$ rpki-client -vvf rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft File: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft (raw, json) Hash identifier: agl3rZTQgGKcPL6vegTmnL0OJPSmwyyXffaxRE1JiME= Subject key identifier: 4F:6C:71:8F:06:AB:28:38:4A:11:EE:2F:82:51:32:19:C6:F4:D1:6F Authority key identifier: 21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 Certificate issuer: /CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Certificate serial: 6E9A0E59DE34F72AD8700593258BC5A1CA6EFFD7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft Manifest number: 30 Signing time: Sat 13 Jun 2026 05:59:11 +0000 Manifest this update: Sat 13 Jun 2026 05:54:11 +0000 Manifest next update: Sun 14 Jun 2026 09:26:11 +0000 Files and hashes: 1: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl (hash: 9xcT1g3zLjHJ/bbv/pvnuyfS5Vqna0jNNv8/tLBbvvI=) 2: 3130332e3131372e3133322e302f32332d3234203d3e203231383539.roa (hash: V7xrPLp5f+XdiNXnNwOKJbYVBx4iv5pqsU5W1y0I9ac=) 3: 3130332e3131372e3133322e302f32332d3234203d3e2039363737.roa (hash: L4VMPfmAF+ujWD/W3Q/uT3gBZ3GdNZkDF1QTrHGw11I=) 4: 3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa (hash: yNF0rjdZhiThfjXcp9q9ny7hpelDoujpqo41tWTYbEo=) 5: 3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa (hash: AS3qH/RjBUke7M3rlCKwKKx7OXc4/iKqzu9OBdcpsSg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:9a:0e:59:de:34:f7:2a:d8:70:05:93:25:8b:c5:a1:ca:6e:ff:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Validity Not Before: Jun 13 05:54:11 2026 GMT Not After : Jun 14 09:26:11 2026 GMT Subject: CN=4F6C718F06AB28384A11EE2F82513219C6F4D16F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a4:7d:2b:eb:5d:0b:c8:f1:d0:fe:17:48:ff: c7:1c:9c:e1:eb:76:0f:a5:f5:1c:61:16:a9:52:db: fc:0a:c9:e2:4a:4c:bd:25:f8:3a:ec:ac:36:ad:94: de:08:60:f8:e8:3e:52:75:5e:26:68:48:f4:92:4c: ab:4e:db:cc:3f:b2:0b:74:1a:b7:f3:7d:67:27:a1: d4:eb:ff:c7:ff:5a:a0:15:5a:23:20:d2:e3:5d:bb: e4:cc:73:8c:74:e9:51:7b:c9:06:b6:9c:07:55:ab: 08:b0:3e:e6:67:0b:0c:77:2d:b2:69:1f:33:fe:d4: a9:e9:25:8f:ba:62:ef:86:a7:0c:48:b2:00:c4:73: aa:d7:2a:9c:e7:7f:3f:20:c7:6f:ba:f7:01:12:6b: 86:18:89:9e:cf:2f:d4:db:c4:78:a1:8b:90:89:b2: 30:5c:ad:28:ed:6e:62:98:6c:b2:01:3b:81:63:fe: 19:06:f3:ed:27:b5:38:d9:b2:f0:46:ca:99:1e:01: 44:bc:89:44:fe:39:a8:40:83:0e:95:85:0a:54:b0: f9:c4:8f:5b:1b:05:cc:0f:e7:62:08:64:d0:c8:31: 12:36:f6:1a:e7:b4:ed:9a:d0:fa:fe:59:f5:72:ad: b4:34:f5:ef:4e:63:4a:05:45:6c:af:0c:6e:0d:87: 0e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6C:71:8F:06:AB:28:38:4A:11:EE:2F:82:51:32:19:C6:F4:D1:6F X509v3 Authority Key Identifier: keyid:21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:bb:cb:96:bc:78:35:05:9c:1b:74:47:83:61:49:48:3d:47: f4:53:b5:8f:ff:d1:08:bb:8d:ce:c1:fc:bc:7e:b8:c8:9f:e0: 3a:a7:ba:72:c8:9a:ab:1a:30:07:52:71:c0:5d:3a:52:48:5f: ac:01:60:6a:76:98:c9:19:85:38:62:bc:4e:12:ea:07:a5:72: 1d:42:08:9a:1b:3d:0f:09:6f:2d:7e:77:37:5f:2b:3c:97:c6: c0:91:5b:ca:7a:37:89:13:01:0d:44:80:03:6d:9d:80:71:5e: 95:16:ca:91:b6:9f:0e:49:a6:c9:ff:37:55:14:7f:7d:72:ea: 5d:ca:b9:4f:e1:7d:c4:ed:4a:fc:47:ef:09:99:d1:93:78:66: 68:80:6e:5b:28:a8:19:00:7c:7b:47:18:64:8e:bf:c9:1e:26: e7:4b:f7:11:ef:d5:d4:d9:3d:0f:04:18:a5:14:6f:5f:db:16: e8:36:6d:27:f4:d5:c4:8b:c5:f7:10:13:13:5c:80:a8:0b:44: 47:c1:39:60:ba:d4:ca:1b:d7:46:2d:3c:14:21:eb:95:51:dd: 0d:ff:89:0e:43:4f:b3:66:47:7f:73:07:a8:32:7c:4e:2a:2c: be:dd:93:07:94:98:4e:7a:63:54:1a:b1:cd:d1:0d:b7:cf:c0: 31:46:1b:c9 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUbpoOWd409yrYcAWTJYvFocpu/9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQz RkNGQjVCMzAeFw0yNjA2MTMwNTU0MTFaFw0yNjA2MTQwOTI2MTFaMDMxMTAvBgNV BAMTKDRGNkM3MThGMDZBQjI4Mzg0QTExRUUyRjgyNTEzMjE5QzZGNEQxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnpH0r610LyPHQ/hdI/8ccnOHr dg+l9RxhFqlS2/wKyeJKTL0l+DrsrDatlN4IYPjoPlJ1XiZoSPSSTKtO28w/sgt0 GrfzfWcnodTr/8f/WqAVWiMg0uNdu+TMc4x06VF7yQa2nAdVqwiwPuZnCwx3LbJp HzP+1KnpJY+6Yu+GpwxIsgDEc6rXKpznfz8gx2+69wESa4YYiZ7PL9TbxHihi5CJ sjBcrSjtbmKYbLIBO4Fj/hkG8+0ntTjZsvBGypkeAUS8iUT+OahAgw6VhQpUsPnE j1sbBcwP52IIZNDIMRI29hrntO2a0Pr+WfVyrbQ09e9OY0oFRWyvDG4Nhw7XAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUT2xxjwarKDhKEe4vglEyGcb00W8wHwYDVR0j BBgwFoAUIbYtYOGrU4A7IpzPg8F5/T/PtbMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAv MjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yMUI2MkQ2MEUxQUI1MzgwM0IyMjlDQ0Y4M0MxNzlG RDNGQ0ZCNUIzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAvMjFCNjJENjBFMUFCNTM4MDNC MjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJi7y5a8eDUFnBt0R4Nh SUg9R/RTtY//0Qi7jc7B/Lx+uMif4DqnunLImqsaMAdSccBdOlJIX6wBYGp2mMkZ hThivE4S6gelch1CCJobPQ8Jby1+dzdfKzyXxsCRW8p6N4kTAQ1EgANtnYBxXpUW ypG2nw5Jpsn/N1UUf31y6l3KuU/hfcTtSvxH7wmZ0ZN4ZmiAblsoqBkAfHtHGGSO v8keJudL9xHv1dTZPQ8EGKUUb1/bFug2bSf01cSLxfcQExNcgKgLREfBOWC61Mob 10YtPBQh65VR3Q3/iQ5DT7NmR39zB6gyfE4qLL7dkweUmE56Y1Qasc3RDbfPwDFG G8k= -----END CERTIFICATE-----Generated at Sat Jun 13 09:04:14 2026 by rpki-client