$ rpki-client -vvf rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.mft File: 4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.mft (raw, json) Hash identifier: c8jhRteq89wQaVE5YxbRhn3Xv1Q5UlmImDqeYB8fYYk= Subject key identifier: 63:D7:C6:5B:DB:85:5D:99:63:7E:86:37:9C:E7:24:8F:91:37:26:49 Authority key identifier: 4E:6E:49:05:B4:39:1C:AA:73:77:8F:5F:BB:AE:AA:B6:86:55:1F:A7 Certificate issuer: /CN=4E6E4905B4391CAA73778F5FBBAEAAB686551FA7 Certificate serial: 6FFAFEA231184061237E1B006AC87F2A3A3F174F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.mft Manifest number: 03DB Signing time: Tue 28 Jul 2026 15:39:19 +0000 Manifest this update: Tue 28 Jul 2026 15:34:19 +0000 Manifest next update: Wed 29 Jul 2026 16:42:19 +0000 Files and hashes: 1: 4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.crl (hash: YKcc8DUo04dKL/1QA68hfCcLwGL0MMm9L0T3vGs96DE=) 2: AS9924.roa (hash: bkwSawuZlEISvt2gJSPSVFhAB2tzPYpCAUw41HODLHM=) 3: AS38841.roa (hash: nSR2wg7tA7lwhCiydNK3tdxmmMgg0xqnd/TCNYtGKs8=) 4: AS18429.roa (hash: 10aEph6hwAmBvlaQZuwUN+fmyRec189ldPt52qQhj9A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.crl rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:fa:fe:a2:31:18:40:61:23:7e:1b:00:6a:c8:7f:2a:3a:3f:17:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E6E4905B4391CAA73778F5FBBAEAAB686551FA7 Validity Not Before: Jul 28 15:34:19 2026 GMT Not After : Jul 29 16:42:19 2026 GMT Subject: CN=63D7C65BDB855D99637E86379CE7248F91372649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:dd:70:ab:bb:b2:9f:6c:f5:80:98:9d:80: 99:c0:29:24:c2:dd:19:bb:aa:fc:e4:8c:c9:c9:5f: 3d:0f:52:4b:11:68:7d:d5:d6:81:b3:b1:45:07:9c: 05:14:e9:92:93:49:57:1c:3b:64:ab:ec:8b:5c:38: b9:d0:a9:4d:48:df:99:7e:b3:04:f3:d1:73:de:79: 95:3c:56:49:d2:b9:ae:03:ca:d0:0f:7b:42:41:46: 53:6f:12:e9:64:a2:e1:46:ce:d3:ac:46:cc:f6:dd: 44:11:6e:cb:55:b1:35:d1:f0:82:b8:50:b5:a9:2a: 34:08:7d:fe:2d:4e:4d:01:48:1c:4e:c0:eb:25:3c: 87:fa:36:1f:8f:ce:e2:93:5d:cf:2d:88:cf:bf:a7: c0:3c:0f:fe:25:c5:d4:29:ac:97:6d:21:90:49:f6: 73:8b:33:1a:19:a4:92:27:51:12:27:7c:2a:36:58: 76:b0:cc:ad:38:5e:e0:e7:8c:2d:51:d9:b6:b2:f0: 0c:6c:da:8c:14:5d:6d:19:1d:2c:33:99:70:40:d6: 84:1a:c6:41:af:b5:d6:69:05:07:fc:23:b7:b2:7e: 07:37:b9:66:c5:da:82:3c:e2:bf:eb:a5:8b:f2:b2: d6:9a:77:94:9c:98:c9:2e:39:2c:a3:16:93:67:74: fe:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D7:C6:5B:DB:85:5D:99:63:7E:86:37:9C:E7:24:8F:91:37:26:49 X509v3 Authority Key Identifier: keyid:4E:6E:49:05:B4:39:1C:AA:73:77:8F:5F:BB:AE:AA:B6:86:55:1F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:98:4e:79:fa:c5:b5:99:7a:b0:64:44:0b:c0:55:8b:88:39: 82:3e:2d:de:ff:23:36:00:41:d0:de:cc:53:ba:46:1e:50:55: 58:7a:1a:75:4b:64:b3:91:86:f4:fa:9d:90:ad:e3:e9:8e:58: a9:d0:5a:29:d6:ae:0a:88:c9:23:e2:93:90:35:0d:c9:cc:4a: 61:77:d1:d5:52:86:00:be:94:b6:a6:f1:c0:a0:ab:34:ae:ab: b6:fd:fb:27:7c:19:83:9c:d3:62:a9:74:e1:c1:77:78:d2:1d: 18:be:42:c4:ec:a1:a7:fa:33:53:f1:09:5e:e3:1c:9e:97:d0: a7:98:47:09:d5:2c:77:86:f4:cd:9f:b1:48:57:a1:82:c5:6e: 6c:ac:57:48:0d:a2:da:42:8f:c9:c2:45:7c:59:80:14:f0:c9: 24:89:7f:92:b8:06:a4:11:81:3c:86:29:4e:c2:f8:20:6f:42: a6:06:ff:67:39:86:18:c7:7c:e7:dc:5e:0f:5c:fa:85:ce:5d: 59:1f:fe:7e:97:0f:34:b9:b3:7b:0f:f1:16:19:7b:f0:c8:07: 04:51:ab:4b:cf:2b:1e:8c:28:2e:ae:40:b0:a9:52:2a:8d:fb: a1:c7:54:12:76:31:51:5a:36:bc:c4:18:3a:59:ed:99:f7:16: 22:3b:9c:56 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUb/r+ojEYQGEjfhsAash/Kjo/F08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU2RTQ5MDVCNDM5MUNBQTczNzc4RjVGQkJBRUFBQjY4 NjU1MUZBNzAeFw0yNjA3MjgxNTM0MTlaFw0yNjA3MjkxNjQyMTlaMDMxMTAvBgNV BAMTKDYzRDdDNjVCREI4NTVEOTk2MzdFODYzNzlDRTcyNDhGOTEzNzI2NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmd1wq7uyn2z1gJidgJnAKSTC 3Rm7qvzkjMnJXz0PUksRaH3V1oGzsUUHnAUU6ZKTSVccO2Sr7ItcOLnQqU1I35l+ swTz0XPeeZU8VknSua4DytAPe0JBRlNvEulkouFGztOsRsz23UQRbstVsTXR8IK4 ULWpKjQIff4tTk0BSBxOwOslPIf6Nh+PzuKTXc8tiM+/p8A8D/4lxdQprJdtIZBJ 9nOLMxoZpJInURInfCo2WHawzK04XuDnjC1R2bay8Axs2owUXW0ZHSwzmXBA1oQa xkGvtdZpBQf8I7eyfgc3uWbF2oI84r/rpYvystaad5ScmMkuOSyjFpNndP6xAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUY9fGW9uFXZljfoY3nOckj5E3JkkwHwYDVR0j BBgwFoAUTm5JBbQ5HKpzd49fu66qtoZVH6cwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFVOR0hP LzAvNEU2RTQ5MDVCNDM5MUNBQTczNzc4RjVGQkJBRUFBQjY4NjU1MUZBNy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS80RTZFNDkwNUI0MzkxQ0FBNzM3NzhGNUZCQkFF QUFCNjg2NTUxRkE3LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFVOR0hPLzAvNEU2RTQ5MDVCNDM5 MUNBQTczNzc4RjVGQkJBRUFBQjY4NjU1MUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKeYTnn6xbWZ erBkRAvAVYuIOYI+Ld7/IzYAQdDezFO6Rh5QVVh6GnVLZLORhvT6nZCt4+mOWKnQ WinWrgqIySPik5A1DcnMSmF30dVShgC+lLam8cCgqzSuq7b9+yd8GYOc02KpdOHB d3jSHRi+QsTsoaf6M1PxCV7jHJ6X0KeYRwnVLHeG9M2fsUhXoYLFbmysV0gNotpC j8nCRXxZgBTwySSJf5K4BqQRgTyGKU7C+CBvQqYG/2c5hhjHfOfcXg9c+oXOXVkf /n6XDzS5s3sP8RYZe/DIBwRRq0vPKx6MKC6uQLCpUiqN+6HHVBJ2MVFaNrzEGDpZ 7Zn3FiI7nFY= -----END CERTIFICATE-----Generated at Tue Jul 28 17:09:00 2026 by rpki-client