$ rpki-client -vvf rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft File: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft (raw, json) Hash identifier: XF7MiFv6QsktXIuR7/djbj1QqEmwTSljEZPw/GGhc7w= Subject key identifier: B0:12:1E:AA:D2:D3:24:C3:81:C4:A0:90:9E:20:9C:8A:09:BA:A6:79 Authority key identifier: 86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49 Certificate issuer: /CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849 Certificate serial: 7E09FD2A205AF8A3785657A298E79E21A52CCB6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft Manifest number: 6A Signing time: Tue 28 Jul 2026 11:03:15 +0000 Manifest this update: Tue 28 Jul 2026 10:58:15 +0000 Manifest next update: Wed 29 Jul 2026 13:44:15 +0000 Files and hashes: 1: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl (hash: xOcR6gD/aBTBTCjURdYYbXbIwn+f2f7fg4u/rbQ0gjE=) 2: 323430303a373432303a3a2f33322d3332203d3e20313334383233.roa (hash: qqWWtvqYwHtuTqDmq6KrURru6pr7pReD9Wzh4csu0e4=) 3: 3130332e3138362e3138362e302f32332d3234203d3e20313334383233.roa (hash: sU0nxf0k+bvMj58mzvcqIhIM4sCuxjf2EUmRobYvVAQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:09:fd:2a:20:5a:f8:a3:78:56:57:a2:98:e7:9e:21:a5:2c:cb:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849 Validity Not Before: Jul 28 10:58:15 2026 GMT Not After : Jul 29 13:44:15 2026 GMT Subject: CN=B0121EAAD2D324C381C4A0909E209C8A09BAA679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:95:7d:c7:11:55:cd:b9:7a:81:22:f0:f7:46: 2f:15:36:45:f1:f7:c8:01:18:dc:6d:fe:5d:4a:70: 1b:10:d9:f4:f2:df:19:7f:57:4c:53:ac:72:69:3d: 89:28:1f:75:dc:44:ce:22:55:31:31:92:b3:37:ed: c2:92:b6:72:22:68:11:a1:5a:1b:d7:cd:95:18:8b: 9d:fb:6f:e3:24:56:66:15:5e:3c:68:8f:38:7c:40: 97:83:17:1a:05:9d:da:29:93:7f:3c:20:9a:cb:27: b4:7e:0a:9a:bb:88:c5:45:47:3e:20:14:83:ed:43: ae:c4:26:0d:2f:81:1f:6c:30:d1:48:8f:88:f8:c0: e4:be:18:ce:f4:2c:4c:a6:68:4f:54:c3:49:34:19: a2:4d:34:e3:53:c2:b1:ce:82:78:75:3e:47:38:9b: f2:18:da:4c:a3:56:ae:94:fb:56:cf:ff:72:fd:3d: 86:c1:2f:2f:86:0f:08:2c:93:36:a1:bc:99:22:0c: f0:02:1c:09:6f:6c:37:5e:27:d8:00:0a:83:77:2d: c7:f1:67:e9:6c:9b:82:7e:95:22:d5:78:ed:ad:2c: 2c:30:bc:62:2a:7e:d2:23:2b:1b:7f:1e:fb:58:12: b5:2f:fa:7a:1b:dd:fe:da:49:9c:51:c4:cc:1f:e5: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:12:1E:AA:D2:D3:24:C3:81:C4:A0:90:9E:20:9C:8A:09:BA:A6:79 X509v3 Authority Key Identifier: keyid:86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:25:ef:5d:f4:45:35:76:18:62:45:8e:24:80:60:d2:ec:1c: 8c:0e:a9:5d:d2:7f:58:6e:7c:ab:6f:dd:a6:b2:de:da:c7:0b: 6c:e6:fc:7a:a6:28:48:0f:b3:58:ed:cb:72:05:05:f3:1a:57: 9a:fe:cb:2b:46:73:24:ee:1e:11:01:a3:47:bc:8f:04:37:80: e8:2b:74:03:7a:75:7e:9c:b2:ea:99:07:e3:d3:bf:2c:2b:75: 5b:ba:bd:39:18:44:95:d9:e3:28:49:e3:53:23:f7:5b:44:fc: 93:8e:78:fe:39:a6:a9:e8:8f:82:6f:30:61:e4:ff:d8:6a:e4: 65:fe:f3:dc:f5:6f:7a:b4:98:46:02:a4:f3:1d:93:89:d0:3c: 96:ac:d3:66:37:9f:8c:46:fc:30:be:bf:6c:68:12:25:19:0a: 91:40:c3:c3:ac:aa:bf:8e:84:bb:43:a8:03:71:f4:ee:24:00: 6b:44:21:24:5e:4d:1b:f1:76:3d:e0:30:b3:ee:df:37:86:e1: 5a:bb:f7:29:92:97:9b:76:db:20:a2:62:8a:62:be:31:28:4d: a4:68:d0:76:44:32:8f:5a:d1:0f:70:9a:2c:96:07:e1:d2:2f: a2:6f:1a:74:e7:7f:e9:c5:02:e9:ca:b5:cb:fd:19:7a:f1:64: 5c:ec:0e:48 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUfgn9KiBa+KN4VleimOeeIaUsy28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NzE1MDRGNDJCN0IwQUYxODgzRThERkE1QkFBNTU1 QThCRTg0OTAeFw0yNjA3MjgxMDU4MTVaFw0yNjA3MjkxMzQ0MTVaMDMxMTAvBgNV BAMTKEIwMTIxRUFBRDJEMzI0QzM4MUM0QTA5MDlFMjA5QzhBMDlCQUE2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtlX3HEVXNuXqBIvD3Ri8VNkXx 98gBGNxt/l1KcBsQ2fTy3xl/V0xTrHJpPYkoH3XcRM4iVTExkrM37cKStnIiaBGh WhvXzZUYi537b+MkVmYVXjxojzh8QJeDFxoFndopk388IJrLJ7R+Cpq7iMVFRz4g FIPtQ67EJg0vgR9sMNFIj4j4wOS+GM70LEymaE9Uw0k0GaJNNONTwrHOgnh1Pkc4 m/IY2kyjVq6U+1bP/3L9PYbBLy+GDwgskzahvJkiDPACHAlvbDdeJ9gACoN3Lcfx Z+lsm4J+lSLVeO2tLCwwvGIqftIjKxt/HvtYErUv+nob3f7aSZxRxMwf5ZrVAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUsBIeqtLTJMOBxKCQniCcigm6pnkwHwYDVR0j BBgwFoAUhpcVBPQrewrxiD6N+luqVVqL6EkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0dVLzAv ODY5NzE1MDRGNDJCN0IwQUYxODgzRThERkE1QkFBNTU1QThCRTg0OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS84Njk3MTUwNEY0MkI3QjBBRjE4ODNFOERGQTVCQUE1 NTVBOEJFODQ5LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0dVLzAvODY5NzE1MDRGNDJCN0IwQUYx ODgzRThERkE1QkFBNTU1QThCRTg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH8l7130RTV2GGJFjiSA YNLsHIwOqV3Sf1hufKtv3aay3trHC2zm/HqmKEgPs1jty3IFBfMaV5r+yytGcyTu HhEBo0e8jwQ3gOgrdAN6dX6csuqZB+PTvywrdVu6vTkYRJXZ4yhJ41Mj91tE/JOO eP45pqnoj4JvMGHk/9hq5GX+89z1b3q0mEYCpPMdk4nQPJas02Y3n4xG/DC+v2xo EiUZCpFAw8Osqr+OhLtDqANx9O4kAGtEISReTRvxdj3gMLPu3zeG4Vq79ymSl5t2 2yCiYopivjEoTaRo0HZEMo9a0Q9wmiyWB+HSL6JvGnTnf+nFAunKtcv9GXrxZFzs Dkg= -----END CERTIFICATE-----Generated at Tue Jul 28 19:31:33 2026 by rpki-client