$ rpki-client -vvf rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft File: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft (raw, json) Hash identifier: n9cPS/jn2pYvu4Wb3fJJVpSsr4H9NmFTP/joI51dM4I= Subject key identifier: 76:89:C8:7A:4A:39:3E:D2:7F:39:1C:50:38:0E:44:EC:AC:8B:8A:BF Authority key identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91 Certificate issuer: /CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991 Certificate serial: 29D9BDA4F8CAC82FD954D88801F69DC5F1EF1493 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer Subject info access: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft Manifest number: 2F Signing time: Sat 13 Jun 2026 01:13:36 +0000 Manifest this update: Sat 13 Jun 2026 01:08:36 +0000 Manifest next update: Sun 14 Jun 2026 02:23:36 +0000 Files and hashes: 1: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl (hash: o3gLRGSI4W+9p8hvsoSdcuTdhx+OxkQfhdJaDet9y2o=) 2: 3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa (hash: yCZqZR2AGCBzXj4ey9qRZrUJv2f1vti5atnbmciNS40=) 3: 3136312e3234382e3134342e302f32332d3234203d3e203338303432.roa (hash: qRkyiJdn63qokFKKv0HxSqaEykqKM4bsKkcH46FpFZc=) 4: 3136312e3234382e3134342e302f32342d3234203d3e20313438393936.roa (hash: 0xOt/alcpAMDww+3hdnLaeae14FERuOIKEuHy9m9JLc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 02:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d9:bd:a4:f8:ca:c8:2f:d9:54:d8:88:01:f6:9d:c5:f1:ef:14:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991 Validity Not Before: Jun 13 01:08:36 2026 GMT Not After : Jun 14 02:23:36 2026 GMT Subject: CN=7689C87A4A393ED27F391C50380E44ECAC8B8ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b0:91:e8:f8:e9:37:cd:23:f5:a0:81:95:53: 32:a2:ca:75:9f:df:34:fe:d1:f8:ae:b7:97:3c:ef: 89:a2:65:6e:f5:db:7d:53:b2:54:be:a2:65:d0:d3: a4:fb:5e:92:b2:0f:23:ea:3f:d0:60:72:4e:90:11: 26:22:47:e9:e0:22:f9:93:7c:41:2d:33:83:eb:20: ea:02:80:59:9e:51:42:e1:75:84:09:77:30:04:96: 39:93:40:ac:db:42:b3:d7:1b:43:c3:ec:f8:c7:08: 8d:f0:56:d3:f6:14:12:ae:b9:80:23:4b:83:8c:e1: f0:fb:15:27:48:e2:98:74:c2:25:b5:b3:ed:65:fa: 70:b0:ca:5f:3a:64:41:49:39:66:86:f8:3f:91:4f: c8:b2:7b:81:32:96:62:0d:b5:ac:0e:79:bb:d6:5d: c3:23:6b:c4:bd:f5:c4:fd:d0:31:9e:31:88:4e:14: 6f:e2:a1:85:22:89:ed:3f:7d:59:d9:8b:be:81:87: 9f:e2:cf:b0:4d:c1:91:86:d3:43:5c:b4:1b:62:23: 8e:44:7d:bb:18:44:eb:3a:06:85:e1:74:56:02:5d: 22:8e:3a:e3:fa:b6:03:58:48:1a:29:1f:9b:e9:ec: 91:0f:48:a6:50:20:70:b2:ef:32:1c:9a:b9:51:0a: 65:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:89:C8:7A:4A:39:3E:D2:7F:39:1C:50:38:0E:44:EC:AC:8B:8A:BF X509v3 Authority Key Identifier: keyid:13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ca:d4:35:6e:38:5f:d3:33:24:40:d8:91:17:5e:57:e1:d3: 20:fc:84:2e:82:b4:75:d3:1c:3b:2b:f5:00:ca:7e:35:e2:f4: 0a:0a:20:e1:69:24:8b:6b:fa:f4:f2:f8:4f:2d:f0:7d:72:2c: aa:07:e5:6d:29:49:01:b4:70:c9:08:ff:fd:13:83:25:64:67: 18:42:dd:49:6b:7e:6c:16:40:17:96:bc:3d:8b:6c:e7:67:cc: 03:1d:96:8d:ae:74:46:a0:c9:9e:53:90:95:97:e3:bc:e2:0f: 14:1e:da:1b:bf:ef:06:a9:37:a0:76:b7:30:34:f6:5f:70:e6: 0e:b4:f1:c9:cb:ba:07:79:90:f5:83:47:fe:c1:0d:bb:0e:9b: 56:cf:45:22:f5:4e:98:1a:c4:85:6f:10:1c:2e:e0:a8:66:f3: 14:44:04:be:7b:96:10:f2:09:d4:46:c3:7b:b6:8b:34:b5:1a: 11:70:6d:11:6c:ac:0a:14:87:15:cd:64:50:f2:c5:19:8e:d6: eb:5f:bf:89:b3:37:1c:c7:96:5d:4c:8c:2e:ae:d5:db:88:ed: 3e:60:5c:8b:be:59:f0:f8:ea:56:cb:44:9c:28:98:84:d7:64: 15:19:af:6e:87:b5:ce:89:c5:79:b3:79:68:8d:33:c7:ef:e0: fd:f7:ae:3e -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUKdm9pPjKyC/ZVNiIAfadxfHvFJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM3RENGM0ZFMThFM0M5REIzM0FDNkM1MEU4QkUzNTdE MDcyOTk5MTAeFw0yNjA2MTMwMTA4MzZaFw0yNjA2MTQwMjIzMzZaMDMxMTAvBgNV BAMTKDc2ODlDODdBNEEzOTNFRDI3RjM5MUM1MDM4MEU0NEVDQUM4QjhBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsJHo+Ok3zSP1oIGVUzKiynWf 3zT+0fiut5c874miZW71231TslS+omXQ06T7XpKyDyPqP9Bgck6QESYiR+ngIvmT fEEtM4PrIOoCgFmeUULhdYQJdzAEljmTQKzbQrPXG0PD7PjHCI3wVtP2FBKuuYAj S4OM4fD7FSdI4ph0wiW1s+1l+nCwyl86ZEFJOWaG+D+RT8iye4EylmINtawOebvW XcMja8S99cT90DGeMYhOFG/ioYUiie0/fVnZi76Bh5/iz7BNwZGG00NctBtiI45E fbsYROs6BoXhdFYCXSKOOuP6tgNYSBopH5vp7JEPSKZQIHCy7zIcmrlRCmUbAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUdonIeko5PtJ/ORxQOA5E7KyLir8wHwYDVR0j BBgwFoAUE33PP+GOPJ2zOsbFDovjV9BymZEwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0FOR1RJ QU4vMC8xMzdEQ0YzRkUxOEUzQzlEQjMzQUM2QzUwRThCRTM1N0QwNzI5OTkxLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzEzN0RDRjNGRTE4RTNDOURCMzNBQzZDNTBF OEJFMzU3RDA3Mjk5OTEuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5HVElBTi8wLzEzN0RDRjNG RTE4RTNDOURCMzNBQzZDNTBFOEJFMzU3RDA3Mjk5OTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUytQ1 bjhf0zMkQNiRF15X4dMg/IQugrR10xw7K/UAyn414vQKCiDhaSSLa/r08vhPLfB9 ciyqB+VtKUkBtHDJCP/9E4MlZGcYQt1Ja35sFkAXlrw9i2znZ8wDHZaNrnRGoMme U5CVl+O84g8UHtobv+8GqTegdrcwNPZfcOYOtPHJy7oHeZD1g0f+wQ27DptWz0Ui 9U6YGsSFbxAcLuCoZvMURAS+e5YQ8gnURsN7tos0tRoRcG0RbKwKFIcVzWRQ8sUZ jtbrX7+Jszccx5ZdTIwurtXbiO0+YFyLvlnw+OpWy0ScKJiE12QVGa9uh7XOicV5 s3lojTPH7+D9964+ -----END CERTIFICATE-----Generated at Sat Jun 13 18:05:29 2026 by rpki-client