$ rpki-client -vvf rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft File: 8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft (raw, json) Hash identifier: Dn+zeqiUiapaEHCrx1WQer5uEeaRB7a3KSj5OdIO4Yk= Subject key identifier: C6:2E:86:45:6C:6F:B9:5B:3B:27:DC:3E:24:89:D5:0A:58:78:AF:BA Authority key identifier: 86:81:A4:AE:9D:1E:38:75:36:C2:E0:B9:1C:79:A8:76:CF:7D:E4:E4 Certificate issuer: /CN=8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4 Certificate serial: 248267FD78845C02FFC87A33FADC48093C24C314 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft Manifest number: 69 Signing time: Tue 28 Jul 2026 00:37:03 +0000 Manifest this update: Tue 28 Jul 2026 00:32:03 +0000 Manifest next update: Wed 29 Jul 2026 01:25:03 +0000 Files and hashes: 1: 323430323a6361303a3a2f33322d3438203d3e20313331363831.roa (hash: S/vvxrC76LtkDDAr3Lwj+sG9Po2jPNI3vSVyXNzI5B0=) 2: 8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl (hash: AAOWFDS9PxWJfEvbkGt7RcPyJQ3dI0cjlj/Tag3E17w=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 01:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:82:67:fd:78:84:5c:02:ff:c8:7a:33:fa:dc:48:09:3c:24:c3:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4 Validity Not Before: Jul 28 00:32:03 2026 GMT Not After : Jul 29 01:25:03 2026 GMT Subject: CN=C62E86456C6FB95B3B27DC3E2489D50A5878AFBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:ac:9c:2f:cf:bf:73:b2:94:fa:91:dc:45: 64:3b:a2:a6:37:57:98:53:31:a4:bf:d7:e6:6c:65: d6:35:05:1c:db:bf:43:fc:3f:25:dc:6e:30:a1:72: 62:6e:e0:16:e6:84:59:87:41:ff:bb:96:ba:50:d5: 88:88:ef:c9:3f:d4:b9:e7:73:cf:eb:fe:ad:2e:f7: 0f:20:5c:75:25:79:52:1a:c0:aa:19:57:85:ef:95: f4:0a:68:35:be:f6:4f:a3:9d:e2:e1:8f:4c:ea:22: 47:70:bf:16:85:eb:f5:dc:e7:8e:a6:f5:ca:e0:31: 85:b2:26:c0:02:4d:26:09:3f:dd:75:48:6b:9e:74: 9f:9e:f5:f6:51:28:c3:6f:a8:63:40:98:cf:62:48: bb:4a:1b:5a:9c:5e:46:86:b2:41:25:b5:d2:a0:f5: be:38:8b:66:8a:d5:55:ad:86:49:e8:d0:d5:06:d8: 4e:57:8d:78:b8:5c:c6:11:d3:64:e0:9c:f7:fd:98: 42:7a:ad:bc:73:5e:1c:de:cf:a2:02:67:6d:e6:f2: f7:94:84:20:7b:7e:3f:97:ca:af:ef:4b:96:11:47: 1a:15:8f:21:9b:e4:32:2d:e9:04:d3:af:bd:63:58: 92:b1:f2:fc:2f:eb:a2:5d:06:ca:4a:ea:a2:bc:70: 70:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2E:86:45:6C:6F:B9:5B:3B:27:DC:3E:24:89:D5:0A:58:78:AF:BA X509v3 Authority Key Identifier: keyid:86:81:A4:AE:9D:1E:38:75:36:C2:E0:B9:1C:79:A8:76:CF:7D:E4:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:98:99:10:af:aa:41:93:98:51:15:9a:c5:9b:0e:e9:c6:e7: 1b:16:cf:7f:c9:00:60:ce:4a:8b:ff:f8:ec:61:49:73:a4:aa: 2c:bb:aa:7f:1d:87:4e:47:9a:ee:1c:f4:62:97:d7:27:db:fc: 19:b8:a8:31:e7:de:6f:05:f4:5b:b7:ec:cd:a1:6c:94:b8:45: 0c:6e:44:fa:c5:18:48:e5:81:8a:7d:05:b1:82:24:ec:d4:e4: 1c:fa:bf:d1:a7:8f:a7:0c:48:22:a3:53:b3:af:43:10:98:ae: c1:2d:ce:2d:b5:f2:d8:23:35:f0:c9:81:51:60:1c:99:c2:a3: a0:62:bc:cd:7b:59:b0:ac:07:e9:b1:a5:f9:14:97:89:c6:3f: 02:6e:72:04:95:83:16:33:bf:fc:b2:a7:1a:7d:b2:9d:c9:ce: 35:95:32:9c:40:d2:e1:78:92:e5:e0:42:e9:0f:f1:1f:da:68: b9:63:a2:12:ca:ab:d5:6a:47:ed:d0:36:c5:6f:d6:17:93:3a: 90:e9:d1:02:a8:1b:4f:2b:cd:89:78:54:b2:15:f5:2c:18:a6: 84:a9:7a:a2:0c:ee:54:75:d1:7d:aa:8d:39:15:43:49:27:92: f9:c2:b4:0b:14:d4:f8:a5:91:6b:43:0e:2f:de:bb:de:00:c2: 5e:43:06:10 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUJIJn/XiEXAL/yHoz+txICTwkwxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY4MUE0QUU5RDFFMzg3NTM2QzJFMEI5MUM3OUE4NzZD RjdERTRFNDAeFw0yNjA3MjgwMDMyMDNaFw0yNjA3MjkwMTI1MDNaMDMxMTAvBgNV BAMTKEM2MkU4NjQ1NkM2RkI5NUIzQjI3REMzRTI0ODlENTBBNTg3OEFGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGaycL8+/c7KU+pHcRWQ7oqY3 V5hTMaS/1+ZsZdY1BRzbv0P8PyXcbjChcmJu4BbmhFmHQf+7lrpQ1YiI78k/1Lnn c8/r/q0u9w8gXHUleVIawKoZV4XvlfQKaDW+9k+jneLhj0zqIkdwvxaF6/Xc546m 9crgMYWyJsACTSYJP911SGuedJ+e9fZRKMNvqGNAmM9iSLtKG1qcXkaGskEltdKg 9b44i2aK1VWthkno0NUG2E5XjXi4XMYR02TgnPf9mEJ6rbxzXhzez6ICZ23m8veU hCB7fj+Xyq/vS5YRRxoVjyGb5DIt6QTTr71jWJKx8vwv66JdBspK6qK8cHCVAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUxi6GRWxvuVs7J9w+JInVClh4r7owHwYDVR0j BBgwFoAUhoGkrp0eOHU2wuC5HHmods995OQwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUUlTREEv MC84NjgxQTRBRTlEMUUzODc1MzZDMkUwQjkxQzc5QTg3NkNGN0RFNEU0LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzg2ODFBNEFFOUQxRTM4NzUzNkMyRTBCOTFDNzlB ODc2Q0Y3REU0RTQuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9RSVNEQS8wLzg2ODFBNEFFOUQxRTM4 NzUzNkMyRTBCOTFDNzlBODc2Q0Y3REU0RTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClmJkQr6pBk5hR FZrFmw7pxucbFs9/yQBgzkqL//jsYUlzpKosu6p/HYdOR5ruHPRil9cn2/wZuKgx 595vBfRbt+zNoWyUuEUMbkT6xRhI5YGKfQWxgiTs1OQc+r/Rp4+nDEgio1Ozr0MQ mK7BLc4ttfLYIzXwyYFRYByZwqOgYrzNe1mwrAfpsaX5FJeJxj8CbnIElYMWM7/8 sqcafbKdyc41lTKcQNLheJLl4ELpD/Ef2mi5Y6ISyqvVakft0DbFb9YXkzqQ6dEC qBtPK82JeFSyFfUsGKaEqXqiDO5UddF9qo05FUNJJ5L5wrQLFNT4pZFrQw4v3rve AMJeQwYQ -----END CERTIFICATE-----Generated at Tue Jul 28 17:17:07 2026 by rpki-client