$ rpki-client -vvf rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft File: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft (raw, json) Hash identifier: MOH+EUqpl2194C5fiimWPwEzcSjlmMFlohMFOnPXxbY= Subject key identifier: 0B:31:DF:3D:ED:0C:24:78:B8:60:1F:9F:AE:F9:95:58:AB:0C:7F:34 Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 Certificate issuer: /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Certificate serial: 3DD3A84A6FFD7C2F0A8F33A5868C6265B2BD0EC4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft Manifest number: 70 Signing time: Tue 28 Jul 2026 16:39:26 +0000 Manifest this update: Tue 28 Jul 2026 16:34:26 +0000 Manifest next update: Wed 29 Jul 2026 17:43:26 +0000 Files and hashes: 1: 3130332e3132392e3134372e302f32342d3234203d3e203230343733.roa (hash: jLHkK85y6D6I/P5jhpzcJkW6hQFZ18OruOJ4poV43Y8=) 2: 323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa (hash: ZRXaYx+Nrn2iAFlJIwnl9HLp8Eud4rItrm9qIQL8K3o=) 3: 323430333a376634303a666630303a3a2f34382d3438203d3e203230343733.roa (hash: AfAX13SxCLnlMaK5dhRCuMKxU7A8dV/NgyypCpd1bdY=) 4: 3130332e3132392e3134342e302f32342d3234203d3e2035303635.roa (hash: r6atDIqgperuF3RfaudvB73QXSoXlYlurO9YxRuzsEo=) 5: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl (hash: 9ZumbNi67QSHAaFQDCRGSsbXQ6sdmbsetTYcVRSsW98=) 6: 323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa (hash: o6RGuHIfda02+Jk34ePKyhchsrC+xHDAy6BJ51uRReg=) 7: 3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa (hash: xP411/3P+QncE7UBCG9FjIpMvagWAoQKRii7/7dwrps=) 8: 3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa (hash: CBt4aj49jAfK/FkdSCAEmu5FJcJ8ZBpytmS6xaMxItA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d3:a8:4a:6f:fd:7c:2f:0a:8f:33:a5:86:8c:62:65:b2:bd:0e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Validity Not Before: Jul 28 16:34:26 2026 GMT Not After : Jul 29 17:43:26 2026 GMT Subject: CN=0B31DF3DED0C2478B8601F9FAEF99558AB0C7F34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:77:9b:58:1d:3a:59:74:96:4c:9a:76:78:89: ab:ae:8c:14:7c:c1:02:39:0e:18:19:5f:49:5f:6c: a1:0f:13:6b:38:20:fe:03:56:d3:0f:81:81:4a:ed: aa:e2:e9:2b:a5:28:0b:56:04:19:36:75:bd:d7:17: 0b:34:64:57:31:4c:00:54:24:d7:43:7e:80:f7:d1: ab:ca:41:01:16:84:e9:9f:08:64:86:cc:db:38:75: 99:87:d4:60:3c:2d:2d:1d:ae:cd:62:ef:d1:f5:5c: b8:3e:6e:9c:0c:71:63:29:d6:f3:32:58:5c:37:a4: af:27:8d:0f:f7:10:33:2d:a9:be:f1:7d:70:42:44: d4:45:46:d0:ce:6c:7e:d2:22:87:0a:cb:41:ca:67: f2:7f:d1:8d:c4:11:c6:f1:03:7e:69:05:81:b9:c4: ce:10:7f:1a:df:9b:57:7a:82:06:3b:ac:f6:c1:70: b9:81:66:95:90:e7:38:88:e0:2e:43:fc:75:bc:d2: d6:d8:ba:56:4e:ba:ce:d2:e0:40:81:96:64:f3:08: 16:6c:f2:75:93:83:82:57:47:ab:06:b8:c6:75:b5: 04:37:b6:81:42:1d:b2:6e:54:20:aa:da:c2:d4:e9: 66:31:29:8d:6b:59:cf:31:ea:34:4d:c1:bb:01:4a: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:31:DF:3D:ED:0C:24:78:B8:60:1F:9F:AE:F9:95:58:AB:0C:7F:34 X509v3 Authority Key Identifier: keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:35:2c:7b:82:09:99:b1:ab:35:19:54:b8:61:90:7b:ed:16: 5d:57:44:57:c9:99:14:af:87:be:7d:fc:e7:46:f3:b9:4d:75: e0:51:ff:46:df:87:37:98:e0:eb:82:18:11:92:85:d0:a9:67: 01:fe:9c:0a:57:a5:0e:94:a6:ac:96:4f:09:f7:a1:8a:33:7f: c3:c6:d7:98:26:b0:7d:ce:98:bd:af:75:74:b8:14:3c:f2:60: cb:84:40:7e:46:84:29:ee:cc:38:6c:aa:b3:43:34:21:ae:39: f4:f7:99:85:a0:3a:33:21:47:70:80:5e:cd:43:f5:f3:0b:3f: a5:cc:35:ef:87:b3:7a:24:f2:b9:22:6a:38:97:3c:ff:4d:7d: 3e:6b:09:d9:e5:37:70:24:43:8e:88:30:e8:51:33:49:ab:c0: 9e:15:23:a3:d4:25:d7:5f:50:1a:fd:47:c2:e1:49:c4:72:de: 60:de:cf:14:aa:c8:37:44:f2:9d:a4:22:bf:b2:f9:e4:1b:cf: 38:29:6d:c8:86:79:c7:02:c5:d4:a8:38:48:7d:ec:75:16:0b: 1d:b7:3d:0e:29:69:12:a8:3d:54:e2:55:ac:9e:67:c7:87:9e: 2b:79:d0:ef:04:60:69:8f:22:9c:f3:f4:fc:bf:63:09:5d:ba: 5a:e9:21:dc -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUPdOoSm/9fC8KjzOlhoxiZbK9DsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlD Q0Y1MEVBMzAeFw0yNjA3MjgxNjM0MjZaFw0yNjA3MjkxNzQzMjZaMDMxMTAvBgNV BAMTKDBCMzFERjNERUQwQzI0NzhCODYwMUY5RkFFRjk5NTU4QUIwQzdGMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgd5tYHTpZdJZMmnZ4iauujBR8 wQI5DhgZX0lfbKEPE2s4IP4DVtMPgYFK7ari6SulKAtWBBk2db3XFws0ZFcxTABU JNdDfoD30avKQQEWhOmfCGSGzNs4dZmH1GA8LS0drs1i79H1XLg+bpwMcWMp1vMy WFw3pK8njQ/3EDMtqb7xfXBCRNRFRtDObH7SIocKy0HKZ/J/0Y3EEcbxA35pBYG5 xM4Qfxrfm1d6ggY7rPbBcLmBZpWQ5ziI4C5D/HW80tbYulZOus7S4ECBlmTzCBZs 8nWTg4JXR6sGuMZ1tQQ3toFCHbJuVCCq2sLU6WYxKY1rWc8x6jRNwbsBSoKfAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUCzHfPe0MJHi4YB+frvmVWKsMfzQwHwYDVR0j BBgwFoAUVtLiXkCf6VahSo9aXA7qacz1DqMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAv NTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS81NkQyRTI1RTQwOUZFOTU2QTE0QThGNUE1QzBFRUE2 OUNDRjUwRUEzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAvNTZEMkUyNUU0MDlGRTk1NkEx NEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJY1LHuCCZmxqzUZVLhh kHvtFl1XRFfJmRSvh759/OdG87lNdeBR/0bfhzeY4OuCGBGShdCpZwH+nApXpQ6U pqyWTwn3oYozf8PG15gmsH3OmL2vdXS4FDzyYMuEQH5GhCnuzDhsqrNDNCGuOfT3 mYWgOjMhR3CAXs1D9fMLP6XMNe+Hs3ok8rkiajiXPP9NfT5rCdnlN3AkQ46IMOhR M0mrwJ4VI6PUJddfUBr9R8LhScRy3mDezxSqyDdE8p2kIr+y+eQbzzgpbciGeccC xdSoOEh97HUWCx23PQ4paRKoPVTiVayeZ8eHnit50O8EYGmPIpzz9Py/Ywldulrp Idw= -----END CERTIFICATE-----Generated at Tue Jul 28 19:32:08 2026 by rpki-client