$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft File: aGGW3gPV2jAP80-5M56yqPE90pc.mft (raw, json) Hash identifier: XGu9lBZhUQAHhtZZoXs3yKhsBYG0fDQu72tNpQi6luE= Subject key identifier: 6C:4B:09:4F:A0:06:87:11:B8:F2:F4:E9:F4:31:0B:43:D8:6C:A9:C1 Authority key identifier: 68:61:96:DE:03:D5:DA:30:0F:F3:4F:B9:33:9E:B2:A8:F1:3D:D2:97 Certificate issuer: /CN=686196DE03D5DA300FF34FB9339EB2A8F13DD297 Certificate serial: 0DBC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft Manifest number: 0DBC Signing time: Sat 18 Apr 2026 22:04:44 +0000 Manifest this update: Sat 18 Apr 2026 22:04:44 +0000 Manifest next update: Mon 20 Apr 2026 22:04:44 +0000 Files and hashes: 1: aGGW3gPV2jAP80-5M56yqPE90pc.crl (hash: K0S0nQGVe6SmoVsNwFlZXJSXUFfP8LFm24ei+7hA9V8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3516 (0xdbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686196DE03D5DA300FF34FB9339EB2A8F13DD297 Validity Not Before: Apr 18 22:04:44 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6C4B094FA0068711B8F2F4E9F4310B43D86CA9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:9c:03:ce:1d:4a:cb:ed:cb:a1:a4:96:45: 0f:8f:7d:29:75:cb:77:ba:52:c2:a8:07:3a:87:24: b3:3f:9d:7c:31:b8:3f:e4:fa:ac:36:85:62:ab:da: 59:5a:17:89:0d:ad:9e:59:a7:f2:d5:0a:3a:c9:c2: 89:dd:d9:2b:3a:91:df:38:66:80:a5:2f:64:4c:78: 1a:aa:eb:51:8f:98:92:6f:d4:31:89:97:4b:95:78: 40:85:3b:b9:2c:3c:73:31:1d:29:b9:e2:ed:3c:7e: 33:f6:d2:ac:4c:74:9d:f9:2d:b5:95:84:a5:5c:f9: a5:87:6c:81:cc:8e:2f:c4:55:e0:d9:43:42:dd:c4: b6:dd:a4:ff:13:47:e4:a4:e8:95:95:0e:54:bc:ee: 53:de:b1:27:06:f6:4d:da:e1:e2:42:c8:26:f0:79: c4:0a:50:b9:b5:bd:5b:81:88:be:50:37:02:6d:13: 5e:fa:05:aa:9a:c0:7e:08:82:18:a9:95:b5:b8:e9: 48:56:40:0e:94:5b:1f:c4:cd:28:2d:65:41:2d:e9: 31:f6:8c:9f:bb:74:57:56:34:7b:fe:29:fe:17:58: 8d:6d:6b:d9:8c:dc:ec:18:4a:44:57:04:4d:de:f0: 80:34:6c:42:1b:13:ae:8d:c9:2a:8b:f7:2f:34:c8: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4B:09:4F:A0:06:87:11:B8:F2:F4:E9:F4:31:0B:43:D8:6C:A9:C1 X509v3 Authority Key Identifier: keyid:68:61:96:DE:03:D5:DA:30:0F:F3:4F:B9:33:9E:B2:A8:F1:3D:D2:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:83:84:7f:11:b3:31:c9:c6:04:25:db:05:9d:99:13:07:9f: 31:1b:59:32:50:29:bc:60:56:b1:8d:f4:3f:09:2f:89:39:ce: 2c:0c:81:5c:1c:0a:a4:8e:af:12:86:f9:61:c9:30:7a:8b:27: c8:4c:f2:92:e0:db:e5:1c:48:13:42:84:d3:d6:40:7e:03:4f: 28:56:21:50:a6:db:d2:9f:a8:24:8f:35:c1:63:57:53:88:5c: d6:16:df:5d:f7:cb:13:36:a2:32:27:c7:2a:37:fc:86:39:24: 5d:69:de:d5:7f:73:7f:90:40:11:84:82:de:3c:8b:2d:72:97: b0:c1:c6:aa:ce:11:a8:40:42:e0:2c:b7:04:35:9b:fb:d5:45: 62:71:65:80:ff:77:e9:af:2e:11:5b:ac:9b:1c:a0:30:bf:ef: 4c:25:eb:06:6d:28:61:60:3f:24:f4:82:45:79:81:78:37:ba: 01:b2:04:12:6c:26:d2:3c:03:43:82:88:e7:66:d7:d5:0f:68: 13:01:5a:0e:5c:56:2d:27:18:21:77:41:34:09:01:ce:34:3b: 3c:31:da:d0:0b:ed:eb:6c:b7:24:0e:26:9c:46:4d:bf:6f:75: d3:1d:04:44:8c:c2:fa:7a:25:d5:8d:e5:bd:46:f5:ba:69:2e: b4:02:4f:b0 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjg2 MTk2REUwM0Q1REEzMDBGRjM0RkI5MzM5RUIyQThGMTNERDI5NzAeFw0yNjA0MTgy MjA0NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZDNEIwOTRGQTAwNjg3 MTFCOEYyRjRFOUY0MzEwQjQzRDg2Q0E5QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6GpwDzh1Ky+3LoaSWRQ+PfSl1y3e6UsKoBzqHJLM/nXwxuD/k +qw2hWKr2llaF4kNrZ5Zp/LVCjrJwond2Ss6kd84ZoClL2RMeBqq61GPmJJv1DGJ l0uVeECFO7ksPHMxHSm54u08fjP20qxMdJ35LbWVhKVc+aWHbIHMji/EVeDZQ0Ld xLbdpP8TR+Sk6JWVDlS87lPesScG9k3a4eJCyCbwecQKULm1vVuBiL5QNwJtE176 BaqawH4IghiplbW46UhWQA6UWx/EzSgtZUEt6TH2jJ+7dFdWNHv+Kf4XWI1ta9mM 3OwYSkRXBE3e8IA0bEIbE66NySqL9y80yHLdAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUbEsJT6AGhxG48vTp9DELQ9hsqcEwHwYDVR0jBBgwFoAUaGGW3gPV2jAP80+5 M56yqPE90pcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFJDTE9V RC9hR0dXM2dQVjJqQVA4MC01TTU2eXFQRTkwcGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2FHR1czZ1BWMmpBUDgwLTVNNTZ5cVBFOTBwYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RSQ0xPVUQvYUdHVzNnUFYyakFQODAt NU01NnlxUEU5MHBjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ABqDhH8RszHJxgQl2wWdmRMHnzEbWTJQKbxgVrGN9D8JL4k5ziwMgVwcCqSOrxKG +WHJMHqLJ8hM8pLg2+UcSBNChNPWQH4DTyhWIVCm29KfqCSPNcFjV1OIXNYW3133 yxM2ojInxyo3/IY5JF1p3tV/c3+QQBGEgt48iy1yl7DBxqrOEahAQuAstwQ1m/vV RWJxZYD/d+mvLhFbrJscoDC/70wl6wZtKGFgPyT0gkV5gXg3ugGyBBJsJtI8A0OC iOdm19UPaBMBWg5cVi0nGCF3QTQJAc40Ozwx2tAL7etstyQOJpxGTb9vddMdBESM wvp6JdWN5b1G9bppLrQCT7A= -----END CERTIFICATE-----Generated at Sun Apr 19 10:47:11 2026 by rpki-client