$ rpki-client -vvf rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft File: 68C2C435D736FC21F07F0FD09824C8408E615E50.mft (raw, json) Hash identifier: JakAPLH0Kt578+V6j7h5VY4HPmU/Tosykt/jfKzAU9s= Subject key identifier: 9B:4D:E4:98:E1:52:9B:3C:76:A9:0B:6B:90:A6:2B:E2:60:4E:B4:6A Authority key identifier: 68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 Certificate issuer: /CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Certificate serial: 13CE30F8E9DE438881599929AEB2CF4F3FFF370B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft Manifest number: 6E Signing time: Tue 28 Jul 2026 23:45:14 +0000 Manifest this update: Tue 28 Jul 2026 23:40:14 +0000 Manifest next update: Thu 30 Jul 2026 02:31:14 +0000 Files and hashes: 1: 323430323a346465303a3a2f33322d3438203d3e20313432303436.roa (hash: utFWN+nIe6ybPW2ARjXAofwG1zRBUaKHEqvyyRToBOU=) 2: 68C2C435D736FC21F07F0FD09824C8408E615E50.crl (hash: ogmlswcRWAnAb5BJCweOvJG52r4kOtvVo0B5N/lEznw=) 3: 323430323a346465303a3a2f33322d3438203d3e20323135393933.roa (hash: hn8g2szDRcwiFI4NluomCU2oCcAtBWUgOMXavAqk71Y=) 4: 323430323a346465303a3a2f33322d3438203d3e20313331363331.roa (hash: OfflDa5KhbNli0ingnwLTuILzm6N60MY2kq1CLNfkuU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ce:30:f8:e9:de:43:88:81:59:99:29:ae:b2:cf:4f:3f:ff:37:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Validity Not Before: Jul 28 23:40:14 2026 GMT Not After : Jul 30 02:31:14 2026 GMT Subject: CN=9B4DE498E1529B3C76A90B6B90A62BE2604EB46A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f4:6b:f3:d0:4e:5b:4b:de:14:4e:9b:92:1c: 8f:a0:e3:d9:18:f6:ac:3d:40:da:a8:79:1b:06:6f: 1b:ce:c4:ac:91:ed:c4:66:23:ec:bc:dc:9c:14:4a: d0:18:55:d9:a0:c3:b7:98:1a:50:e3:87:d8:2f:85: 93:78:3b:99:8e:8b:c5:37:50:5f:92:35:01:8e:64: b8:b6:bf:49:d7:ed:83:3f:2f:ee:69:4c:72:86:3e: 3e:1c:84:77:a3:ff:ec:e5:07:df:ca:62:28:67:b8: 6a:76:d2:3e:49:38:30:f7:4e:50:b7:40:6b:f2:c9: 8b:4c:ff:fc:7d:2c:8a:c9:e8:f9:2f:74:be:27:28: 1b:72:15:27:9d:f4:09:49:af:c1:c0:4d:c2:ca:fd: 76:8d:79:92:72:36:9b:8b:e1:77:f6:b8:88:24:fa: 1d:42:56:97:ee:85:d7:ad:f0:bb:87:bd:ee:4a:a6: 7d:bd:4a:da:eb:5b:39:b3:72:3f:92:13:dc:ae:85: 27:93:04:37:ac:c9:b4:b7:28:e1:0f:b9:91:2c:98: 94:12:3b:3a:b2:28:0f:f8:af:c2:d2:69:67:c0:70: 01:47:ac:0c:ed:4f:71:00:52:69:71:80:b6:97:7d: e8:48:ba:a3:93:94:15:16:e7:cc:c7:d7:a5:c3:ac: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4D:E4:98:E1:52:9B:3C:76:A9:0B:6B:90:A6:2B:E2:60:4E:B4:6A X509v3 Authority Key Identifier: keyid:68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:bc:5a:ad:66:14:8b:0d:26:d8:42:63:ab:39:d5:2c:97:82: f2:b3:f9:6a:6e:69:00:76:b9:b3:6f:f8:0c:03:17:f6:fa:f3: 48:50:73:82:f6:b7:ae:10:dd:6d:8a:d3:a3:c9:4c:5e:ef:45: 5b:ec:b8:ee:af:65:9e:5b:7f:3e:b7:21:73:50:92:5d:68:5a: 3d:7a:af:c8:8d:e7:a8:5d:88:79:b7:59:72:86:53:e0:07:34: 51:93:8a:fb:20:a6:df:5a:04:67:a5:6d:7b:d9:e3:60:cb:e3: e1:0b:bb:22:25:5e:76:26:55:22:e8:c3:ee:db:e6:61:c3:bd: 42:fe:63:e6:62:51:49:c1:70:9e:22:db:68:96:45:26:3f:c0: cf:65:27:d1:28:4a:bd:02:02:26:8c:4d:b6:85:1e:db:2f:e9: 32:f7:66:e2:8d:ae:67:2c:41:47:50:bb:3e:be:3a:0f:a7:c3: d9:85:98:98:0e:be:65:50:f7:62:9e:d4:4a:a3:75:d1:cd:ec: 1f:98:3c:04:a3:1c:44:9f:d3:55:27:e8:3e:73:12:0f:ca:1f: dd:14:d7:09:9f:df:22:be:a4:a4:b5:98:3e:97:81:92:83:89: b0:3d:70:df:d3:1a:1a:de:49:a1:81:1e:4c:90:71:3b:8f:1c: 69:b7:36:37 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUE84w+OneQ4iBWZkprrLPTz//NwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4 RTYxNUU1MDAeFw0yNjA3MjgyMzQwMTRaFw0yNjA3MzAwMjMxMTRaMDMxMTAvBgNV BAMTKDlCNERFNDk4RTE1MjlCM0M3NkE5MEI2QjkwQTYyQkUyNjA0RUI0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU9Gvz0E5bS94UTpuSHI+g49kY 9qw9QNqoeRsGbxvOxKyR7cRmI+y83JwUStAYVdmgw7eYGlDjh9gvhZN4O5mOi8U3 UF+SNQGOZLi2v0nX7YM/L+5pTHKGPj4chHej/+zlB9/KYihnuGp20j5JODD3TlC3 QGvyyYtM//x9LIrJ6PkvdL4nKBtyFSed9AlJr8HATcLK/XaNeZJyNpuL4Xf2uIgk +h1CVpfuhdet8LuHve5Kpn29StrrWzmzcj+SE9yuhSeTBDesybS3KOEPuZEsmJQS OzqyKA/4r8LSaWfAcAFHrAztT3EAUmlxgLaXfehIuqOTlBUW58zH16XDrCWbAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUm03kmOFSmzx2qQtrkKYr4mBOtGowHwYDVR0j BBgwFoAUaMLENdc2/CHwfw/QmCTIQI5hXlAwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz LzAvNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS82OEMyQzQzNUQ3MzZGQzIxRjA3RjBGRDA5ODI0 Qzg0MDhFNjE1RTUwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMzLzAvNjhDMkM0MzVENzM2 RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJC8Wq1mFIsN JthCY6s51SyXgvKz+WpuaQB2ubNv+AwDF/b680hQc4L2t64Q3W2K06PJTF7vRVvs uO6vZZ5bfz63IXNQkl1oWj16r8iN56hdiHm3WXKGU+AHNFGTivsgpt9aBGelbXvZ 42DL4+ELuyIlXnYmVSLow+7b5mHDvUL+Y+ZiUUnBcJ4i22iWRSY/wM9lJ9EoSr0C AiaMTbaFHtsv6TL3ZuKNrmcsQUdQuz6+Og+nw9mFmJgOvmVQ92Ke1EqjddHN7B+Y PASjHESf01Un6D5zEg/KH90U1wmf3yK+pKS1mD6XgZKDibA9cN/TGhreSaGBHkyQ cTuPHGm3Njc= -----END CERTIFICATE-----Generated at Wed Jul 29 13:09:53 2026 by rpki-client