$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft File: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft (raw, json) Hash identifier: vl5GSPc64vn1b9rnZD9PMiR2YTLxzgTfhMk95j1ORoQ= Subject key identifier: E4:4D:45:1D:97:90:4A:F6:EF:95:4F:25:29:64:3C:E4:0D:D0:08:62 Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 6A8C7D0AAFED15A8038AB56C18DBC9E148D1BC54 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft Manifest number: 72 Signing time: Tue 28 Jul 2026 16:04:22 +0000 Manifest this update: Tue 28 Jul 2026 15:59:22 +0000 Manifest next update: Wed 29 Jul 2026 18:46:22 +0000 Files and hashes: 1: 3138372e37392e3234372e302f32342d3234203d3e203134383734.roa (hash: xrdOBfPyCEULsjixsbr/Px/rQubD5zMfCzYg1CD5bIk=) 2: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl (hash: 7Ox5Frif3JJOUD4R12AXOo6ox75Ytk3o6WQ4ax4yTvc=) 3: 3138372e37392e3234302e302f32312d3332203d3e20313331363432.roa (hash: 3hkv3oIEXxYKcJ6+wpyKK8B+zNNvwWzz7gTiuX5XoeM=) 4: 3138372e37392e3234362e302f32332d3234203d3e203138313738.roa (hash: lvDvOodv8M6LrOgAyDJTwNdJGzoBoLeykAhTF1kRzCI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8c:7d:0a:af:ed:15:a8:03:8a:b5:6c:18:db:c9:e1:48:d1:bc:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Jul 28 15:59:22 2026 GMT Not After : Jul 29 18:46:22 2026 GMT Subject: CN=E44D451D97904AF6EF954F2529643CE40DD00862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:cf:a9:f1:50:9e:8e:81:e4:c0:ee:78:d3: d4:44:bb:18:47:bf:e3:53:7b:f0:d6:6d:10:48:1a: 99:af:01:7e:50:92:e3:f4:fb:41:6a:e4:fe:ad:62: 7c:8e:7e:29:40:54:dd:18:80:eb:d5:8e:0b:4f:34: 08:5f:94:54:13:43:4e:bd:12:87:fc:d9:49:8f:b2: cf:35:53:86:5a:7f:7e:fd:11:6f:1e:66:f3:4c:de: 32:e1:45:ff:22:74:d7:0d:77:46:12:1a:06:41:2d: 5d:87:e2:68:15:19:b0:ed:d7:4e:f6:23:9a:df:7c: 5b:40:e6:4b:6a:af:32:eb:96:8a:51:5a:b8:da:9d: 0e:cd:c5:ec:98:d6:5f:c0:ca:09:2b:bf:86:92:58: 94:3f:2d:67:45:b3:54:d0:55:eb:78:2e:a7:a7:35: d5:c6:ff:27:09:51:99:70:32:65:7d:e1:52:4d:d6: 58:9e:d3:a8:b0:5b:be:1c:7f:5e:0d:7e:f3:f3:82: c9:9f:90:dc:d0:25:65:31:ab:bf:cf:a7:c3:4d:ba: 88:fb:a4:48:a6:4c:b4:b5:a5:9a:17:cb:a1:bd:23: 5c:b9:d1:d6:17:20:07:b9:3d:23:7a:f5:8b:78:32: e9:57:e9:26:dc:06:2b:7f:71:a6:82:4f:e1:c1:b0: 40:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4D:45:1D:97:90:4A:F6:EF:95:4F:25:29:64:3C:E4:0D:D0:08:62 X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:ee:b9:6a:cb:00:d3:3f:04:79:42:8d:4c:ec:09:d2:aa:b8: 01:49:31:a5:fe:14:91:f1:f4:ff:28:21:8a:39:16:72:bd:96: ff:f5:43:cd:c1:87:14:76:87:12:1e:c8:a7:ea:c5:25:b4:0d: 68:a2:26:a2:b4:a1:98:b2:8b:fc:91:bc:a2:82:c0:59:01:47: ce:5a:f9:fb:07:3a:6f:17:d9:38:7d:82:e3:63:51:3a:61:31: 19:5e:1d:3f:c8:b6:26:dd:d0:ec:0a:1f:ef:1c:76:3c:23:b4: 18:91:68:0a:8a:a4:50:8c:90:68:96:76:83:58:28:f6:5b:ad: f8:8c:8d:ce:27:3d:a9:06:0d:43:f6:26:a9:a4:1a:0f:f8:43: 3a:b9:cb:cb:db:ba:9d:86:ae:f6:53:0a:39:5c:76:a5:f8:78: 46:54:e3:44:2c:a2:9d:74:62:c7:9c:ec:03:90:45:18:cf:ce: c2:ec:83:3e:b6:ce:a3:52:d9:8c:db:f5:63:f3:c4:47:a0:6e: 08:a0:f1:38:c5:05:2e:07:5d:bf:29:ed:f5:5e:ce:af:3c:82: 37:fd:21:b5:46:65:0e:f6:11:b2:b7:e9:e9:e0:6b:dc:1c:49: fd:0f:0e:99:2d:3e:20:12:d5:c1:98:ea:b8:26:e4:84:31:cf: a8:c0:8d:82 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUaox9Cq/tFagDirVsGNvJ4UjRvFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA3MjgxNTU5MjJaFw0yNjA3MjkxODQ2MjJaMDMxMTAvBgNV BAMTKEU0NEQ0NTFEOTc5MDRBRjZFRjk1NEYyNTI5NjQzQ0U0MEREMDA4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk6M+p8VCejoHkwO5409REuxhH v+NTe/DWbRBIGpmvAX5QkuP0+0Fq5P6tYnyOfilAVN0YgOvVjgtPNAhflFQTQ069 Eof82UmPss81U4Zaf379EW8eZvNM3jLhRf8idNcNd0YSGgZBLV2H4mgVGbDt1072 I5rffFtA5ktqrzLrlopRWrjanQ7NxeyY1l/Aygkrv4aSWJQ/LWdFs1TQVet4Lqen NdXG/ycJUZlwMmV94VJN1lie06iwW74cf14NfvPzgsmfkNzQJWUxq7/Pp8NNuoj7 pEimTLS1pZoXy6G9I1y50dYXIAe5PSN69Yt4MulX6SbcBit/caaCT+HBsED/AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU5E1FHZeQSvbvlU8lKWQ85A3QCGIwHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvM0MyMTkyNjNGMjZCOTlFMkRC Mzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANnuuWrLANM/BHlCjUzs CdKquAFJMaX+FJHx9P8oIYo5FnK9lv/1Q83BhxR2hxIeyKfqxSW0DWiiJqK0oZiy i/yRvKKCwFkBR85a+fsHOm8X2Th9guNjUTphMRleHT/Itibd0OwKH+8cdjwjtBiR aAqKpFCMkGiWdoNYKPZbrfiMjc4nPakGDUP2JqmkGg/4Qzq5y8vbup2GrvZTCjlc dqX4eEZU40Qsop10Ysec7AOQRRjPzsLsgz62zqNS2Yzb9WPzxEegbgig8TjFBS4H Xb8p7fVezq88gjf9IbVGZQ72EbK36enga9wcSf0PDpktPiAS1cGY6rgm5IQxz6jA jYI= -----END CERTIFICATE-----Generated at Wed Jul 29 00:20:57 2026 by rpki-client