$ rpki-client -vvf rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft File: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft (raw, json) Hash identifier: GpmcqZTNzeCHWw3Yms8AMGa1rlZ3/xTYCoA3pRIztSg= Subject key identifier: 64:3C:38:22:04:8E:45:64:84:F0:77:1D:9C:E4:1E:30:EA:6C:B5:FC Authority key identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 Certificate issuer: /CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Certificate serial: 27C1435400E1F1DFC56B95DB788DB98AA2C48403 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft Manifest number: 34 Signing time: Tue 16 Jun 2026 19:20:46 +0000 Manifest this update: Tue 16 Jun 2026 19:15:46 +0000 Manifest next update: Wed 17 Jun 2026 22:55:46 +0000 Files and hashes: 1: 3136302e3139312e342e302f32332d3234203d3e203338303432.roa (hash: uC4SAyffO7EbE3rGS0jHS6n7C39qBWkfFa7uUUduW8s=) 2: 3136302e3139312e342e302f32332d3234203d3e20313334383233.roa (hash: MvSn3+N3E0x49y2zyFZseXhPFbhPYX7FDxa/hvK0XxA=) 3: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl (hash: ZnlB//1s0OpohgRf/8x89rAUz7rpmfFOJFyAnbaYhT8=) 4: 3136302e3139312e342e302f32332d3234203d3e20313438393936.roa (hash: WDQ6isA31vRFBEKAPNTN2h03bliS7XG3+ZDUsxu5ekM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c1:43:54:00:e1:f1:df:c5:6b:95:db:78:8d:b9:8a:a2:c4:84:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Validity Not Before: Jun 16 19:15:46 2026 GMT Not After : Jun 17 22:55:46 2026 GMT Subject: CN=643C3822048E456484F0771D9CE41E30EA6CB5FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0e:8a:d9:c4:ad:31:5f:6d:fa:dc:40:03:3f: df:66:e2:aa:a7:d2:ae:f4:f4:1d:74:c9:d1:14:5e: 86:08:ad:47:d8:16:f4:a4:78:3e:d0:39:06:57:51: 8b:1e:4f:b6:70:ca:b7:35:e7:41:e9:4f:4e:0a:89: d6:14:e8:a5:24:06:fc:9c:37:4e:c4:e3:e1:d6:8c: cf:23:cf:6f:32:05:da:49:04:c8:e4:2e:49:5e:4b: 26:b6:e3:60:9c:ae:2c:00:e2:f0:eb:f5:62:80:62: 05:32:f5:d2:36:4f:02:45:ca:12:1d:da:ef:ed:82: c4:68:64:3d:b3:58:99:c1:fe:30:be:a4:01:10:07: 9b:e8:22:77:40:e6:87:27:01:4f:24:19:68:f2:1d: b2:3f:eb:74:3f:5f:c7:c5:4f:b8:0d:94:c3:7c:5d: 73:4f:13:56:58:34:5a:e9:df:fc:ec:2e:28:22:03: 69:80:ec:5a:df:2e:37:62:dc:ef:0e:43:62:c8:9f: fa:b6:1c:4a:f9:4b:1c:3f:e2:fd:d7:37:ba:ff:3a: a1:70:45:4d:3c:0b:6b:b8:17:c7:f5:fc:b4:09:e4: 93:78:fc:7e:4e:12:03:44:4d:9d:18:ac:9f:97:b7: 0e:92:a5:2d:de:9c:d0:ea:e4:62:40:7d:21:a5:cd: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3C:38:22:04:8E:45:64:84:F0:77:1D:9C:E4:1E:30:EA:6C:B5:FC X509v3 Authority Key Identifier: keyid:EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:16:71:ac:17:01:ee:ed:7c:48:42:6c:2c:92:f1:f1:48:04: f4:41:7b:ab:f2:4e:ab:5c:e7:4a:12:bc:65:23:e4:7a:94:9c: e0:68:b3:54:5b:eb:6c:30:14:63:9c:2d:68:9c:48:1b:c3:8e: 08:84:7c:37:08:de:a1:3f:70:5d:04:15:ed:bd:af:c1:2f:a9: 9e:ee:89:3d:ad:19:04:ab:b3:1d:92:74:a6:74:25:69:e0:4a: d0:88:30:6e:cf:04:9c:18:0f:28:1d:ba:14:25:d6:4a:72:b4: 28:b3:3e:65:56:97:0e:98:74:10:97:2d:d9:00:01:b9:90:49: c1:e6:90:37:ed:6a:68:1f:23:4f:d7:9e:60:9b:95:2c:1b:96: 1c:70:15:f2:54:3f:fe:df:fb:02:60:a3:79:65:3f:62:c0:f4: b3:00:ed:4e:14:cf:f0:ab:02:0f:52:8d:62:51:ee:67:b7:b8: 5c:30:4f:1d:7d:42:ce:01:9c:30:b1:17:a2:0f:96:c3:a2:fb: 43:50:e9:ac:b5:dd:6c:f4:15:30:c0:39:e6:c5:61:57:45:1c: 66:b9:53:ff:65:b1:1b:3c:b3:99:d6:ac:19:71:e8:0b:42:42: c8:8c:91:f9:51:62:84:a7:7c:10:99:6a:34:f3:03:60:98:f4: 5e:ca:85:3f -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUJ8FDVADh8d/Fa5XbeI25iqLEhAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYxRDEwNDg0RUZBNzlBQkMwMThGQTBFRkE3RjNCMEMx NkVFNDNBNzAeFw0yNjA2MTYxOTE1NDZaFw0yNjA2MTcyMjU1NDZaMDMxMTAvBgNV BAMTKDY0M0MzODIyMDQ4RTQ1NjQ4NEYwNzcxRDlDRTQxRTMwRUE2Q0I1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLDorZxK0xX2363EADP99m4qqn 0q709B10ydEUXoYIrUfYFvSkeD7QOQZXUYseT7Zwyrc150HpT04KidYU6KUkBvyc N07E4+HWjM8jz28yBdpJBMjkLkleSya242CcriwA4vDr9WKAYgUy9dI2TwJFyhId 2u/tgsRoZD2zWJnB/jC+pAEQB5voIndA5ocnAU8kGWjyHbI/63Q/X8fFT7gNlMN8 XXNPE1ZYNFrp3/zsLigiA2mA7FrfLjdi3O8OQ2LIn/q2HEr5Sxw/4v3XN7r/OqFw RU08C2u4F8f1/LQJ5JN4/H5OEgNETZ0YrJ+Xtw6SpS3enNDq5GJAfSGlzTObAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUZDw4IgSORWSE8HcdnOQeMOpstfwwHwYDVR0j BBgwFoAU7x0QSE76eavAGPoO+n87DBbuQ6cwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1ZS0wv MC9FRjFEMTA0ODRFRkE3OUFCQzAxOEZBMEVGQTdGM0IwQzE2RUU0M0E3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0VGMUQxMDQ4NEVGQTc5QUJDMDE4RkEwRUZBN0Yz QjBDMTZFRTQzQTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTVlLTC8wL0VGMUQxMDQ4NEVGQTc5 QUJDMDE4RkEwRUZBN0YzQjBDMTZFRTQzQTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqFnGsFwHu7XxI QmwskvHxSAT0QXur8k6rXOdKErxlI+R6lJzgaLNUW+tsMBRjnC1onEgbw44IhHw3 CN6hP3BdBBXtva/BL6me7ok9rRkEq7MdknSmdCVp4ErQiDBuzwScGA8oHboUJdZK crQosz5lVpcOmHQQly3ZAAG5kEnB5pA37WpoHyNP155gm5UsG5YccBXyVD/+3/sC YKN5ZT9iwPSzAO1OFM/wqwIPUo1iUe5nt7hcME8dfULOAZwwsReiD5bDovtDUOms td1s9BUwwDnmxWFXRRxmuVP/ZbEbPLOZ1qwZcegLQkLIjJH5UWKEp3wQmWo08wNg mPReyoU/ -----END CERTIFICATE-----Generated at Wed Jun 17 10:07:19 2026 by rpki-client