$ rpki-client -vvf rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft File: 881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft (raw, json) Hash identifier: QWSyRJxnky+qSgUB5H4p2Va1CJ13DfPgG3PNsal0J8k= Subject key identifier: F5:8F:F8:F6:49:0C:98:60:3B:D2:B5:FB:A8:D9:53:B3:14:DB:E7:FC Authority key identifier: 88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78 Certificate issuer: /CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78 Certificate serial: 33735EFFAB7D5643D65DF7B5B1C7A1E8D400A856 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 17:26:17 +0000 Manifest this update: Thu 23 Jul 2026 17:21:17 +0000 Manifest next update: Fri 24 Jul 2026 20:48:17 +0000 Files and hashes: 1: 3130332e3132322e31362e302f32322d3234203d3e20333936393832.roa (hash: /OS0f2NWDbFEXqirGqMoLUR1IHwnbDtbJ8lk1eeYlp4=) 2: 323430333a383634303a3a2f33322d3634203d3e20333936393832.roa (hash: Jm1SzTARAHpPF8XgcCqrOsbDyqd1bedbKKWEeTdyjNA=) 3: 881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl (hash: 6mEPwFz2sPefJCyu5nbxFP34eUK/OskZYrML+DD28xc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:73:5e:ff:ab:7d:56:43:d6:5d:f7:b5:b1:c7:a1:e8:d4:00:a8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78 Validity Not Before: Jul 23 17:21:17 2026 GMT Not After : Jul 24 20:48:17 2026 GMT Subject: CN=F58FF8F6490C98603BD2B5FBA8D953B314DBE7FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:df:aa:3c:b5:e3:4f:2f:83:5a:8a:3c:45:e0: 3d:12:88:95:b0:38:e5:dd:b1:8b:7f:bd:ea:4a:df: ab:3a:af:22:0f:a5:b8:3d:f6:3b:e1:0d:5c:08:f1: 1d:b5:97:7b:fe:58:97:93:f0:e5:12:4c:f7:50:62: 41:2b:75:0a:f5:6a:8c:42:bb:09:6b:2f:a2:ae:72: e0:20:9d:55:a8:1b:95:99:e9:67:c6:15:bb:35:85: f0:b8:fc:fd:73:7c:5c:72:7f:17:6a:3b:e3:14:71: 94:ec:1a:54:a9:19:09:21:ac:62:2a:7e:55:2f:e1: ea:91:90:81:84:59:d6:d0:73:7b:11:77:1e:a1:b9: 34:95:69:60:02:6f:26:5d:a9:17:f9:57:ae:a2:46: 02:e9:50:b7:0b:69:7f:4e:7a:42:9f:fb:ff:21:62: 3e:3b:ac:9c:35:fb:f2:69:09:86:47:07:5f:ab:79: 36:e7:4d:82:72:6d:38:47:c8:63:55:8c:68:44:5e: 79:6a:fc:5d:9b:1d:78:a1:6a:95:e1:5d:36:cd:b8: 4a:70:35:71:24:79:c5:37:5e:ce:62:f8:1a:1c:17: 52:74:4e:9d:f7:be:a7:52:77:13:2f:cf:ca:eb:0e: 91:91:c7:1b:5f:82:dc:99:25:53:75:32:65:77:97: e7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8F:F8:F6:49:0C:98:60:3B:D2:B5:FB:A8:D9:53:B3:14:DB:E7:FC X509v3 Authority Key Identifier: keyid:88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:8a:28:d5:a5:35:be:f5:b0:17:b5:d9:f0:df:1d:c3:ba:f3: 62:8f:6d:18:3a:a8:77:6e:d2:f6:a1:fe:8f:df:13:fa:a8:14: 6d:8f:b6:f3:98:73:96:6b:ca:5c:19:e7:e8:08:a9:95:99:52: d7:a6:e7:b3:f3:4c:98:cb:c4:2d:1c:15:0c:31:fd:d6:1d:44: 8b:eb:09:cc:b7:8e:30:94:07:15:e7:a5:7e:b8:fb:93:00:58: 61:10:e7:cd:af:e2:d6:1d:20:2b:1b:8a:c2:3f:10:bb:74:aa: 01:4a:1c:81:9e:19:6b:72:c5:5c:30:ec:1c:73:c3:76:ce:8a: 48:1e:91:b8:80:40:31:1f:36:df:7c:07:9c:85:01:ec:e5:c1: 6c:6e:7f:9d:64:22:e2:87:fc:7a:2d:b5:f2:a7:7e:d5:66:5e: 71:f1:de:21:01:74:dd:de:1c:7e:d6:45:5d:0c:53:a7:69:e0: 2f:27:3f:e5:5c:f6:f7:55:29:d9:c8:4f:ab:d8:51:7b:b2:4e: 6d:71:3a:15:e7:af:ac:ac:de:ed:96:e6:7c:f1:88:72:1c:5e: 15:70:47:fa:f9:02:39:1b:3a:3b:98:7c:71:73:9e:36:bc:65: 6d:11:57:da:96:c6:1f:9a:1b:69:99:de:3f:54:63:c7:63:68: d6:91:5e:24 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUM3Ne/6t9VkPWXfe1sceh6NQAqFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgxQkVFMUY5M0Q1OEJBRURGQUM5OTRCNjc3QUFBRDAz Q0M1OUM3ODAeFw0yNjA3MjMxNzIxMTdaFw0yNjA3MjQyMDQ4MTdaMDMxMTAvBgNV BAMTKEY1OEZGOEY2NDkwQzk4NjAzQkQyQjVGQkE4RDk1M0IzMTREQkU3RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ36o8teNPL4NaijxF4D0SiJWw OOXdsYt/vepK36s6ryIPpbg99jvhDVwI8R21l3v+WJeT8OUSTPdQYkErdQr1aoxC uwlrL6KucuAgnVWoG5WZ6WfGFbs1hfC4/P1zfFxyfxdqO+MUcZTsGlSpGQkhrGIq flUv4eqRkIGEWdbQc3sRdx6huTSVaWACbyZdqRf5V66iRgLpULcLaX9OekKf+/8h Yj47rJw1+/JpCYZHB1+reTbnTYJybThHyGNVjGhEXnlq/F2bHXihapXhXTbNuEpw NXEkecU3Xs5i+BocF1J0Tp33vqdSdxMvz8rrDpGRxxtfgtyZJVN1MmV3l+fdAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU9Y/49kkMmGA70rX7qNlTsxTb5/wwHwYDVR0j BBgwFoAUiBvuH5PVi67frJlLZ3qq0DzFnHgwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBQSUVS LzAvODgxQkVFMUY5M0Q1OEJBRURGQUM5OTRCNjc3QUFBRDAzQ0M1OUM3OC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84ODFCRUUxRjkzRDU4QkFFREZBQzk5NEI2NzdB QUFEMDNDQzU5Qzc4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBQSUVSLzAvODgxQkVFMUY5M0Q1 OEJBRURGQUM5OTRCNjc3QUFBRDAzQ0M1OUM3OC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALKKKNWlNb71 sBe12fDfHcO682KPbRg6qHdu0vah/o/fE/qoFG2PtvOYc5ZrylwZ5+gIqZWZUtem 57PzTJjLxC0cFQwx/dYdRIvrCcy3jjCUBxXnpX64+5MAWGEQ582v4tYdICsbisI/ ELt0qgFKHIGeGWtyxVww7Bxzw3bOikgekbiAQDEfNt98B5yFAezlwWxuf51kIuKH /HottfKnftVmXnHx3iEBdN3eHH7WRV0MU6dp4C8nP+Vc9vdVKdnIT6vYUXuyTm1x OhXnr6ys3u2W5nzxiHIcXhVwR/r5AjkbOjuYfHFznja8ZW0RV9qWxh+aG2mZ3j9U Y8djaNaRXiQ= -----END CERTIFICATE-----Generated at Fri Jul 24 01:36:48 2026 by rpki-client