$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft File: DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft (raw, json) Hash identifier: 4dQqdziMKAWIZpOReg4PmICDEagkBipcHJAz2iv7KJU= Subject key identifier: 55:A5:73:0F:C1:C2:21:15:67:3D:81:35:3D:25:E4:58:AB:4C:B1:E6 Authority key identifier: DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A Certificate issuer: /CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A Certificate serial: 29330970A1E845C3DD4E796648D45160AE1FCCB9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft Manifest number: 31 Signing time: Tue 16 Jun 2026 18:45:42 +0000 Manifest this update: Tue 16 Jun 2026 18:40:42 +0000 Manifest next update: Wed 17 Jun 2026 21:05:42 +0000 Files and hashes: 1: DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl (hash: ezfUXFaeqYLPR8q6Eeytp/cnNMLDGJHsTJ4hnPHyfEA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:33:09:70:a1:e8:45:c3:dd:4e:79:66:48:d4:51:60:ae:1f:cc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A Validity Not Before: Jun 16 18:40:42 2026 GMT Not After : Jun 17 21:05:42 2026 GMT Subject: CN=55A5730FC1C22115673D81353D25E458AB4CB1E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a4:85:8f:a2:44:39:81:4d:8a:cc:d7:43:da: c9:7e:35:54:20:9b:cc:cf:e7:58:7b:6e:15:d9:a8: 9a:ad:7e:f8:53:b9:4e:73:0f:c4:58:bb:92:0f:6f: 31:ee:da:43:85:f2:d3:4a:5b:88:01:b9:e5:69:cb: 12:ab:12:2f:87:10:43:ab:4d:6f:ba:0d:4b:35:46: 07:a9:67:c8:5e:e0:f6:2b:38:24:92:42:21:48:29: 3b:19:aa:cc:94:f4:b9:c8:0e:e4:5e:32:0e:6b:cf: 5f:b1:5a:08:2e:ec:07:54:40:eb:ff:91:8a:ca:88: c8:84:15:23:cb:47:f8:97:eb:f0:20:e0:03:3f:54: d7:0b:08:b6:83:ac:de:d4:87:87:a2:15:2d:69:d0: 82:f8:ab:6d:47:8d:a2:22:c6:35:b1:cd:10:95:8f: d1:55:de:c5:44:5b:d9:65:0c:d7:c1:5a:d9:c6:bb: b4:93:ec:6a:24:5e:f0:cd:67:04:12:c4:52:96:8c: cb:d1:62:ca:a8:d4:cb:ed:6a:db:b6:69:75:da:37: f9:c3:7e:e9:ba:7d:a3:e0:10:df:a6:8c:83:1f:d3: 8b:7d:c5:8f:0b:19:0e:20:9c:f5:f5:be:e3:5f:1d: 16:89:52:d8:9b:7d:16:d7:c3:74:6b:69:86:8e:c9: e3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A5:73:0F:C1:C2:21:15:67:3D:81:35:3D:25:E4:58:AB:4C:B1:E6 X509v3 Authority Key Identifier: keyid:DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f1:66:cd:f5:a4:33:fd:4a:35:95:99:c7:5c:36:25:b6:6c: 58:80:65:65:f7:0e:23:e4:2b:7e:22:e5:41:02:1f:bf:59:4a: b4:4c:ec:d5:03:b7:c3:79:5b:5e:80:4c:77:0b:5b:c6:e5:a7: fd:6b:04:b1:87:90:cd:a8:a3:03:14:02:5f:91:58:36:80:46: 3d:38:aa:73:5c:b1:70:b0:7d:47:87:a4:86:2d:04:2b:d6:16: 16:a3:06:86:4f:a0:62:c1:65:f1:bb:82:14:41:e0:60:64:55: d7:9f:e6:32:46:29:54:eb:3f:df:1f:0d:b5:30:46:19:7a:e5: 7c:17:01:96:29:32:45:75:a2:b2:4a:f0:c3:3a:6d:ea:8e:3d: 52:d0:32:1a:21:e9:13:f2:93:c4:f9:a5:36:e1:89:ac:ab:d9: b4:d6:21:7e:5b:87:dd:0e:03:1f:44:3f:c0:2d:67:98:94:5e: 07:c5:a8:f8:6f:c7:28:7c:f6:4a:9b:d6:6e:b8:e1:9b:f2:cf: 1e:a7:bc:8e:1b:0b:d8:d3:fe:4f:da:e2:2d:dd:1d:43:93:3f: af:58:dc:46:af:2a:0b:4a:99:95:c1:71:69:67:86:e6:9e:1d: 5c:81:ae:1e:fc:31:6b:cb:1f:9a:da:ca:38:9b:93:95:0e:55: b9:06:b4:83 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUKTMJcKHoRcPdTnlmSNRRYK4fzLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzMENFOUI3Rjg1NzNCRkE4QzgxMUI4OEJDOTc5QzlC NTM3ODMxQTAeFw0yNjA2MTYxODQwNDJaFw0yNjA2MTcyMTA1NDJaMDMxMTAvBgNV BAMTKDU1QTU3MzBGQzFDMjIxMTU2NzNEODEzNTNEMjVFNDU4QUI0Q0IxRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGpIWPokQ5gU2KzNdD2sl+NVQg m8zP51h7bhXZqJqtfvhTuU5zD8RYu5IPbzHu2kOF8tNKW4gBueVpyxKrEi+HEEOr TW+6DUs1RgepZ8he4PYrOCSSQiFIKTsZqsyU9LnIDuReMg5rz1+xWggu7AdUQOv/ kYrKiMiEFSPLR/iX6/Ag4AM/VNcLCLaDrN7Uh4eiFS1p0IL4q21HjaIixjWxzRCV j9FV3sVEW9llDNfBWtnGu7ST7GokXvDNZwQSxFKWjMvRYsqo1Mvtatu2aXXaN/nD fum6faPgEN+mjIMf04t9xY8LGQ4gnPX1vuNfHRaJUtibfRbXw3RraYaOyeN/AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUVaVzD8HCIRVnPYE1PSXkWKtMseYwHwYDVR0j BBgwFoAU2zDOm3+Fc7+oyBG4i8l5ybU3gxowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOREMv MC9EQjMwQ0U5QjdGODU3M0JGQThDODExQjg4QkM5NzlDOUI1Mzc4MzFBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0RCMzBDRTlCN0Y4NTczQkZBOEM4MTFCODhCQzk3 OUM5QjUzNzgzMUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05EQy8wL0RCMzBDRTlCN0Y4NTcz QkZBOEM4MTFCODhCQzk3OUM5QjUzNzgzMUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCk8WbN9aQz/Uo1 lZnHXDYltmxYgGVl9w4j5Ct+IuVBAh+/WUq0TOzVA7fDeVtegEx3C1vG5af9awSx h5DNqKMDFAJfkVg2gEY9OKpzXLFwsH1Hh6SGLQQr1hYWowaGT6BiwWXxu4IUQeBg ZFXXn+YyRilU6z/fHw21MEYZeuV8FwGWKTJFdaKySvDDOm3qjj1S0DIaIekT8pPE +aU24Ymsq9m01iF+W4fdDgMfRD/ALWeYlF4Hxaj4b8cofPZKm9ZuuOGb8s8ep7yO GwvY0/5P2uIt3R1Dkz+vWNxGryoLSpmVwXFpZ4bmnh1cga4e/DFryx+a2so4m5OV DlW5BrSD -----END CERTIFICATE-----Generated at Wed Jun 17 09:14:39 2026 by rpki-client