$ rpki-client -vvf rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft File: 3BFFB675B95FCD73A993F3228774251092970E7B.mft (raw, json) Hash identifier: ql3FBN4BbtF0Kr7aHQAG/qn01CT+TBuCyZu/Qm3uh8s= Subject key identifier: 2B:67:75:F4:53:BB:0F:66:49:E4:6A:4D:30:88:E1:94:BE:8E:62:16 Authority key identifier: 3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B Certificate issuer: /CN=3BFFB675B95FCD73A993F3228774251092970E7B Certificate serial: 1F34CE8B6F1676AA42777A44C04AEEA8A0A94E60 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft Manifest number: 66 Signing time: Fri 24 Jul 2026 01:52:17 +0000 Manifest this update: Fri 24 Jul 2026 01:47:17 +0000 Manifest next update: Sat 25 Jul 2026 04:22:17 +0000 Files and hashes: 1: 3BFFB675B95FCD73A993F3228774251092970E7B.crl (hash: ip1JjghUeH26NKY2VB6PIB8tVdyLlJpU+wTChPJLhdw=) 2: 3136302e32352e3130342e302f32342d3234203d3e20323038323233.roa (hash: /9BFFQzw0cKcAkYyhzrX90hfsn9yx3G5YlAAOT7vnaE=) 3: 3136302e32352e3130352e302f32342d3234203d3e20323038323233.roa (hash: YdBvwjNi4bXGDm/SLY5b1QLMeyyL4E2okhg4V5ia0DI=) 4: 3136302e32352e3130342e302f32332d3233203d3e20323038323233.roa (hash: 76EIdBl2ALW8D1iaU6elJyjtVPcLevkpSbCfYsK03xY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:34:ce:8b:6f:16:76:aa:42:77:7a:44:c0:4a:ee:a8:a0:a9:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BFFB675B95FCD73A993F3228774251092970E7B Validity Not Before: Jul 24 01:47:17 2026 GMT Not After : Jul 25 04:22:17 2026 GMT Subject: CN=2B6775F453BB0F6649E46A4D3088E194BE8E6216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:74:53:ca:7e:04:4a:da:2b:7c:b8:73:96: 88:21:7a:ba:b9:c8:1f:a2:08:59:b2:01:39:59:81: 07:73:20:59:6a:d8:7a:05:c2:87:09:a6:ac:65:fd: f4:8a:bb:fd:32:c3:01:13:b5:d7:83:b7:11:67:c7: 86:63:5c:ec:03:37:82:65:eb:28:71:0c:1c:49:9a: 04:4b:ef:7d:43:1c:4e:d8:07:45:a2:d7:92:75:a6: 99:7b:5a:7c:5f:0d:d9:c9:cc:c5:0f:c8:10:ef:64: 4a:12:17:ae:36:f3:25:63:46:5c:c4:8d:16:b6:c2: b0:4b:23:9b:c7:d1:0c:e4:09:db:01:79:5d:63:a2: 31:77:6f:9e:94:ec:3f:e2:82:8b:4d:5a:b5:4f:65: 60:06:e8:87:87:55:9a:c6:62:ed:5a:24:d1:e4:b8: f9:69:28:0f:bc:5c:59:0a:85:13:12:1f:b7:d5:d7: 43:d2:0a:14:07:a8:ab:10:fe:72:71:9a:73:d0:75: c2:89:6f:58:34:e4:0a:cc:be:c8:e9:f0:18:82:a3: 7b:c0:1f:06:41:a7:e0:2a:b1:fb:a8:7e:cc:7d:bf: 93:85:9f:4d:69:81:e8:8b:ff:c4:b3:98:5d:23:b3: 1b:5e:c0:df:c7:7e:3b:28:c0:1a:2f:ad:aa:b7:67: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:67:75:F4:53:BB:0F:66:49:E4:6A:4D:30:88:E1:94:BE:8E:62:16 X509v3 Authority Key Identifier: keyid:3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c4:aa:87:8b:ec:9b:43:06:97:97:00:1f:ce:33:b2:ec:37: 82:9e:a4:cc:ef:c3:8e:0a:0a:5c:18:39:c6:f9:dd:e4:cd:0b: fe:0a:d0:ac:f1:f5:82:d8:5d:52:47:c5:8e:bc:bc:c3:4f:8a: c6:9d:8e:6f:9e:fd:1c:7d:af:1c:52:23:4b:66:3d:28:14:18: 53:be:ab:66:dd:a3:71:60:06:e8:0b:9a:f2:57:74:a4:ab:45: a3:d2:9e:6a:55:9f:ce:45:62:92:4d:71:5d:f4:33:ea:0e:87: bd:98:22:02:77:d4:3d:68:8d:ce:c2:7c:94:b9:1b:47:5f:d9: 53:b4:61:61:6e:90:8d:4b:ac:99:e6:d9:d9:fb:bf:ac:5c:f6: 91:12:c3:c5:5b:d2:75:13:20:a6:ff:0e:f7:58:3b:5e:38:a9: 52:fd:4a:d7:d5:7b:8f:8e:12:d5:d7:95:54:74:aa:c0:4c:53: 86:f7:c8:e1:4a:f7:89:f4:b1:bf:48:8d:5f:d4:a3:bc:0a:24: 74:12:21:59:35:32:4f:e1:dc:1c:d7:79:2d:77:bc:cf:5b:9d: b9:86:c0:f1:5c:32:79:40:46:72:20:88:ab:08:03:36:86:0f: 14:56:ff:09:a6:49:04:bb:c9:19:68:3a:f0:3c:e5:70:61:92: 9b:9c:a0:bf -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUHzTOi28WdqpCd3pEwEruqKCpTmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3NDI1MTA5 Mjk3MEU3QjAeFw0yNjA3MjQwMTQ3MTdaFw0yNjA3MjUwNDIyMTdaMDMxMTAvBgNV BAMTKDJCNjc3NUY0NTNCQjBGNjY0OUU0NkE0RDMwODhFMTk0QkU4RTYyMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrf3RTyn4EStorfLhzlogherq5 yB+iCFmyATlZgQdzIFlq2HoFwocJpqxl/fSKu/0ywwETtdeDtxFnx4ZjXOwDN4Jl 6yhxDBxJmgRL731DHE7YB0Wi15J1ppl7WnxfDdnJzMUPyBDvZEoSF6428yVjRlzE jRa2wrBLI5vH0QzkCdsBeV1jojF3b56U7D/igotNWrVPZWAG6IeHVZrGYu1aJNHk uPlpKA+8XFkKhRMSH7fV10PSChQHqKsQ/nJxmnPQdcKJb1g05ArMvsjp8BiCo3vA HwZBp+Aqsfuofsx9v5OFn01pgeiL/8SzmF0jsxtewN/HfjsowBovraq3Zws5AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUK2d19FO7D2ZJ5GpNMIjhlL6OYhYwHwYDVR0j BBgwFoAUO/+2dblfzXOpk/Mih3QlEJKXDnswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NFVEVD SC8xLzNCRkZCNjc1Qjk1RkNENzNBOTkzRjMyMjg3NzQyNTEwOTI5NzBFN0IuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzAvM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3 NDI1MTA5Mjk3MEU3Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDRVRFQ0gvMS8zQkZGQjY3NUI5 NUZDRDczQTk5M0YzMjI4Nzc0MjUxMDkyOTcwRTdCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMSqh4vs m0MGl5cAH84zsuw3gp6kzO/DjgoKXBg5xvnd5M0L/grQrPH1gthdUkfFjry8w0+K xp2Ob579HH2vHFIjS2Y9KBQYU76rZt2jcWAG6Aua8ld0pKtFo9KealWfzkVikk1x XfQz6g6HvZgiAnfUPWiNzsJ8lLkbR1/ZU7RhYW6QjUusmebZ2fu/rFz2kRLDxVvS dRMgpv8O91g7XjipUv1K19V7j44S1deVVHSqwExThvfI4Ur3ifSxv0iNX9SjvAok dBIhWTUyT+HcHNd5LXe8z1uduYbA8VwyeUBGciCIqwgDNoYPFFb/CaZJBLvJGWg6 8DzlcGGSm5ygvw== -----END CERTIFICATE-----Generated at Fri Jul 24 13:34:28 2026 by rpki-client