$ rpki-client -vvf rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft File: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft (raw, json) Hash identifier: 7TUKfZS5X5KW92zIhYuT+FQD2nzmYSHQKo0ZVf0nVMs= Subject key identifier: C1:E6:6E:E5:42:F8:9B:5A:3B:E7:37:E1:D3:AA:6F:EA:1F:6D:D6:D6 Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0 Certificate issuer: /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0 Certificate serial: 3B06B5AA6D296A8C350758B96708DA815852FFC8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft Manifest number: 6B Signing time: Tue 28 Jul 2026 09:03:02 +0000 Manifest this update: Tue 28 Jul 2026 08:58:02 +0000 Manifest next update: Wed 29 Jul 2026 09:57:02 +0000 Files and hashes: 1: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl (hash: CTQuSOHwN4yUkgUDAMS1aq6Z7QZxZtgzgz5KncefLNw=) 2: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (hash: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=) 3: 323430313a6136303a3a2f33322d3332203d3e203138303431.roa (hash: W1whgs9nNrUE4RVKtECQcAsJLL/TFHZVPsexycz3Kms=) 4: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (hash: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:06:b5:aa:6d:29:6a:8c:35:07:58:b9:67:08:da:81:58:52:ff:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0 Validity Not Before: Jul 28 08:58:02 2026 GMT Not After : Jul 29 09:57:02 2026 GMT Subject: CN=C1E66EE542F89B5A3BE737E1D3AA6FEA1F6DD6D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:48:fe:66:60:84:2d:a0:91:a1:f3:c3:f8:4a: 45:ca:8d:55:3b:c4:80:58:50:51:68:31:27:de:2c: 97:d3:b7:08:75:dd:ac:c8:a4:50:47:78:3e:45:c2: 23:24:1a:b9:a2:79:d7:83:a2:41:08:15:8f:35:ec: 74:13:c0:57:90:34:dc:b6:0a:b0:83:cf:7a:fc:97: 43:bf:22:5a:05:4c:7d:39:d3:46:81:04:3a:0a:4b: cd:ef:b8:78:9e:59:54:fd:58:d2:ef:22:a0:07:4c: f3:e9:3b:e6:6c:99:02:a9:d6:b7:b2:83:c7:ed:d5: c1:b7:c6:b8:e1:71:56:ce:87:e3:25:06:ae:0c:6d: 35:a6:03:1e:fc:ed:b4:a6:7b:5a:32:0d:26:db:71: 8c:0d:e5:84:97:98:5a:22:3f:15:fc:4d:6f:a6:fb: a5:62:92:ed:32:fe:34:ac:d3:54:50:4c:d3:38:05: 2f:27:60:c3:ab:22:7a:de:61:6d:24:0f:d7:bb:bd: 48:2b:63:1f:a8:57:7c:1b:6b:85:8d:2f:01:fc:36: ef:23:7d:aa:be:e5:9e:74:bf:00:d5:9e:b6:e9:ff: 6e:cd:e2:b5:88:6e:ad:e2:ca:20:68:8e:7a:1b:73: b7:3a:e7:34:e1:f1:4e:fc:16:06:85:36:07:91:1b: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E6:6E:E5:42:F8:9B:5A:3B:E7:37:E1:D3:AA:6F:EA:1F:6D:D6:D6 X509v3 Authority Key Identifier: keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fe:32:aa:68:f0:e7:5f:12:a9:39:72:71:f7:9e:39:2b:08: a8:3a:1f:70:f5:88:9c:12:82:58:da:f5:7e:cc:bd:3e:20:99: 94:10:6f:b0:c2:01:75:67:f7:ae:de:32:87:c5:ba:08:13:99: a4:4a:a5:70:0d:6b:0d:12:e0:de:9f:42:fa:85:ca:16:e0:67: d0:0c:8d:2c:a4:ff:8e:a7:26:10:8c:8f:2d:80:80:61:5c:f1: 3b:b8:10:c3:ae:28:96:97:92:6d:87:59:cb:80:f0:e0:1b:18: e8:c5:0a:05:57:eb:9b:c6:1a:8c:ea:3b:6b:d0:99:67:ca:4c: ed:3a:7d:30:05:5e:39:b5:fd:33:50:22:5b:89:21:b7:a4:8c: 78:a0:dc:54:cc:81:e6:ba:9b:d5:0d:2c:6d:94:b6:04:36:cb: 85:51:48:53:6a:e5:48:cc:bc:01:d2:1b:29:32:42:72:43:9c: 81:b2:61:55:9d:7f:04:7a:e1:87:d6:d7:22:06:2f:2f:ce:45: c5:93:f6:f0:a1:29:c4:f4:3a:59:74:1d:74:d6:bb:76:70:09: fd:d3:91:b6:9a:cc:4f:7d:74:d6:5e:46:2d:b5:6b:52:57:41: dc:5b:0c:67:ad:0d:ce:67:74:39:e7:99:f2:68:62:2e:9f:62: 26:b8:d1:2f -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUOwa1qm0paow1B1i5ZwjagVhS/8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg1ODRDRDFDN0VCMDgwOEUxQUUyREU0QzE5NUNDRTEz MjU3MDVGMDAeFw0yNjA3MjgwODU4MDJaFw0yNjA3MjkwOTU3MDJaMDMxMTAvBgNV BAMTKEMxRTY2RUU1NDJGODlCNUEzQkU3MzdFMUQzQUE2RkVBMUY2REQ2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLSP5mYIQtoJGh88P4SkXKjVU7 xIBYUFFoMSfeLJfTtwh13azIpFBHeD5FwiMkGrmiedeDokEIFY817HQTwFeQNNy2 CrCDz3r8l0O/IloFTH0500aBBDoKS83vuHieWVT9WNLvIqAHTPPpO+ZsmQKp1rey g8ft1cG3xrjhcVbOh+MlBq4MbTWmAx787bSme1oyDSbbcYwN5YSXmFoiPxX8TW+m +6Viku0y/jSs01RQTNM4BS8nYMOrInreYW0kD9e7vUgrYx+oV3wba4WNLwH8Nu8j faq+5Z50vwDVnrbp/27N4rWIbq3iyiBojnobc7c65zTh8U78FgaFNgeRG5JJAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUweZu5UL4m1o75zfh06pv6h9t1tYwHwYDVR0j BBgwFoAUaFhM0cfrCAjhri3kwZXM4TJXBfAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVERDLzAv Njg1ODRDRDFDN0VCMDgwOEUxQUUyREU0QzE5NUNDRTEzMjU3MDVGMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS82ODU4NENEMUM3RUIwODA4RTFBRTJERTRDMTk1Q0NF MTMyNTcwNUYwLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVERDLzAvNjg1ODRDRDFDN0VCMDgwOEUx QUUyREU0QzE5NUNDRTEzMjU3MDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ3+Mqpo8OdfEqk5cnH3 njkrCKg6H3D1iJwSglja9X7MvT4gmZQQb7DCAXVn967eMofFuggTmaRKpXANaw0S 4N6fQvqFyhbgZ9AMjSyk/46nJhCMjy2AgGFc8Tu4EMOuKJaXkm2HWcuA8OAbGOjF CgVX65vGGozqO2vQmWfKTO06fTAFXjm1/TNQIluJIbekjHig3FTMgea6m9UNLG2U tgQ2y4VRSFNq5UjMvAHSGykyQnJDnIGyYVWdfwR64YfW1yIGLy/ORcWT9vChKcT0 Oll0HXTWu3ZwCf3TkbaazE99dNZeRi21a1JXQdxbDGetDc5ndDnnmfJoYi6fYia4 0S8= -----END CERTIFICATE-----Generated at Tue Jul 28 20:51:10 2026 by rpki-client