$ rpki-client -vvf rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft File: 0291B733B1EED1AF7E817D958CE6F13A585F0695.mft (raw, json) Hash identifier: afiNNV8d7rf7ULyfqc0DZszeLDaJ3h5gYWfGC/pFNCA= Subject key identifier: 0A:79:70:C5:DB:D7:16:3D:01:85:D0:BF:BF:FA:67:73:B4:06:52:1F Authority key identifier: 02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 Certificate issuer: /CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Certificate serial: 4050578ADC62BBA94E48EC7347DED410D96629B5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft Manifest number: 6B Signing time: Tue 28 Jul 2026 14:04:06 +0000 Manifest this update: Tue 28 Jul 2026 13:59:06 +0000 Manifest next update: Wed 29 Jul 2026 14:14:06 +0000 Files and hashes: 1: 3231302e37392e3135302e302f32332d3234203d3e203138303431.roa (hash: XF9vSkheKC1NRFUS3alvj8iCKGl0+/ZaB+X31yisdf0=) 2: 323430313a353561303a3a2f33322d3332203d3e203138303431.roa (hash: CrzulhqYuNBjNzDQRC8BOsQxP+QuAw4ZbCFe65kH3fw=) 3: 3231302e37392e3135312e302f32342d3234203d3e20323031323137.roa (hash: WRpRpWc9nNYJzvwhsCMAvWKmyMgtn7Z1UBftNahQj4c=) 4: 0291B733B1EED1AF7E817D958CE6F13A585F0695.crl (hash: 9xFHwO5xfItCLllWlGS4Sb3m+XNq1bslVksqX5b801E=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:50:57:8a:dc:62:bb:a9:4e:48:ec:73:47:de:d4:10:d9:66:29:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Validity Not Before: Jul 28 13:59:06 2026 GMT Not After : Jul 29 14:14:06 2026 GMT Subject: CN=0A7970C5DBD7163D0185D0BFBFFA6773B406521F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:31:a0:2e:49:6a:73:c3:80:35:9b:a7:e4: 2a:aa:47:74:5f:9e:a6:5a:9a:c6:f8:43:34:ca:6d: 5b:5b:64:b8:79:a0:0d:b6:ba:d2:bc:b8:89:3f:e3: da:a4:e3:33:96:ae:fa:9c:30:0b:9a:78:63:db:06: 02:ce:46:dd:5e:ac:88:5e:00:ef:fb:15:9e:ca:26: 85:96:4a:10:41:16:e1:97:72:3f:2b:e5:3f:d5:cf: 6a:ac:af:ab:18:d1:df:82:d1:6c:bc:fb:e0:95:ba: d7:68:d0:a9:72:62:3b:32:e4:52:db:3c:94:fd:b3: c4:59:16:f0:da:d4:5b:61:97:9f:23:34:ac:fb:03: d9:b0:6f:12:df:f5:68:2d:96:dc:87:50:cf:82:07: f1:9d:60:95:35:db:40:6a:a7:39:c0:1f:0d:5f:5c: e5:db:7d:a9:3c:1c:62:31:7c:4f:c3:28:49:fc:30: 85:51:58:55:83:f5:9c:08:f4:fc:b9:96:47:aa:ea: a6:ea:23:26:ab:32:38:42:26:2f:03:e7:7f:cd:62: 62:2f:26:77:3b:d7:8c:ad:95:bb:53:73:9a:d2:a0: 15:d7:bd:1b:1d:be:ea:4a:d9:af:73:8e:4e:b7:d9: 3f:09:91:85:7e:53:50:91:76:2e:3c:6b:ee:c1:e4: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:79:70:C5:DB:D7:16:3D:01:85:D0:BF:BF:FA:67:73:B4:06:52:1F X509v3 Authority Key Identifier: keyid:02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:93:1a:66:27:b5:17:b8:1c:7d:d0:47:48:0a:4f:6b:04:89: 3b:1d:c2:bb:68:87:96:72:49:62:b4:5d:f5:b0:7f:ac:49:db: bc:fd:f7:a4:52:c0:2c:53:15:45:9f:0b:9f:07:44:b9:29:89: e2:85:07:da:a1:12:b2:ee:6b:48:51:4a:1f:e2:be:d1:27:9f: a1:0d:69:8f:87:89:41:f1:4d:29:dd:e2:95:98:4d:e0:2a:ef: 61:c6:07:d0:f5:91:20:8d:4f:bd:97:a0:0e:1b:c2:9e:01:df: b7:c9:b5:e8:9d:51:85:04:da:d6:60:71:04:6e:8f:64:fc:aa: 40:4b:5c:44:cd:19:c6:0e:e1:f3:be:a1:c5:4c:3e:3b:0f:43: 33:20:39:eb:52:41:84:7c:c1:6b:60:86:79:15:d0:ea:5f:d6: cf:74:77:03:f3:89:9b:aa:f2:9b:c0:c7:07:0f:53:c5:6a:a7: 9a:5d:6f:59:f0:e9:dc:28:41:d2:0c:9b:59:25:11:c8:d7:52: 4f:98:b0:39:d8:66:4f:1b:ba:d1:fa:65:51:b8:c4:00:02:b6: 73:df:a2:bd:36:ae:50:17:97:50:bd:91:1a:92:65:bf:dd:a6: 17:44:aa:33:dc:21:dd:59:e8:05:f1:b2:dd:08:7d:e4:11:cb: 66:c1:27:73 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUQFBXitxiu6lOSOxzR97UENlmKbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1 ODVGMDY5NTAeFw0yNjA3MjgxMzU5MDZaFw0yNjA3MjkxNDE0MDZaMDMxMTAvBgNV BAMTKDBBNzk3MEM1REJENzE2M0QwMTg1RDBCRkJGRkE2NzczQjQwNjUyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjMTGgLklqc8OANZun5CqqR3Rf nqZamsb4QzTKbVtbZLh5oA22utK8uIk/49qk4zOWrvqcMAuaeGPbBgLORt1erIhe AO/7FZ7KJoWWShBBFuGXcj8r5T/Vz2qsr6sY0d+C0Wy8++CVutdo0KlyYjsy5FLb PJT9s8RZFvDa1Fthl58jNKz7A9mwbxLf9WgtltyHUM+CB/GdYJU120BqpznAHw1f XOXbfak8HGIxfE/DKEn8MIVRWFWD9ZwI9Py5lkeq6qbqIyarMjhCJi8D53/NYmIv Jnc714ytlbtTc5rSoBXXvRsdvupK2a9zjk632T8JkYV+U1CRdi48a+7B5CnLAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUCnlwxdvXFj0BhdC/v/pnc7QGUh8wHwYDVR0j BBgwFoAUApG3M7Hu0a9+gX2VjObxOlhfBpUwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAv MDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1ODVGMDY5NS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8wMjkxQjczM0IxRUVEMUFGN0U4MTdEOTU4Q0U2RjEz QTU4NUYwNjk1LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAvMDI5MUI3MzNCMUVFRDFBRjdF ODE3RDk1OENFNkYxM0E1ODVGMDY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHaTGmYntRe4HH3QR0gK T2sEiTsdwrtoh5ZySWK0XfWwf6xJ27z996RSwCxTFUWfC58HRLkpieKFB9qhErLu a0hRSh/ivtEnn6ENaY+HiUHxTSnd4pWYTeAq72HGB9D1kSCNT72XoA4bwp4B37fJ teidUYUE2tZgcQRuj2T8qkBLXETNGcYO4fO+ocVMPjsPQzMgOetSQYR8wWtghnkV 0Opf1s90dwPziZuq8pvAxwcPU8Vqp5pdb1nw6dwoQdIMm1klEcjXUk+YsDnYZk8b utH6ZVG4xAACtnPfor02rlAXl1C9kRqSZb/dphdEqjPcId1Z6AXxst0IfeQRy2bB J3M= -----END CERTIFICATE-----Generated at Tue Jul 28 19:43:43 2026 by rpki-client