$ rpki-client -vvvf rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft File: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft (raw, json) Hash identifier: 0hGILPZoImZl8X1W/KZvpRKNUQZZzHbKRZknvmDlgiA= Subject key identifier: 0E:48:1D:EC:BC:F3:C5:D8:5D:52:57:3D:D4:30:33:93:1B:D8:76:26 Authority key identifier: 70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D Certificate issuer: /CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D Certificate serial: 0937985C186B42B070592B8D49548B46963657C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft Manifest number: FD Signing time: Sat 14 Nov 2026 22:52:52 +0000 Manifest this update: Sat 14 Nov 2026 22:47:52 +0000 Manifest next update: Sun 15 Nov 2026 23:16:52 +0000 Files and hashes: 1: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl (hash: anFb6fXEgIxx4/ZjmA26HwDdKRFjpJ/9wIrzWp2YEQ8=) 2: 3232332e32362e31342e302f32332d3234203d3e203231383539.roa (hash: BY1QUUCw56EnMeP3kjSRx3onJmeURrOTVkZdX+EuukE=) 3: 3232332e32362e31342e302f32332d3234203d3e2037343833.roa (hash: EeYUqixDoPSEeN8sw/ZeQjCxnACjgv6gNGFQp+CTsoM=) 4: 3130332e3137352e3139342e302f32332d3234203d3e2037343833.roa (hash: 5l2+J4Wo84X5+Yl5nqEN6UeiO9PszuY1Tb4AzIBJh3U=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:37:98:5c:18:6b:42:b0:70:59:2b:8d:49:54:8b:46:96:36:57:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D Validity Not Before: Nov 14 22:47:52 2026 GMT Not After : Nov 15 23:16:52 2026 GMT Subject: CN=0E481DECBCF3C5D85D52573DD43033931BD87626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:2d:01:5c:8d:48:7f:a2:83:d1:30:05:90: 8d:1c:f0:9c:54:d7:5c:cb:c1:7d:38:f3:74:81:19: 94:2f:65:58:87:9f:73:ed:bf:2e:fe:42:9e:5b:9e: d9:68:b7:33:5c:01:86:37:a9:b2:a9:50:d7:e6:29: e7:48:cb:bf:5f:90:47:3e:9f:b4:df:ac:85:9c:da: ad:1d:ac:b4:52:87:17:b1:61:6a:87:d0:32:59:db: 77:32:15:26:94:59:1a:32:e2:58:97:91:0c:95:97: 2a:e3:e3:fb:a8:18:76:ab:aa:ee:6d:95:4d:0c:53: 05:1f:d4:fc:73:3e:fd:e5:0d:c4:83:45:9c:7c:d7: a1:15:31:24:30:04:fa:8b:fc:fe:20:28:f7:8f:86: 9a:eb:b1:6b:e8:8e:ad:69:b5:a8:d6:a2:80:90:8e: 1a:74:b1:f3:39:8a:ab:3b:d1:ae:b3:fe:27:a8:83: 90:ab:10:e6:9d:cb:44:bb:d6:ed:03:e9:f5:4b:4e: b0:f3:97:26:e4:58:65:0e:91:21:ec:63:ef:96:b8: 1e:aa:45:e2:ba:1f:a2:fb:c7:aa:39:eb:12:f0:fb: d2:68:46:1c:ee:dd:ec:4d:0a:56:56:f3:71:df:63: 14:31:a5:68:db:d5:32:2d:e7:0e:06:7b:9e:de:d6: ef:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:48:1D:EC:BC:F3:C5:D8:5D:52:57:3D:D4:30:33:93:1B:D8:76:26 X509v3 Authority Key Identifier: keyid:70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d4:d5:6b:88:c8:e1:78:c6:ba:1c:5b:5c:29:e8:a3:be:31: 5b:47:7b:5e:52:83:ca:00:d6:7d:58:ec:d9:00:b5:4b:48:8b: 5b:e1:b1:60:4c:2d:e5:d7:19:48:e1:c2:a3:9f:a3:ce:d0:6e: 13:77:f4:c4:9b:65:fd:99:e2:9e:a5:6c:e3:57:4a:99:80:81: 4d:52:5b:a0:ae:9f:4c:18:64:d7:37:13:53:eb:4c:ca:a9:4b: 1b:da:e0:43:32:29:d1:9e:8c:70:f9:55:9c:2d:0f:63:91:91: e2:07:30:6e:da:cd:f5:29:7c:54:76:ee:6f:e1:17:df:9b:e6: 0a:49:c1:ec:37:2e:91:4b:d4:86:c8:ea:9d:97:34:ae:76:d5: cc:53:7a:12:14:1a:42:dc:cb:e1:6d:f3:b8:a0:3d:1a:98:a5: 8b:d5:d5:e3:df:e2:6e:82:4f:bd:94:e9:1d:74:ea:f6:9a:90: e0:22:71:69:11:a2:37:05:d4:5e:8b:32:23:4d:8b:f2:28:d4: 41:62:ea:bf:c7:4f:4e:de:35:47:c6:ae:94:4c:77:b0:d2:84: 4b:ba:2f:4f:be:7b:a9:7b:06:c0:ba:05:32:5a:e8:d7:7d:5c: ba:50:d8:b1:db:74:5b:79:95:72:70:0e:a3:d6:c0:59:d9:54: 8c:49:34:fa -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCTeYXBhrQrBwWSuNSVSLRpY2V8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA3QzA1REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzRE Q0Q2MTQxRDAeFw0yNjExMTQyMjQ3NTJaFw0yNjExMTUyMzE2NTJaMDMxMTAvBgNV BAMTKDBFNDgxREVDQkNGM0M1RDg1RDUyNTczREQ0MzAzMzkzMUJEODc2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgty0BXI1If6KD0TAFkI0c8JxU 11zLwX0483SBGZQvZViHn3Ptvy7+Qp5bntlotzNcAYY3qbKpUNfmKedIy79fkEc+ n7TfrIWc2q0drLRShxexYWqH0DJZ23cyFSaUWRoy4liXkQyVlyrj4/uoGHarqu5t lU0MUwUf1PxzPv3lDcSDRZx816EVMSQwBPqL/P4gKPePhprrsWvojq1ptajWooCQ jhp0sfM5iqs70a6z/ieog5CrEOady0S71u0D6fVLTrDzlybkWGUOkSHsY++WuB6q ReK6H6L7x6o56xLw+9JoRhzu3exNClZW83HfYxQxpWjb1TIt5w4Ge57e1u/JAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUDkgd7LzzxdhdUlc91DAzkxvYdiYwHwYDVR0j BBgwFoAUcHwF3AaJHrSivrGGqLthxNzWFB0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFHSUND VUJFLzAvNzA3QzA1REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzREQ0Q2MTQxRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS83MDdDMDVEQzA2ODkxRUI0QTJCRUIxODZB OEJCNjFDNERDRDYxNDFELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFHSUNDVUJFLzAvNzA3QzA1 REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzREQ0Q2MTQxRC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB7U 1WuIyOF4xrocW1wp6KO+MVtHe15Sg8oA1n1Y7NkAtUtIi1vhsWBMLeXXGUjhwqOf o87QbhN39MSbZf2Z4p6lbONXSpmAgU1SW6Cun0wYZNc3E1PrTMqpSxva4EMyKdGe jHD5VZwtD2ORkeIHMG7azfUpfFR27m/hF9+b5gpJwew3LpFL1IbI6p2XNK521cxT ehIUGkLcy+Ft87igPRqYpYvV1ePf4m6CT72U6R106vaakOAicWkRojcF1F6LMiNN i/Io1EFi6r/HT07eNUfGrpRMd7DShEu6L0++e6l7BsC6BTJa6Nd9XLpQ2LHbdFt5 lXJwDqPWwFnZVIxJNPo= -----END CERTIFICATE-----Generated at Sun Nov 15 12:40:09 2026 by rpki-client