$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft File: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft (raw, json) Hash identifier: w4Y6PqmeEtsnOH2Yt3mIAxMkHDRvSQaq275T5YeehDI= Subject key identifier: 81:6E:19:E5:C2:5D:05:A1:A9:5B:D1:ED:14:67:97:8C:8F:AB:10:E5 Authority key identifier: 2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22 Certificate issuer: /CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22 Certificate serial: 2609DA6512740094F03AC7BA510ABE5306AB7A93 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft Manifest number: 6A Signing time: Tue 28 Jul 2026 15:34:18 +0000 Manifest this update: Tue 28 Jul 2026 15:29:18 +0000 Manifest next update: Wed 29 Jul 2026 18:19:18 +0000 Files and hashes: 1: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl (hash: TwF9ptvyLR80KMcUTUGodXxqTADIHpe2cn5b1ygMigA=) 2: 3130332e3134302e3233322e302f32342d3234203d3e203332323432.roa (hash: q7dF1jX4ROfIjFDlO5sVW9hRX9k2oXkr8fjwFlVtFmE=) 3: 3130332e3134302e3233332e302f32342d3234203d3e203332323432.roa (hash: dWqlZ57qGRFx6N79EQLtYosKEY+TDhYs9JMAewBJPsQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:09:da:65:12:74:00:94:f0:3a:c7:ba:51:0a:be:53:06:ab:7a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22 Validity Not Before: Jul 28 15:29:18 2026 GMT Not After : Jul 29 18:19:18 2026 GMT Subject: CN=816E19E5C25D05A1A95BD1ED1467978C8FAB10E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:22:52:84:d6:ca:12:eb:e0:73:bd:c5:89: 40:f7:4d:31:fa:9c:33:06:49:b3:8e:ff:64:1e:1f: 41:a8:4f:af:1b:f8:04:c5:ba:30:6c:05:1f:cf:62: 7b:df:98:19:6b:98:2c:0a:36:d0:1c:14:35:4f:de: fd:b8:fa:97:9d:a0:13:24:72:02:99:39:07:f4:23: 70:54:b6:fd:cb:b6:79:5a:79:27:c7:49:7c:69:4d: 5f:42:51:13:01:7d:63:b6:24:c5:d4:47:4d:c7:bf: d0:10:99:69:79:e9:a3:68:6b:4e:f4:bd:57:ab:e0: b9:e1:82:ff:1d:8e:25:bb:6c:47:6c:b2:42:3f:02: 7e:ec:16:35:36:ea:a9:6d:59:82:26:03:f5:ff:cb: a7:43:34:0b:5f:e2:c3:11:88:45:2e:4c:4f:25:df: b4:60:10:91:bc:6b:ad:0f:ee:0d:73:cb:e7:e9:0e: 1c:4d:7f:d1:e2:bf:6f:03:63:7d:08:46:23:da:22: 72:4e:e0:66:25:a7:bf:ac:fb:0b:7b:ba:1c:08:c9: 41:1e:3d:2a:06:f2:31:30:37:ad:12:9b:4e:0c:0f: 1e:44:b6:c6:f4:9d:fe:a0:74:84:13:10:ea:48:c9: 21:ea:0c:78:5c:05:d3:10:2d:41:c3:05:5d:7a:33: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6E:19:E5:C2:5D:05:A1:A9:5B:D1:ED:14:67:97:8C:8F:AB:10:E5 X509v3 Authority Key Identifier: keyid:2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:6a:f3:ba:82:63:9c:81:59:20:9d:fc:35:9d:b7:68:88:e8: 04:12:6c:8e:67:b2:2f:2e:3b:ff:84:e4:f7:70:bc:77:58:43: 13:69:08:c2:ce:e3:cf:cc:1b:38:27:8e:8f:63:29:b6:3f:6a: 86:89:00:0e:6a:c3:4c:54:54:8f:ad:9a:ff:f8:f8:30:7b:cb: 35:8f:2f:82:2c:82:90:fd:81:98:30:df:65:13:d2:c6:2b:c0: 61:06:6b:9f:3f:5c:a8:a5:41:c6:56:d6:8e:76:5c:c8:da:59: 84:e2:76:47:54:25:7e:df:84:f7:da:ce:ae:ab:f3:dd:ad:e3: 1f:51:71:cd:bb:7c:0c:8b:6a:39:4f:9a:2b:88:e1:7d:98:37: 01:35:85:9b:15:45:0f:23:4e:32:12:46:5a:91:5e:a2:a6:25: 02:7c:c4:13:62:19:f4:70:77:9d:41:ca:91:54:ff:d1:9c:5d: 22:61:e8:40:20:6a:fa:20:c1:6f:12:43:3c:b0:eb:4f:96:3d: 66:a5:f7:d6:97:59:8e:04:ef:f7:29:67:3f:9c:80:a9:0d:7b: 7e:38:8e:00:df:ee:b1:6b:65:97:bc:97:88:34:63:59:b4:62: 47:fb:91:9b:b9:a9:c5:c6:4e:08:3b:aa:2c:db:64:02:ea:d6: 19:f2:d7:08 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUJgnaZRJ0AJTwOse6UQq+UwarepMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OEZCMEFENkNCNENGREY3MzY0NzkxRDE0MzVBRDQ4 QzY3NUQyMjAeFw0yNjA3MjgxNTI5MThaFw0yNjA3MjkxODE5MThaMDMxMTAvBgNV BAMTKDgxNkUxOUU1QzI1RDA1QTFBOTVCRDFFRDE0Njc5NzhDOEZBQjEwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCyJShNbKEuvgc73FiUD3TTH6 nDMGSbOO/2QeH0GoT68b+ATFujBsBR/PYnvfmBlrmCwKNtAcFDVP3v24+pedoBMk cgKZOQf0I3BUtv3LtnlaeSfHSXxpTV9CURMBfWO2JMXUR03Hv9AQmWl56aNoa070 vVer4Lnhgv8djiW7bEdsskI/An7sFjU26qltWYImA/X/y6dDNAtf4sMRiEUuTE8l 37RgEJG8a60P7g1zy+fpDhxNf9Hiv28DY30IRiPaInJO4GYlp7+s+wt7uhwIyUEe PSoG8jEwN60Sm04MDx5Etsb0nf6gdIQTEOpIySHqDHhcBdMQLUHDBV16M/mFAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUgW4Z5cJdBaGpW9HtFGeXjI+rEOUwHwYDVR0j BBgwFoAULVj7CtbLTP33NkeR0UNa1IxnXSIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDTC8w LzJENThGQjBBRDZDQjRDRkRGNzM2NDc5MUQxNDM1QUQ0OEM2NzVEMjIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMkQ1OEZCMEFENkNCNENGREY3MzY0NzkxRDE0MzVB RDQ4QzY3NUQyMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0wvMC8yRDU4RkIwQUQ2Q0I0Q0ZE RjczNjQ3OTFEMTQzNUFENDhDNjc1RDIyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWrzuoJjnIFZIJ38 NZ23aIjoBBJsjmeyLy47/4Tk93C8d1hDE2kIws7jz8wbOCeOj2Mptj9qhokADmrD TFRUj62a//j4MHvLNY8vgiyCkP2BmDDfZRPSxivAYQZrnz9cqKVBxlbWjnZcyNpZ hOJ2R1Qlft+E99rOrqvz3a3jH1Fxzbt8DItqOU+aK4jhfZg3ATWFmxVFDyNOMhJG WpFeoqYlAnzEE2IZ9HB3nUHKkVT/0ZxdImHoQCBq+iDBbxJDPLDrT5Y9ZqX31pdZ jgTv9ylnP5yAqQ17fjiOAN/usWtll7yXiDRjWbRiR/uRm7mpxcZOCDuqLNtkAurW GfLXCA== -----END CERTIFICATE-----Generated at Tue Jul 28 17:09:04 2026 by rpki-client