$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft File: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft (raw, json) Hash identifier: f0OomP88d8VyNlRe2mBBC8QYlyjEGZf2l0KX2pOh95I= Subject key identifier: 22:5F:61:B0:29:DD:BC:44:17:62:C5:39:B1:CD:EC:77:35:60:47:B1 Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Certificate serial: 71DB53019BF60B192C5C9B3088B78CC6EA815062 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft Manifest number: 75 Signing time: Thu 23 Jul 2026 12:42:26 +0000 Manifest this update: Thu 23 Jul 2026 12:37:26 +0000 Manifest next update: Fri 24 Jul 2026 16:24:26 +0000 Files and hashes: 1: 3134342e37392e3233362e302f32342d3332203d3e203138303430.roa (hash: 1FIFjMBcizShdvw6u5phvDGtZhnMBusqAuzpJLq+G90=) 2: 3134342e37392e3233372e302f32342d3234203d3e203138303430.roa (hash: YiNfhn2rfnFW/2M2Ag4d3OUBywy0FERwAc5K7Q8vyfc=) 3: 3134342e37392e3233362e302f32342d3234203d3e203138303430.roa (hash: ZudjpagHov1aZlrdTbsVSXtYt3YeCsmSW4h5XCZ/uzs=) 4: DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl (hash: pnnSeU0xmiZVHHq+xAu1Ezqr37Gbc6Ktgwc50sHaYzQ=) 5: 3134342e37392e3233372e302f32342d3332203d3e203138303430.roa (hash: r6p1Am50m6SY4C22THPfAzr++Eba9JH1Hgnd4WmFLsA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:db:53:01:9b:f6:0b:19:2c:5c:9b:30:88:b7:8c:c6:ea:81:50:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Validity Not Before: Jul 23 12:37:26 2026 GMT Not After : Jul 24 16:24:26 2026 GMT Subject: CN=225F61B029DDBC441762C539B1CDEC77356047B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:33:10:60:7e:db:ff:52:73:a8:3c:67:b6: f6:4b:e6:89:0e:a2:8a:cc:d1:11:e9:40:ad:f6:7a: 7b:47:b7:ec:3c:b5:41:be:bc:f8:79:14:76:a5:1d: 87:3e:66:89:ac:58:aa:61:90:6e:7a:ab:2f:d8:82: 5e:91:f8:0e:33:34:b5:d4:e2:e3:ab:37:bc:57:0a: 5b:2a:00:b6:e6:de:06:7d:b3:a6:43:db:a2:5b:c9: f8:18:68:cb:73:37:8d:c8:ef:c7:68:b1:31:3f:fe: af:0f:f1:67:61:32:4a:fd:ad:5f:79:48:3b:4b:7d: 50:56:82:6a:01:e8:3e:84:f0:29:55:d3:df:3b:ce: b3:82:6f:ed:71:d1:1c:c9:6b:1a:0b:49:a3:0e:be: 09:7f:88:88:a9:85:b0:2d:4d:be:e3:79:9c:c8:85: fd:96:46:fa:e3:be:24:08:a6:f6:67:b8:49:10:4a: d8:07:52:9e:8d:18:58:16:eb:10:61:fa:0f:2a:3e: d2:0f:16:93:0e:33:72:50:79:10:0e:c9:3b:08:44: ba:40:32:46:67:06:e2:2a:b6:b5:fd:0b:00:86:a7: 77:96:e4:1d:66:53:f8:c8:9e:78:cc:36:2a:41:41: 49:65:8d:90:64:4c:ad:14:f4:e6:b4:be:6a:26:60: ab:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5F:61:B0:29:DD:BC:44:17:62:C5:39:B1:CD:EC:77:35:60:47:B1 X509v3 Authority Key Identifier: keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c9:bc:68:4b:89:73:bc:95:65:82:d7:9d:05:9a:10:4a:38: aa:80:4b:bc:83:6b:1d:8f:48:6d:73:6e:ba:a7:84:6b:11:a5: b2:b4:58:50:cc:7c:30:19:cd:1f:e2:1a:24:7c:44:09:f4:58: e0:5f:eb:4e:24:8a:db:10:6b:d4:ac:de:c7:3b:8b:45:e9:2c: e0:be:d8:0f:7b:07:15:2a:cd:6b:68:bf:11:d9:30:ec:0e:8d: 03:e0:b8:8e:87:66:36:09:4d:8d:b7:29:d0:21:e0:dc:43:44: 25:c3:25:2b:ec:c7:88:35:bb:e3:11:ea:1b:57:f9:d8:5a:68: a0:ea:c8:c4:b2:da:c6:eb:28:7c:12:79:07:20:53:72:b3:18: 36:e5:c6:e5:d7:ac:4d:4f:23:ec:98:74:63:58:db:3a:b0:4f: 59:a5:64:45:0e:a8:ef:d0:e9:6d:69:c5:0f:c8:02:c3:e3:c3: 81:3d:52:8b:48:c4:8d:c1:4b:1c:52:df:e9:4e:a5:a1:58:b5: 2d:28:f5:08:66:b5:3b:f2:c4:79:0f:ab:49:32:f2:b3:a0:97: a8:d2:1f:0d:32:bf:7b:da:b5:a5:b7:73:ff:07:b2:93:7a:fe: 03:0b:2c:d7:0c:74:aa:5f:43:f2:14:b9:91:59:58:61:d7:be: 1b:39:95:cd -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUcdtTAZv2CxksXJswiLeMxuqBUGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC NkRFMjM0QzAeFw0yNjA3MjMxMjM3MjZaFw0yNjA3MjQxNjI0MjZaMDMxMTAvBgNV BAMTKDIyNUY2MUIwMjlEREJDNDQxNzYyQzUzOUIxQ0RFQzc3MzU2MDQ3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BzMQYH7b/1JzqDxntvZL5okO oorM0RHpQK32entHt+w8tUG+vPh5FHalHYc+ZomsWKphkG56qy/Ygl6R+A4zNLXU 4uOrN7xXClsqALbm3gZ9s6ZD26JbyfgYaMtzN43I78dosTE//q8P8WdhMkr9rV95 SDtLfVBWgmoB6D6E8ClV0987zrOCb+1x0RzJaxoLSaMOvgl/iIiphbAtTb7jeZzI hf2WRvrjviQIpvZnuEkQStgHUp6NGFgW6xBh+g8qPtIPFpMOM3JQeRAOyTsIRLpA MkZnBuIqtrX9CwCGp3eW5B1mU/jInnjMNipBQUlljZBkTK0U9Oa0vmomYKtRAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUIl9hsCndvEQXYsU5sc3sdzVgR7EwHwYDVR0j BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw QzVFQ0QzQjZERTIzNEMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xL0RCRTA2QTVG QzVBNUUyODlBQ0VCNDg3QjUwQzVFQ0QzQjZERTIzNEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoybxo S4lzvJVlgtedBZoQSjiqgEu8g2sdj0htc266p4RrEaWytFhQzHwwGc0f4hokfEQJ 9FjgX+tOJIrbEGvUrN7HO4tF6SzgvtgPewcVKs1raL8R2TDsDo0D4LiOh2Y2CU2N tynQIeDcQ0QlwyUr7MeINbvjEeobV/nYWmig6sjEstrG6yh8EnkHIFNysxg25cbl 16xNTyPsmHRjWNs6sE9ZpWRFDqjv0OltacUPyALD48OBPVKLSMSNwUscUt/pTqWh WLUtKPUIZrU78sR5D6tJMvKzoJeo0h8NMr972rWlt3P/B7KTev4DCyzXDHSqX0Py FLmRWVhh174bOZXN -----END CERTIFICATE-----Generated at Fri Jul 24 08:37:34 2026 by rpki-client