$ rpki-client -vvf rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft File: A67F7A72FC031B1A33774C937883F79C7342B848.mft (raw, json) Hash identifier: 6SMTJSsp0K5h+/GcnWu5nV8oolWe/XdTPGqHIxWorOw= Subject key identifier: A2:57:55:5E:DC:17:D6:E1:06:4A:B1:B1:81:67:45:86:D2:6A:F3:95 Authority key identifier: A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48 Certificate issuer: /CN=A67F7A72FC031B1A33774C937883F79C7342B848 Certificate serial: 3AD3408355B35883F142E8684BC6BD52A7DAA040 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft Manifest number: 6A Signing time: Tue 28 Jul 2026 18:39:42 +0000 Manifest this update: Tue 28 Jul 2026 18:34:42 +0000 Manifest next update: Wed 29 Jul 2026 21:31:42 +0000 Files and hashes: 1: A67F7A72FC031B1A33774C937883F79C7342B848.crl (hash: 2E0cUvaRd4sRpaJipJeYVqQ+GCvsbR+Bn4hj/X66WS8=) 2: 3231312e37382e36342e302f32302d3234203d3e203338383337.roa (hash: BXuBK0LMjwx4Feg0mEC7/E23SnCajtY0CpedBH0UNLE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d3:40:83:55:b3:58:83:f1:42:e8:68:4b:c6:bd:52:a7:da:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A67F7A72FC031B1A33774C937883F79C7342B848 Validity Not Before: Jul 28 18:34:42 2026 GMT Not After : Jul 29 21:31:42 2026 GMT Subject: CN=A257555EDC17D6E1064AB1B181674586D26AF395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:88:b6:90:cf:a7:58:19:ab:70:9b:4f:73: 46:5a:14:06:15:9a:8c:c7:57:83:98:78:4f:eb:5d: 3e:fb:6f:e6:e8:8e:8e:63:83:d1:a4:8b:f6:cb:36: 70:3c:6a:42:57:fb:4c:9f:7d:3c:ae:22:88:3c:92: 4a:f7:ac:59:6f:cc:41:5c:2e:5e:ad:90:a7:4c:4b: 92:05:31:e4:d5:5a:02:6d:35:fb:ea:98:05:52:3d: 0b:0a:66:f5:5d:4c:3b:87:bb:3c:43:54:32:66:d4: f2:b0:25:28:34:24:66:27:6a:ea:66:93:5f:f2:c1: 04:43:37:95:68:78:bc:51:04:5b:45:79:ca:c7:31: de:2a:a7:90:cd:13:00:b9:aa:89:a0:39:7e:25:55: 52:f5:ed:11:a7:17:04:d3:20:cd:0a:0f:51:7e:d8: af:37:df:70:b8:ae:03:ae:d8:fb:df:17:85:72:4f: f4:c9:cb:51:c7:bd:5e:22:90:4c:63:e5:a6:b3:68: 4f:a4:50:f3:5a:e9:bd:d2:86:f8:4b:ff:1b:dc:f4: 19:91:1c:50:9d:5e:3a:dc:11:c5:0c:30:f5:ba:3d: 1f:63:47:7f:45:81:48:47:13:58:61:62:ca:35:f0: a8:8f:ff:25:92:ab:e1:6c:9b:a1:28:bf:55:8a:7b: f1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:57:55:5E:DC:17:D6:E1:06:4A:B1:B1:81:67:45:86:D2:6A:F3:95 X509v3 Authority Key Identifier: keyid:A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5c:25:42:5c:4e:bb:74:c6:ee:b7:bf:1f:e0:02:22:61:0d: f6:eb:92:2f:55:20:26:e2:27:6e:b6:62:61:db:a0:4d:3f:d7: 68:a2:b1:81:ce:d9:05:c6:7c:29:4b:b0:ea:63:db:4f:52:e4: 06:c3:fd:3d:9c:4d:11:a7:9f:ea:c7:89:93:fc:12:7d:c2:72: 48:35:f0:80:5d:fa:0a:65:2d:69:f3:bf:31:bf:bb:a8:e1:81: ea:a1:4e:90:40:d2:95:ae:f8:e7:30:07:ed:2c:86:b5:4c:59: e2:59:ac:ba:0e:c1:0a:9d:9c:78:66:f3:f6:85:73:75:26:92: d1:47:c0:72:5e:db:df:c1:1d:6e:a0:19:c1:ec:c0:c2:ac:45: 4d:5f:8e:24:79:cb:05:5c:e8:01:42:6a:00:24:7c:e4:23:98: 7e:6a:80:0b:d7:cd:7f:e0:ea:e7:84:67:25:be:f7:20:84:55: f7:09:2d:15:c0:9a:de:2b:8d:30:c7:2e:a8:04:8a:6c:a7:72: 5c:fb:7b:e1:41:99:fa:f2:f8:03:1d:67:2d:24:ad:e7:40:f4: ad:2e:dc:e6:3a:3e:84:f9:19:a0:ae:18:d6:98:af:14:86:9d: a4:e5:b7:af:b4:a8:94:c8:40:15:ea:b4:4d:7d:c8:39:b1:4f: 5f:b8:66:f9 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUOtNAg1WzWIPxQuhoS8a9UqfaoEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY3RjdBNzJGQzAzMUIxQTMzNzc0QzkzNzg4M0Y3OUM3 MzQyQjg0ODAeFw0yNjA3MjgxODM0NDJaFw0yNjA3MjkyMTMxNDJaMDMxMTAvBgNV BAMTKEEyNTc1NTVFREMxN0Q2RTEwNjRBQjFCMTgxNjc0NTg2RDI2QUYzOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbmoi2kM+nWBmrcJtPc0ZaFAYV mozHV4OYeE/rXT77b+bojo5jg9Gki/bLNnA8akJX+0yffTyuIog8kkr3rFlvzEFc Ll6tkKdMS5IFMeTVWgJtNfvqmAVSPQsKZvVdTDuHuzxDVDJm1PKwJSg0JGYnaupm k1/ywQRDN5VoeLxRBFtFecrHMd4qp5DNEwC5qomgOX4lVVL17RGnFwTTIM0KD1F+ 2K8333C4rgOu2PvfF4VyT/TJy1HHvV4ikExj5aazaE+kUPNa6b3ShvhL/xvc9BmR HFCdXjrcEcUMMPW6PR9jR39FgUhHE1hhYso18KiP/yWSq+Fsm6Eov1WKe/FRAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUoldVXtwX1uEGSrGxgWdFhtJq85UwHwYDVR0j BBgwFoAUpn96cvwDGxozd0yTeIP3nHNCuEgwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NORVQv MC9BNjdGN0E3MkZDMDMxQjFBMzM3NzRDOTM3ODgzRjc5QzczNDJCODQ4LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0E2N0Y3QTcyRkMwMzFCMUEzMzc3NEM5Mzc4ODNG NzlDNzM0MkI4NDguY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HU05FVC8wL0E2N0Y3QTcyRkMwMzFC MUEzMzc3NEM5Mzc4ODNGNzlDNzM0MkI4NDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6XCVCXE67dMbu t78f4AIiYQ3265IvVSAm4idutmJh26BNP9doorGBztkFxnwpS7DqY9tPUuQGw/09 nE0Rp5/qx4mT/BJ9wnJINfCAXfoKZS1p878xv7uo4YHqoU6QQNKVrvjnMAftLIa1 TFniWay6DsEKnZx4ZvP2hXN1JpLRR8ByXtvfwR1uoBnB7MDCrEVNX44kecsFXOgB QmoAJHzkI5h+aoAL181/4OrnhGclvvcghFX3CS0VwJreK40wxy6oBIpsp3Jc+3vh QZn68vgDHWctJK3nQPStLtzmOj6E+RmgrhjWmK8Uhp2k5bevtKiUyEAV6rRNfcg5 sU9fuGb5 -----END CERTIFICATE-----Generated at Wed Jul 29 02:31:23 2026 by rpki-client