$ rpki-client -vvf rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft File: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft (raw, json) Hash identifier: LMPYZ/OZS0ClI722i0de6kdDHUtnbaROouKoIjmFLvI= Subject key identifier: F5:CB:22:43:AA:61:7D:48:A7:6A:13:08:8E:6F:DA:D5:75:EE:07:A7 Authority key identifier: 5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E Certificate issuer: /CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Certificate serial: 5B0D6D52C2A987D07858B50E0CB47E64312AA031 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft Manifest number: 6D Signing time: Tue 28 Jul 2026 10:28:11 +0000 Manifest this update: Tue 28 Jul 2026 10:23:11 +0000 Manifest next update: Wed 29 Jul 2026 12:09:11 +0000 Files and hashes: 1: 323430333a623334303a3a2f33322d3332203d3e2039393232.roa (hash: gstqBh9leADrly9mEk8JDvYH97tC5t4YGpfgybnlAak=) 2: 323430333a623334303a3a2f33322d3332203d3e2037343832.roa (hash: hiAMshIFeOvfI56eDRx+E/hRaz9fkWvi1Lc3t0AuAEM=) 3: 3130332e3133302e34382e302f32322d3234203d3e2037343832.roa (hash: 1XWO79v70d0DECH7Xj/kPutEjOsPSVEabfarX+KunFQ=) 4: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl (hash: JBuHi1S14qRpHOm8ogTcY2UyjR4qXJ3Iy8BJadHElgI=) 5: 3130332e3133302e34382e302f32322d3234203d3e2039393232.roa (hash: aCIxecjNLFEVzEOiCgmZ0K9yJGY1pe87ewnv5AFzkXs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0d:6d:52:c2:a9:87:d0:78:58:b5:0e:0c:b4:7e:64:31:2a:a0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Validity Not Before: Jul 28 10:23:11 2026 GMT Not After : Jul 29 12:09:11 2026 GMT Subject: CN=F5CB2243AA617D48A76A13088E6FDAD575EE07A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:22:a3:5c:8e:41:23:b4:c5:08:06:23:35:a8: d8:f2:e2:96:4b:72:2c:1e:8a:fc:d3:36:71:54:ef: b6:09:7d:99:6a:69:0d:c4:b0:33:4e:96:a0:6e:3a: c7:f3:d2:86:7a:2a:b8:ec:b5:4a:3a:e5:80:03:7a: 41:42:ec:e8:e6:7d:57:75:54:d2:62:a8:de:1c:28: 3f:13:26:ba:dd:f1:ea:e1:e2:5c:92:2c:ef:0b:89: 0b:51:59:04:7c:25:7d:53:e9:1b:de:b6:31:3f:2f: 8f:af:02:e2:86:d2:03:f1:eb:26:9e:1d:94:8d:06: 21:4a:f4:8d:77:56:d8:e2:78:b1:a3:f5:5a:63:11: 28:87:ef:c7:4a:1a:5b:3b:7a:a2:24:7c:be:f3:4a: 81:3c:a9:1b:58:bb:2d:4e:60:c1:62:fc:82:02:a7: 31:f3:a4:c7:da:ec:66:e1:ee:a5:df:0d:44:12:46: bf:e9:5a:1d:4e:4f:40:95:d6:63:be:e8:d9:41:a8: 6e:8b:0d:8e:95:54:b1:01:d1:23:34:8d:7f:97:e1: 8a:dc:1c:c4:b1:a1:15:bc:71:62:ff:61:f1:a2:49: be:6f:aa:98:c2:3f:d1:83:f1:b9:33:8b:ab:8e:4f: f7:3b:db:ae:a8:cc:6e:22:cf:16:e5:66:05:1a:95: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CB:22:43:AA:61:7D:48:A7:6A:13:08:8E:6F:DA:D5:75:EE:07:A7 X509v3 Authority Key Identifier: keyid:5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:69:ac:b0:ba:47:51:15:bb:8b:69:74:bc:be:9a:5d:8f:5c: 86:0e:b8:ba:f8:16:4b:08:32:d5:2d:10:6b:c7:de:33:47:d7: 41:54:b1:ac:e6:21:1c:65:b5:60:b7:45:52:50:fc:7b:ab:63: f0:ab:de:4c:4a:b7:6d:60:77:a3:41:43:f2:94:9a:19:d9:fc: 1a:14:2f:ec:92:85:ff:70:37:49:6d:9c:e2:48:23:4a:80:e4: 25:1f:eb:1a:f6:eb:1a:99:ae:6e:28:e1:0e:b6:cf:20:51:62: 9d:bc:39:f2:b0:81:9e:50:da:54:27:78:d9:d2:64:7b:80:b9: cb:a4:b5:70:d9:bf:9d:41:f0:7e:2a:3a:ce:10:13:b7:18:12: 6c:dd:8f:f2:0f:50:06:98:d0:1f:3f:63:f8:d7:4e:a3:f6:a1: 29:3e:f4:bf:a5:ca:2b:92:98:0f:d0:6a:38:00:4b:b2:f6:59: 7b:b1:c5:fa:03:99:5a:aa:72:a9:5e:ef:6d:dc:d2:38:66:3b: 4e:cc:fe:46:75:be:6e:ff:5a:b7:e7:5b:0c:ea:c8:de:38:74: 98:9d:2f:4a:fd:3a:19:79:ae:78:3d:61:f2:6d:1f:80:df:50: 10:05:b4:74:e6:9f:b5:21:17:bc:9b:80:ec:30:be:57:2c:70: 53:6a:e3:26 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUWw1tUsKph9B4WLUODLR+ZDEqoDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVD NTg4QkE5RTAeFw0yNjA3MjgxMDIzMTFaFw0yNjA3MjkxMjA5MTFaMDMxMTAvBgNV BAMTKEY1Q0IyMjQzQUE2MTdENDhBNzZBMTMwODhFNkZEQUQ1NzVFRTA3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfIqNcjkEjtMUIBiM1qNjy4pZL ciweivzTNnFU77YJfZlqaQ3EsDNOlqBuOsfz0oZ6KrjstUo65YADekFC7OjmfVd1 VNJiqN4cKD8TJrrd8erh4lySLO8LiQtRWQR8JX1T6RvetjE/L4+vAuKG0gPx6yae HZSNBiFK9I13VtjieLGj9VpjESiH78dKGls7eqIkfL7zSoE8qRtYuy1OYMFi/IIC pzHzpMfa7Gbh7qXfDUQSRr/pWh1OT0CV1mO+6NlBqG6LDY6VVLEB0SM0jX+X4Yrc HMSxoRW8cWL/YfGiSb5vqpjCP9GD8bkzi6uOT/c7266ozG4izxblZgUalW4xAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU9csiQ6phfUinahMIjm/a1XXuB6cwHwYDVR0j BBgwFoAUWivuJDlbNvT/qVdT9nMVFcWIup4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVU LzAvNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS81QTJCRUUyNDM5NUIzNkY0RkZBOTU3NTNGNjcz MTUxNUM1ODhCQTlFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVULzAvNUEyQkVFMjQzOTVC MzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAENprLC6R1EV u4tpdLy+ml2PXIYOuLr4FksIMtUtEGvH3jNH10FUsazmIRxltWC3RVJQ/HurY/Cr 3kxKt21gd6NBQ/KUmhnZ/BoUL+yShf9wN0ltnOJII0qA5CUf6xr26xqZrm4o4Q62 zyBRYp28OfKwgZ5Q2lQneNnSZHuAucuktXDZv51B8H4qOs4QE7cYEmzdj/IPUAaY 0B8/Y/jXTqP2oSk+9L+lyiuSmA/QajgAS7L2WXuxxfoDmVqqcqle723c0jhmO07M /kZ1vm7/WrfnWwzqyN44dJidL0r9Ohl5rng9YfJtH4DfUBAFtHTmn7UhF7ybgOww vlcscFNq4yY= -----END CERTIFICATE-----Generated at Wed Jul 29 00:41:18 2026 by rpki-client