$ rpki-client -vvf rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft File: A67F7A72FC031B1A33774C937883F79C7342B848.mft (raw, json) Hash identifier: rNhOpb+qqkkWmvl3PBqZE67EiaaF+I8vvhE8P+N8YZo= Subject key identifier: 08:28:8A:AA:40:0B:54:3B:8F:D1:90:5D:4D:E3:94:07:FD:EC:60:69 Authority key identifier: A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48 Certificate issuer: /CN=A67F7A72FC031B1A33774C937883F79C7342B848 Certificate serial: 3F6312305D3D07F1F97461C4D1FE8CB0BD318E09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft Manifest number: 2D Signing time: Sat 13 Jun 2026 01:23:37 +0000 Manifest this update: Sat 13 Jun 2026 01:18:37 +0000 Manifest next update: Sun 14 Jun 2026 01:25:37 +0000 Files and hashes: 1: 3231312e37382e36342e302f32302d3234203d3e203338383337.roa (hash: BXuBK0LMjwx4Feg0mEC7/E23SnCajtY0CpedBH0UNLE=) 2: A67F7A72FC031B1A33774C937883F79C7342B848.crl (hash: xkeixlyYK8cKAmNMXU0bgKCtznce2lnRVrN+Cm88Qgk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:63:12:30:5d:3d:07:f1:f9:74:61:c4:d1:fe:8c:b0:bd:31:8e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A67F7A72FC031B1A33774C937883F79C7342B848 Validity Not Before: Jun 13 01:18:37 2026 GMT Not After : Jun 14 01:25:37 2026 GMT Subject: CN=08288AAA400B543B8FD1905D4DE39407FDEC6069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:0b:11:c8:1e:cc:99:ce:77:f8:9d:27:e0: 98:a2:e8:e6:4c:f7:b5:9b:7f:27:fd:bb:99:20:c2: d3:55:6d:93:7f:aa:77:e6:21:cb:e8:61:12:d0:cd: 1a:61:72:ab:78:82:f9:b6:48:a6:a6:0f:2f:35:b5: 64:f9:44:84:53:08:68:f7:d6:8e:2b:23:82:61:da: ba:38:01:bb:fb:3d:7b:f8:5d:17:a1:86:ad:a6:4b: 64:41:ae:a2:a1:40:91:5d:41:03:26:8c:2e:62:08: 87:3d:1a:21:28:63:47:fb:88:74:80:02:19:21:12: 67:ce:7f:8c:42:95:55:5f:b4:88:fb:09:82:bc:e9: a4:56:ae:d8:66:cf:05:ab:bb:c1:ec:a7:3c:ca:11: da:0a:f5:fe:59:04:f7:26:33:9d:88:3a:c0:99:67: 61:fd:d6:06:9b:64:7a:bf:83:69:37:0b:59:d2:eb: 59:9d:fb:a4:20:e5:b5:62:18:00:e9:a3:08:10:c5: a6:d7:9e:4e:08:0e:3b:c5:3d:03:2b:b1:a6:8c:3a: 41:1b:19:d1:79:76:71:18:44:b4:dd:9f:4e:a4:9e: ce:83:31:cb:12:63:53:c4:8b:a0:4e:06:bf:45:cc: b3:1f:3d:20:a3:96:97:7e:51:38:74:55:ba:28:2a: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:28:8A:AA:40:0B:54:3B:8F:D1:90:5D:4D:E3:94:07:FD:EC:60:69 X509v3 Authority Key Identifier: keyid:A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:9b:a5:97:c1:30:56:8a:ce:69:8e:36:d7:98:63:62:05:7c: bb:50:6a:90:5f:25:11:39:4f:db:6b:f5:b2:8e:24:2e:6e:ff: dd:10:64:63:fc:a4:0f:6b:e4:70:19:05:c8:39:0a:70:08:77: eb:aa:4a:f3:32:76:a6:14:9f:09:dc:d4:e2:2d:4b:be:15:0f: a5:01:56:c1:c9:cd:d0:19:23:d1:8d:4d:5f:80:8f:d4:f2:b6: c7:70:31:ff:96:f0:b1:c1:92:08:85:d2:7f:47:f9:de:69:51: f5:d6:d2:91:03:67:7e:85:fb:ed:bb:a7:7a:68:49:77:20:4b: ff:a0:a0:1a:43:e8:8d:41:8b:53:9e:c3:ef:57:8e:58:b8:50: 23:13:2d:20:c8:e7:e5:fa:a7:a3:a9:08:b6:b9:11:f1:a4:13: ae:70:40:39:9d:13:50:8e:db:51:9f:b2:e7:fb:73:c7:19:2d: 20:ea:ba:e2:cf:86:ff:97:e7:73:c9:bd:99:98:11:44:f6:0e: fb:9d:46:49:df:14:d6:ab:f7:37:97:16:64:7f:a7:42:11:37: 84:bf:13:75:a5:6e:3c:76:d6:0c:19:45:a0:19:8d:db:04:7e: 55:28:b4:53:11:62:97:27:7d:64:3c:c4:0b:9c:67:7e:02:4b: 72:8f:a4:7f -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUP2MSMF09B/H5dGHE0f6MsL0xjgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY3RjdBNzJGQzAzMUIxQTMzNzc0QzkzNzg4M0Y3OUM3 MzQyQjg0ODAeFw0yNjA2MTMwMTE4MzdaFw0yNjA2MTQwMTI1MzdaMDMxMTAvBgNV BAMTKDA4Mjg4QUFBNDAwQjU0M0I4RkQxOTA1RDRERTM5NDA3RkRFQzYwNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCongsRyB7Mmc53+J0n4Jii6OZM 97Wbfyf9u5kgwtNVbZN/qnfmIcvoYRLQzRphcqt4gvm2SKamDy81tWT5RIRTCGj3 1o4rI4Jh2ro4Abv7PXv4XRehhq2mS2RBrqKhQJFdQQMmjC5iCIc9GiEoY0f7iHSA AhkhEmfOf4xClVVftIj7CYK86aRWrthmzwWru8HspzzKEdoK9f5ZBPcmM52IOsCZ Z2H91gabZHq/g2k3C1nS61md+6Qg5bViGADpowgQxabXnk4IDjvFPQMrsaaMOkEb GdF5dnEYRLTdn06kns6DMcsSY1PEi6BOBr9FzLMfPSCjlpd+UTh0VbooKjL7AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUCCiKqkALVDuP0ZBdTeOUB/3sYGkwHwYDVR0j BBgwFoAUpn96cvwDGxozd0yTeIP3nHNCuEgwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NORVQv MC9BNjdGN0E3MkZDMDMxQjFBMzM3NzRDOTM3ODgzRjc5QzczNDJCODQ4LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0E2N0Y3QTcyRkMwMzFCMUEzMzc3NEM5Mzc4ODNG NzlDNzM0MkI4NDguY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HU05FVC8wL0E2N0Y3QTcyRkMwMzFC MUEzMzc3NEM5Mzc4ODNGNzlDNzM0MkI4NDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSm6WXwTBWis5p jjbXmGNiBXy7UGqQXyUROU/ba/WyjiQubv/dEGRj/KQPa+RwGQXIOQpwCHfrqkrz MnamFJ8J3NTiLUu+FQ+lAVbByc3QGSPRjU1fgI/U8rbHcDH/lvCxwZIIhdJ/R/ne aVH11tKRA2d+hfvtu6d6aEl3IEv/oKAaQ+iNQYtTnsPvV45YuFAjEy0gyOfl+qej qQi2uRHxpBOucEA5nRNQjttRn7Ln+3PHGS0g6rriz4b/l+dzyb2ZmBFE9g77nUZJ 3xTWq/c3lxZkf6dCETeEvxN1pW48dtYMGUWgGY3bBH5VKLRTEWKXJ31kPMQLnGd+ Aktyj6R/ -----END CERTIFICATE-----Generated at Sat Jun 13 13:38:04 2026 by rpki-client