$ rpki-client -vvf rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft File: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft (raw, json) Hash identifier: DRGLzf4IZHwu491xwNlBZy95CAhPnZVW76c0EltXYN0= Subject key identifier: C2:2B:95:AF:B8:F4:FB:6B:80:35:7B:BF:73:0D:8A:7A:31:8F:EB:95 Authority key identifier: 42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 Certificate issuer: /CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Certificate serial: 30A64DA748C8E328F60AC7C92B4C98D08A582E40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft Manifest number: 6B Signing time: Tue 28 Jul 2026 12:13:51 +0000 Manifest this update: Tue 28 Jul 2026 12:08:51 +0000 Manifest next update: Wed 29 Jul 2026 14:55:51 +0000 Files and hashes: 1: 3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa (hash: U1mFwcarBwcENEkbti0C1yVEmBtDzRAAAqYz8mcIUOg=) 2: 323430353a653463303a3a2f33322d3634203d3e20313331363734.roa (hash: R5XmHRGNRbL/JzVgicSjGM6c3avdhtCi9gHhhibn8Iw=) 3: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl (hash: wBrqtG/6IJdIYSr+r9Imc5eqJkf2o7GpiqYUT7QQMw4=) 4: 3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa (hash: GSRooEfHneMScmMay9/suUawwfISd9M2Zp/oSqWxd5c=) 5: 323430353a653463303a3a2f33322d3634203d3e20313331363737.roa (hash: 81X32lIDsqpLyEd5Xpy3ESJVHUbt39R1tegiSMqE1PY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a6:4d:a7:48:c8:e3:28:f6:0a:c7:c9:2b:4c:98:d0:8a:58:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Validity Not Before: Jul 28 12:08:51 2026 GMT Not After : Jul 29 14:55:51 2026 GMT Subject: CN=C22B95AFB8F4FB6B80357BBF730D8A7A318FEB95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:0e:ca:46:93:de:29:50:8c:a7:a1:c4:21: 7e:48:a3:4f:55:38:3a:89:5f:ca:15:68:8e:3c:14: 4b:6d:52:e0:f8:50:7c:9e:aa:c2:cc:96:7d:4d:3d: f6:36:2a:6f:93:dc:20:6f:d1:eb:9f:06:6e:35:f8: d6:cb:be:f2:30:78:bb:03:bc:30:d5:ba:e2:76:b0: aa:9a:c1:1f:f2:c5:c2:65:24:20:a1:90:ad:7a:bf: 80:c6:56:98:b3:e8:28:02:05:e8:a4:e4:7a:00:33: 97:07:1c:ee:fb:15:d4:f4:87:e3:83:00:53:b3:c7: 54:99:8d:54:6c:ba:97:32:d6:0c:77:16:ce:92:5c: af:44:3c:81:96:b9:32:20:5a:f9:02:c8:4c:06:81: bc:c6:2d:df:32:80:9d:58:0a:eb:57:94:52:d5:32: 41:88:65:cb:c3:19:9f:3c:81:4c:91:da:d6:e5:82: 87:05:92:68:0e:23:9b:00:f9:4c:57:7d:5c:fa:3f: e0:0a:4a:07:81:3e:37:1b:3e:3c:f9:81:b5:aa:78: 48:6b:ea:ce:bc:7a:60:d8:31:c6:06:6c:85:2d:cf: 78:d4:c6:5e:96:cd:53:d3:f8:4f:9d:f9:b7:37:14: 84:c3:b7:e3:d3:e4:53:46:00:d8:c2:27:15:f2:1d: 9a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2B:95:AF:B8:F4:FB:6B:80:35:7B:BF:73:0D:8A:7A:31:8F:EB:95 X509v3 Authority Key Identifier: keyid:42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6f:9a:6a:04:a5:12:71:65:20:79:eb:fc:b5:c5:cb:5d:2d: 72:2d:ec:f9:2d:67:e5:7c:16:3f:f5:21:e6:54:36:40:73:c5: b6:6f:75:77:a1:2b:54:d0:d9:b0:82:db:0a:60:21:e7:75:f9: f0:19:30:bd:a1:ae:40:f0:bf:2b:7a:3f:e3:fe:d8:ca:5d:37: 38:fe:6a:75:5b:b7:2e:b0:69:37:07:6d:1c:a6:88:b2:00:87: 4f:f7:c1:b3:6c:1f:f6:e7:b8:47:9d:4e:43:2e:cb:a3:54:be: 1f:db:0f:57:b9:23:7d:43:61:25:b9:9d:08:0a:28:93:db:89: ca:ea:25:a8:f2:fd:d0:77:a7:57:7e:02:f5:57:e1:33:2c:95: d6:40:b7:f7:4c:ee:5c:f2:6d:db:b4:c6:0f:cf:8b:e0:f2:81: 77:51:67:a6:a0:66:30:d3:e7:3b:36:df:9d:a3:7d:c0:a5:ff: 51:50:04:bb:07:76:1e:96:77:e8:4e:e8:eb:e3:34:f0:f3:30: 9c:99:70:87:64:6e:a1:74:80:74:01:de:c2:17:f3:0b:7b:6f: e6:8c:96:75:08:a3:6f:c0:58:b7:9f:10:4c:4d:17:06:1b:c5: 6d:20:5f:d1:51:5b:c2:54:b6:2b:1b:0a:b9:51:cf:c4:f1:54: 34:d1:73:2a -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUMKZNp0jI4yj2CsfJK0yY0IpYLkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1RTA4REVB ODYyMDE2MjAeFw0yNjA3MjgxMjA4NTFaFw0yNjA3MjkxNDU1NTFaMDMxMTAvBgNV BAMTKEMyMkI5NUFGQjhGNEZCNkI4MDM1N0JCRjczMEQ4QTdBMzE4RkVCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTw7KRpPeKVCMp6HEIX5Io09V ODqJX8oVaI48FEttUuD4UHyeqsLMln1NPfY2Km+T3CBv0eufBm41+NbLvvIweLsD vDDVuuJ2sKqawR/yxcJlJCChkK16v4DGVpiz6CgCBeik5HoAM5cHHO77FdT0h+OD AFOzx1SZjVRsupcy1gx3Fs6SXK9EPIGWuTIgWvkCyEwGgbzGLd8ygJ1YCutXlFLV MkGIZcvDGZ88gUyR2tblgocFkmgOI5sA+UxXfVz6P+AKSgeBPjcbPjz5gbWqeEhr 6s68emDYMcYGbIUtz3jUxl6WzVPT+E+d+bc3FITDt+PT5FNGANjCJxXyHZo1AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUwiuVr7j0+2uANXu/cw2KejGP65UwHwYDVR0j BBgwFoAUQsf3jp/aALnKPi0d314I3qhiAWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTkZP Ui8wLzQyQzdGNzhFOUZEQTAwQjlDQTNFMkQxRERGNUUwOERFQTg2MjAxNjIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1 RTA4REVBODYyMDE2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL09QRU5GT1IvMC80MkM3Rjc4RTlG REEwMEI5Q0EzRTJEMURERjVFMDhERUE4NjIwMTYyLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYm+aagSl EnFlIHnr/LXFy10tci3s+S1n5XwWP/Uh5lQ2QHPFtm91d6ErVNDZsILbCmAh53X5 8BkwvaGuQPC/K3o/4/7Yyl03OP5qdVu3LrBpNwdtHKaIsgCHT/fBs2wf9ue4R51O Qy7Lo1S+H9sPV7kjfUNhJbmdCAook9uJyuolqPL90HenV34C9VfhMyyV1kC390zu XPJt27TGD8+L4PKBd1FnpqBmMNPnOzbfnaN9wKX/UVAEuwd2HpZ36E7o6+M08PMw nJlwh2RuoXSAdAHewhfzC3tv5oyWdQijb8BYt58QTE0XBhvFbSBf0VFbwlS2KxsK uVHPxPFUNNFzKg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:23:30 2026 by rpki-client