$ rpki-client -vvf rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft File: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft (raw, json) Hash identifier: l4vj0GqmhH+9Y1PAv6JUgRVkLreVRzjp01Jer0Rk/og= Subject key identifier: 5A:60:5F:DA:76:CA:78:E6:3D:55:EC:22:B1:57:16:7F:9A:14:83:CA Authority key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA Certificate issuer: /CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Certificate serial: 57CE122C0417A49C2BB558AF6E0E95D5A999F7CC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft Manifest number: 6D Signing time: Tue 28 Jul 2026 05:07:35 +0000 Manifest this update: Tue 28 Jul 2026 05:02:35 +0000 Manifest next update: Wed 29 Jul 2026 05:38:35 +0000 Files and hashes: 1: 3130332e3137332e39342e302f32332d3234203d3e2039393230.roa (hash: 4AY9mKhgxxuuSl6y1Sy2exIP/SFNw2gXcIDmergV1Y0=) 2: 3130332e3137332e39352e302f32342d3234203d3e2039393230.roa (hash: GRWZ7hnM+/dWxb1R4FqblAJoXVc3WKwBr5Lvm8NY3Iw=) 3: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl (hash: QhdS+Aay0ZRDm+8le2Ym+H+28xk5vqlTKGy/JeZ/8cI=) 4: 3130332e3137332e39342e302f32342d3234203d3e2039393230.roa (hash: LLLHTnX1lDVfIT/USPcy8uRSK7AEjVy8r3OHlXaKRtA=) 5: 323430373a653463303a313a3a2f34382d3438203d3e2039393230.roa (hash: SPZzDHWF7IOGU0RefkHatr6T+UuWJ43wu5dvfPsUlBc=) 6: 3130332e3137332e39342e302f32332d3234203d3e20313532363134.roa (hash: DFwmEzDSWwn1n/LKb3VnZN0eid9zGs6vXBGXUYxrvVE=) 7: 323430373a653463303a3a2f34382d3438203d3e20313532363134.roa (hash: vgzFcwGEYe/SuHzv/bradPPbtlCxt1g9+kfxNVcgqL0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 05:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ce:12:2c:04:17:a4:9c:2b:b5:58:af:6e:0e:95:d5:a9:99:f7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Validity Not Before: Jul 28 05:02:35 2026 GMT Not After : Jul 29 05:38:35 2026 GMT Subject: CN=5A605FDA76CA78E63D55EC22B157167F9A1483CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cb:05:32:58:dc:93:df:d9:85:5b:dd:5d:67: d9:5e:63:50:20:6e:ed:00:cc:70:e0:fa:60:18:39: 90:e5:28:56:19:d7:a1:30:31:43:8d:23:1b:83:6e: 28:6a:d5:22:c9:fe:0f:19:b7:a6:50:30:b4:41:55: 1c:ec:f3:c0:f1:f6:7d:0d:65:00:d6:53:df:a6:d3: e2:22:0f:37:ca:32:87:c5:42:fb:32:30:7d:b4:5e: f8:c2:30:07:2b:07:5a:b5:43:ca:ec:52:dd:e9:73: e2:13:2e:73:e2:c8:af:aa:ea:86:aa:6b:3b:81:ba: f9:61:c8:55:88:54:9d:8b:58:0e:6c:41:b6:94:14: d5:79:cd:b4:9f:fe:0c:63:45:d4:b6:65:52:a5:cc: 72:53:5d:dc:5f:2b:70:91:c2:8d:27:a5:39:73:93: 24:fc:44:b2:27:02:9e:a3:85:bc:d7:10:01:bc:66: 6d:df:06:1a:bc:a5:c0:0f:59:72:74:c1:ab:bd:81: b7:c4:64:0a:45:11:1c:97:fe:bf:4d:f4:54:c4:d5: 70:53:e4:0f:60:49:75:0e:6e:f0:c6:ea:8a:4e:56: b5:67:a7:99:bb:0b:91:8e:ae:9a:dd:02:18:fb:86: c1:c4:a9:fc:da:26:aa:98:d8:7f:d1:c3:09:49:63: 68:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:60:5F:DA:76:CA:78:E6:3D:55:EC:22:B1:57:16:7F:9A:14:83:CA X509v3 Authority Key Identifier: keyid:41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:56:5b:bb:21:ee:e9:4e:f6:c6:54:e6:58:d3:48:74:e9:87: 7c:d8:bf:c6:d0:33:00:d9:e6:bb:87:8c:51:b1:9f:ea:21:41: 05:3d:b8:e9:ca:e2:5d:3b:fc:4e:38:11:4e:ef:04:80:c6:6c: df:04:f3:6a:53:7f:b8:ec:52:61:5f:2c:71:bf:c8:de:d1:5d: 55:76:75:25:ad:40:23:51:ca:d5:0c:94:3c:d7:da:04:4d:7c: 98:79:8f:6c:2a:2b:03:5c:fc:53:9b:db:fb:2a:7b:6e:cd:c5: 80:d1:35:3a:2b:55:00:4f:ea:b6:e3:23:4b:91:b6:2c:6b:26: 6c:ff:7f:57:6f:e8:e1:8c:c3:9b:7f:57:a3:9a:50:2c:f4:c5: fd:f4:9c:20:9a:b3:e4:b8:3f:8a:09:51:7e:b4:97:2e:cc:98: cc:9f:39:fb:49:2a:9d:3f:dd:8e:d2:a1:a7:13:fd:4c:88:b1: a1:b4:98:72:2a:5f:b3:b4:7a:6e:1b:ce:55:4e:14:08:1b:08: bf:63:2e:59:ef:85:98:7e:60:34:9f:23:dc:d3:76:33:fd:2f: 1b:53:c4:89:26:18:4f:8c:35:3c:ce:6d:00:d9:bd:dd:77:11: e1:0f:ac:d0:97:19:c8:8d:c9:4e:95:ac:2d:c6:3b:8e:b3:bc: d7:ed:6c:0c -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUV84SLAQXpJwrtVivbg6V1amZ98wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFCRUI2NTY2OEUxNjQ5RURFOTcyOEU0RkY0ODU5MUZB MEM1ODJCQTAeFw0yNjA3MjgwNTAyMzVaFw0yNjA3MjkwNTM4MzVaMDMxMTAvBgNV BAMTKDVBNjA1RkRBNzZDQTc4RTYzRDU1RUMyMkIxNTcxNjdGOUExNDgzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSywUyWNyT39mFW91dZ9leY1Ag bu0AzHDg+mAYOZDlKFYZ16EwMUONIxuDbihq1SLJ/g8Zt6ZQMLRBVRzs88Dx9n0N ZQDWU9+m0+IiDzfKMofFQvsyMH20XvjCMAcrB1q1Q8rsUt3pc+ITLnPiyK+q6oaq azuBuvlhyFWIVJ2LWA5sQbaUFNV5zbSf/gxjRdS2ZVKlzHJTXdxfK3CRwo0npTlz kyT8RLInAp6jhbzXEAG8Zm3fBhq8pcAPWXJ0wau9gbfEZApFERyX/r9N9FTE1XBT 5A9gSXUObvDG6opOVrVnp5m7C5GOrprdAhj7hsHEqfzaJqqY2H/RwwlJY2ijAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUWmBf2nbKeOY9VewisVcWf5oUg8owHwYDVR0j BBgwFoAUQb62VmjhZJ7elyjk/0hZH6DFgrowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVNUVkMv MC80MUJFQjY1NjY4RTE2NDlFREU5NzI4RTRGRjQ4NTkxRkEwQzU4MkJBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzQxQkVCNjU2NjhFMTY0OUVERTk3MjhFNEZGNDg1 OTFGQTBDNTgyQkEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JU1RWQy8wLzQxQkVCNjU2NjhFMTY0 OUVERTk3MjhFNEZGNDg1OTFGQTBDNTgyQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhVlu7Ie7pTvbG VOZY00h06Yd82L/G0DMA2ea7h4xRsZ/qIUEFPbjpyuJdO/xOOBFO7wSAxmzfBPNq U3+47FJhXyxxv8je0V1VdnUlrUAjUcrVDJQ819oETXyYeY9sKisDXPxTm9v7Kntu zcWA0TU6K1UAT+q24yNLkbYsayZs/39Xb+jhjMObf1ejmlAs9MX99JwgmrPkuD+K CVF+tJcuzJjMnzn7SSqdP92O0qGnE/1MiLGhtJhyKl+ztHpuG85VThQIGwi/Yy5Z 74WYfmA0nyPc03Yz/S8bU8SJJhhPjDU8zm0A2b3ddxHhD6zQlxnIjclOlawtxjuO s7zX7WwM -----END CERTIFICATE-----Generated at Tue Jul 28 19:37:31 2026 by rpki-client