$ rpki-client -vvf rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft File: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft (raw, json) Hash identifier: uB8xGxzILa17YFkdO85OW3yNsCwGUJWS0lAlqXZ8iTo= Subject key identifier: DD:2F:46:7A:3E:84:F1:72:1C:13:1C:39:EA:E1:73:22:A6:17:4A:A9 Authority key identifier: 72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A Certificate issuer: /CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Certificate serial: 54918DCCD254813C4B250A8C9A349F4973752EC1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft Manifest number: 70 Signing time: Wed 29 Jul 2026 04:40:44 +0000 Manifest this update: Wed 29 Jul 2026 04:35:44 +0000 Manifest next update: Thu 30 Jul 2026 06:47:44 +0000 Files and hashes: 1: 3131342e32392e3234302e302f32322d3234203d3e20313331363032.roa (hash: 4cmNPnys0d/FtI5okidfoOFAlkFUnmuDLC94ZHnaWrA=) 2: 3131342e32392e3234302e302f32322d3234203d3e2034373830.roa (hash: KC1g1qM879l4ds0q/ydW26xvU61SJGGDoYP8GsPifjc=) 3: 3130332e3235322e3132382e302f32322d3234203d3e2034373830.roa (hash: aU5nH7E+iqqE72JCSOf/syfpmIQ4Ugwf1G4zZbGiNhs=) 4: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl (hash: GnIyoe+GyM7ZlPt/4/uO9j+vn0WH/LfkUTZ3BOAzQ8g=) 5: 3130332e3235322e3132382e302f32322d3232203d3e203130303835.roa (hash: z0gKkFBHhI3K6nHdzx65beXtOEgH8B0I5cTB2wTLt8g=) 6: 3131342e32392e3234302e302f32322d3232203d3e203130303835.roa (hash: Iu3XM7OWOu4YExXTvgO6ZRczd2wJf5M+hq5Ui0NVDWs=) 7: 3130332e3235322e3132382e302f32322d3234203d3e20313331363032.roa (hash: nVHgvAQGfCe5GeqBJlvDWrqjtd8OwRSNjhUeOydBwUA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:91:8d:cc:d2:54:81:3c:4b:25:0a:8c:9a:34:9f:49:73:75:2e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Validity Not Before: Jul 29 04:35:44 2026 GMT Not After : Jul 30 06:47:44 2026 GMT Subject: CN=DD2F467A3E84F1721C131C39EAE17322A6174AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:69:99:c7:3e:43:eb:2c:41:8c:df:5b:30: 31:53:5f:c3:fe:4c:d5:8f:85:fe:c8:c3:70:27:7e: 7d:15:de:ac:b8:a9:87:01:6d:e5:55:46:eb:e2:9b: c8:fc:47:0d:f6:6b:66:03:dc:59:bc:0b:48:cc:6d: f3:c7:fb:5a:c3:61:bb:b1:23:14:3d:48:13:f7:6a: 98:49:4c:a7:20:b5:7c:80:e0:ca:de:50:8e:54:c4: cf:6a:f8:76:56:15:f2:6c:01:8c:e5:67:6f:cc:d4: 32:60:56:e9:cb:ec:c6:42:3d:f5:e4:32:62:a8:93: fa:5f:84:8c:02:a3:46:a4:5b:8a:f9:13:4f:e5:ab: 29:b5:09:1c:44:c4:4c:d1:e2:84:48:1c:ed:0e:8c: 60:c7:55:5b:c7:ac:05:6d:1d:13:6c:1f:7a:df:4b: de:ce:54:29:b3:4c:3e:68:b7:07:45:e8:c3:cc:26: fc:99:1c:9f:b7:61:92:01:8e:84:c8:40:48:c1:49: f3:6f:4d:30:85:30:20:a4:f0:60:98:b6:54:43:e2: 0b:fe:10:fe:ce:ed:bc:41:c0:99:6b:29:85:ba:06: 7d:70:cc:48:02:f2:be:40:9b:63:71:71:c7:21:b5: 8a:f7:b3:93:d4:7e:22:8c:aa:8f:1f:c1:7c:c4:96: 6e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2F:46:7A:3E:84:F1:72:1C:13:1C:39:EA:E1:73:22:A6:17:4A:A9 X509v3 Authority Key Identifier: keyid:72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d3:e3:55:5b:ac:41:fc:bc:a9:4d:f5:78:1c:ea:b6:f4:e4: c6:04:50:b6:a4:c3:d2:e7:18:fd:8a:7a:f0:20:ca:bf:15:4a: 9a:40:6d:4f:45:29:d6:85:ef:12:d2:07:9e:9d:9a:29:0e:e3: 32:d3:5c:49:bb:3b:05:d7:bd:6a:59:95:66:9b:e5:e5:00:71: c7:5a:2a:9c:52:c9:60:7e:68:e7:34:ea:65:6a:cc:61:ba:39: 3e:6d:6e:14:d3:6d:a1:6e:1f:82:19:5d:0f:10:77:44:bd:7a: cf:85:01:48:bf:7d:58:0c:08:94:ff:19:9c:9c:5e:62:89:9f: 16:e2:63:48:89:83:70:d0:67:3e:5e:dd:8d:a5:b9:4b:30:3b: 07:b8:87:10:92:26:32:d5:78:58:09:d7:fb:b2:88:3c:e0:33: ab:4e:19:0b:5b:a7:90:cd:52:e3:87:23:07:d2:00:3d:2a:d2: 71:fb:3a:6b:5a:76:3f:e3:30:34:95:19:08:c4:96:e5:8b:14: ef:08:57:48:8f:3d:85:da:ff:bb:4e:5c:5f:31:31:9d:0f:d8: bc:82:cb:79:65:23:ed:09:5c:6a:8d:4c:14:6a:ae:49:50:d8: fc:71:01:ef:d5:46:0c:28:41:ec:05:99:b1:ee:b5:ab:98:15: 0e:d9:92:35 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUVJGNzNJUgTxLJQqMmjSfSXN1LsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4 REQzMDk5QTAeFw0yNjA3MjkwNDM1NDRaFw0yNjA3MzAwNjQ3NDRaMDMxMTAvBgNV BAMTKEREMkY0NjdBM0U4NEYxNzIxQzEzMUMzOUVBRTE3MzIyQTYxNzRBQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9AmmZxz5D6yxBjN9bMDFTX8P+ TNWPhf7Iw3Anfn0V3qy4qYcBbeVVRuvim8j8Rw32a2YD3Fm8C0jMbfPH+1rDYbux IxQ9SBP3aphJTKcgtXyA4MreUI5UxM9q+HZWFfJsAYzlZ2/M1DJgVunL7MZCPfXk MmKok/pfhIwCo0akW4r5E0/lqym1CRxExEzR4oRIHO0OjGDHVVvHrAVtHRNsH3rf S97OVCmzTD5otwdF6MPMJvyZHJ+3YZIBjoTIQEjBSfNvTTCFMCCk8GCYtlRD4gv+ EP7O7bxBwJlrKYW6Bn1wzEgC8r5Am2NxccchtYr3s5PUfiKMqo8fwXzElm6LAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU3S9Gej6E8XIcExw56uFzIqYXSqkwHwYDVR0j BBgwFoAUckh+F8JA1VwW6P5bC3HUSY3TCZowDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAv NzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MjQ4N0UxN0MyNDBENTVDMTZFOEZFNUIwQjcxRDQ0 OThERDMwOTlBLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAvNzI0ODdFMTdDMjQwRDU1QzE2 RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE7T41VbrEH8vKlN9Xgc 6rb05MYEULakw9LnGP2KevAgyr8VSppAbU9FKdaF7xLSB56dmikO4zLTXEm7OwXX vWpZlWab5eUAccdaKpxSyWB+aOc06mVqzGG6OT5tbhTTbaFuH4IZXQ8Qd0S9es+F AUi/fVgMCJT/GZycXmKJnxbiY0iJg3DQZz5e3Y2luUswOwe4hxCSJjLVeFgJ1/uy iDzgM6tOGQtbp5DNUuOHIwfSAD0q0nH7Omtadj/jMDSVGQjEluWLFO8IV0iPPYXa /7tOXF8xMZ0P2LyCy3llI+0JXGqNTBRqrklQ2PxxAe/VRgwoQewFmbHutauYFQ7Z kjU= -----END CERTIFICATE-----Generated at Wed Jul 29 12:04:45 2026 by rpki-client