$ rpki-client -vvf rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft File: 73E6AC8F948D0C97D941F26531617C19223508E6.mft (raw, json) Hash identifier: 0s/KiYEF3BKsKWsrpu33Oh3lCRv6XBJp9pyHu+MHbGI= Subject key identifier: B6:91:EC:F7:E7:B0:45:3C:00:D9:C2:03:DC:12:89:AA:AA:F4:AA:4A Authority key identifier: 73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6 Certificate issuer: /CN=73E6AC8F948D0C97D941F26531617C19223508E6 Certificate serial: 455220BDEC6DB7DC422428F92781E53B51DA25E9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft Manifest number: 65 Signing time: Thu 23 Jul 2026 08:11:57 +0000 Manifest this update: Thu 23 Jul 2026 08:06:57 +0000 Manifest next update: Fri 24 Jul 2026 11:59:57 +0000 Files and hashes: 1: 73E6AC8F948D0C97D941F26531617C19223508E6.crl (hash: isWAiBWZ3zuhtdB8wqsKa74Rj64G0Wjdp27WUYehAfA=) 2: 3130332e3130332e38302e302f32322d3234203d3e20313331363138.roa (hash: BJzz6G8VxovxCWAhRC1tIl3CH9yMcG4c36K4NUZF6DE=) 3: 3231312e37392e3130322e302f32332d3234203d3e2037353336.roa (hash: 3v3LP5j06Samtgaxz1mv2fEZi56D7EIyXnL/h/+knlQ=) 4: 3130332e3130332e38302e302f32322d3234203d3e2037353336.roa (hash: dGPLq2lyYCFxtDkCnYUjXrZAi+ZIN3xKzHo/rdmq9Wo=) 5: 3231312e37392e3130322e302f32332d3234203d3e203231383539.roa (hash: L57nfmyeojiXaTZf4zjU8tXgEtvksvbfz2DcpLr9SbM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.crl rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:52:20:bd:ec:6d:b7:dc:42:24:28:f9:27:81:e5:3b:51:da:25:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73E6AC8F948D0C97D941F26531617C19223508E6 Validity Not Before: Jul 23 08:06:57 2026 GMT Not After : Jul 24 11:59:57 2026 GMT Subject: CN=B691ECF7E7B0453C00D9C203DC1289AAAAF4AA4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:88:d7:e4:30:ac:03:6b:e0:9c:3b:e8:43:d5: 85:53:2c:d8:9d:7f:41:51:b3:ac:d4:88:4d:7e:9c: 55:a3:09:99:90:7e:61:31:3e:f7:25:4f:05:1b:27: 49:d7:42:b9:03:72:50:67:9b:2e:d8:c5:d3:60:5c: 6c:5d:1c:d5:59:bf:43:2e:f5:97:07:72:d3:c3:74: 40:87:60:e6:49:74:76:70:3c:a3:da:65:3f:37:72: 46:43:44:63:24:d8:ee:1f:bf:64:5a:c7:a9:38:cc: 8c:c1:65:5a:4a:30:21:66:6c:ef:93:e8:ee:b5:69: 18:f3:03:0c:34:5e:a9:98:7f:f2:2c:f6:72:92:a3: 42:b6:b4:a5:43:cc:50:06:fa:3d:08:27:a7:16:48: c4:6a:c6:bb:58:2f:04:a2:de:aa:91:3a:11:34:8e: 40:ef:2d:31:a1:c7:5b:4e:2d:a1:8f:d3:f5:89:07: 31:2d:76:6e:73:7e:f0:52:78:3b:1d:1c:aa:69:f5: 70:8c:82:88:1a:a1:d4:a8:4f:c4:e9:f7:14:4d:cd: 3d:a9:0d:31:d1:2d:fb:26:f9:c6:8d:17:e0:55:58: 11:0b:b0:1c:34:e7:53:be:5d:4d:19:f2:f3:1a:72: 20:91:18:c3:1f:1e:71:74:12:8b:e7:8c:9f:4f:ca: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:91:EC:F7:E7:B0:45:3C:00:D9:C2:03:DC:12:89:AA:AA:F4:AA:4A X509v3 Authority Key Identifier: keyid:73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:07:bd:6d:ce:6b:c4:0c:28:da:65:5e:42:fa:9d:66:ce:99: 23:2d:d1:0a:1a:84:ad:1e:cb:f2:88:28:2e:36:b4:a5:6b:10: 46:85:a5:2f:8a:07:ab:71:1f:8b:7d:2a:96:38:de:2a:b2:52: ee:d2:00:09:04:25:89:79:0d:21:aa:d9:07:ac:85:91:38:3e: a7:ed:7b:ee:bc:78:24:0e:68:97:34:6e:b5:64:11:67:ce:5d: 4c:7f:2e:1e:62:4e:dd:b2:d1:9d:97:ea:e6:99:b9:07:ee:c4: 26:06:fd:7a:9a:76:e2:f5:c9:0d:80:d6:9b:9a:ad:4f:c2:09: 58:78:bc:0b:6d:7d:03:17:7f:13:34:9c:9f:76:fe:15:b6:d1: a3:1d:0a:b8:8c:66:1e:43:79:d0:eb:ee:b5:00:e5:87:f2:65: 5b:56:43:4d:4d:4e:b0:38:0a:1a:2d:ad:95:99:ae:13:d1:fd: e9:07:ef:8f:a6:40:7e:46:ac:8b:fe:6d:24:9f:0d:0b:19:3c: 85:a5:8c:b8:2e:29:71:d1:89:22:4c:0f:cb:8b:3f:68:e0:63: 41:d8:df:26:2a:86:2d:87:51:9c:48:8b:a8:3a:36:28:ad:a5: 83:41:cc:6f:54:6e:7c:7c:f5:d9:72:a8:a6:85:17:56:26:4b: 4c:97:2b:d9 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIURVIgvextt9xCJCj5J4HlO1HaJekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNFNkFDOEY5NDhEMEM5N0Q5NDFGMjY1MzE2MTdDMTky MjM1MDhFNjAeFw0yNjA3MjMwODA2NTdaFw0yNjA3MjQxMTU5NTdaMDMxMTAvBgNV BAMTKEI2OTFFQ0Y3RTdCMDQ1M0MwMEQ5QzIwM0RDMTI4OUFBQUFGNEFBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+iNfkMKwDa+CcO+hD1YVTLNid f0FRs6zUiE1+nFWjCZmQfmExPvclTwUbJ0nXQrkDclBnmy7YxdNgXGxdHNVZv0Mu 9ZcHctPDdECHYOZJdHZwPKPaZT83ckZDRGMk2O4fv2Rax6k4zIzBZVpKMCFmbO+T 6O61aRjzAww0XqmYf/Is9nKSo0K2tKVDzFAG+j0IJ6cWSMRqxrtYLwSi3qqROhE0 jkDvLTGhx1tOLaGP0/WJBzEtdm5zfvBSeDsdHKpp9XCMgogaodSoT8Tp9xRNzT2p DTHRLfsm+caNF+BVWBELsBw051O+XU0Z8vMaciCRGMMfHnF0EovnjJ9PysYvAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUtpHs9+ewRTwA2cID3BKJqqr0qkowHwYDVR0j BBgwFoAUc+asj5SNDJfZQfJlMWF8GSI1COYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTC1O RVQvMC83M0U2QUM4Rjk0OEQwQzk3RDk0MUYyNjUzMTYxN0MxOTIyMzUwOEU2LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzczRTZBQzhGOTQ4RDBDOTdEOTQxRjI2NTMx NjE3QzE5MjIzNTA4RTYuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DQVJMLU5FVC8wLzczRTZBQzhG OTQ4RDBDOTdEOTQxRjI2NTMxNjE3QzE5MjIzNTA4RTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpB71t zmvEDCjaZV5C+p1mzpkjLdEKGoStHsvyiCguNrSlaxBGhaUvigercR+LfSqWON4q slLu0gAJBCWJeQ0hqtkHrIWROD6n7XvuvHgkDmiXNG61ZBFnzl1Mfy4eYk7dstGd l+rmmbkH7sQmBv16mnbi9ckNgNabmq1PwglYeLwLbX0DF38TNJyfdv4VttGjHQq4 jGYeQ3nQ6+61AOWH8mVbVkNNTU6wOAoaLa2Vma4T0f3pB++PpkB+RqyL/m0knw0L GTyFpYy4Lilx0YkiTA/Liz9o4GNB2N8mKoYth1GcSIuoOjYoraWDQcxvVG58fPXZ cqimhRdWJktMlyvZ -----END CERTIFICATE-----Generated at Fri Jul 24 01:15:26 2026 by rpki-client