$ rpki-client -vvf rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft File: 0887D67C493519D59AAE1BBED0303F38A26D0712.mft (raw, json) Hash identifier: CEB152CN4zylKr7ulCeZsvLYYZ/hbYvknClxCNiCEtA= Subject key identifier: 23:DE:17:21:88:C6:FE:08:80:D8:A4:72:A0:45:2B:26:0F:3B:F0:60 Authority key identifier: 08:87:D6:7C:49:35:19:D5:9A:AE:1B:BE:D0:30:3F:38:A2:6D:07:12 Certificate issuer: /CN=0887D67C493519D59AAE1BBED0303F38A26D0712 Certificate serial: 389F00E086EEE5B6F9CB5C610DA88221626F20E6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft Manifest number: 68 Signing time: Tue 28 Jul 2026 08:23:00 +0000 Manifest this update: Tue 28 Jul 2026 08:18:00 +0000 Manifest next update: Wed 29 Jul 2026 08:37:00 +0000 Files and hashes: 1: 0887D67C493519D59AAE1BBED0303F38A26D0712.crl (hash: CjgZn7uQPekmm2mDSbo8m79rwHYQqfUFCBKAuXyKTDU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.crl rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:9f:00:e0:86:ee:e5:b6:f9:cb:5c:61:0d:a8:82:21:62:6f:20:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0887D67C493519D59AAE1BBED0303F38A26D0712 Validity Not Before: Jul 28 08:18:00 2026 GMT Not After : Jul 29 08:37:00 2026 GMT Subject: CN=23DE172188C6FE0880D8A472A0452B260F3BF060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:8e:a9:2a:73:59:37:fd:1b:99:d0:1c:90: 13:3c:c2:a1:ad:57:45:eb:ab:4b:34:db:70:39:df: 62:1f:de:10:4a:aa:21:77:28:90:1f:3f:8a:c4:c5: cb:89:7a:ee:fc:8f:49:1a:26:54:d8:74:f3:3b:54: 89:7c:cd:51:2e:fc:cd:e3:16:44:9a:a8:96:b6:70: a9:50:56:fb:06:9c:37:6f:1c:ec:cc:35:1c:e4:85: 20:d1:63:98:4d:c1:9c:78:c8:11:5c:fe:e4:2f:e3: 50:c4:f4:c0:6c:ad:04:54:9f:79:5f:ac:0e:01:2d: 35:9a:2a:16:8a:3e:f2:f8:84:97:fc:10:d8:2b:fe: 7d:f1:ed:19:fc:d6:7d:d8:bb:44:56:22:c3:f4:ba: d8:3a:24:97:40:be:b2:ee:5a:35:a2:8e:90:8b:4a: 12:38:13:43:b2:0d:5f:dc:a7:d1:04:ea:df:ef:87: fa:8b:c4:26:90:64:10:ea:97:a1:e2:3e:30:48:25: 26:fa:c9:b7:50:8c:25:73:40:eb:b2:95:52:f9:5f: 06:f9:90:8d:35:c8:f7:46:6b:05:76:2a:c6:fd:bb: 49:29:df:ff:30:fd:1d:1f:ae:02:be:80:1b:87:a0: a6:f9:86:e6:30:a0:1a:b9:26:fb:38:a6:13:31:d9: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DE:17:21:88:C6:FE:08:80:D8:A4:72:A0:45:2B:26:0F:3B:F0:60 X509v3 Authority Key Identifier: keyid:08:87:D6:7C:49:35:19:D5:9A:AE:1B:BE:D0:30:3F:38:A2:6D:07:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:dc:ed:f8:02:21:84:38:84:80:a0:1b:b9:a4:c1:a0:f2:36: be:86:8a:8a:e0:27:ef:e0:1b:e3:a3:77:fa:08:0a:2f:51:ac: 44:a1:29:67:7c:90:68:0f:d2:c5:e8:4e:58:07:d2:8c:ed:a6: 3c:6c:bc:8a:21:5f:aa:86:c3:57:2d:71:48:ec:c4:d7:51:dc: 41:fe:0a:cf:ad:8d:65:e2:a2:c2:1e:79:5f:9d:15:29:6a:c2: 32:b9:7d:c9:07:2f:60:74:bf:11:7b:bc:b2:f2:6d:23:58:cf: 4e:97:7e:46:13:30:88:f0:8f:11:cf:10:00:df:53:80:80:ff: 78:54:a8:8b:03:8d:fd:e3:2a:5f:ac:4b:60:85:63:13:26:d8: f4:ab:89:58:9c:8a:5c:18:80:e8:46:57:66:ee:75:47:6f:99: cc:a7:94:83:2d:03:c7:53:e0:d7:3b:6c:9b:d1:46:fb:e5:a9: 3c:f6:5c:42:5d:85:2d:9d:ba:08:1e:5b:e8:7b:cf:2e:9d:91: 17:13:c4:39:d1:2c:18:c8:fd:2f:d8:f4:18:3c:9c:34:78:eb: c3:60:b4:4c:8a:fe:4c:82:8f:67:fa:2d:3a:44:b3:bf:92:44: dd:e9:4a:8b:83:7a:1e:6f:e5:02:8f:3a:e3:99:59:0a:7f:15: b6:76:62:3b -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUOJ8A4Ibu5bb5y1xhDaiCIWJvIOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4N0Q2N0M0OTM1MTlENTlBQUUxQkJFRDAzMDNGMzhB MjZEMDcxMjAeFw0yNjA3MjgwODE4MDBaFw0yNjA3MjkwODM3MDBaMDMxMTAvBgNV BAMTKDIzREUxNzIxODhDNkZFMDg4MEQ4QTQ3MkEwNDUyQjI2MEYzQkYwNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwD46pKnNZN/0bmdAckBM8wqGt V0Xrq0s023A532If3hBKqiF3KJAfP4rExcuJeu78j0kaJlTYdPM7VIl8zVEu/M3j FkSaqJa2cKlQVvsGnDdvHOzMNRzkhSDRY5hNwZx4yBFc/uQv41DE9MBsrQRUn3lf rA4BLTWaKhaKPvL4hJf8ENgr/n3x7Rn81n3Yu0RWIsP0utg6JJdAvrLuWjWijpCL ShI4E0OyDV/cp9EE6t/vh/qLxCaQZBDql6HiPjBIJSb6ybdQjCVzQOuylVL5Xwb5 kI01yPdGawV2Ksb9u0kp3/8w/R0frgK+gBuHoKb5huYwoBq5Jvs4phMx2ee1AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUI94XIYjG/giA2KRyoEUrJg878GAwHwYDVR0j BBgwFoAUCIfWfEk1GdWarhu+0DA/OKJtBxIwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSENULzAv MDg4N0Q2N0M0OTM1MTlENTlBQUUxQkJFRDAzMDNGMzhBMjZEMDcxMi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8wODg3RDY3QzQ5MzUxOUQ1OUFBRTFCQkVEMDMwM0Yz OEEyNkQwNzEyLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSENULzAvMDg4N0Q2N0M0OTM1MTlENTlB QUUxQkJFRDAzMDNGMzhBMjZEMDcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKnc7fgCIYQ4hICgG7mk waDyNr6GiorgJ+/gG+Ojd/oICi9RrEShKWd8kGgP0sXoTlgH0oztpjxsvIohX6qG w1ctcUjsxNdR3EH+Cs+tjWXiosIeeV+dFSlqwjK5fckHL2B0vxF7vLLybSNYz06X fkYTMIjwjxHPEADfU4CA/3hUqIsDjf3jKl+sS2CFYxMm2PSriVicilwYgOhGV2bu dUdvmcynlIMtA8dT4Nc7bJvRRvvlqTz2XEJdhS2duggeW+h7zy6dkRcTxDnRLBjI /S/Y9Bg8nDR468NgtEyK/kyCj2f6LTpEs7+SRN3pSouDeh5v5QKPOuOZWQp/FbZ2 Yjs= -----END CERTIFICATE-----Generated at Tue Jul 28 19:36:59 2026 by rpki-client