$ rpki-client -vvf rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft File: C4FE0149FC774090A5B6304E8968380A1F1B0426.mft (raw, json) Hash identifier: U3sC59amUpVXkVAHp02k+ZrJ1PG5O2UZALBoINYDSOw= Subject key identifier: 21:69:92:71:7F:13:4D:33:8E:46:A7:72:46:E9:C5:F3:88:BA:F3:BC Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 Certificate issuer: /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Certificate serial: 14AE46E36E3B0BC401894CEDB127BA1914B217FE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft Manifest number: 33 Signing time: Tue 16 Jun 2026 13:49:53 +0000 Manifest this update: Tue 16 Jun 2026 13:44:53 +0000 Manifest next update: Wed 17 Jun 2026 17:47:53 +0000 Files and hashes: 1: 323430373a643234303a3a2f33322d3438203d3e203138343238.roa (hash: rBUhV/xvRZeEelrs2jyNJogNIGW8G/cMNY2z96YxdgM=) 2: C4FE0149FC774090A5B6304E8968380A1F1B0426.crl (hash: n0dX/L2n64hLQi8U2MnBtFlb4DVStbONqX2oCucTOLo=) 3: 3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa (hash: RmocfnFYGeRr/aQ5L4jWeV+BcjwmA5Wox7nbUvuA0XQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ae:46:e3:6e:3b:0b:c4:01:89:4c:ed:b1:27:ba:19:14:b2:17:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Validity Not Before: Jun 16 13:44:53 2026 GMT Not After : Jun 17 17:47:53 2026 GMT Subject: CN=216992717F134D338E46A77246E9C5F388BAF3BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d6:26:8e:c2:2e:73:b9:cf:20:2b:11:fa:8c: 5c:11:cc:40:66:9d:75:0b:48:c0:37:63:56:a2:12: 4d:93:dd:a2:93:6f:61:18:a4:6f:60:8d:19:db:1c: d0:19:cc:f1:32:de:8d:10:cd:bc:97:62:c4:79:35: 70:aa:34:30:64:63:f5:f5:39:cb:86:28:83:85:e9: ab:40:a5:a7:65:7c:47:e1:c5:75:92:f6:f2:c6:8f: 66:d6:d0:e4:15:ac:57:e4:b4:fc:08:b2:1a:9f:5f: ca:11:b0:04:1b:43:3c:1f:5a:33:07:99:f0:54:15: 71:0a:8c:61:ed:32:5a:de:26:ac:2f:99:e5:d6:88: 5b:aa:66:fa:1c:ff:ed:98:b2:f6:97:e0:6c:6e:8a: ae:94:42:4a:d0:9b:70:24:bf:e4:51:d4:eb:61:43: ef:37:47:5d:04:da:76:fc:65:08:c8:a1:24:91:0b: df:04:bf:d5:9f:2b:89:94:db:05:e7:78:15:f4:7c: 76:59:1a:e1:c9:d3:b8:03:0e:84:ed:75:03:d8:f4: bf:16:29:9a:6b:2f:bc:e4:e0:fe:c0:2c:f7:b5:02: 12:ba:fa:6e:9a:c3:ba:e2:49:8f:92:fe:02:34:05: 0e:07:a3:b3:c3:9d:33:81:85:62:ed:af:8f:f4:0a: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:69:92:71:7F:13:4D:33:8E:46:A7:72:46:E9:C5:F3:88:BA:F3:BC X509v3 Authority Key Identifier: keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b4:95:81:ab:a1:f6:0d:a9:51:ab:39:74:a0:cc:28:73:1f: dc:41:e6:44:e2:f9:db:77:9e:24:bb:3f:40:d9:65:83:48:cf: 5b:92:5b:2e:4b:60:5b:a7:1b:86:4a:df:e9:71:1a:97:e8:c5: a1:0a:40:3f:71:49:34:62:8f:ea:77:5a:62:bf:41:c0:af:e1: 15:d7:eb:d5:52:63:4a:c4:eb:c8:38:13:78:c5:bd:df:2a:46: 33:83:2e:f6:08:ab:47:0d:6b:99:8c:60:2f:9c:3f:45:ce:14: 27:ba:22:af:24:9d:ff:06:2c:db:6d:98:03:72:b7:c8:ca:b2: c7:a0:51:38:dd:00:bd:59:7b:1d:94:41:9f:13:d1:da:5d:23: 5d:11:93:82:be:c8:03:a1:ca:a7:e3:6c:1b:4f:dd:a8:32:e1: 74:c6:13:3d:c6:1b:06:c3:8a:24:9f:ab:8f:c3:c6:10:9b:02: ff:88:a4:61:9a:1b:75:4b:24:ac:b9:90:85:b9:80:75:6c:01: 7f:ee:67:e0:5e:1c:d1:d3:72:22:65:be:f7:71:5b:85:48:54: 4b:df:70:77:0e:a9:f9:db:c5:37:f5:2b:b9:bf:46:d7:f9:10: 50:22:00:f3:39:44:d9:9b:80:92:52:c6:fb:13:f0:4c:0f:98: e9:fd:56:9c -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUFK5G4247C8QBiUztsSe6GRSyF/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGRTAxNDlGQzc3NDA5MEE1QjYzMDRFODk2ODM4MEEx RjFCMDQyNjAeFw0yNjA2MTYxMzQ0NTNaFw0yNjA2MTcxNzQ3NTNaMDMxMTAvBgNV BAMTKDIxNjk5MjcxN0YxMzREMzM4RTQ2QTc3MjQ2RTlDNUYzODhCQUYzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1iaOwi5zuc8gKxH6jFwRzEBm nXULSMA3Y1aiEk2T3aKTb2EYpG9gjRnbHNAZzPEy3o0QzbyXYsR5NXCqNDBkY/X1 OcuGKIOF6atApadlfEfhxXWS9vLGj2bW0OQVrFfktPwIshqfX8oRsAQbQzwfWjMH mfBUFXEKjGHtMlreJqwvmeXWiFuqZvoc/+2YsvaX4Gxuiq6UQkrQm3Akv+RR1Oth Q+83R10E2nb8ZQjIoSSRC98Ev9WfK4mU2wXneBX0fHZZGuHJ07gDDoTtdQPY9L8W KZprL7zk4P7ALPe1AhK6+m6aw7riSY+S/gI0BQ4Ho7PDnTOBhWLtr4/0Ck1zAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUIWmScX8TTTOORqdyRunF84i687wwHwYDVR0j BBgwFoAUxP4BSfx3QJCltjBOiWg4Ch8bBCYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUVSQ1lD QVQvMC9DNEZFMDE0OUZDNzc0MDkwQTVCNjMwNEU4OTY4MzgwQTFGMUIwNDI2LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0M0RkUwMTQ5RkM3NzQwOTBBNUI2MzA0RTg5 NjgzODBBMUYxQjA0MjYuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NRVJDWUNBVC8wL0M0RkUwMTQ5 RkM3NzQwOTBBNUI2MzA0RTg5NjgzODBBMUYxQjA0MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC2tJWB q6H2DalRqzl0oMwocx/cQeZE4vnbd54kuz9A2WWDSM9bklsuS2BbpxuGSt/pcRqX 6MWhCkA/cUk0Yo/qd1piv0HAr+EV1+vVUmNKxOvIOBN4xb3fKkYzgy72CKtHDWuZ jGAvnD9FzhQnuiKvJJ3/BizbbZgDcrfIyrLHoFE43QC9WXsdlEGfE9HaXSNdEZOC vsgDocqn42wbT92oMuF0xhM9xhsGw4okn6uPw8YQmwL/iKRhmht1SySsuZCFuYB1 bAF/7mfgXhzR03IiZb73cVuFSFRL33B3Dqn528U39Su5v0bX+RBQIgDzOUTZm4CS Usb7E/BMD5jp/Vac -----END CERTIFICATE-----Generated at Wed Jun 17 09:27:03 2026 by rpki-client