$ rpki-client -vvf rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft File: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft (raw, json) Hash identifier: +SNCmlB3+d/6LwNjQWd2S75WWtMNuPKUM8MChSzIgs4= Subject key identifier: C7:BC:33:66:F7:07:45:74:4C:4E:33:0C:A5:58:01:4D:5E:20:97:3E Authority key identifier: 9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 Certificate issuer: /CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Certificate serial: 4D2A9EE8389619165410678E8512C75B1CC485FF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft Manifest number: 6D Signing time: Tue 28 Jul 2026 11:18:16 +0000 Manifest this update: Tue 28 Jul 2026 11:13:16 +0000 Manifest next update: Wed 29 Jul 2026 13:48:16 +0000 Files and hashes: 1: 3133382e3235322e31332e302f32342d3234203d3e20313331363338.roa (hash: ZxFVwcoOUjiuOptQUvoMY0HJlqBq+tEMKJCTrxaADFk=) 2: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl (hash: tHLohWQ0TUrUzDXtvQg15iFXgmcTbjbAXt/3pwLFeEg=) 3: 3133382e3235322e31322e302f32332d3234203d3e203633393030.roa (hash: T1G4LI5dLLgbVaIvhEyF4d3yTLg74BSvJymMPoiXRRs=) 4: 3133382e3235322e31322e302f32342d3234203d3e203633393030.roa (hash: M8obdGIsjRO1zF80aPiV/zHcUxXnNPdWJ9IvgOv18N0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2a:9e:e8:38:96:19:16:54:10:67:8e:85:12:c7:5b:1c:c4:85:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Validity Not Before: Jul 28 11:13:16 2026 GMT Not After : Jul 29 13:48:16 2026 GMT Subject: CN=C7BC3366F70745744C4E330CA558014D5E20973E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:1c:2d:75:1c:75:94:65:ce:4b:87:30:0c: 0a:05:b9:92:52:18:ec:fb:60:ae:f3:71:97:ac:cc: 56:19:58:19:09:cb:fd:c7:eb:11:0d:62:c3:35:62: 8a:47:d2:0e:1e:0b:fa:8e:26:8c:46:48:a5:81:a2: a8:29:25:4b:cd:88:81:44:2d:7c:56:ca:5b:2b:04: fd:dc:1e:af:56:99:4b:5d:63:79:1c:5c:74:f7:2b: 41:34:c3:c0:2e:d0:57:8c:99:bc:f7:2a:04:39:00: 29:d4:63:cc:5e:46:d4:b3:04:9e:84:36:5c:45:d1: c3:51:07:ed:6a:13:87:d7:68:98:8d:47:23:f1:15: 5b:60:26:39:86:31:e8:db:52:3f:a1:2a:30:1b:cf: a1:b6:58:17:bc:64:ef:8d:1b:90:e3:2a:5d:01:c5: 9e:90:d7:bc:be:06:25:17:8d:0d:1c:ad:34:94:51: c8:fc:25:1c:c0:8c:f5:20:ee:d6:5c:66:dd:d1:f4: cc:04:aa:26:1a:e7:d2:0c:ce:1c:df:c4:2d:b9:a3: 0a:f0:0d:81:3b:fc:29:71:4c:d3:d5:fc:69:eb:69: 57:47:cd:d8:43:a3:ab:ec:ab:18:e9:8a:2b:8c:23: f0:bf:95:50:81:5a:6d:0c:f2:e2:c4:d9:27:69:e1: ef:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BC:33:66:F7:07:45:74:4C:4E:33:0C:A5:58:01:4D:5E:20:97:3E X509v3 Authority Key Identifier: keyid:9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:60:8b:37:41:de:57:8c:2c:19:44:72:9d:05:6f:5a:a6:cc: 97:26:89:f8:37:6d:32:65:9f:ca:f5:e2:fb:59:1f:3d:9d:b6: 68:d6:02:a2:bc:e8:e2:89:93:9d:43:0e:be:ea:2e:9b:a6:be: c3:73:b5:1d:87:3e:4b:6b:bb:6c:6f:ba:aa:b6:c5:87:56:f2: 93:c8:18:e9:99:fe:f0:81:f7:7b:83:f4:35:49:9b:6f:81:c4: e2:ae:da:ad:f3:eb:71:fe:66:d3:b4:54:38:e7:04:90:b4:c1: dd:dd:d4:d5:73:e5:04:d5:d8:44:97:93:d2:75:e3:1b:55:ac: 90:6a:91:86:89:17:5c:f4:9d:93:19:67:3c:69:0a:b8:8c:2e: 5c:69:92:07:59:5f:82:1b:63:00:c7:4f:93:0d:75:89:f7:63: 2d:90:a7:49:e3:5e:39:90:9f:2f:f1:82:68:44:0a:7a:56:89: 43:33:0c:e3:43:ae:79:8b:9d:ed:be:83:2d:1f:40:26:e8:fc: 56:31:85:7b:ac:d0:03:95:99:15:16:4f:cd:43:96:7a:e2:64: 77:15:38:60:82:f6:0d:be:66:49:c6:a2:31:04:d8:5b:04:59: 25:6b:32:bc:5a:15:e2:ef:94:d4:83:90:c7:f3:37:d5:cb:7b: dc:5c:77:72 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUTSqe6DiWGRZUEGeOhRLHWxzEhf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFBNDc3 MjdDQzFDMzAeFw0yNjA3MjgxMTEzMTZaFw0yNjA3MjkxMzQ4MTZaMDMxMTAvBgNV BAMTKEM3QkMzMzY2RjcwNzQ1NzQ0QzRFMzMwQ0E1NTgwMTRENUUyMDk3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtBwtdRx1lGXOS4cwDAoFuZJS GOz7YK7zcZeszFYZWBkJy/3H6xENYsM1YopH0g4eC/qOJoxGSKWBoqgpJUvNiIFE LXxWylsrBP3cHq9WmUtdY3kcXHT3K0E0w8Au0FeMmbz3KgQ5ACnUY8xeRtSzBJ6E NlxF0cNRB+1qE4fXaJiNRyPxFVtgJjmGMejbUj+hKjAbz6G2WBe8ZO+NG5DjKl0B xZ6Q17y+BiUXjQ0crTSUUcj8JRzAjPUg7tZcZt3R9MwEqiYa59IMzhzfxC25owrw DYE7/ClxTNPV/GnraVdHzdhDo6vsqxjpiiuMI/C/lVCBWm0M8uLE2Sdp4e83AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUx7wzZvcHRXRMTjMMpVgBTV4glz4wHwYDVR0j BBgwFoAUnN5QPM43CjnhV/hRms8aR3J8wcMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWlVTTy8x LzlDREU1MDNDQ0UzNzBBMzlFMTU3Rjg1MTlBQ0YxQTQ3NzI3Q0MxQzMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFB NDc3MjdDQzFDMy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1pVU08vMS85Q0RFNTAzQ0NFMzcwQTM5 RTE1N0Y4NTE5QUNGMUE0NzcyN0NDMUMzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArGCLN0HeV4wsGURy nQVvWqbMlyaJ+DdtMmWfyvXi+1kfPZ22aNYCorzo4omTnUMOvuoum6a+w3O1HYc+ S2u7bG+6qrbFh1byk8gY6Zn+8IH3e4P0NUmbb4HE4q7arfPrcf5m07RUOOcEkLTB 3d3U1XPlBNXYRJeT0nXjG1WskGqRhokXXPSdkxlnPGkKuIwuXGmSB1lfghtjAMdP kw11ifdjLZCnSeNeOZCfL/GCaEQKelaJQzMM40OueYud7b6DLR9AJuj8VjGFe6zQ A5WZFRZPzUOWeuJkdxU4YIL2Db5mScaiMQTYWwRZJWsyvFoV4u+U1IOQx/M31ct7 3Fx3cg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:45:09 2026 by rpki-client