$ rpki-client -vvf rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft File: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft (raw, json) Hash identifier: xPd/mAMapF2qIdgMRR47R36vA/uX66OLPRKp7OPzyL4= Subject key identifier: 33:FD:47:C1:73:22:57:90:FE:7F:F5:FA:58:FE:6A:40:85:F4:AF:DC Authority key identifier: 7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55 Certificate issuer: /CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55 Certificate serial: 681B37330D8BE2B647D46232652D63F853945C2D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft Manifest number: 33 Signing time: Tue 16 Jun 2026 14:19:57 +0000 Manifest this update: Tue 16 Jun 2026 14:14:57 +0000 Manifest next update: Wed 17 Jun 2026 17:33:57 +0000 Files and hashes: 1: 3230322e36362e3138342e302f32332d3234203d3e20313334383233.roa (hash: lH3p+3OX/BiDzRmprhrZQaoUetVeXRdG+n2QK86mZUo=) 2: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl (hash: WBPj+stZpowWu4dczU6oCrXq3nhO9ANyfEC/uHqu6dA=) 3: 323430323a323865303a3a2f33322d3438203d3e2039393233.roa (hash: gHs1ooQ8UXCCXGul6QZXotFYNVwq0J8g9JJdOF3VUFM=) 4: 3230322e36362e3138342e302f32332d3234203d3e20313438393936.roa (hash: cgtaS2R5qGGSPzt0Mrg5ICT2U+6ReXnIE6A4ms4mJp0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1b:37:33:0d:8b:e2:b6:47:d4:62:32:65:2d:63:f8:53:94:5c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55 Validity Not Before: Jun 16 14:14:57 2026 GMT Not After : Jun 17 17:33:57 2026 GMT Subject: CN=33FD47C173225790FE7FF5FA58FE6A4085F4AFDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:de:8a:3f:00:20:bf:96:f7:25:7e:7b:12:c6: 06:39:1d:96:5e:8d:07:e5:14:8d:6f:45:40:bd:85: af:d3:d8:05:a5:ca:35:4d:d5:f1:ed:f1:7f:3b:29: d3:42:3e:c2:f8:21:2d:b4:ce:3b:5f:92:cf:37:1e: b5:af:1e:b7:6f:8f:2c:b9:07:c5:57:3a:b0:78:c9: 0b:d9:c7:0e:ba:0f:dd:df:a2:de:76:91:db:1a:c5: 09:df:49:71:0c:53:c6:99:e1:b5:00:69:b0:4e:e3: 1d:6f:6f:78:fa:aa:4a:5f:29:35:16:80:f6:95:fe: 11:02:b4:29:10:2b:b9:f0:e3:08:2e:29:18:8c:2c: 57:cb:ec:c7:f5:4a:a5:26:50:e1:2a:37:9a:18:97: 67:d0:5d:31:23:84:11:05:24:39:05:78:6f:c1:24: f1:a8:00:7c:0b:6a:bc:45:dc:26:35:d9:de:5f:ee: ac:35:d7:71:9a:76:ae:7c:18:74:fc:31:eb:8a:b3: 28:48:39:08:30:35:94:67:a2:53:6d:ae:fa:f1:15: 69:28:2a:21:83:15:df:36:fb:1b:57:fd:43:c2:fb: 7d:35:61:7c:25:e7:53:20:89:74:96:58:a8:6d:14: 48:50:7a:c8:80:1d:25:ea:97:78:93:67:27:1f:a8: e4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FD:47:C1:73:22:57:90:FE:7F:F5:FA:58:FE:6A:40:85:F4:AF:DC X509v3 Authority Key Identifier: keyid:7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ee:ba:1a:16:85:db:8a:db:ee:ec:d6:66:34:07:78:05:d2: 8c:ab:4e:49:36:9c:ef:98:75:a1:06:5c:ac:1d:81:69:75:0a: 5c:1a:76:84:16:6e:51:f1:ee:c4:8c:a0:20:db:52:19:fd:b1: 3e:30:46:e0:b1:84:e9:9b:39:03:af:f6:1a:af:d5:ca:41:05: 6f:78:1c:e7:4d:f5:54:4f:20:ec:58:32:cd:a2:ca:97:cc:02: ed:5f:a0:b2:39:a3:6c:74:f4:e4:1e:46:8a:dc:bd:e7:f5:6f: ac:4e:28:87:84:9a:06:2c:67:2f:8a:dd:be:33:2f:12:6e:6e: 7b:4f:b6:ff:d3:60:4f:d6:17:bf:63:7e:a3:59:9f:99:7a:56: dc:fc:59:98:29:1a:42:24:25:20:88:a3:2b:11:87:76:34:66: b3:4c:77:2f:8e:19:a7:f5:f0:f8:a8:14:f5:27:06:2d:19:95: d6:c3:74:1b:cc:38:30:d9:35:c4:8c:4d:89:dd:7d:e6:13:38: 77:c0:6a:16:d6:f8:e3:52:80:03:ac:66:3f:e5:e0:cc:73:6c: 9d:41:be:b0:2a:d0:31:95:9e:49:cb:07:5f:bb:a7:55:89:65: 3d:d4:49:d9:3b:56:47:49:b2:8e:a5:fd:40:46:45:5a:cd:78: 38:ba:c5:bd -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUaBs3Mw2L4rZH1GIyZS1j+FOUXC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y3RTJFNUQyMEM3NDhCOEJFOUZERTQ0MDBFMDIzMjA1 OTc1RkQ1NTAeFw0yNjA2MTYxNDE0NTdaFw0yNjA2MTcxNzMzNTdaMDMxMTAvBgNV BAMTKDMzRkQ0N0MxNzMyMjU3OTBGRTdGRjVGQTU4RkU2QTQwODVGNEFGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3oo/ACC/lvclfnsSxgY5HZZe jQflFI1vRUC9ha/T2AWlyjVN1fHt8X87KdNCPsL4IS20zjtfks83HrWvHrdvjyy5 B8VXOrB4yQvZxw66D93fot52kdsaxQnfSXEMU8aZ4bUAabBO4x1vb3j6qkpfKTUW gPaV/hECtCkQK7nw4wguKRiMLFfL7Mf1SqUmUOEqN5oYl2fQXTEjhBEFJDkFeG/B JPGoAHwLarxF3CY12d5f7qw113Gadq58GHT8MeuKsyhIOQgwNZRnolNtrvrxFWko KiGDFd82+xtX/UPC+301YXwl51MgiXSWWKhtFEhQesiAHSXql3iTZycfqOR9AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUM/1HwXMiV5D+f/X6WP5qQIX0r9wwHwYDVR0j BBgwFoAUf34uXSDHSLi+n95EAOAjIFl1/VUwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTi8w LzdGN0UyRTVEMjBDNzQ4QjhCRTlGREU0NDAwRTAyMzIwNTk3NUZENTUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvN0Y3RTJFNUQyMEM3NDhCOEJFOUZERTQ0MDBFMDIz MjA1OTc1RkQ1NS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL09QRU4vMC83RjdFMkU1RDIwQzc0OEI4 QkU5RkRFNDQwMEUwMjMyMDU5NzVGRDU1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO66GhaF24rb7uzW ZjQHeAXSjKtOSTac75h1oQZcrB2BaXUKXBp2hBZuUfHuxIygINtSGf2xPjBG4LGE 6Zs5A6/2Gq/VykEFb3gc5031VE8g7FgyzaLKl8wC7V+gsjmjbHT05B5Gity95/Vv rE4oh4SaBixnL4rdvjMvEm5ue0+2/9NgT9YXv2N+o1mfmXpW3PxZmCkaQiQlIIij KxGHdjRms0x3L44Zp/Xw+KgU9ScGLRmV1sN0G8w4MNk1xIxNid195hM4d8BqFtb4 41KAA6xmP+XgzHNsnUG+sCrQMZWeScsHX7unVYllPdRJ2TtWR0myjqX9QEZFWs14 OLrFvQ== -----END CERTIFICATE-----Generated at Wed Jun 17 10:37:23 2026 by rpki-client