$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft File: 9F4621BE2CEB15DD74809D52692588598490FABF.mft (raw, json) Hash identifier: AsCkNMZn/OBsmzdS2e4r+7+rs9Mne/yCz3B3c6lCO+0= Subject key identifier: D5:93:90:0E:54:DB:4D:B2:57:1B:06:2E:F5:78:83:32:F2:BA:94:7A Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF Certificate issuer: /CN=9F4621BE2CEB15DD74809D52692588598490FABF Certificate serial: 18169C0EF33681D1719889273DAEF62054D66B59 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft Manifest number: 71 Signing time: Tue 28 Jul 2026 16:09:24 +0000 Manifest this update: Tue 28 Jul 2026 16:04:24 +0000 Manifest next update: Wed 29 Jul 2026 19:30:24 +0000 Files and hashes: 1: 9F4621BE2CEB15DD74809D52692588598490FABF.crl (hash: bGqXht0CHksTtihibZxq2VkY71W3oiVrv+RY7U86DQM=) 2: 3231312e37362e3137362e302f32332d3332203d3e20313331363432.roa (hash: Neacdwz6usPvpnxdcJO7WdPsbmwrbKBYPAqd9PXlS3o=) 3: 3230322e3134382e3232322e302f32332d3332203d3e20313331363432.roa (hash: QSozWjihGPRSxS1l+02abUaaKtc4iDRAVQB/oWLei3c=) 4: 3130332e3133372e3234362e302f32332d3332203d3e20313331363432.roa (hash: taJQRTDQ90UxXadAvWM0GS41DZC0w4SutBUxh10g3Ls=) 5: 323430353a636463303a3a2f33322d313234203d3e20313331363432.roa (hash: B+rZIPiEbFPdUxH0aia2ffpZrMmBBOdtjQ5TGrFZI/g=) 6: 3130332e3135372e34322e302f32332d3332203d3e20323033353438.roa (hash: nYR+Ml8lrCk7Dl21maH1wtxMxSe7KjzyLwH7FozLC7o=) 7: 3130332e3134382e37322e302f32332d3332203d3e20313331363432.roa (hash: OLaMU17HmXpsMBlzaeBhODO2N7nOliRaF32TUtfckJg=) 8: 3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa (hash: Om14eoHT5IhomeKnYkvjKpVL1HxviUxm8BBB1REH3/4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:16:9c:0e:f3:36:81:d1:71:98:89:27:3d:ae:f6:20:54:d6:6b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF Validity Not Before: Jul 28 16:04:24 2026 GMT Not After : Jul 29 19:30:24 2026 GMT Subject: CN=D593900E54DB4DB2571B062EF5788332F2BA947A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:c1:44:31:15:b7:24:a8:b5:cc:5a:d9:f1: 7c:cb:10:9c:6a:35:59:2b:ba:6e:c3:6f:9a:10:ad: 48:6d:12:14:7b:f7:4a:d8:68:58:21:55:14:67:54: b3:a6:4c:2f:9d:58:83:41:a4:37:88:98:2a:01:25: 1a:bb:d9:ab:8d:16:e3:c9:88:c3:f5:73:09:ea:f0: a4:53:b6:9e:42:6c:ce:40:bf:f5:3e:16:15:82:c2: 43:6a:a3:b7:38:b8:b2:3f:69:62:e1:49:f4:1b:57: 0c:f5:62:26:16:f3:2d:36:e7:fa:7e:ce:90:e4:ec: b9:57:20:e8:f9:18:de:3e:13:43:bf:b8:97:27:65: 2e:ba:ac:16:c1:b6:89:71:10:a9:6f:40:ec:6b:71: c4:15:25:2b:a1:5e:91:a6:18:f9:30:16:53:e8:89: 56:ff:04:7e:7e:e8:3e:7c:60:fa:45:88:27:95:a7: 54:55:34:11:8c:f6:c9:c9:69:cb:30:46:94:62:f7: cb:44:42:d1:e6:0b:ca:49:1c:06:54:58:b5:82:7b: 49:88:ff:af:ea:9d:f7:37:92:29:c6:7d:83:2d:6f: b8:62:72:d5:92:51:66:49:7c:ac:1c:eb:0b:21:38: 1f:6a:3c:78:7e:96:2b:cf:64:4f:6c:d3:49:ac:2d: e2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:93:90:0E:54:DB:4D:B2:57:1B:06:2E:F5:78:83:32:F2:BA:94:7A X509v3 Authority Key Identifier: keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:88:0b:74:c3:a1:b7:09:71:7e:ef:25:74:ab:77:10:e9:20: 69:79:ff:da:ef:90:96:53:24:66:ea:4e:ed:3c:3a:96:ba:c8: ba:20:0f:7c:53:8f:de:09:6a:c1:79:7c:52:d2:be:bb:94:98: 96:ec:79:ab:f7:da:cc:3f:c9:a9:e4:91:0d:f1:42:84:21:06: 63:ac:6c:11:ee:fe:85:bd:d9:24:9b:d5:aa:32:f6:03:d3:72: 87:c8:6a:34:95:e6:81:a6:74:08:7c:e2:7c:27:63:83:27:f4: b1:85:1a:0a:b8:f4:87:b5:b8:d6:23:7f:cd:96:6d:33:53:af: 78:2b:8f:17:bc:55:4a:bb:b4:ba:3a:d4:88:90:a5:6a:91:33: 5b:23:00:90:03:68:3d:81:c6:60:54:58:5d:c4:59:96:8b:7d: 72:5e:fa:bf:70:a2:3c:2f:56:ab:8c:f7:f9:70:26:58:fd:b3: 02:8c:92:78:c3:66:de:60:7a:60:21:d0:2d:f3:80:04:fa:6f: 1c:d6:15:53:0d:f5:d6:a0:04:f0:2b:82:4b:12:04:a7:1d:65: 1f:8f:74:fd:81:82:46:67:0b:0e:96:0d:be:bb:62:7a:d8:45: 39:f4:29:2e:89:16:e0:74:15:f5:3b:de:cb:91:8e:d5:0a:0c: bd:f5:62:d5 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUGBacDvM2gdFxmIknPa72IFTWa1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4 NDkwRkFCRjAeFw0yNjA3MjgxNjA0MjRaFw0yNjA3MjkxOTMwMjRaMDMxMTAvBgNV BAMTKEQ1OTM5MDBFNTREQjREQjI1NzFCMDYyRUY1Nzg4MzMyRjJCQTk0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KMFEMRW3JKi1zFrZ8XzLEJxq NVkrum7Db5oQrUhtEhR790rYaFghVRRnVLOmTC+dWINBpDeImCoBJRq72auNFuPJ iMP1cwnq8KRTtp5CbM5Av/U+FhWCwkNqo7c4uLI/aWLhSfQbVwz1YiYW8y025/p+ zpDk7LlXIOj5GN4+E0O/uJcnZS66rBbBtolxEKlvQOxrccQVJSuhXpGmGPkwFlPo iVb/BH5+6D58YPpFiCeVp1RVNBGM9snJacswRpRi98tEQtHmC8pJHAZUWLWCe0mI /6/qnfc3kinGfYMtb7hictWSUWZJfKwc6wshOB9qPHh+livPZE9s00msLeIPAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU1ZOQDlTbTbJXGwYu9XiDMvK6lHowHwYDVR0j BBgwFoAUn0YhvizrFd10gJ1SaSWIWYSQ+r8wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAv OUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4NDkwRkFCRi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RjQ2MjFCRTJDRUIxNURENzQ4MDlENTI2OTI1ODg1 OTg0OTBGQUJGLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAvOUY0NjIxQkUyQ0VCMTVERDc0 ODA5RDUyNjkyNTg4NTk4NDkwRkFCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIqIC3TDobcJcX7vJXSr dxDpIGl5/9rvkJZTJGbqTu08Opa6yLogD3xTj94JasF5fFLSvruUmJbseav32sw/ yankkQ3xQoQhBmOsbBHu/oW92SSb1aoy9gPTcofIajSV5oGmdAh84nwnY4Mn9LGF Ggq49Ie1uNYjf82WbTNTr3grjxe8VUq7tLo61IiQpWqRM1sjAJADaD2BxmBUWF3E WZaLfXJe+r9wojwvVquM9/lwJlj9swKMknjDZt5gemAh0C3zgAT6bxzWFVMN9dag BPArgksSBKcdZR+PdP2BgkZnCw6WDb67YnrYRTn0KS6JFuB0FfU73suRjtUKDL31 YtU= -----END CERTIFICATE-----Generated at Tue Jul 28 20:50:24 2026 by rpki-client