$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft File: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft (raw, json) Hash identifier: XqeB2PkIbhlEAgHXPVGpf6fLjkvtKRd7Uyruh7u5VLc= Subject key identifier: E5:E3:9E:00:50:50:47:A7:39:81:F5:B7:7A:8E:E8:07:34:CC:ED:41 Authority key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25 Certificate issuer: /CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25 Certificate serial: 0167EDE173DE11570BF81A901014E06BB21D16DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft Manifest number: 6C Signing time: Tue 28 Jul 2026 22:35:02 +0000 Manifest this update: Tue 28 Jul 2026 22:30:02 +0000 Manifest next update: Thu 30 Jul 2026 02:24:02 +0000 Files and hashes: 1: 3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa (hash: sgvshajZGUxIlcU63EqLfebE4wegi3sti647jzuqblg=) 2: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl (hash: hKacA2F18BPeRdgRKxiztpMnBOZJctEH14jMAoLGsv4=) 3: 3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa (hash: 5vM1t1el5nYZJRxVKo6mmnrOcGRvisTj4oU5YWdMajw=) 4: 3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa (hash: xeGUxts4a0IBuIHgiewir0gp38fQafeLm2d3Cwvi9SE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:67:ed:e1:73:de:11:57:0b:f8:1a:90:10:14:e0:6b:b2:1d:16:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25 Validity Not Before: Jul 28 22:30:02 2026 GMT Not After : Jul 30 02:24:02 2026 GMT Subject: CN=E5E39E00505047A73981F5B77A8EE80734CCED41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:49:22:27:4e:cd:f3:9b:69:3b:2a:66:e2: 5b:e5:4a:c9:c3:76:21:80:d4:2d:33:a4:07:6d:3b: 94:7f:cb:3c:10:e6:36:3c:88:65:8b:c1:c4:78:34: 53:47:0a:98:3c:58:a0:e9:72:fe:e8:f3:b6:26:98: 16:21:1e:eb:66:9d:05:90:43:ef:0b:82:4c:b2:02: 2e:e5:5f:b4:3c:fc:f0:16:cc:1b:bd:7b:b3:48:33: dc:3d:75:9c:f7:83:d6:eb:fc:e9:37:ae:dd:a0:3c: e7:7e:bd:92:d8:c7:08:8c:ef:de:75:06:9b:20:f8: 2f:fa:9d:ba:8d:6b:bc:7a:cd:e0:6e:6e:50:45:1e: 2e:24:59:0c:8f:79:cb:29:96:df:11:de:13:f1:69: 27:86:6b:36:e5:4d:ec:22:bd:1d:3b:76:e6:8a:58: a4:90:bf:87:c7:78:28:8a:46:c6:e6:83:4c:e6:c8: f0:4c:b8:fb:68:0f:22:bb:f7:44:0a:0f:9b:9a:52: 1f:59:8b:a4:c2:b7:cd:fb:75:e2:ba:e4:da:7f:58: 4a:bb:50:fa:74:47:11:69:fc:08:d0:f4:7c:50:77: bc:f1:60:ad:4f:1c:79:b0:16:c3:59:04:8b:00:9a: cf:2a:4a:f5:77:ff:31:46:a2:25:81:d9:a6:50:1c: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E3:9E:00:50:50:47:A7:39:81:F5:B7:7A:8E:E8:07:34:CC:ED:41 X509v3 Authority Key Identifier: keyid:D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:46:32:c5:2a:a7:32:e4:5a:97:34:17:95:25:a3:b9:9f:e8: 39:72:77:1c:26:df:10:1e:37:5b:b5:1d:8f:95:07:c8:1b:7b: 84:dc:de:c2:fd:0d:d4:d6:f9:66:b1:4a:57:88:f0:ef:d3:7a: a3:07:e6:be:86:a0:ed:b9:08:89:62:63:7f:91:8f:80:cf:78: c5:67:24:5d:99:48:28:d5:27:10:e3:eb:3c:3c:09:60:d2:e4: 06:a5:ed:fc:2b:89:4f:b3:11:74:64:cc:97:b6:5c:f3:56:ec: 1f:0e:5c:b1:6e:07:12:3e:a0:1c:b6:c3:74:e9:aa:17:f6:01: 0c:59:85:bb:85:35:f0:1e:f0:c9:d1:41:34:da:39:d4:c8:fc: 6e:1d:c9:21:7e:29:dc:75:ee:22:a6:31:f6:d0:4b:f8:5c:a6: ad:7d:4a:cf:5c:98:38:fe:53:39:2d:83:ec:33:d5:b9:c7:2c: 6e:46:0a:12:45:4b:3b:d2:9b:8f:5b:80:e8:3a:88:14:bb:8d: ac:23:de:e0:39:e6:b3:fe:ee:d1:75:49:ce:25:cc:0d:69:48: be:cc:5a:8e:f9:9a:77:a5:e3:7a:8f:0f:0e:39:99:72:6d:e0: c4:03:88:e4:ef:dd:10:62:3b:b7:ea:44:7e:de:d5:6b:2c:2b: e5:e8:6c:0c -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUAWft4XPeEVcL+BqQEBTga7IdFtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkxRjZCMTdBNURGRTNCMjMzNkQxQUUzRTIzM0QxMEIy RDYyQUEyNTAeFw0yNjA3MjgyMjMwMDJaFw0yNjA3MzAwMjI0MDJaMDMxMTAvBgNV BAMTKEU1RTM5RTAwNTA1MDQ3QTczOTgxRjVCNzdBOEVFODA3MzRDQ0VENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGUkiJ07N85tpOypm4lvlSsnD diGA1C0zpAdtO5R/yzwQ5jY8iGWLwcR4NFNHCpg8WKDpcv7o87YmmBYhHutmnQWQ Q+8LgkyyAi7lX7Q8/PAWzBu9e7NIM9w9dZz3g9br/Ok3rt2gPOd+vZLYxwiM7951 Bpsg+C/6nbqNa7x6zeBublBFHi4kWQyPecsplt8R3hPxaSeGazblTewivR07duaK WKSQv4fHeCiKRsbmg0zmyPBMuPtoDyK790QKD5uaUh9Zi6TCt837deK65Np/WEq7 UPp0RxFp/AjQ9HxQd7zxYK1PHHmwFsNZBIsAms8qSvV3/zFGoiWB2aZQHElPAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU5eOeAFBQR6c5gfW3eo7oBzTM7UEwHwYDVR0j BBgwFoAU2R9rF6Xf47IzbRrj4jPRCy1iqiUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJ LzEvRDkxRjZCMTdBNURGRTNCMjMzNkQxQUUzRTIzM0QxMEIyRDYyQUEyNS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC9EOTFGNkIxN0E1REZFM0IyMzM2RDFBRTNFMjMz RDEwQjJENjJBQTI1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJLzEvRDkxRjZCMTdBNURG RTNCMjMzNkQxQUUzRTIzM0QxMEIyRDYyQUEyNS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIxGMsUqpzLk Wpc0F5Ulo7mf6Dlydxwm3xAeN1u1HY+VB8gbe4Tc3sL9DdTW+WaxSleI8O/TeqMH 5r6GoO25CIliY3+Rj4DPeMVnJF2ZSCjVJxDj6zw8CWDS5Aal7fwriU+zEXRkzJe2 XPNW7B8OXLFuBxI+oBy2w3Tpqhf2AQxZhbuFNfAe8MnRQTTaOdTI/G4dySF+Kdx1 7iKmMfbQS/hcpq19Ss9cmDj+Uzktg+wz1bnHLG5GChJFSzvSm49bgOg6iBS7jawj 3uA55rP+7tF1Sc4lzA1pSL7MWo75mnel43qPDw45mXJt4MQDiOTv3RBiO7fqRH7e 1WssK+XobAw= -----END CERTIFICATE-----Generated at Wed Jul 29 03:14:18 2026 by rpki-client