$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft File: 4F029ED27C82844F72C10999E3E77841D888E8A5.mft (raw, json) Hash identifier: uD8CU56L+oA33n8efXaCJyILK7tfp1a7MD4KHYBdWk4= Subject key identifier: C6:73:E1:30:31:4D:65:A9:E6:29:4A:9B:EC:56:79:5B:13:66:1A:6A Authority key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 Certificate issuer: /CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Certificate serial: 1995968F82AAA82C5C2ECC4B97E3ADD98A27B175 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft Manifest number: 6C Signing time: Tue 28 Jul 2026 08:07:59 +0000 Manifest this update: Tue 28 Jul 2026 08:02:59 +0000 Manifest next update: Wed 29 Jul 2026 10:03:59 +0000 Files and hashes: 1: 3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa (hash: SV9WMKCo6lqqmo4TlONcJhx+nWmHLOoLn96eGrQjUkk=) 2: 4F029ED27C82844F72C10999E3E77841D888E8A5.crl (hash: bCag4CAmOv6Fm+txltTBqp82SP83rwnEpsp7PeaPM+g=) 3: 3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa (hash: UO7gvVHXWOf9xNngHpaJcF4QjHFiPZ4bxN2SGXLKeFI=) 4: 3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa (hash: mrGHrLU6IhLiSFGZj4xNfph3sl5DRFLwfN+J+P0jaGY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 10:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:95:96:8f:82:aa:a8:2c:5c:2e:cc:4b:97:e3:ad:d9:8a:27:b1:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Validity Not Before: Jul 28 08:02:59 2026 GMT Not After : Jul 29 10:03:59 2026 GMT Subject: CN=C673E130314D65A9E6294A9BEC56795B13661A6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bd:72:f0:88:6c:4c:2b:20:0e:50:f2:67:02: ea:eb:1e:54:b6:ed:c3:f3:76:45:9d:49:b8:0b:37: 29:0b:6e:6d:48:49:1c:ce:08:94:cf:42:57:95:f4: b5:72:06:f9:39:96:40:3d:5f:f6:77:a0:16:f8:4d: 59:e2:a1:92:26:11:11:56:df:a3:dd:bf:b9:71:12: aa:23:d1:b3:eb:e2:1d:fd:0a:85:f2:c8:ab:80:00: 3e:4d:ad:60:ef:fc:7d:b2:6a:a5:87:94:4c:34:74: f2:d1:8d:21:81:a3:ba:2b:9a:1f:88:32:79:91:7f: 0d:16:dd:65:36:da:e6:2b:3a:b0:b4:65:6b:07:06: 82:b9:7e:94:73:8b:6f:33:69:7b:54:1b:33:aa:99: e6:2d:f4:b3:9d:f1:32:95:e2:50:ea:8d:0c:43:d0: 08:d4:44:85:81:d4:ce:01:64:24:d1:d1:26:48:e8: b7:bc:ff:ac:59:30:98:02:f1:ac:16:89:9b:e5:04: dc:8e:f0:00:10:e2:23:35:30:7b:b6:f2:69:8e:3c: da:3f:1b:58:2c:b9:2f:84:7f:9a:fc:a2:b7:99:27: be:1e:ac:93:33:d7:0b:39:a3:7a:ac:9c:57:9a:59: 97:2a:1e:c9:6c:4e:86:f2:6b:2c:4c:8d:07:09:49: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:73:E1:30:31:4D:65:A9:E6:29:4A:9B:EC:56:79:5B:13:66:1A:6A X509v3 Authority Key Identifier: keyid:4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6e:47:69:78:bc:fd:dd:e4:8c:e8:1f:73:93:fd:b6:93:d9: d9:24:54:6c:a9:db:06:7a:9c:13:c2:35:24:84:e0:06:18:cb: f9:01:33:84:f8:9d:6d:6d:d3:ab:6b:20:37:17:9b:33:3f:17: 3b:4b:1d:85:4c:44:4c:97:18:91:29:46:fc:22:69:a4:d1:b1: c1:dd:21:ce:9d:a7:50:5d:09:b2:9b:c9:7b:2e:3f:27:75:24: ba:4d:b5:2b:ea:68:25:2c:53:e0:96:05:32:f2:3a:e1:2a:24: c0:4d:6f:9f:83:dc:04:be:bf:64:84:79:df:2f:1e:04:75:2f: 9f:db:db:67:f1:3b:ea:e9:ad:98:9a:9c:d5:41:c7:ce:cf:0d: 48:b7:5a:3a:c9:a6:a5:70:64:c9:17:1d:80:87:ad:58:e3:99: 62:00:8b:e8:86:65:04:ac:bd:16:91:ff:61:42:34:ab:0a:b3: 3c:fc:84:df:55:55:0c:cf:32:91:59:2d:66:22:89:93:49:1b: a7:62:b1:1d:44:1a:01:70:a8:2f:b0:21:ca:21:2d:f1:aa:30: fb:fe:d9:8d:3d:78:70:0f:44:0f:a9:d7:78:42:62:64:8a:ea: 50:8f:21:7c:44:67:fe:bf:23:75:c8:55:d1:51:b5:03:c0:58: 48:55:41:2c -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUGZWWj4KqqCxcLsxLl+Ot2YonsXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjlFRDI3QzgyODQ0RjcyQzEwOTk5RTNFNzc4NDFE ODg4RThBNTAeFw0yNjA3MjgwODAyNTlaFw0yNjA3MjkxMDAzNTlaMDMxMTAvBgNV BAMTKEM2NzNFMTMwMzE0RDY1QTlFNjI5NEE5QkVDNTY3OTVCMTM2NjFBNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYvXLwiGxMKyAOUPJnAurrHlS2 7cPzdkWdSbgLNykLbm1ISRzOCJTPQleV9LVyBvk5lkA9X/Z3oBb4TVnioZImERFW 36Pdv7lxEqoj0bPr4h39CoXyyKuAAD5NrWDv/H2yaqWHlEw0dPLRjSGBo7ormh+I MnmRfw0W3WU22uYrOrC0ZWsHBoK5fpRzi28zaXtUGzOqmeYt9LOd8TKV4lDqjQxD 0AjURIWB1M4BZCTR0SZI6Le8/6xZMJgC8awWiZvlBNyO8AAQ4iM1MHu28mmOPNo/ G1gsuS+Ef5r8oreZJ74erJMz1ws5o3qsnFeaWZcqHslsTobyayxMjQcJSYovAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUxnPhMDFNZanmKUqb7FZ5WxNmGmowHwYDVR0j BBgwFoAUTwKe0nyChE9ywQmZ4+d4QdiI6KUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v MS80RjAyOUVEMjdDODI4NDRGNzJDMTA5OTlFM0U3Nzg0MUQ4ODhFOEE1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzRGMDI5RUQyN0M4Mjg0NEY3MkMxMDk5OUUzRTc3 ODQxRDg4OEU4QTUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8xLzRGMDI5RUQyN0M4Mjg0 NEY3MkMxMDk5OUUzRTc3ODQxRDg4OEU4QTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgbkdpeLz93eSM 6B9zk/22k9nZJFRsqdsGepwTwjUkhOAGGMv5ATOE+J1tbdOrayA3F5szPxc7Sx2F TERMlxiRKUb8Immk0bHB3SHOnadQXQmym8l7Lj8ndSS6TbUr6mglLFPglgUy8jrh KiTATW+fg9wEvr9khHnfLx4EdS+f29tn8Tvq6a2YmpzVQcfOzw1It1o6yaalcGTJ Fx2Ah61Y45liAIvohmUErL0Wkf9hQjSrCrM8/ITfVVUMzzKRWS1mIomTSRunYrEd RBoBcKgvsCHKIS3xqjD7/tmNPXhwD0QPqdd4QmJkiupQjyF8RGf+vyN1yFXRUbUD wFhIVUEs -----END CERTIFICATE-----Generated at Wed Jul 29 01:00:52 2026 by rpki-client