$ rpki-client -vvf rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft File: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft (raw, json) Hash identifier: juH1AdsboPycXt02lP5S2WIx9MSJ3+4F63PaufeURpU= Subject key identifier: 95:FC:AC:73:E8:FB:91:20:55:83:10:A6:90:EF:B6:5C:FB:E0:94:70 Authority key identifier: 21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF Certificate issuer: /CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF Certificate serial: 5E3B81EB128DF68B89C23477F6D606F3FAA82E6E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft Manifest number: 67 Signing time: Thu 23 Jul 2026 13:22:34 +0000 Manifest this update: Thu 23 Jul 2026 13:17:34 +0000 Manifest next update: Fri 24 Jul 2026 13:54:34 +0000 Files and hashes: 1: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl (hash: WaTJxQqNWwmuqWMn6gPZ8vvM6YRztNaGaD/Hpsdj25k=) 2: 323430313a636436303a3a2f34302d3430203d3e20323134303330.roa (hash: 780V3DLt+Fe7Fs8V4ULwUWJozzo56xPXySO9+JGJ2W8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3b:81:eb:12:8d:f6:8b:89:c2:34:77:f6:d6:06:f3:fa:a8:2e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF Validity Not Before: Jul 23 13:17:34 2026 GMT Not After : Jul 24 13:54:34 2026 GMT Subject: CN=95FCAC73E8FB9120558310A690EFB65CFBE09470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:4c:a1:db:9d:f7:e1:d2:72:55:d0:01:03: 29:27:62:7b:39:46:bc:44:c9:22:95:0f:a8:74:11: f0:c5:aa:98:1e:1d:61:56:07:52:65:6d:08:36:5c: 7d:f6:23:dd:be:5c:21:e9:25:4c:bc:93:da:2c:1e: d9:4c:8a:25:fa:99:c3:c3:cc:9c:e7:3b:77:a1:4d: 06:29:01:9c:de:13:13:80:1f:68:8b:df:b1:34:00: 73:77:2d:3d:b8:30:46:9f:f5:ef:45:7d:a9:59:96: b7:e2:48:9b:86:aa:2e:a5:8d:70:5a:6d:ab:32:ac: c4:63:64:ca:2b:95:3b:16:54:bd:fc:e0:60:06:d5: 83:8a:65:ea:e2:c7:21:d2:53:bc:11:5a:8d:da:5b: 89:ae:de:e6:0f:b7:d3:b4:e1:70:6e:a7:ee:be:50: 46:3a:7a:43:79:11:6a:53:df:eb:d8:02:5a:e6:85: 83:a0:7b:fe:56:53:f7:38:9d:90:b3:84:bb:e3:a9: 52:02:37:ca:21:4a:1b:15:34:a8:08:f6:be:e6:35: cb:4c:0c:dc:75:bc:3f:73:75:1c:27:63:45:cd:af: 88:5c:57:77:10:86:d1:a9:54:b9:74:1d:c3:23:c7: 27:73:ca:24:8c:de:ab:96:fd:e6:eb:05:4c:46:2b: 60:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FC:AC:73:E8:FB:91:20:55:83:10:A6:90:EF:B6:5C:FB:E0:94:70 X509v3 Authority Key Identifier: keyid:21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6f:b5:bd:f3:ae:03:f0:b7:08:b6:f5:c0:40:fc:07:0a:3a: 9e:c2:e2:2f:f6:a7:90:4a:50:56:b0:bf:df:79:50:e2:b5:15: 33:19:7f:de:6c:66:b3:8a:d0:1a:4f:f7:14:d1:fd:1b:bc:c6: c0:32:3b:19:fd:95:ec:f0:e9:2f:ba:e3:20:7d:c1:f7:a2:90: 44:05:68:6e:e2:9d:6d:67:00:89:e1:79:23:1b:0b:df:03:32: fe:48:4e:27:95:81:64:6d:cb:56:d1:9e:ee:f7:e2:69:00:0f: de:36:db:67:1e:3b:e2:5f:93:1a:c5:8b:fa:94:d1:7d:d4:9d: 15:9e:0c:99:8d:87:ed:6c:a3:97:6e:4f:f0:a1:79:7f:a9:df: 18:f5:69:b2:a6:16:b1:39:97:34:89:a7:23:ca:9c:cc:4e:f4: 7f:11:d0:eb:f1:0d:55:d8:36:4c:28:02:00:91:d2:c7:c4:6f: 3f:6f:eb:57:6b:23:5e:0f:ad:0f:51:fa:a7:a4:5d:a3:69:9c: ec:d1:52:79:65:22:99:81:0b:a3:c8:f5:fd:bc:1c:7f:e7:74: 13:45:55:fa:54:c7:55:4c:2a:46:cf:b8:10:a5:29:1c:91:8b: 7d:5f:6a:35:fc:5e:f1:83:8c:6b:06:ee:78:83:7b:11:3e:b5: 67:92:f6:a3 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUXjuB6xKN9ouJwjR39tYG8/qoLm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5 NDlDRDVBRjAeFw0yNjA3MjMxMzE3MzRaFw0yNjA3MjQxMzU0MzRaMDMxMTAvBgNV BAMTKDk1RkNBQzczRThGQjkxMjA1NTgzMTBBNjkwRUZCNjVDRkJFMDk0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfkyh25334dJyVdABAyknYns5 RrxEySKVD6h0EfDFqpgeHWFWB1JlbQg2XH32I92+XCHpJUy8k9osHtlMiiX6mcPD zJznO3ehTQYpAZzeExOAH2iL37E0AHN3LT24MEaf9e9FfalZlrfiSJuGqi6ljXBa basyrMRjZMorlTsWVL384GAG1YOKZerixyHSU7wRWo3aW4mu3uYPt9O04XBup+6+ UEY6ekN5EWpT3+vYAlrmhYOge/5WU/c4nZCzhLvjqVICN8ohShsVNKgI9r7mNctM DNx1vD9zdRwnY0XNr4hcV3cQhtGpVLl0HcMjxydzyiSM3quW/ebrBUxGK2BJAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUlfysc+j7kSBVgxCmkO+2XPvglHAwHwYDVR0j BBgwFoAUIdv9GSESH3MMYUwN5iEs1pSc1a8wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE LzAvMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMURCRkQxOTIxMTIxRjczMEM2MTRDMERFNjIx MkNENjk0OUNENUFGLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzAvMjFEQkZEMTkyMTEy MUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF9vtb3zrgPw twi29cBA/AcKOp7C4i/2p5BKUFawv995UOK1FTMZf95sZrOK0BpP9xTR/Ru8xsAy Oxn9lezw6S+64yB9wfeikEQFaG7inW1nAInheSMbC98DMv5ITieVgWRty1bRnu73 4mkAD94222ceO+JfkxrFi/qU0X3UnRWeDJmNh+1so5duT/CheX+p3xj1abKmFrE5 lzSJpyPKnMxO9H8R0OvxDVXYNkwoAgCR0sfEbz9v61drI14PrQ9R+qekXaNpnOzR UnllIpmBC6PI9f28HH/ndBNFVfpUx1VMKkbPuBClKRyRi31fajX8XvGDjGsG7niD exE+tWeS9qM= -----END CERTIFICATE-----Generated at Fri Jul 24 01:11:42 2026 by rpki-client