$ rpki-client -vvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft File: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json) Hash identifier: 7oNVgWQE74sx+Jo8TNLsu75JSCjN6++YMsJM/rczYeI= Subject key identifier: DC:BB:78:6F:92:80:0C:8C:30:AD:F7:EE:A9:F5:8A:E4:C4:C8:63:EC Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Certificate serial: 68A0D2E8888C1B04DD22F72DCDE189B123168725 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft Manifest number: 30 Signing time: Fri 12 Jun 2026 18:42:50 +0000 Manifest this update: Fri 12 Jun 2026 18:37:50 +0000 Manifest next update: Sat 13 Jun 2026 19:53:50 +0000 Files and hashes: 1: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=) 2: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: frHJ3jDCZ2bjNYxG5hul1KGLu2q7lOSYXOjTPra16Bg=) 3: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=) 4: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=) 5: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 19:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a0:d2:e8:88:8c:1b:04:dd:22:f7:2d:cd:e1:89:b1:23:16:87:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Validity Not Before: Jun 12 18:37:50 2026 GMT Not After : Jun 13 19:53:50 2026 GMT Subject: CN=DCBB786F92800C8C30ADF7EEA9F58AE4C4C863EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:07:f4:62:2d:e2:db:c6:18:80:a8:87:4e: 54:28:7b:8f:d4:49:9f:ff:80:e4:3f:f9:d8:6a:08: 7d:bf:dc:64:38:eb:41:1c:a8:31:7b:dc:5c:40:9b: 11:61:d9:73:95:09:c2:d2:dc:b3:da:26:2e:88:ee: ff:c2:cc:ee:a5:7a:19:1d:aa:56:6a:63:18:5e:ce: b4:21:88:e3:38:d4:be:aa:51:c7:2e:cd:96:c0:66: 67:84:c4:aa:11:a9:8b:54:2d:0c:8a:1b:ee:2e:73: 01:bb:34:41:2d:8b:f7:2e:e3:a8:68:dc:c3:4d:84: 91:d0:ea:4b:db:50:66:f8:9a:d0:73:16:97:9d:70: bd:2e:be:06:56:c1:d6:f1:83:63:4a:f5:03:45:d5: bd:2e:60:27:1e:f0:08:b4:98:99:be:06:3b:b3:72: 56:c5:7b:ed:1c:82:b3:35:d6:07:c3:ed:f0:de:80: 3a:ce:50:9d:92:9d:dd:96:1a:a1:55:ae:76:64:96: 09:cf:69:df:ad:24:0a:d0:0f:92:57:35:7e:97:46: 27:df:da:e9:c4:61:ab:dd:d1:8e:90:18:94:3c:11: 90:19:30:4a:06:27:71:f6:20:b8:f9:f1:74:e9:7c: e2:b4:1a:80:23:63:98:4c:c1:af:db:1f:94:0c:1b: 0f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BB:78:6F:92:80:0C:8C:30:AD:F7:EE:A9:F5:8A:E4:C4:C8:63:EC X509v3 Authority Key Identifier: keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e7:0d:24:e6:ec:9e:a7:52:4d:76:f7:ec:2b:98:ed:63:5b: 95:06:d5:fe:b7:25:1f:2b:8f:ca:dc:4d:97:0e:78:a7:bc:20: 88:d6:6f:aa:53:cc:2a:c8:a0:1c:49:5d:c1:98:6b:7f:35:04: 09:99:f7:cf:4e:93:a0:48:74:1a:8f:78:9f:ee:74:53:73:81: 22:7f:9a:e1:88:7b:2e:0a:5b:9d:e3:a9:b2:94:62:c7:eb:2a: 44:13:08:8f:ea:25:c7:cc:10:51:07:39:5a:ec:94:67:0c:56: 0a:9d:3a:5e:a0:04:57:ea:c2:8e:96:db:8a:c6:9d:bc:9f:63: ec:37:29:8e:71:cd:26:b3:78:d8:dc:f5:e8:a3:b9:00:d4:86: 43:c4:93:71:0d:04:28:3b:9f:95:b2:8b:4c:45:e9:6e:61:f4: 73:c7:7b:dc:ed:35:fc:27:6a:6f:31:cb:81:da:9f:8f:b5:95: c2:a4:29:3f:87:2a:ae:de:08:a8:eb:19:a1:ba:fa:5e:04:c4: eb:f9:0d:49:8c:84:c3:1a:df:9c:b2:fd:3f:da:49:1f:a7:35: fb:33:01:d5:21:dd:cd:1e:b3:35:20:b3:95:fa:e7:b1:b9:f9: 87:10:45:7e:2e:1c:d7:32:af:1a:eb:4f:41:f8:1b:c6:34:60: eb:0c:82:1a -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUaKDS6IiMGwTdIvctzeGJsSMWhyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFDMjdENTI0 NjZBQzdFNjAeFw0yNjA2MTIxODM3NTBaFw0yNjA2MTMxOTUzNTBaMDMxMTAvBgNV BAMTKERDQkI3ODZGOTI4MDBDOEMzMEFERjdFRUE5RjU4QUU0QzRDODYzRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHwf0Yi3i28YYgKiHTlQoe4/U SZ//gOQ/+dhqCH2/3GQ460EcqDF73FxAmxFh2XOVCcLS3LPaJi6I7v/CzO6lehkd qlZqYxhezrQhiOM41L6qUccuzZbAZmeExKoRqYtULQyKG+4ucwG7NEEti/cu46ho 3MNNhJHQ6kvbUGb4mtBzFpedcL0uvgZWwdbxg2NK9QNF1b0uYCce8Ai0mJm+Bjuz clbFe+0cgrM11gfD7fDegDrOUJ2Snd2WGqFVrnZklgnPad+tJArQD5JXNX6XRiff 2unEYavd0Y6QGJQ8EZAZMEoGJ3H2ILj58XTpfOK0GoAjY5hMwa/bH5QMGw+1AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQU3Lt4b5KADIwwrffuqfWK5MTIY+wwHwYDVR0j BBgwFoAUTU29KLvriSCzeqYEisJ9UkZqx+YwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VDVU5F VC8wLzRENERCRDI4QkJFQjg5MjBCMzdBQTYwNDhBQzI3RDUyNDY2QUM3RTYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFD MjdENTI0NjZBQzdFNi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NFQ1VORVQvMC80RDREQkQyOEJC RUI4OTIwQjM3QUE2MDQ4QUMyN0Q1MjQ2NkFDN0U2Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfecNJObs nqdSTXb37CuY7WNblQbV/rclHyuPytxNlw54p7wgiNZvqlPMKsigHEldwZhrfzUE CZn3z06ToEh0Go94n+50U3OBIn+a4Yh7LgpbneOpspRix+sqRBMIj+olx8wQUQc5 WuyUZwxWCp06XqAEV+rCjpbbisadvJ9j7DcpjnHNJrN42Nz16KO5ANSGQ8STcQ0E KDuflbKLTEXpbmH0c8d73O01/CdqbzHLgdqfj7WVwqQpP4cqrt4IqOsZobr6XgTE 6/kNSYyEwxrfnLL9P9pJH6c1+zMB1SHdzR6zNSCzlfrnsbn5hxBFfi4c1zKvGutP QfgbxjRg6wyCGg== -----END CERTIFICATE-----Generated at Sat Jun 13 09:05:25 2026 by rpki-client