$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft File: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft (raw, json) Hash identifier: QwfvjxoRWQq9UYWNlWe4WDAw72ScG+c6CD90a1D4HHM= Subject key identifier: E9:95:C7:1B:A3:EE:9D:21:63:16:4D:1A:D4:96:9B:42:44:83:AA:F1 Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Certificate serial: 514406ED0784177050AB9315E1D9D2F6A790F3D0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft Manifest number: 7F Signing time: Tue 28 Jul 2026 20:59:52 +0000 Manifest this update: Tue 28 Jul 2026 20:54:52 +0000 Manifest next update: Wed 29 Jul 2026 21:22:52 +0000 Files and hashes: 1: 33392e312e34382e302f32302d3234203d3e2039393232.roa (hash: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=) 2: 33392e312e34352e302f32342d3234203d3e2039393232.roa (hash: ryqYKYb9ZEnNDprKt9KNFJe6hMX8qggWXnAtJIFQzic=) 3: 33392e312e31362e302f32302d3234203d3e2039393232.roa (hash: o5tck8QLFY02tn9jNvUElQeuTpHy+ammIuF39TN/Cn4=) 4: 36312e36342e36342e302f31382d3234203d3e203138313832.roa (hash: ZufTl96QJSTGjjHHnlV902JYYFFNTIDFxh070LDkULs=) 5: 33392e312e34302e302f32322d3234203d3e2039393232.roa (hash: z5CRvkmrV5KJFcdljtPbVmXZST0Ame/3ck3rEFg8aGM=) 6: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (hash: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=) 7: 33392e312e34342e302f32342d3234203d3e2039393232.roa (hash: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=) 8: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (hash: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=) 9: 33392e312e34362e302f32342d3234203d3e2039393232.roa (hash: onwq6khytNt8j9JeiESYQPMZkrctbzkf2UmQhqWpjYw=) 10: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (hash: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=) 11: 33392e312e33322e302f32312d3234203d3e2039393232.roa (hash: VNQcRXeOE/j/rdkFQwcA1LclvGgGVBSj6YxVH+Y+B5E=) 12: 323430343a38303a3a2f32382d3438203d3e203138313832.roa (hash: gD1x4xXT4Z6eEJ+bwB2oDJNQCUbNjWpPyKuQClgUoNQ=) 13: 33392e312e39362e302f32302d3234203d3e203138343139.roa (hash: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=) 14: 33392e312e302e302f31362d3234203d3e203138313832.roa (hash: CffvCFfDEQybZwp62g5aXFZex+pvcH1gSZG/H/2FRO0=) 15: 33392e312e34372e302f32342d3234203d3e2039393232.roa (hash: Drtv5JpDCKBUTLlwm2QdYijdfjd//4f1UxcFzmvf4Yg=) 16: 36312e36322e302e302f31362d3234203d3e203138313832.roa (hash: ifIFQrYUhM297jse0mQ1w+HqkUSGHCWju3weIN7aUQs=) 17: 33392e312e36342e302f32302d3234203d3e2039393232.roa (hash: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=) 18: 3231392e38352e302e302f31362d3234203d3e203138313832.roa (hash: TkTwJY6tgXdxY0w+yf0JfiJDrdGZLKSEjlzpI3ieJUU=) 19: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (hash: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=) 20: 33392e312e302e302f32302d3234203d3e2039393232.roa (hash: XsN+8OXikSiKwT554Z/8JtJMRKlDNFZ1zHxkg1sQLrI=) 21: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl (hash: flXhIE2RZERZbLqA00HUbo01LPUxy0yx8vHqK0OhFZE=) 22: 36312e36342e3132382e302f31372d3234203d3e203138313832.roa (hash: AP04YgE4U4X0DbCKpFBdjCNZlauxNQuycSDnxfq2LBo=) 23: 3231392e38342e302e302f31362d3234203d3e203138313832.roa (hash: 8fiqTkiu9MOMh1suF5MiCOJuDwIsVQ34W7YS4b6Ylb8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:44:06:ed:07:84:17:70:50:ab:93:15:e1:d9:d2:f6:a7:90:f3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF Validity Not Before: Jul 28 20:54:52 2026 GMT Not After : Jul 29 21:22:52 2026 GMT Subject: CN=E995C71BA3EE9D2163164D1AD4969B424483AAF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:69:3e:0b:5d:b7:04:35:ac:a9:ed:81:20: 49:9c:5a:38:95:39:b7:c6:7b:cb:26:8e:0f:af:94: 29:3a:d5:5d:c3:5e:d4:fd:1e:89:dc:e1:17:0b:4b: dc:b3:19:c2:a3:ee:22:05:8c:30:43:9f:7a:b1:33: 69:99:fb:e1:b5:89:25:f1:54:ef:aa:f5:14:22:2f: 2a:98:81:22:9b:5c:60:b5:80:c3:b7:e7:bc:05:35: 3d:3b:20:9f:cc:a5:19:35:72:ab:39:39:82:02:85: 8d:3c:f2:81:bc:77:a6:1c:27:89:39:c1:b4:a5:91: af:72:8a:37:ac:37:15:17:85:4d:02:fc:2e:bd:7f: 43:2a:4d:66:af:13:07:90:ba:55:1a:b8:a5:f6:d7: 68:ea:1d:3b:eb:1d:c3:e1:44:60:2a:5e:b9:28:ca: af:6a:23:f4:13:b5:c4:c1:1c:94:c1:a0:e2:82:c1: 9f:3a:4d:58:b0:a1:85:de:92:db:97:58:4a:d0:2c: 9f:82:c7:d7:4f:d5:e5:60:2f:80:5b:5a:44:e2:01: 88:1a:88:1f:f3:42:da:37:05:23:07:19:e3:e8:c5: 8c:ba:6f:46:b3:47:48:dd:06:c5:68:6f:77:44:cf: 9e:f2:38:79:ab:f7:08:77:31:79:13:65:df:b6:f6: cf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:95:C7:1B:A3:EE:9D:21:63:16:4D:1A:D4:96:9B:42:44:83:AA:F1 X509v3 Authority Key Identifier: keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2e:01:ac:38:8e:31:b8:18:e8:3d:1e:70:a8:cd:3d:2b:cc: 70:37:3a:52:86:ff:d7:8a:c5:e6:10:1c:31:d1:7a:7b:44:fb: 12:b9:30:5a:0d:96:35:9f:7a:3f:7a:b1:4f:f7:b4:23:fa:15: 0d:f0:80:63:0e:f3:ff:a1:6c:53:47:b7:0d:f3:83:6f:b3:8b: dd:15:5d:7b:f2:77:6c:83:1e:f1:6a:e8:04:cd:19:46:1c:e0: a2:52:5b:2c:1e:3e:c5:a1:ab:24:8c:86:00:24:a6:d4:04:38: e0:d1:5a:f5:05:51:25:19:58:83:cb:f5:5f:77:80:9a:48:9e: 4e:06:c8:31:b9:10:06:f4:e9:78:3e:ca:c8:b1:a2:f7:ba:03: 36:b1:7b:e7:1a:01:86:b6:2e:7c:e2:86:2a:5b:41:f1:1f:a0: 78:9b:16:92:18:86:ce:11:eb:1c:10:a0:6b:db:17:02:37:2f: c9:5e:f8:7b:e8:89:a7:b4:fd:63:dc:dd:bd:2e:78:d8:b4:f4: 09:fc:97:26:51:91:7f:08:1d:96:9f:ec:c1:5d:57:ae:26:83: 5b:0a:a5:37:44:f2:d0:02:41:9b:25:dc:7b:f5:d0:33:61:bb: e7:cd:e0:95:2f:3a:4f:3e:4b:16:e2:f7:4b:bf:d3:d0:7a:86: 3c:bf:35:ab -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUUUQG7QeEF3BQq5MV4dnS9qeQ89AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB RjhDQzhFRjAeFw0yNjA3MjgyMDU0NTJaFw0yNjA3MjkyMTIyNTJaMDMxMTAvBgNV BAMTKEU5OTVDNzFCQTNFRTlEMjE2MzE2NEQxQUQ0OTY5QjQyNDQ4M0FBRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClt2k+C123BDWsqe2BIEmcWjiV ObfGe8smjg+vlCk61V3DXtT9Honc4RcLS9yzGcKj7iIFjDBDn3qxM2mZ++G1iSXx VO+q9RQiLyqYgSKbXGC1gMO357wFNT07IJ/MpRk1cqs5OYIChY088oG8d6YcJ4k5 wbSlka9yijesNxUXhU0C/C69f0MqTWavEweQulUauKX212jqHTvrHcPhRGAqXrko yq9qI/QTtcTBHJTBoOKCwZ86TViwoYXektuXWErQLJ+Cx9dP1eVgL4BbWkTiAYga iB/zQto3BSMHGePoxYy6b0azR0jdBsVob3dEz57yOHmr9wh3MXkTZd+29s97AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU6ZXHG6PunSFjFk0a1JabQkSDqvEwHwYDVR0j BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx RTFBQUY4Q0M4RUYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzNGNkQzM0M5QjM5Q0ZD OTUwQTJEM0RCQzc4MTMxRTFBQUY4Q0M4RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsLgGsOI4xuBjo PR5wqM09K8xwNzpShv/XisXmEBwx0Xp7RPsSuTBaDZY1n3o/erFP97Qj+hUN8IBj DvP/oWxTR7cN84Nvs4vdFV178ndsgx7xaugEzRlGHOCiUlssHj7FoaskjIYAJKbU BDjg0Vr1BVElGViDy/Vfd4CaSJ5OBsgxuRAG9Ol4PsrIsaL3ugM2sXvnGgGGti58 4oYqW0HxH6B4mxaSGIbOEescEKBr2xcCNy/JXvh76ImntP1j3N29LnjYtPQJ/Jcm UZF/CB2Wn+zBXVeuJoNbCqU3RPLQAkGbJdx79dAzYbvnzeCVLzpPPksW4vdLv9PQ eoY8vzWr -----END CERTIFICATE-----Generated at Tue Jul 28 23:09:41 2026 by rpki-client