$ rpki-client -vvf rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft File: BD49467776DCA7472F88470782DAD5722E5AFE49.mft (raw, json) Hash identifier: pJQBA/AOkpNx/cNTqQhQ5ELr/DghioZNPzO78KqGvew= Subject key identifier: 80:D7:D4:78:F4:D2:7D:A1:65:79:9F:03:D8:5B:B3:66:B6:31:5B:EE Authority key identifier: BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49 Certificate issuer: /CN=BD49467776DCA7472F88470782DAD5722E5AFE49 Certificate serial: 508904A382BC29AE6F7A606A2951A4408088C3EB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft Manifest number: 6D Signing time: Tue 28 Jul 2026 00:02:00 +0000 Manifest this update: Mon 27 Jul 2026 23:57:00 +0000 Manifest next update: Wed 29 Jul 2026 03:47:00 +0000 Files and hashes: 1: 3230322e3132362e36342e302f32322d3234203d3e2033343632.roa (hash: JSztXJfkuE++Rr44bJxraDVeK0vJ1Z2LCKTFE+mnoSo=) 2: 3130332e3133322e3135362e302f32322d3234203d3e2033343632.roa (hash: VPf6uIakoYZwsPqscjmnQeuLXrwksi5sXN8VBO8l4Lc=) 3: BD49467776DCA7472F88470782DAD5722E5AFE49.crl (hash: /3ELbzDjQaMVl93+B0klfyIEZWlu1A3MYhDjy+UrN+o=) 4: 3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa (hash: O4tFAGNoujrjTe1QFIiUNSL1btHs7X9nG4rNOC2WBrk=) 5: 3230322e3132362e36342e302f32302d3234203d3e2033343632.roa (hash: pv9lagNPR6ISK4mgr1r0U+d2oQ424uEiHyejWXcDKkg=) 6: 3230322e3132362e36342e302f32302d3234203d3e203233363735.roa (hash: xFZEcb1Fw2/MAZxDxH/3wq6F1a0AY71y22CkSbZ45UA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 03:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:89:04:a3:82:bc:29:ae:6f:7a:60:6a:29:51:a4:40:80:88:c3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD49467776DCA7472F88470782DAD5722E5AFE49 Validity Not Before: Jul 27 23:57:00 2026 GMT Not After : Jul 29 03:47:00 2026 GMT Subject: CN=80D7D478F4D27DA165799F03D85BB366B6315BEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:10:86:72:ee:b9:68:e8:13:80:7a:18:3c:ef: 2b:08:55:d3:6f:fd:a8:c7:25:a5:5e:8c:82:3a:72: c5:1f:21:34:9c:00:ef:72:4c:62:0c:6e:ca:e6:0a: 95:93:8e:2b:ec:96:17:b7:73:c9:13:87:fa:cd:05: 7d:94:f6:2b:cd:24:8b:d2:b7:d9:8c:17:b7:3f:d1: f1:f7:1e:1f:a8:0c:00:fa:68:fc:4c:8b:14:82:5d: da:38:b7:38:55:e1:a9:04:95:20:1a:6a:e6:7f:d3: 41:f0:10:90:58:2b:91:b3:83:63:c8:c4:5c:9d:d5: 42:3d:97:a3:32:91:00:74:b9:fc:27:96:ae:bb:23: 87:6d:40:09:13:59:54:b9:1d:bb:0f:4b:34:53:28: 3a:54:9c:4f:03:31:02:87:a6:03:49:5a:39:65:7c: 06:67:63:7b:ca:d3:24:99:25:fc:dd:3b:86:ab:ef: 12:bb:7b:99:d6:38:76:7f:2b:5d:ff:e2:ac:a5:9a: 58:6f:96:57:2f:b6:86:b2:b9:1a:49:25:a7:21:a1: c7:22:06:d6:8e:12:61:82:d6:02:8f:19:fa:ff:0d: 1d:4b:88:09:2c:5e:a7:41:28:4a:52:55:ff:41:7f: 07:9b:e6:c8:a4:13:f5:3d:86:2e:44:2e:69:4f:cf: a7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D7:D4:78:F4:D2:7D:A1:65:79:9F:03:D8:5B:B3:66:B6:31:5B:EE X509v3 Authority Key Identifier: keyid:BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1b:f0:2a:a1:fa:84:5a:df:83:44:3c:ed:18:dd:83:14:a6: 78:a6:d2:d3:38:3d:07:ea:7e:fa:3a:ee:8c:60:ad:97:f2:c6: e0:37:ba:a8:36:07:6e:60:83:0e:58:c3:ba:3d:34:a0:32:2e: a2:67:1a:08:af:d1:60:f8:90:fa:95:f6:43:9a:5a:af:db:25: 7c:fa:ab:fd:b1:77:c1:64:34:4a:8d:74:25:16:05:b0:e8:0f: 1f:b1:0c:b9:15:c7:f0:b9:6c:40:b0:e7:94:04:3b:9c:15:53: 6b:07:2a:92:69:1e:33:63:40:0f:ed:8c:de:5a:fd:29:31:94: 9b:7b:dd:3b:32:cf:60:6e:7c:e0:fe:5e:b5:da:f5:ea:9c:67: d6:82:d8:b1:04:43:95:cc:ce:4d:cc:a9:90:cc:85:6f:00:3f: fe:2b:dd:73:a0:d3:27:57:eb:2c:ef:89:39:db:0f:9d:c7:a3: ce:15:25:46:8c:d3:1c:39:37:9e:4c:fe:0e:c9:42:c2:a7:5e: 5b:0d:e6:e0:a1:16:26:7c:6c:d6:c2:c7:bf:36:a0:13:8c:89: 74:9d:f5:cf:10:c5:47:37:d4:46:6b:20:28:49:4c:ee:16:19: 44:d5:fd:3e:94:3d:83:d5:8a:b0:83:79:c5:07:ce:99:44:4d: 99:8c:c0:f4 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUUIkEo4K8Ka5vemBqKVGkQICIw+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ0OTQ2Nzc3NkRDQTc0NzJGODg0NzA3ODJEQUQ1NzIy RTVBRkU0OTAeFw0yNjA3MjcyMzU3MDBaFw0yNjA3MjkwMzQ3MDBaMDMxMTAvBgNV BAMTKDgwRDdENDc4RjREMjdEQTE2NTc5OUYwM0Q4NUJCMzY2QjYzMTVCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1EIZy7rlo6BOAehg87ysIVdNv /ajHJaVejII6csUfITScAO9yTGIMbsrmCpWTjivslhe3c8kTh/rNBX2U9ivNJIvS t9mMF7c/0fH3Hh+oDAD6aPxMixSCXdo4tzhV4akElSAaauZ/00HwEJBYK5Gzg2PI xFyd1UI9l6MykQB0ufwnlq67I4dtQAkTWVS5HbsPSzRTKDpUnE8DMQKHpgNJWjll fAZnY3vK0ySZJfzdO4ar7xK7e5nWOHZ/K13/4qylmlhvllcvtoayuRpJJachocci BtaOEmGC1gKPGfr/DR1LiAksXqdBKEpSVf9Bfweb5sikE/U9hi5ELmlPz6c5AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUgNfUePTSfaFleZ8D2FuzZrYxW+4wHwYDVR0j BBgwFoAUvUlGd3bcp0cviEcHgtrVci5a/kkwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFNNQy8w L0JENDk0Njc3NzZEQ0E3NDcyRjg4NDcwNzgyREFENTcyMkU1QUZFNDkuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQkQ0OTQ2Nzc3NkRDQTc0NzJGODg0NzA3ODJEQUQ1 NzIyRTVBRkU0OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RTTUMvMC9CRDQ5NDY3Nzc2RENBNzQ3 MkY4ODQ3MDc4MkRBRDU3MjJFNUFGRTQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhvwKqH6hFrfg0Q8 7RjdgxSmeKbS0zg9B+p++jrujGCtl/LG4De6qDYHbmCDDljDuj00oDIuomcaCK/R YPiQ+pX2Q5par9slfPqr/bF3wWQ0So10JRYFsOgPH7EMuRXH8LlsQLDnlAQ7nBVT awcqkmkeM2NAD+2M3lr9KTGUm3vdOzLPYG584P5etdr16pxn1oLYsQRDlczOTcyp kMyFbwA//ivdc6DTJ1frLO+JOdsPncejzhUlRozTHDk3nkz+DslCwqdeWw3m4KEW Jnxs1sLHvzagE4yJdJ31zxDFRzfURmsgKElM7hYZRNX9PpQ9g9WKsIN5xQfOmURN mYzA9A== -----END CERTIFICATE-----Generated at Tue Jul 28 18:30:34 2026 by rpki-client