$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft File: 0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft (raw, json) Hash identifier: 1Ld4yypEzHZqvFT3wuuSrKZeiVTX8M/h7W0rrQoxnes= Subject key identifier: 70:C9:43:FB:28:23:42:D1:2B:5C:18:77:BE:AE:02:F8:3B:68:4C:68 Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Certificate serial: 64B08CCA39E54435D6045B659736018D787F96DD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft Manifest number: 75 Signing time: Thu 23 Jul 2026 14:42:41 +0000 Manifest this update: Thu 23 Jul 2026 14:37:41 +0000 Manifest next update: Fri 24 Jul 2026 15:50:41 +0000 Files and hashes: 1: 323430323a343365303a3a2f34342d3438203d3e203138303430.roa (hash: HLcVT5kUZhLvP/tOPNWlz6SlLrHZ0S1z1+6DTRLbPqE=) 2: 323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa (hash: lDz21sk+HjJvsKfvooG9B77bRHOXmfNNesRAHR9pwbs=) 3: 323430323a343365303a3130303a3a2f34382d3634203d3e203138303430.roa (hash: h32LALHVFknnmyMLJLFj12rWAKQawmJYg4CLOH4T2X4=) 4: 323430323a343365303a313030303a3a2f34382d3634203d3e20323136313938.roa (hash: p1wQzMBLmsIKpEW18NY4WEs+pi2+pqeuDI2eHNDdFeU=) 5: 323430323a343365303a31303a3a2f34342d3438203d3e20313532363132.roa (hash: p7t7q5v8s8Z1DS3+G2q2YpsSjGO/X/2pPMzddgQKZBM=) 6: 0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl (hash: S4a3syxWCiLP/iwHo+H2p4dV8VFhw0UEUPZTS0jeGH8=) 7: 323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa (hash: j7P2rYuZrn8hZPV0CeIdB1Ff1unc7rLG1cgPDTKwPHg=) 8: 323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa (hash: NGp60z3Cs5J1MqqhHfuGriiby6iLCjVSyzM4a3MR+jI=) 9: 323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa (hash: 05+WKbQh6sstRH+yIl8/yofc8QcUG3HK5qslmx7kBo8=) 10: 323430323a343365303a3230323a3a2f34382d3634203d3e20323136313938.roa (hash: xy3LIoWre1+mMyvT9VOx/ZHRWCAr+PwFxmupLTWd54U=) 11: 323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa (hash: 6oEzbEUbwWVxil5FL4o7ldZcZdzNFDbPy4bkIGRV9mQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b0:8c:ca:39:e5:44:35:d6:04:5b:65:97:36:01:8d:78:7f:96:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Validity Not Before: Jul 23 14:37:41 2026 GMT Not After : Jul 24 15:50:41 2026 GMT Subject: CN=70C943FB282342D12B5C1877BEAE02F83B684C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:d1:28:bf:81:73:96:3c:51:11:94:32:27: 49:39:0c:86:af:4c:ac:32:f6:76:ef:fd:2e:3a:25: 46:5e:81:cd:fe:da:88:c4:13:9e:ab:59:b9:95:b0: c7:8c:56:92:e6:e5:30:eb:23:23:50:0d:a0:c4:e2: 30:c2:00:7f:09:a9:a3:e9:98:61:d0:23:34:d0:90: 9b:a1:14:89:bc:67:28:f1:5d:f7:b8:76:0d:83:42: bd:3e:91:ed:8c:2b:eb:27:ef:bb:e9:86:7a:cc:cd: dc:64:05:02:9a:2f:c0:70:65:ea:87:0a:80:87:57: f2:94:5d:88:61:56:6a:8b:cb:f5:9f:9b:03:30:ff: c5:a0:2d:10:85:b8:af:82:bf:33:13:e1:13:b8:3c: 3f:8a:87:ad:46:65:03:97:10:2b:da:9a:ab:40:a4: 29:c5:6b:17:1f:34:4b:e0:fa:b5:03:9f:51:29:a5: 13:17:4f:2a:17:34:5a:da:21:e0:d2:21:5b:60:b0: 9f:59:16:9e:e2:af:04:2f:b1:20:94:78:da:32:2d: f3:87:ae:82:3d:42:51:11:22:22:75:46:08:8e:09: b4:03:39:d7:6c:52:23:5c:d7:a0:67:91:55:86:5e: 0d:cf:b5:38:c3:1e:2a:58:7d:8d:ff:c3:9a:b5:dc: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C9:43:FB:28:23:42:D1:2B:5C:18:77:BE:AE:02:F8:3B:68:4C:68 X509v3 Authority Key Identifier: keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:51:88:ff:94:be:66:b5:78:83:17:c8:14:cc:95:31:47:9c: ce:a1:0e:c7:c2:cf:d7:a6:e3:58:7f:52:e9:75:18:5f:dd:6c: f4:fe:a2:53:d9:97:37:c1:03:99:86:59:d7:0b:f0:77:cc:56: 55:c8:d7:f5:8d:73:67:ad:8a:dc:da:9e:eb:95:f1:18:36:68: e2:62:a8:bb:3a:99:a7:2b:47:17:29:92:54:7a:3a:b0:7e:cb: 3e:fe:23:89:44:81:ee:e8:f1:ef:2b:f6:23:aa:7a:60:48:1c: 85:e5:33:8a:8e:80:c5:91:23:88:86:b5:b4:d0:8a:be:e6:28: 53:51:7c:b7:ee:ee:ae:05:d1:e4:0d:7b:a3:de:4d:14:67:cd: bd:4e:ad:1e:f6:42:e9:3e:5b:2a:f5:52:10:fa:30:86:b0:dc: 0e:02:c5:1b:4d:94:0b:96:3a:21:11:3d:1d:fa:83:a7:fb:0e: 93:54:3a:8c:aa:bb:96:b2:dc:38:5d:34:d0:81:57:c9:a9:b2: f9:a5:2a:eb:e3:d0:f8:d7:53:ee:cf:36:06:5f:30:c1:fd:87: 6b:dc:2f:bd:41:a9:bf:a8:4b:16:e0:35:f1:50:fa:d5:69:c6: a0:01:73:b4:b3:34:d4:c8:03:29:af:60:48:eb:61:8f:fd:77: 19:e8:37:33 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUZLCMyjnlRDXWBFtllzYBjXh/lt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx NjZDM0U3ODAeFw0yNjA3MjMxNDM3NDFaFw0yNjA3MjQxNTUwNDFaMDMxMTAvBgNV BAMTKDcwQzk0M0ZCMjgyMzQyRDEyQjVDMTg3N0JFQUUwMkY4M0I2ODRDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC049Eov4FzljxREZQyJ0k5DIav TKwy9nbv/S46JUZegc3+2ojEE56rWbmVsMeMVpLm5TDrIyNQDaDE4jDCAH8JqaPp mGHQIzTQkJuhFIm8ZyjxXfe4dg2DQr0+ke2MK+sn77vphnrMzdxkBQKaL8BwZeqH CoCHV/KUXYhhVmqLy/WfmwMw/8WgLRCFuK+CvzMT4RO4PD+Kh61GZQOXECvamqtA pCnFaxcfNEvg+rUDn1EppRMXTyoXNFraIeDSIVtgsJ9ZFp7irwQvsSCUeNoyLfOH roI9QlERIiJ1RgiOCbQDOddsUiNc16BnkVWGXg3PtTjDHipYfY3/w5q13HrJAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUcMlD+ygjQtErXBh3vq4C+DtoTGgwHwYDVR0j BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG QTBCREJDMTY2QzNFNzguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8wLzBGNkIzNDI3 Q0Q0MDNERTcwRDk3Q0REQ0FGQTBCREJDMTY2QzNFNzgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDIUYj/ lL5mtXiDF8gUzJUxR5zOoQ7Hws/XpuNYf1LpdRhf3Wz0/qJT2Zc3wQOZhlnXC/B3 zFZVyNf1jXNnrYrc2p7rlfEYNmjiYqi7OpmnK0cXKZJUejqwfss+/iOJRIHu6PHv K/YjqnpgSByF5TOKjoDFkSOIhrW00Iq+5ihTUXy37u6uBdHkDXuj3k0UZ829Tq0e 9kLpPlsq9VIQ+jCGsNwOAsUbTZQLljohET0d+oOn+w6TVDqMqruWstw4XTTQgVfJ qbL5pSrr49D411PuzzYGXzDB/Ydr3C+9Qam/qEsW4DXxUPrVacagAXO0szTUyAMp r2BI62GP/XcZ6Dcz -----END CERTIFICATE-----Generated at Thu Jul 23 21:24:53 2026 by rpki-client