66:79:92:3b:73:48: 1a:0f:18:ff:0e:ef:d0:7f:c7:d2:73:b5:e6:5d:16:d5:59:b6: fc:a8:97:cb:1d:24:21:a7:5e:a7:9b:3f:17:a7:0c:f3:76:56: d9:f1:96:e6:b7:ea:24:26:b6:ab:7c:6f:58:b0:11:d2:ce:bd: 22:70:22:9d -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIURi/XB4luK6LjkjIlKX/mDnYyblYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkxMUJCQTBC MjgxOTU2MjAeFw0yNjA3MjgxNDM5MTBaFw0yNjA3MjkxODI4MTBaMDMxMTAvBgNV BAMTKDU2QjNENDEyRkU3MUQ5NzRDQjJGRjUxQUEzQkFFMEVBQTkzMUI1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYICnxXiw2fFrpClSVs8OazKI7 7UAsDRhOMyWN9oAhoTmCKQgqmTFLggeWs2sWts7wPnK+xAMxeltcvRCt2fJGBb23 YrMx1d+INd/C/miXRJGsDlsWcxWcoJ6QBxuEHyjqxFzD10ZIqKo1md6IVwfNCk5t kmpXi/3ESjO5b1cLQyUvReWOEG0MogT1CMCx8rDlhWx1L+I4fikkIfVT0JfBWAbs lbGi8ZQCAQzR1hJcHnp3oe1+PiI38GdX6OI5fbxM2VGPvdy97OVV4xeVw/ojKX7C yfUm/Q45834osStwgl75GeP5bW6eogA0ifpVeKMEAcxoNbtN4IgO+3ZKaUvZAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUVrPUEv5x2XTLL/Uao7rg6qkxtSYwHwYDVR0j BBgwFoAUKOjANJRd8JcaZX4lGRG7oLKBlWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkFOVEFT WS8wLzI4RThDMDM0OTQ1REYwOTcxQTY1N0UyNTE5MTFCQkEwQjI4MTk1NjIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkx MUJCQTBCMjgxOTU2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0ZBTlRBU1kvMC8yOEU4QzAzNDk0 NURGMDk3MUE2NTdFMjUxOTExQkJBMEIyODE5NTYyLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzZ8MhBh zJLIFTWwDOm+ywCYZ3P7KX3vuEyyYgyw8G8Y2l9Sl2ErtemQvxlG9ZqXf0N25J5F x/MHtBfN2TKTHeQv6wayAlJD8+bxojFs+Oj1tQG6E3jiOCgWYTV6P9QFOwPogjLn ffgm3tQvO4hQHRFOL3IwnH2ySzljs4LdEMevg2JKuuL+3b28TJ5FuYMncnwl2lfC X3nust2eNsm1c9EsPR/muKomjAsh6FQ4IA8XL7CqUXpf5jy088GENcCUZnmSO3NI Gg8Y/w7v0H/H0nO15l0W1Vm2/KiXyx0kIadep5s/F6cM83ZW2fGW5rfqJCa2q3xv WLAR0s69InAinQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:39:09 2026 by rpki-client