$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft File: CEF74285903EEA3346FB1E74872895A4CE8D1742.mft (raw, json) Hash identifier: R9WKUBtDGNIc7YTEFv74j3Ia3ucDBuPDMOo99twh0+I= Subject key identifier: C6:0D:E8:72:0F:CE:AF:6A:86:6D:B1:2F:AF:0B:B8:36:E0:10:0E:91 Authority key identifier: CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42 Certificate issuer: /CN=CEF74285903EEA3346FB1E74872895A4CE8D1742 Certificate serial: 5228C80FAF0EF9D342C96A6875620DB9612EBEAB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft Manifest number: 6A Signing time: Tue 28 Jul 2026 08:33:00 +0000 Manifest this update: Tue 28 Jul 2026 08:28:00 +0000 Manifest next update: Wed 29 Jul 2026 11:07:00 +0000 Files and hashes: 1: 323430323a323665303a3a2f33322d3438203d3e2039393138.roa (hash: P3RZ+5yR615iUMzqbYBESP/TjGRguu5CcQeQgKFVanc=) 2: 3230322e3133332e36382e302f32332d3234203d3e2039393138.roa (hash: iN6E9FfraXQT/WqBz/UUplfXGRYfrwEtSBMCkEDIi4Q=) 3: CEF74285903EEA3346FB1E74872895A4CE8D1742.crl (hash: lHY5U78oCVNoloPC3oLueLV0cl55DbrCJaeOSKyha4s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:28:c8:0f:af:0e:f9:d3:42:c9:6a:68:75:62:0d:b9:61:2e:be:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEF74285903EEA3346FB1E74872895A4CE8D1742 Validity Not Before: Jul 28 08:28:00 2026 GMT Not After : Jul 29 11:07:00 2026 GMT Subject: CN=C60DE8720FCEAF6A866DB12FAF0BB836E0100E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:cd:3e:60:a3:c1:da:5c:68:34:ad:d9:f6: e2:3b:b7:4b:37:ad:e7:70:96:4c:2a:61:c2:48:a0: 31:3a:a1:a3:05:1a:c3:59:7a:73:ad:70:52:aa:96: b4:17:37:b8:a5:3e:a5:21:1a:8b:26:67:d5:dd:aa: e9:d5:36:18:80:68:31:c5:e9:83:ec:cc:11:71:39: a9:78:8a:1f:cd:f6:de:00:a0:35:48:41:78:cb:56: 0c:d1:89:3d:f2:4f:07:53:c2:13:ce:5d:71:83:df: c9:22:95:30:ce:72:6c:3f:82:fa:69:bd:fd:24:46: 31:5a:e5:15:a5:2c:50:c7:f8:7f:8c:d7:f7:cc:90: 73:a0:52:fe:2e:b8:e1:8a:3f:14:a0:78:2e:b7:ab: c2:ed:d6:d1:af:81:b3:57:f7:06:74:9d:b6:c7:a1: 42:f4:b7:7a:ae:62:b5:75:0d:56:20:b9:a3:29:ed: 90:fd:0c:d1:bc:9d:35:f3:20:72:12:04:dd:f6:49: 4a:a9:fe:a4:42:85:b5:0b:70:c4:b9:1a:ac:d8:8a: 7d:ba:f0:05:c5:39:3d:cc:a6:28:3b:31:b0:dc:e8: 09:79:d0:14:69:d1:99:c8:a2:b5:fc:d3:c3:e9:e1: 83:3d:58:b2:1a:1a:f1:03:1f:1d:9c:85:a9:9e:40: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0D:E8:72:0F:CE:AF:6A:86:6D:B1:2F:AF:0B:B8:36:E0:10:0E:91 X509v3 Authority Key Identifier: keyid:CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:40:16:ee:b2:60:62:a7:c5:ae:95:c6:c6:0f:ef:74:64:51: 8b:a2:77:d2:2a:5a:4b:5f:84:82:fe:24:cc:db:87:58:ac:ad: 02:23:15:9c:1c:f7:24:5e:ab:fc:0b:43:6f:0a:18:54:29:55: 71:a8:d5:5b:ab:b6:22:2f:1b:d7:01:4b:1e:b8:61:23:e2:b7: 68:0b:f1:64:d4:74:7e:c9:fc:b6:3b:14:be:b6:ff:ce:03:fd: 5a:ba:14:16:b2:d8:bf:8f:72:c4:c6:44:67:d9:ee:c4:c6:bd: 2c:93:ab:e0:cd:e8:08:36:f3:27:cc:e1:70:d0:52:a1:d2:49: dd:8c:95:00:09:8a:34:cb:4d:e3:01:12:fb:fb:1d:8b:8b:5a: 99:6b:67:fb:d2:7e:03:26:88:d7:89:fb:74:31:25:fc:2b:af: de:b0:e1:f7:6f:68:3d:75:de:a8:26:6d:e6:22:f1:c0:6d:6b: ea:39:0c:df:36:bf:ed:23:83:6e:a2:8e:ae:c6:55:d7:82:d5: 09:a7:09:ab:e0:82:33:ce:8f:83:20:0d:8d:8f:9e:74:1f:33: e1:83:99:7a:a3:12:7c:60:bc:b5:df:31:fd:29:6f:45:ae:53: 8f:4b:da:b3:10:0f:41:64:94:c4:29:c6:c3:38:18:0a:3e:dc: ab:5b:d4:a5 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUUijID68O+dNCyWpodWINuWEuvqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGNzQyODU5MDNFRUEzMzQ2RkIxRTc0ODcyODk1QTRD RThEMTc0MjAeFw0yNjA3MjgwODI4MDBaFw0yNjA3MjkxMTA3MDBaMDMxMTAvBgNV BAMTKEM2MERFODcyMEZDRUFGNkE4NjZEQjEyRkFGMEJCODM2RTAxMDBFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fM0+YKPB2lxoNK3Z9uI7t0s3 redwlkwqYcJIoDE6oaMFGsNZenOtcFKqlrQXN7ilPqUhGosmZ9XdqunVNhiAaDHF 6YPszBFxOal4ih/N9t4AoDVIQXjLVgzRiT3yTwdTwhPOXXGD38kilTDOcmw/gvpp vf0kRjFa5RWlLFDH+H+M1/fMkHOgUv4uuOGKPxSgeC63q8Lt1tGvgbNX9wZ0nbbH oUL0t3quYrV1DVYguaMp7ZD9DNG8nTXzIHISBN32SUqp/qRChbULcMS5GqzYin26 8AXFOT3Mpig7MbDc6Al50BRp0ZnIorX808Pp4YM9WLIaGvEDHx2chameQCzxAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUxg3ocg/Or2qGbbEvrwu4NuAQDpEwHwYDVR0j BBgwFoAUzvdChZA+6jNG+x50hyiVpM6NF0IwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJRlUv MC9DRUY3NDI4NTkwM0VFQTMzNDZGQjFFNzQ4NzI4OTVBNENFOEQxNzQyLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0NFRjc0Mjg1OTAzRUVBMzM0NkZCMUU3NDg3Mjg5 NUE0Q0U4RDE3NDIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQUlGVS8wL0NFRjc0Mjg1OTAzRUVB MzM0NkZCMUU3NDg3Mjg5NUE0Q0U4RDE3NDIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRQBbusmBip8Wu lcbGD+90ZFGLonfSKlpLX4SC/iTM24dYrK0CIxWcHPckXqv8C0NvChhUKVVxqNVb q7YiLxvXAUseuGEj4rdoC/Fk1HR+yfy2OxS+tv/OA/1auhQWsti/j3LExkRn2e7E xr0sk6vgzegINvMnzOFw0FKh0kndjJUACYo0y03jARL7+x2Li1qZa2f70n4DJojX ift0MSX8K6/esOH3b2g9dd6oJm3mIvHAbWvqOQzfNr/tI4Nuoo6uxlXXgtUJpwmr 4IIzzo+DIA2Nj550HzPhg5l6oxJ8YLy13zH9KW9FrlOPS9qzEA9BZJTEKcbDOBgK PtyrW9Sl -----END CERTIFICATE-----Generated at Tue Jul 28 23:18:26 2026 by rpki-client