$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft File: 71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json) Hash identifier: ugOB+adb1R8UtlKynmEGtfKnt6kNjM9NKwpXWi0g/c8= Subject key identifier: 61:4B:56:32:9A:A0:D0:CA:15:DD:6B:74:4C:E3:74:23:63:4C:C0:71 Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 Certificate issuer: /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Certificate serial: 54D295D01EBB0BE67069B6D3BF109EE653BBF5A5 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft Manifest number: 021F Signing time: Tue 28 Jul 2026 06:04:03 +0000 Manifest this update: Tue 28 Jul 2026 05:59:03 +0000 Manifest next update: Wed 29 Jul 2026 06:32:03 +0000 Files and hashes: 1: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=) 2: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: 4xP5arMO3mXjQkvtvOCSUEonnKNGiSadvplXAp6b/Eg=) 3: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=) 4: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 06:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d2:95:d0:1e:bb:0b:e6:70:69:b6:d3:bf:10:9e:e6:53:bb:f5:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Validity Not Before: Jul 28 05:59:03 2026 GMT Not After : Jul 29 06:32:03 2026 GMT Subject: CN=614B56329AA0D0CA15DD6B744CE37423634CC071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:58:20:f7:db:95:0d:a2:c2:de:4e:a1:f5:13: 8c:4f:26:a4:59:b2:05:cc:3a:e1:7f:19:c0:52:b0: 26:83:a3:f7:fc:1e:a8:e4:18:e0:e6:1c:c3:5d:c0: ce:f0:81:ed:8a:dd:79:e1:7e:bd:77:73:67:c9:8b: 2f:31:3a:d2:f6:04:0f:09:39:d5:fe:ab:71:03:82: 7c:76:d4:42:0c:7f:96:f3:60:f9:cd:10:d0:49:af: af:72:92:b1:c3:70:90:63:99:95:c5:07:b2:4a:34: 63:c0:90:e9:bd:c1:76:02:9c:f8:1d:e3:48:c6:12: 83:f1:4c:0a:94:c2:af:0c:1e:64:e5:0e:e0:c2:59: 33:d0:a0:11:2d:be:66:70:a3:14:a7:4b:1c:6b:3e: 2d:76:d1:9c:0c:3f:6b:92:19:1b:95:95:c6:44:05: 2e:38:f6:f9:00:49:75:61:0f:86:66:f9:ab:40:44: 65:25:dc:e2:61:9c:39:c4:f4:4f:13:fe:fe:f8:89: 53:b8:05:e9:de:db:fa:7c:a0:8c:23:75:92:ba:60: 31:c0:32:ef:81:5b:bb:38:46:59:bb:7c:33:5d:ca: 4c:dd:fc:d2:73:72:60:95:0d:12:32:b6:6e:e8:dd: 3b:e7:13:7b:c3:e7:31:39:cd:ce:2f:e6:6b:53:fa: 1b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4B:56:32:9A:A0:D0:CA:15:DD:6B:74:4C:E3:74:23:63:4C:C0:71 X509v3 Authority Key Identifier: keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a6:b4:9c:79:a8:63:46:19:3b:71:63:10:16:0e:bb:80:3d: ca:6c:9e:2e:02:f7:2c:1d:a9:48:b1:39:04:bb:bc:a3:48:d4: 5c:b4:b1:41:d3:f3:69:86:65:57:c1:d5:20:83:20:65:69:60: 5c:e0:4e:35:d8:5e:21:a0:75:1a:47:91:26:b6:25:3a:f7:32: 44:c3:5d:98:17:b4:8d:db:b7:1c:90:22:a5:f1:8f:60:4a:94: ac:58:dc:37:61:10:63:76:a0:38:02:33:5c:33:70:46:27:8d: 35:cb:67:5b:e1:44:3d:67:01:ba:93:12:20:17:4c:c4:8e:68: 5c:8c:0f:5a:b0:91:a4:cc:13:78:b9:91:8b:de:bb:ed:09:73: bb:ba:0c:1c:83:f8:83:53:69:c5:07:72:46:f3:05:76:eb:31: 86:fe:b2:49:a9:f4:f0:b5:86:45:fa:00:bd:cf:15:14:47:72: d7:df:ee:78:f0:76:d4:7a:a4:c9:9e:ec:a4:5d:34:d8:8f:1d: c6:58:fe:16:59:ee:e8:72:59:84:40:93:49:df:bb:f1:99:fc: 25:b8:ef:be:60:d9:e7:77:81:67:74:2d:23:f0:6d:b4:7a:3b: fe:c9:7d:98:6a:7d:70:7c:c6:1d:da:4c:95:66:63:50:6f:47: 0c:fc:ae:26 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUVNKV0B67C+ZwabbTvxCe5lO79aUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyg3MTUyNTk3MkUz QzExNTNERTUzMDU0Nzk4RjUxQTVCRDU1Qzc1MDE5MB4XDTI2MDcyODA1NTkwM1oX DTI2MDcyOTA2MzIwM1owMzExMC8GA1UEAxMoNjE0QjU2MzI5QUEwRDBDQTE1REQ2 Qjc0NENFMzc0MjM2MzRDQzA3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1YIPfblQ2iwt5OofUTjE8mpFmyBcw64X8ZwFKwJoOj9/weqOQY4OYcw13A zvCB7YrdeeF+vXdzZ8mLLzE60vYEDwk51f6rcQOCfHbUQgx/lvNg+c0Q0Emvr3KS scNwkGOZlcUHsko0Y8CQ6b3BdgKc+B3jSMYSg/FMCpTCrwweZOUO4MJZM9CgES2+ ZnCjFKdLHGs+LXbRnAw/a5IZG5WVxkQFLjj2+QBJdWEPhmb5q0BEZSXc4mGcOcT0 TxP+/viJU7gF6d7b+nygjCN1krpgMcAy74FbuzhGWbt8M13KTN380nNyYJUNEjK2 bujdO+cTe8PnMTnNzi/ma1P6G6sCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBRhS1Yy mqDQyhXda3RM43QjY0zAcTAfBgNVHSMEGDAWgBRxUlly48EVPeUwVHmPUaW9VcdQ GTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzIvNzE1MjU5NzJFM0MxMTUzREU1MzA1 NDc5OEY1MUE1QkQ1NUM3NTAxOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYx RDY2MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvY1ZKWmN1UEJGVDNsTUZSNWoxR2x2VlhI VUJrLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8yLzcxNTI1OTcyRTNDMTE1M0RFNTMw NTQ3OThGNTFBNUJENTVDNzUwMTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxprSceahjRhk7cWMQFg67 gD3KbJ4uAvcsHalIsTkEu7yjSNRctLFB0/NphmVXwdUggyBlaWBc4E412F4hoHUa R5EmtiU69zJEw12YF7SN27cckCKl8Y9gSpSsWNw3YRBjdqA4AjNcM3BGJ401y2db 4UQ9ZwG6kxIgF0zEjmhcjA9asJGkzBN4uZGL3rvtCXO7ugwcg/iDU2nFB3JG8wV2 6zGG/rJJqfTwtYZF+gC9zxUUR3LX3+548HbUeqTJnuykXTTYjx3GWP4WWe7oclmE QJNJ37vxmfwluO++YNnnd4FndC0j8G20ejv+yX2Yan1wfMYd2kyVZmNQb0cM/K4m -----END CERTIFICATE-----Generated at Tue Jul 28 22:13:02 2026 by rpki-client