$ rpki-client -vvf rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft File: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft (raw, json) Hash identifier: c64BjmRQcdzBZsHWaqM39xEVAXe97+QqOQNzJxFXS+A= Subject key identifier: 0D:BE:75:5D:53:AF:E7:59:B5:68:0D:61:DD:7F:A6:C2:F5:6E:1F:AE Authority key identifier: 42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 Certificate issuer: /CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Certificate serial: 20818EF129CCA8BA5A36739CDE4F4EAA8B9BA4AB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft Manifest number: 2F Signing time: Fri 12 Jun 2026 22:23:16 +0000 Manifest this update: Fri 12 Jun 2026 22:18:16 +0000 Manifest next update: Sat 13 Jun 2026 23:01:16 +0000 Files and hashes: 1: 323430353a653463303a3a2f33322d3634203d3e20313331363737.roa (hash: 81X32lIDsqpLyEd5Xpy3ESJVHUbt39R1tegiSMqE1PY=) 2: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl (hash: 3t2WkwwBgBV1vBpmkczidhf4b9AJ3uiBhxqHyw9KJKI=) 3: 3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa (hash: GSRooEfHneMScmMay9/suUawwfISd9M2Zp/oSqWxd5c=) 4: 323430353a653463303a3a2f33322d3634203d3e20313331363734.roa (hash: R5XmHRGNRbL/JzVgicSjGM6c3avdhtCi9gHhhibn8Iw=) 5: 3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa (hash: U1mFwcarBwcENEkbti0C1yVEmBtDzRAAAqYz8mcIUOg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:81:8e:f1:29:cc:a8:ba:5a:36:73:9c:de:4f:4e:aa:8b:9b:a4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Validity Not Before: Jun 12 22:18:16 2026 GMT Not After : Jun 13 23:01:16 2026 GMT Subject: CN=0DBE755D53AFE759B5680D61DD7FA6C2F56E1FAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:af:db:03:79:c3:e1:b7:2a:a6:86:0c:f5:13: 01:6c:89:5b:33:ec:4e:5c:49:7c:04:c7:0b:15:9a: 8d:72:8e:b5:56:e7:30:f3:f1:b7:5a:ee:01:2e:e4: 0a:62:a2:ac:c4:4d:f8:c9:91:db:d4:b4:92:ee:58: ce:d6:37:78:61:96:74:57:e5:53:fa:34:37:6b:6c: 76:2e:e0:33:85:4c:7d:d9:c8:f6:2d:55:37:39:56: 2d:a0:33:6d:37:42:8c:c6:0c:bc:d7:13:0d:dc:a5: 5a:56:65:0b:7a:c9:ca:ea:2b:cc:5e:f0:23:10:f6: 85:30:c5:ee:ad:a2:8c:e1:cb:e0:14:52:fe:48:b0: 62:79:8c:0c:05:ef:f3:5f:f0:2f:1f:a9:a9:94:9c: 51:48:ba:0f:7b:0d:ca:b0:27:0b:d8:a8:f8:eb:93: 59:3d:bc:ae:d4:08:41:05:b0:e3:47:8a:80:56:e1: bf:ba:db:93:87:f7:93:0f:0b:d9:3a:e3:c6:f7:df: 89:4f:a8:bd:ea:88:9e:03:b4:cd:e8:63:f5:6b:b3: 88:c4:7e:70:b7:b8:65:e6:03:cc:93:96:4f:a6:53: 78:f5:f9:af:13:ac:a7:b9:2d:2e:18:a2:cd:7b:9f: 30:30:be:b4:40:8b:48:48:8a:0a:fb:60:f1:a7:24: a7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BE:75:5D:53:AF:E7:59:B5:68:0D:61:DD:7F:A6:C2:F5:6E:1F:AE X509v3 Authority Key Identifier: keyid:42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2c:5b:3f:66:78:56:d5:f3:ba:e2:e0:9b:bc:74:b9:7d:8c: a6:a7:b5:d6:b1:e4:ef:64:60:c9:39:75:c2:67:23:51:f7:87: ff:f1:62:b2:32:26:8d:40:85:5c:17:8e:7e:e0:52:02:f8:02: bf:d5:ee:7b:ca:5a:10:9b:12:16:36:2d:0a:91:f3:5b:ed:79: eb:87:bc:42:b9:14:83:a1:f8:07:17:ad:5d:45:a0:88:19:37: 87:46:be:5b:be:a6:c0:f9:cd:4e:45:cb:3c:24:e6:81:cf:7c: 53:cc:e6:43:22:99:cc:36:c4:fd:4b:6f:be:20:9b:c7:22:8d: 18:ff:0a:55:f1:23:a5:f5:d9:d2:40:e3:23:1f:74:57:f0:48: 5b:88:27:42:fd:c9:87:c0:d4:9c:c7:eb:a5:3a:4c:b5:f2:71: a9:1a:dd:8d:e0:15:d9:fe:0c:c6:c7:6f:aa:a0:15:cd:3e:ce: 2c:f5:2a:c9:98:f6:45:42:36:9a:3e:0a:2f:23:6e:fe:16:5b: 70:e4:9c:de:34:e0:3a:1a:78:6b:8a:fb:f9:34:97:6b:35:0d: f6:73:f4:11:a9:64:ba:53:c2:fc:7e:56:a5:ce:9e:0d:02:7d: 97:48:92:d4:ac:56:7c:96:48:a5:83:58:87:13:22:10:aa:ae: 6f:b3:2c:7d -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUIIGO8SnMqLpaNnOc3k9OqoubpKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1RTA4REVB ODYyMDE2MjAeFw0yNjA2MTIyMjE4MTZaFw0yNjA2MTMyMzAxMTZaMDMxMTAvBgNV BAMTKDBEQkU3NTVENTNBRkU3NTlCNTY4MEQ2MUREN0ZBNkMyRjU2RTFGQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxr9sDecPhtyqmhgz1EwFsiVsz 7E5cSXwExwsVmo1yjrVW5zDz8bda7gEu5ApioqzETfjJkdvUtJLuWM7WN3hhlnRX 5VP6NDdrbHYu4DOFTH3ZyPYtVTc5Vi2gM203QozGDLzXEw3cpVpWZQt6ycrqK8xe 8CMQ9oUwxe6toozhy+AUUv5IsGJ5jAwF7/Nf8C8fqamUnFFIug97DcqwJwvYqPjr k1k9vK7UCEEFsONHioBW4b+625OH95MPC9k648b334lPqL3qiJ4DtM3oY/Vrs4jE fnC3uGXmA8yTlk+mU3j1+a8TrKe5LS4Yos17nzAwvrRAi0hIigr7YPGnJKfvAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUDb51XVOv51m1aA1h3X+mwvVuH64wHwYDVR0j BBgwFoAUQsf3jp/aALnKPi0d314I3qhiAWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTkZP Ui8wLzQyQzdGNzhFOUZEQTAwQjlDQTNFMkQxRERGNUUwOERFQTg2MjAxNjIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1 RTA4REVBODYyMDE2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL09QRU5GT1IvMC80MkM3Rjc4RTlG REEwMEI5Q0EzRTJEMURERjVFMDhERUE4NjIwMTYyLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCxbP2Z4 VtXzuuLgm7x0uX2Mpqe11rHk72RgyTl1wmcjUfeH//FisjImjUCFXBeOfuBSAvgC v9Xue8paEJsSFjYtCpHzW+1564e8QrkUg6H4BxetXUWgiBk3h0a+W76mwPnNTkXL PCTmgc98U8zmQyKZzDbE/UtvviCbxyKNGP8KVfEjpfXZ0kDjIx90V/BIW4gnQv3J h8DUnMfrpTpMtfJxqRrdjeAV2f4MxsdvqqAVzT7OLPUqyZj2RUI2mj4KLyNu/hZb cOSc3jTgOhp4a4r7+TSXazUN9nP0EalkulPC/H5Wpc6eDQJ9l0iS1KxWfJZIpYNY hxMiEKqub7MsfQ== -----END CERTIFICATE-----Generated at Sat Jun 13 10:17:27 2026 by rpki-client