$ rpki-client -vvf rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft File: 35C866BE000DEAB870C97BED72D0A7807B829E4D.mft (raw, json) Hash identifier: XTMU/G06dxLVohsLFRQYk5pOQl8tB25HbbIn7B9ujzA= Subject key identifier: 0E:0A:BB:34:88:B1:41:2E:63:10:88:9F:59:B7:09:C9:C1:7F:CA:C8 Authority key identifier: 35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D Certificate issuer: /CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Certificate serial: 1DBFE5FE1E858CFF7B5D4DBCAF960490E8B980EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft Manifest number: 6C Signing time: Tue 28 Jul 2026 06:42:43 +0000 Manifest this update: Tue 28 Jul 2026 06:37:43 +0000 Manifest next update: Wed 29 Jul 2026 10:39:43 +0000 Files and hashes: 1: 3232332e32362e342e302f32332d3234203d3e20313532313739.roa (hash: 1KuxfqT20KEMU13K1PoNgkxwUh6tXjO/u8vuBPBbPvM=) 2: 35C866BE000DEAB870C97BED72D0A7807B829E4D.crl (hash: GiCEwydFbpVfoD3nOueFw6tWsJG1Wuk5trbEmy/mUtg=) 3: 3130332e3135322e3232302e302f32332d3234203d3e20313338393937.roa (hash: J/22PWUGVzLaEIWqIEkco35k7PiKuvioKGMBglelLtk=) 4: 323430363a326663303a3a2f33322d3332203d3e20313334383233.roa (hash: T6rxUJGmT1hptwoFyjautezkOkglfrNk05IrJlVztRE=) 5: 3230322e3134382e3231302e302f32332d3234203d3e20313532313739.roa (hash: w66ZmETlDQxyi38rji0gzk1176tFqIfyztFJ3VNSIbg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:bf:e5:fe:1e:85:8c:ff:7b:5d:4d:bc:af:96:04:90:e8:b9:80:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Validity Not Before: Jul 28 06:37:43 2026 GMT Not After : Jul 29 10:39:43 2026 GMT Subject: CN=0E0ABB3488B1412E6310889F59B709C9C17FCAC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:3f:23:8e:ea:ff:e8:91:6b:87:0e:3f:2a: 5d:a1:1e:74:f0:8e:85:c1:fc:ea:42:6a:c6:d2:f9: 12:d2:9f:0b:42:e8:25:c2:66:1d:ec:7c:ad:4e:b5: 8a:e9:4c:07:06:64:a5:2e:dc:cb:39:a9:a4:f6:5f: 67:31:94:0c:1e:03:a2:56:0b:8f:f4:65:b5:d9:86: 83:d3:76:64:04:c1:b3:4a:f4:51:0e:41:b7:46:94: 2c:58:bb:ba:d1:ba:71:f4:38:29:22:ed:e0:f9:14: 7e:7a:64:9f:6a:2f:53:08:48:89:75:ed:ec:8f:d5: 36:00:ac:a5:23:5a:43:55:ef:60:5b:05:ed:38:f0: fb:24:04:fc:1b:54:e8:ac:1a:66:bb:1e:48:9a:f0: ea:db:fc:bf:79:39:ab:f4:50:bc:17:b7:1f:04:7d: 40:78:79:57:af:5d:1d:27:61:c9:8b:7b:40:e0:ef: 3d:32:7f:38:f1:c9:42:a1:77:d4:b0:9e:80:d8:c8: 49:23:e9:42:c2:4b:69:a7:bc:da:53:8a:af:1e:03: 6a:20:28:1a:8f:fa:d2:ce:9c:31:51:fe:a7:26:4d: 78:41:fc:c6:4d:05:84:9f:45:68:a1:06:89:4b:e9: 13:82:22:5f:e5:bb:75:ba:4d:51:45:1d:d6:74:ed: 17:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0A:BB:34:88:B1:41:2E:63:10:88:9F:59:B7:09:C9:C1:7F:CA:C8 X509v3 Authority Key Identifier: keyid:35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:79:5f:82:f8:c3:7f:77:d9:65:9d:c6:a5:7f:86:f6:fb:d0: 78:a7:81:91:62:34:93:3d:89:5b:65:c8:af:b5:eb:3b:a5:b3: 19:6e:72:f5:47:f0:2b:db:24:16:03:89:f0:b0:f5:d1:d3:d3: 5e:4e:56:a5:33:5a:9a:9a:6f:8b:c6:7f:7b:60:6f:ce:ce:35: 4a:e8:7a:c7:cb:d5:1b:32:de:80:b0:74:9b:7a:f5:87:f6:8b: c4:f8:ca:a1:9a:e8:c5:07:b5:22:fa:33:5b:3c:cc:c2:03:5d: f2:66:81:a6:42:ab:0e:73:f0:ce:52:3d:54:e0:00:51:6c:bc: 4f:e3:0f:47:42:c8:be:c1:6d:15:64:65:91:91:5d:88:f6:78: 94:2f:27:1f:27:ad:ec:b9:88:34:ef:1f:2b:89:34:39:3e:1f: 9d:2f:2e:cd:ea:9f:80:1d:53:57:6e:19:22:5b:38:d9:44:43: 8c:e8:67:c8:f9:e3:6e:ce:51:44:b6:2f:56:14:50:da:22:c2: b9:3d:64:71:22:db:77:25:37:35:26:a2:07:3f:78:a7:46:d9: a3:c0:50:f6:da:09:a6:6b:c6:d9:fe:30:dc:b2:16:b1:fc:6e: 74:a3:cf:c9:da:21:24:88:67:f0:0e:15:6a:30:67:d7:80:71: 39:51:72:aa -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUHb/l/h6FjP97XU28r5YEkOi5gO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3 QjgyOUU0RDAeFw0yNjA3MjgwNjM3NDNaFw0yNjA3MjkxMDM5NDNaMDMxMTAvBgNV BAMTKDBFMEFCQjM0ODhCMTQxMkU2MzEwODg5RjU5QjcwOUM5QzE3RkNBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJz8jjur/6JFrhw4/Kl2hHnTw joXB/OpCasbS+RLSnwtC6CXCZh3sfK1OtYrpTAcGZKUu3Ms5qaT2X2cxlAweA6JW C4/0ZbXZhoPTdmQEwbNK9FEOQbdGlCxYu7rRunH0OCki7eD5FH56ZJ9qL1MISIl1 7eyP1TYArKUjWkNV72BbBe048PskBPwbVOisGma7Hkia8Orb/L95Oav0ULwXtx8E fUB4eVevXR0nYcmLe0Dg7z0yfzjxyUKhd9SwnoDYyEkj6ULCS2mnvNpTiq8eA2og KBqP+tLOnDFR/qcmTXhB/MZNBYSfRWihBolL6ROCIl/lu3W6TVFFHdZ07RdJAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUDgq7NIixQS5jEIifWbcJycF/ysgwHwYDVR0j BBgwFoAUNchmvgAN6rhwyXvtctCngHuCnk0wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAv MzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3QjgyOUU0RC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zNUM4NjZCRTAwMERFQUI4NzBDOTdCRUQ3MkQwQTc4 MDdCODI5RTRELmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAvMzVDODY2QkUwMDBERUFCODcw Qzk3QkVENzJEMEE3ODA3QjgyOUU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHt5X4L4w3932WWdxqV/ hvb70HingZFiNJM9iVtlyK+16zulsxlucvVH8CvbJBYDifCw9dHT015OVqUzWpqa b4vGf3tgb87ONUroesfL1Rsy3oCwdJt69Yf2i8T4yqGa6MUHtSL6M1s8zMIDXfJm gaZCqw5z8M5SPVTgAFFsvE/jD0dCyL7BbRVkZZGRXYj2eJQvJx8nrey5iDTvHyuJ NDk+H50vLs3qn4AdU1duGSJbONlEQ4zoZ8j5427OUUS2L1YUUNoiwrk9ZHEi23cl NzUmogc/eKdG2aPAUPbaCaZrxtn+MNyyFrH8bnSjz8naISSIZ/AOFWowZ9eAcTlR cqo= -----END CERTIFICATE-----Generated at Tue Jul 28 19:45:36 2026 by rpki-client