$ rpki-client -vvf rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft File: 453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft (raw, json) Hash identifier: cVvmRx0HOnEGSRJgVxZ+wH+i/9vMtTR1Eu4V388KO8M= Subject key identifier: A6:D4:1B:22:C0:62:63:13:9B:5F:67:41:5D:CC:B8:B1:54:C9:AB:B5 Authority key identifier: 45:38:85:A7:EE:A9:58:3A:51:24:AC:D3:2D:CB:0B:F2:FE:82:71:48 Certificate issuer: /CN=453885A7EEA9583A5124ACD32DCB0BF2FE827148 Certificate serial: 3A3907BF472E64D23C022AB980CCECDB8C9B4C18 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft Manifest number: 2C Signing time: Fri 12 Jun 2026 17:17:25 +0000 Manifest this update: Fri 12 Jun 2026 17:12:25 +0000 Manifest next update: Sat 13 Jun 2026 20:13:25 +0000 Files and hashes: 1: 453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl (hash: Q0S5EL3KJ31Ls5pC99cFHmhh4oq84Pxkp628O5Pl//0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 20:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:39:07:bf:47:2e:64:d2:3c:02:2a:b9:80:cc:ec:db:8c:9b:4c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453885A7EEA9583A5124ACD32DCB0BF2FE827148 Validity Not Before: Jun 12 17:12:25 2026 GMT Not After : Jun 13 20:13:25 2026 GMT Subject: CN=A6D41B22C06263139B5F67415DCCB8B154C9ABB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:2d:2b:56:b4:b0:c4:38:96:c2:90:b7:84: 84:87:ee:5b:ba:a1:3f:9d:8a:c2:70:8c:4c:32:11: 86:9c:25:c5:ef:ee:81:4d:0d:a6:bc:7f:f1:98:01: 2c:80:8e:2d:f2:3e:81:c5:53:07:4c:9b:cd:c8:a2: 38:f2:98:14:eb:0d:a4:6c:c5:20:8e:42:d5:3a:3b: d5:30:55:ca:0a:a4:6a:fd:7d:86:0e:ea:1d:61:3a: f6:c4:4c:e6:fc:51:3b:0b:86:4d:bf:10:ca:77:bf: f5:16:54:59:6a:03:69:09:37:61:34:f6:47:14:37: 76:d0:16:84:cd:8b:e8:e1:0d:0c:a3:ea:ef:cd:1a: d2:27:0b:7d:1a:57:ca:14:0b:c4:be:c6:8e:cf:d0: 2c:81:6c:83:99:c6:b6:ec:d2:a6:e3:60:4a:67:29: 48:03:a2:ba:37:83:b0:11:05:a4:a7:d3:8d:00:e1: 79:a3:59:3b:cb:70:cc:46:ec:57:55:9e:b3:08:4a: 87:ff:5b:91:e3:1b:16:2c:1d:9b:22:9f:a0:b9:87: 61:19:cf:e1:a5:25:65:d5:ca:c4:83:6f:b2:9a:84: 36:0f:8a:f1:9c:08:6d:1b:b0:94:a7:be:55:71:ab: 46:0b:b3:a6:97:c3:5a:4a:25:e8:1b:1c:5a:87:21: 66:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D4:1B:22:C0:62:63:13:9B:5F:67:41:5D:CC:B8:B1:54:C9:AB:B5 X509v3 Authority Key Identifier: keyid:45:38:85:A7:EE:A9:58:3A:51:24:AC:D3:2D:CB:0B:F2:FE:82:71:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:f4:df:bd:01:6f:ce:70:46:2c:6a:37:99:38:b6:a2:ff:28: c9:01:8b:e5:4e:32:d3:58:74:29:f6:04:52:48:fd:ae:35:cc: 49:e1:bb:b6:68:a9:f8:3b:61:ab:8d:1d:48:ca:22:f2:39:50: 1f:c3:28:46:de:c3:ec:4d:83:6b:58:f5:de:34:af:6d:c4:43: 9b:27:b8:7c:98:59:45:fd:c7:60:1a:09:7d:0f:f8:65:05:0c: 17:8b:1f:23:4e:e0:da:1b:ff:fb:62:5d:e1:83:fc:8b:53:77: ef:81:3e:2e:e0:2d:0d:68:73:fd:61:23:18:fa:85:db:52:58: c8:77:bb:9f:1d:f5:85:53:c4:c4:f9:fd:81:f6:98:ff:79:77: 66:f2:66:32:5e:13:1c:92:b6:6e:24:3b:aa:f8:a0:21:69:84: 2d:2c:13:4f:f6:cb:26:bf:a7:a2:78:74:30:42:6b:75:36:a3: 01:95:ad:db:14:18:13:62:3a:09:61:84:a7:92:5e:14:a6:69: c2:6c:76:05:5b:29:49:80:41:08:eb:d9:2a:da:22:ee:cf:60: 22:59:be:0d:5e:2c:d6:3b:d9:dd:56:6a:df:15:71:7f:3e:e6: bf:34:07:da:35:9a:d4:e4:25:43:d4:43:5c:71:43:1f:36:1b: 99:38:36:52 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUOjkHv0cuZNI8Aiq5gMzs24ybTBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzODg1QTdFRUE5NTgzQTUxMjRBQ0QzMkRDQjBCRjJG RTgyNzE0ODAeFw0yNjA2MTIxNzEyMjVaFw0yNjA2MTMyMDEzMjVaMDMxMTAvBgNV BAMTKEE2RDQxQjIyQzA2MjYzMTM5QjVGNjc0MTVEQ0NCOEIxNTRDOUFCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDy0rVrSwxDiWwpC3hISH7lu6 oT+disJwjEwyEYacJcXv7oFNDaa8f/GYASyAji3yPoHFUwdMm83IojjymBTrDaRs xSCOQtU6O9UwVcoKpGr9fYYO6h1hOvbETOb8UTsLhk2/EMp3v/UWVFlqA2kJN2E0 9kcUN3bQFoTNi+jhDQyj6u/NGtInC30aV8oUC8S+xo7P0CyBbIOZxrbs0qbjYEpn KUgDoro3g7ARBaSn040A4XmjWTvLcMxG7FdVnrMISof/W5HjGxYsHZsin6C5h2EZ z+GlJWXVysSDb7KahDYPivGcCG0bsJSnvlVxq0YLs6aXw1pKJegbHFqHIWbHAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUptQbIsBiYxObX2dBXcy4sVTJq7UwHwYDVR0j BBgwFoAURTiFp+6pWDpRJKzTLcsL8v6CcUgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNEUi8w LzQ1Mzg4NUE3RUVBOTU4M0E1MTI0QUNEMzJEQ0IwQkYyRkU4MjcxNDguY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNDUzODg1QTdFRUE5NTgzQTUxMjRBQ0QzMkRDQjBC RjJGRTgyNzE0OC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DRFIvMC80NTM4ODVBN0VFQTk1ODNB NTEyNEFDRDMyRENCMEJGMkZFODI3MTQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtfTfvQFvznBGLGo3 mTi2ov8oyQGL5U4y01h0KfYEUkj9rjXMSeG7tmip+Dthq40dSMoi8jlQH8MoRt7D 7E2Da1j13jSvbcRDmye4fJhZRf3HYBoJfQ/4ZQUMF4sfI07g2hv/+2Jd4YP8i1N3 74E+LuAtDWhz/WEjGPqF21JYyHe7nx31hVPExPn9gfaY/3l3ZvJmMl4THJK2biQ7 qvigIWmELSwTT/bLJr+nonh0MEJrdTajAZWt2xQYE2I6CWGEp5JeFKZpwmx2BVsp SYBBCOvZKtoi7s9gIlm+DV4s1jvZ3VZq3xVxfz7mvzQH2jWa1OQlQ9RDXHFDHzYb mTg2Ug== -----END CERTIFICATE-----Generated at Sat Jun 13 09:05:32 2026 by rpki-client