$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft File: 71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json) Hash identifier: yC/cVIXCcUnj9YzCsABg4SB6vfq4R8a1sBI/Q/gFcbU= Subject key identifier: 88:EC:FC:BB:BE:8F:5F:E0:06:24:D7:9B:46:45:07:1F:1D:95:38:D7 Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 Certificate issuer: /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Certificate serial: 48E4A4A5F3F68A8FB52E71143A25230CC84290DC Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft Manifest number: 0220 Signing time: Tue 28 Jul 2026 22:35:02 +0000 Manifest this update: Tue 28 Jul 2026 22:30:02 +0000 Manifest next update: Wed 29 Jul 2026 22:45:02 +0000 Files and hashes: 1: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=) 2: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=) 3: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=) 4: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: o4vnC1eEEiQ2w6PNcZrMiJBxDkwY/4cPWrA3037E+PI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e4:a4:a5:f3:f6:8a:8f:b5:2e:71:14:3a:25:23:0c:c8:42:90:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Validity Not Before: Jul 28 22:30:02 2026 GMT Not After : Jul 29 22:45:02 2026 GMT Subject: CN=88ECFCBBBE8F5FE00624D79B4645071F1D9538D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:85:3f:da:46:98:7f:56:ac:f6:34:e0:76:8f: eb:be:eb:5b:65:97:57:ca:1f:4e:9b:8d:ef:0b:be: c4:34:be:53:5a:3e:58:20:f8:ca:4a:12:99:a5:f3: 6c:73:9f:e4:92:2d:02:49:c9:bf:01:1a:e5:df:6e: da:52:79:8b:a5:32:07:0a:cd:da:61:13:43:89:58: 4c:e1:14:94:dc:b3:f9:f4:13:ad:5e:79:8d:30:c1: f7:d6:6b:33:4d:ad:d6:70:b8:18:68:63:6a:62:3f: 7c:02:98:a0:ea:80:4e:84:cd:a7:66:0f:77:e2:5a: 9c:90:96:4d:d2:9e:83:90:87:2e:8b:e3:12:25:db: 0b:3c:fd:f5:c4:95:66:8a:3a:4f:78:00:59:56:94: 7e:ab:d0:ec:59:de:21:db:6f:ed:42:78:4a:e2:07: 01:a8:44:d1:6a:f9:80:97:78:48:22:2a:aa:1d:18: 52:e4:33:25:fb:c2:22:b6:6d:08:e7:1a:8f:4c:e8: 32:db:52:9c:0a:84:d4:36:58:f6:84:df:6d:10:93: cf:c5:c7:52:db:e9:de:0e:c3:03:8f:07:bb:8d:89: ff:a8:28:9d:b4:18:13:0b:90:6e:97:72:4c:18:3d: bb:66:a7:2c:71:a7:b9:e8:6c:ba:74:fa:e6:f6:73: 37:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EC:FC:BB:BE:8F:5F:E0:06:24:D7:9B:46:45:07:1F:1D:95:38:D7 X509v3 Authority Key Identifier: keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:aa:bf:5b:ce:24:91:c2:f9:8d:3c:4e:de:35:e0:56:ae:15: b4:08:fa:ca:58:57:7f:d3:4d:44:62:b6:5f:eb:25:5d:d6:d8: 40:b2:ef:c8:f7:73:76:11:26:eb:95:a4:85:4c:35:48:da:65: c1:dc:9c:75:fc:a0:d5:39:21:bd:de:90:14:f6:aa:20:40:9e: 16:8c:27:37:ad:42:bb:6e:ed:79:1e:33:19:71:c2:ee:5c:d3: 9b:86:78:06:7c:0c:41:c4:02:e1:c0:9a:d4:41:67:f9:77:64: 40:83:8d:79:e1:e7:e3:26:e9:23:07:27:61:fe:4c:82:0e:ad: 00:62:16:63:25:d6:e6:87:35:70:e9:47:80:cb:1a:34:f9:b7: db:fe:77:0a:59:ea:27:14:d3:c7:8e:9e:b2:94:70:26:3f:4c: 67:66:f4:1d:8f:25:46:0e:da:ae:c3:74:71:39:b7:10:bc:28: 77:24:8b:cb:1a:c9:b4:c4:7c:6e:9a:09:d7:f4:90:94:2e:7c: 3e:7f:fd:fe:14:02:c1:c4:76:38:54:6a:da:0e:28:fd:9a:21: 32:b7:a8:8c:29:1c:64:14:84:b0:15:1c:e3:a6:fb:9e:dd:f3: fd:83:69:35:9f:85:b6:93:04:2d:4d:90:69:5d:0c:18:73:31: 63:f9:8a:6e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUSOSkpfP2io+1LnEUOiUjDMhCkNwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyg3MTUyNTk3MkUz QzExNTNERTUzMDU0Nzk4RjUxQTVCRDU1Qzc1MDE5MB4XDTI2MDcyODIyMzAwMloX DTI2MDcyOTIyNDUwMlowMzExMC8GA1UEAxMoODhFQ0ZDQkJCRThGNUZFMDA2MjRE NzlCNDY0NTA3MUYxRDk1MzhENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKyFP9pGmH9WrPY04HaP677rW2WXV8ofTpuN7wu+xDS+U1o+WCD4ykoSmaXz bHOf5JItAknJvwEa5d9u2lJ5i6UyBwrN2mETQ4lYTOEUlNyz+fQTrV55jTDB99Zr M02t1nC4GGhjamI/fAKYoOqAToTNp2YPd+JanJCWTdKeg5CHLovjEiXbCzz99cSV Zoo6T3gAWVaUfqvQ7FneIdtv7UJ4SuIHAahE0Wr5gJd4SCIqqh0YUuQzJfvCIrZt COcaj0zoMttSnAqE1DZY9oTfbRCTz8XHUtvp3g7DA48Hu42J/6gonbQYEwuQbpdy TBg9u2anLHGnuehsunT65vZzN48CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBSI7Py7 vo9f4AYk15tGRQcfHZU41zAfBgNVHSMEGDAWgBRxUlly48EVPeUwVHmPUaW9VcdQ GTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzIvNzE1MjU5NzJFM0MxMTUzREU1MzA1 NDc5OEY1MUE1QkQ1NUM3NTAxOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYx RDY2MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvY1ZKWmN1UEJGVDNsTUZSNWoxR2x2VlhI VUJrLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8yLzcxNTI1OTcyRTNDMTE1M0RFNTMw NTQ3OThGNTFBNUJENTVDNzUwMTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnqr9bziSRwvmNPE7eNeBW rhW0CPrKWFd/001EYrZf6yVd1thAsu/I93N2ESbrlaSFTDVI2mXB3Jx1/KDVOSG9 3pAU9qogQJ4WjCc3rUK7bu15HjMZccLuXNObhngGfAxBxALhwJrUQWf5d2RAg415 4efjJukjBydh/kyCDq0AYhZjJdbmhzVw6UeAyxo0+bfb/ncKWeonFNPHjp6ylHAm P0xnZvQdjyVGDtquw3RxObcQvCh3JIvLGsm0xHxumgnX9JCULnw+f/3+FALBxHY4 VGraDij9miEyt6iMKRxkFISwFRzjpvue3fP9g2k1n4W2kwQtTZBpXQwYczFj+Ypu -----END CERTIFICATE-----Generated at Wed Jul 29 05:06:15 2026 by rpki-client