$ rpki-client -vvf rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft File: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft (raw, json) Hash identifier: XKZGU7TS3uwJvAPcMxxjy6+nbI1RdmGlGoLAAbJBZLE= Subject key identifier: C2:9C:D3:B2:86:4C:A1:75:8C:0C:9A:3A:01:27:14:A9:C3:CB:37:7C Authority key identifier: E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB Certificate issuer: /CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB Certificate serial: 7F949A7F4D21BA9E8121F20A9BE7E03ECD662219 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft Manifest number: 31 Signing time: Sat 13 Jun 2026 00:08:28 +0000 Manifest this update: Sat 13 Jun 2026 00:03:28 +0000 Manifest next update: Sun 14 Jun 2026 03:48:28 +0000 Files and hashes: 1: 323430313a383432303a3a2f33322d3438203d3e203332353935.roa (hash: 7IK6gvzs6uMwoViSpBOdjJrk5WxLH5pe447RiZaITJY=) 2: 323430313a383432303a3a2f33322d3438203d3e2039393233.roa (hash: mAMCDxxdS5D0xlBjJmg5NjQv1GONdD1Fp7YNezXC9T8=) 3: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl (hash: H2Fo75O022NObzCyv6Q1/N65yVpMrjdzoPSQwWnwBL0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:94:9a:7f:4d:21:ba:9e:81:21:f2:0a:9b:e7:e0:3e:cd:66:22:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB Validity Not Before: Jun 13 00:03:28 2026 GMT Not After : Jun 14 03:48:28 2026 GMT Subject: CN=C29CD3B2864CA1758C0C9A3A012714A9C3CB377C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:5f:df:42:cd:7d:10:c3:e6:79:0b:58:9d: e0:1e:07:15:fe:ed:d2:08:a8:17:ae:fc:88:43:aa: 4b:53:c5:c4:6e:dd:76:12:36:4b:79:c8:d7:0e:b0: ee:3f:35:de:a3:a1:bb:03:61:b5:c5:a2:37:ad:9a: c3:85:f2:2b:07:bc:b1:2d:83:4e:1c:c9:6b:60:85: c6:5a:32:6e:0a:31:a2:b8:4e:11:19:6e:a6:f9:ff: 5d:4e:3e:6e:a3:5a:ba:89:de:98:2d:39:2b:8e:19: 9e:3b:f8:9f:55:b3:ad:43:8b:a4:77:f2:9a:ab:9e: 4e:cb:a1:3b:92:28:19:61:67:5b:24:54:72:8c:a2: 5f:fb:cb:2f:6f:d9:1d:6c:c2:8f:88:bb:24:66:60: f9:d9:f9:fa:ba:a4:c6:88:14:bc:41:65:ae:3d:3f: 85:98:74:89:36:f2:9a:9b:c7:7b:ba:6c:27:e0:f4: 30:bb:6c:dd:6f:b1:63:4f:f6:81:47:25:40:f7:86: 1f:13:77:1f:80:db:08:86:54:86:19:e2:80:77:be: e9:ee:9d:fe:0b:7c:ac:95:10:42:37:d2:7c:52:1b: 5a:9c:e2:e7:a2:be:c6:df:51:6d:ec:a3:56:3a:d0: 37:59:61:07:5b:f1:57:19:30:f3:c4:c4:09:01:0d: 4e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9C:D3:B2:86:4C:A1:75:8C:0C:9A:3A:01:27:14:A9:C3:CB:37:7C X509v3 Authority Key Identifier: keyid:E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:64:20:7d:0a:f1:b5:00:c6:d7:2c:71:06:94:69:32:48:40: 0e:23:6b:c9:71:71:6c:aa:ad:28:9f:7a:5d:a9:c0:89:9b:82: 86:6f:df:23:d3:f9:c1:54:bf:f2:d6:5c:26:74:b2:c0:d0:94: 06:65:b9:83:e1:13:8c:52:c3:38:1a:84:c9:4d:ab:8a:cd:dc: 09:41:59:fb:ea:d1:36:9d:36:2f:82:a8:ff:15:05:b8:f7:52: 2e:a1:7b:b0:9b:47:3b:9e:a4:d0:85:9d:e1:64:29:cf:99:28: 44:c6:c6:0a:c3:3b:47:c5:c9:16:c9:0c:4d:27:a4:99:8e:4b: ac:79:e7:b9:f0:03:9c:34:95:59:f9:b8:56:f9:e3:ea:1f:d5: 30:87:99:70:58:81:20:91:08:e9:d8:5c:58:2f:a7:15:e7:02: 71:b2:b4:65:0d:35:cb:ff:92:f8:17:86:0b:a4:e0:9a:60:4c: 87:dc:97:3e:b3:04:ac:1f:c0:e2:36:69:73:82:45:58:65:f3: 37:71:72:fd:63:d1:8a:fc:d7:9b:92:26:67:21:df:7f:77:49: 47:08:6b:35:99:66:fc:64:99:3d:8a:74:53:fc:ec:bc:4a:66: bf:f5:ff:ff:ee:7c:ff:16:a9:da:01:47:eb:dc:0e:21:6e:8a: 1e:cc:99:4d -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUf5Saf00hup6BIfIKm+fgPs1mIhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVBQTNCMEY5RjU4QzkzNDIxQzY0ODIwNEFCNDMxQTRB REM0QjBDQjAeFw0yNjA2MTMwMDAzMjhaFw0yNjA2MTQwMzQ4MjhaMDMxMTAvBgNV BAMTKEMyOUNEM0IyODY0Q0ExNzU4QzBDOUEzQTAxMjcxNEE5QzNDQjM3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRy1/fQs19EMPmeQtYneAeBxX+ 7dIIqBeu/IhDqktTxcRu3XYSNkt5yNcOsO4/Nd6jobsDYbXFojetmsOF8isHvLEt g04cyWtghcZaMm4KMaK4ThEZbqb5/11OPm6jWrqJ3pgtOSuOGZ47+J9Vs61Di6R3 8pqrnk7LoTuSKBlhZ1skVHKMol/7yy9v2R1swo+IuyRmYPnZ+fq6pMaIFLxBZa49 P4WYdIk28pqbx3u6bCfg9DC7bN1vsWNP9oFHJUD3hh8Tdx+A2wiGVIYZ4oB3vunu nf4LfKyVEEI30nxSG1qc4ueivsbfUW3so1Y60DdZYQdb8VcZMPPExAkBDU5jAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUwpzTsoZMoXWMDJo6AScUqcPLN3wwHwYDVR0j BBgwFoAU5ao7D59YyTQhxkggSrQxpK3EsMswDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTTJOSU0v MC9FNUFBM0IwRjlGNThDOTM0MjFDNjQ4MjA0QUI0MzFBNEFEQzRCMENCLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0U1QUEzQjBGOUY1OEM5MzQyMUM2NDgyMDRBQjQz MUE0QURDNEIwQ0IuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NMk5JTS8wL0U1QUEzQjBGOUY1OEM5 MzQyMUM2NDgyMDRBQjQzMUE0QURDNEIwQ0IubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUZCB9CvG1AMbX LHEGlGkySEAOI2vJcXFsqq0on3pdqcCJm4KGb98j0/nBVL/y1lwmdLLA0JQGZbmD 4ROMUsM4GoTJTauKzdwJQVn76tE2nTYvgqj/FQW491IuoXuwm0c7nqTQhZ3hZCnP mShExsYKwztHxckWyQxNJ6SZjkuseee58AOcNJVZ+bhW+ePqH9Uwh5lwWIEgkQjp 2FxYL6cV5wJxsrRlDTXL/5L4F4YLpOCaYEyH3Jc+swSsH8DiNmlzgkVYZfM3cXL9 Y9GK/NebkiZnId9/d0lHCGs1mWb8ZJk9inRT/Oy8Sma/9f//7nz/FqnaAUfr3A4h booezJlN -----END CERTIFICATE-----Generated at Sat Jun 13 10:17:42 2026 by rpki-client