$ rpki-client -vvf rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft File: 30886A5C2BBD980DCAD17065B483FDADE1588115.mft (raw, json) Hash identifier: SDBNX7jXqPYCpYoIgKq+XGaEAz2a1a8t7++p2HQoLN8= Subject key identifier: C0:3B:E5:8B:77:C8:5E:73:69:91:70:DF:26:73:97:05:33:FA:9D:6C Authority key identifier: 30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15 Certificate issuer: /CN=30886A5C2BBD980DCAD17065B483FDADE1588115 Certificate serial: 09A07594C73EA583598CFA5ACC5C96D0CA73B562 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft Manifest number: 64 Signing time: Fri 24 Jul 2026 00:42:08 +0000 Manifest this update: Fri 24 Jul 2026 00:37:08 +0000 Manifest next update: Sat 25 Jul 2026 01:41:08 +0000 Files and hashes: 1: 30886A5C2BBD980DCAD17065B483FDADE1588115.crl (hash: 6cd5Pt6Kwfnqakbx28fVVyBvfnkqPIC1iCO77W1PrOs=) 2: 323430303a353036303a3a2f33322d3634203d3e203633383933.roa (hash: BHydVbU3JrPLjHj9vIjP5kSoTesZAdHvlP38+Eg+13A=) 3: 3130332e3138302e31342e302f32332d3234203d3e203633383933.roa (hash: dIUSmyYxKhCOy30LHVb9g7/r4ZV90ZHq3KAUNhUgfNQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.crl rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a0:75:94:c7:3e:a5:83:59:8c:fa:5a:cc:5c:96:d0:ca:73:b5:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30886A5C2BBD980DCAD17065B483FDADE1588115 Validity Not Before: Jul 24 00:37:08 2026 GMT Not After : Jul 25 01:41:08 2026 GMT Subject: CN=C03BE58B77C85E73699170DF2673970533FA9D6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:75:22:62:7b:59:6e:b5:f0:93:3a:00:d2: 99:85:07:50:bc:6f:fa:ee:1b:f9:9a:cb:8d:7d:3f: f3:08:88:e4:9e:87:8f:f3:a8:96:0d:b3:dd:aa:7d: 1a:9a:24:34:85:e3:db:26:01:e1:b0:e7:9d:cd:07: 06:39:79:a3:30:1b:ad:dc:b8:32:f2:27:cc:a0:e0: 20:a5:ca:a5:c7:78:e6:bd:11:ec:77:6d:53:09:32: 5b:e8:00:b3:93:91:3f:4a:27:07:f6:11:ee:b9:3f: 03:35:8c:ae:51:d8:88:9b:0f:f9:c9:3f:1f:0a:8c: 5f:4b:cd:d3:14:75:03:37:e2:91:42:ac:35:a3:43: b1:4a:5d:70:b9:1e:1f:a9:06:9d:82:a2:8d:13:62: 1f:61:f0:3d:1b:eb:42:cc:16:14:78:14:96:39:d5: a9:a3:2a:55:24:64:f0:fb:bd:ca:14:d1:25:77:4c: 55:e3:7b:c6:3c:c6:c1:2b:33:06:78:14:de:99:88: 53:9e:72:04:24:18:fe:9d:9f:bb:c2:3b:6d:3b:3e: d0:74:35:df:7b:9f:a4:cb:18:7e:ef:66:06:e8:5b: ec:06:29:49:cf:1e:c3:90:c8:44:4c:3c:5f:d8:37: a5:9d:6f:2f:52:18:d6:10:91:1f:78:3a:eb:34:92: 86:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3B:E5:8B:77:C8:5E:73:69:91:70:DF:26:73:97:05:33:FA:9D:6C X509v3 Authority Key Identifier: keyid:30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:9f:60:ec:79:9d:05:ef:37:fd:d1:87:1f:01:83:b2:ee:a9: 74:1e:6f:f7:aa:37:03:46:04:52:4b:96:89:aa:84:a7:70:7d: 19:38:37:1f:b5:49:84:ac:1d:9e:3a:4e:b8:07:1d:4c:21:bb: 7d:af:5f:75:ce:28:36:69:79:3f:20:d7:ea:5e:d0:ba:e1:fb: 29:6e:11:1f:40:49:f2:c0:10:81:3f:fd:67:8f:56:32:65:61: 23:33:f8:86:25:b9:0c:23:2a:3b:54:e0:a4:c3:79:0a:f6:3c: 79:34:bc:af:df:c4:5e:5b:dc:9c:d0:d7:3c:24:c4:99:ff:74: 9c:2a:78:ea:38:79:ce:dc:fb:9e:85:6f:97:28:f9:c1:d8:28: 56:47:da:eb:b9:24:e2:bb:ea:b4:67:71:55:6e:f9:b0:fd:a0: 2d:ca:73:7f:12:92:40:41:bb:2b:0b:ba:50:d0:ef:c7:59:9f: 8c:63:02:d2:68:b1:b0:35:8f:fe:60:0c:93:af:c7:e2:4f:31: 7b:af:c3:02:40:94:d9:23:50:7b:17:c7:69:d9:f8:aa:c1:89: 6e:50:96:68:94:bc:37:14:ef:68:04:d3:8e:a8:44:a8:b7:14: 66:10:a7:19:84:17:3d:e4:9d:78:47:b4:75:e9:8e:e3:d8:ea: 0d:21:97:c4 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUCaB1lMc+pYNZjPpazFyW0MpztWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4ODZBNUMyQkJEOTgwRENBRDE3MDY1QjQ4M0ZEQURF MTU4ODExNTAeFw0yNjA3MjQwMDM3MDhaFw0yNjA3MjUwMTQxMDhaMDMxMTAvBgNV BAMTKEMwM0JFNThCNzdDODVFNzM2OTkxNzBERjI2NzM5NzA1MzNGQTlENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCnUiYntZbrXwkzoA0pmFB1C8 b/ruG/may419P/MIiOSeh4/zqJYNs92qfRqaJDSF49smAeGw553NBwY5eaMwG63c uDLyJ8yg4CClyqXHeOa9Eex3bVMJMlvoALOTkT9KJwf2Ee65PwM1jK5R2IibD/nJ Px8KjF9LzdMUdQM34pFCrDWjQ7FKXXC5Hh+pBp2Coo0TYh9h8D0b60LMFhR4FJY5 1amjKlUkZPD7vcoU0SV3TFXje8Y8xsErMwZ4FN6ZiFOecgQkGP6dn7vCO207PtB0 Nd97n6TLGH7vZgboW+wGKUnPHsOQyERMPF/YN6Wdby9SGNYQkR94Ous0kobVAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUwDvli3fIXnNpkXDfJnOXBTP6nWwwHwYDVR0j BBgwFoAUMIhqXCu9mA3K0XBltIP9reFYgRUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NQMTEz ODQ3MC8wLzMwODg2QTVDMkJCRDk4MERDQUQxNzA2NUI0ODNGREFERTE1ODgxMTUu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvMzA4ODZBNUMyQkJEOTgwRENBRDE3MDY1 QjQ4M0ZEQURFMTU4ODExNS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDUDExMzg0NzAvMC8zMDg4 NkE1QzJCQkQ5ODBEQ0FEMTcwNjVCNDgzRkRBREUxNTg4MTE1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA FJ9g7HmdBe83/dGHHwGDsu6pdB5v96o3A0YEUkuWiaqEp3B9GTg3H7VJhKwdnjpO uAcdTCG7fa9fdc4oNml5PyDX6l7QuuH7KW4RH0BJ8sAQgT/9Z49WMmVhIzP4hiW5 DCMqO1TgpMN5CvY8eTS8r9/EXlvcnNDXPCTEmf90nCp46jh5ztz7noVvlyj5wdgo Vkfa67kk4rvqtGdxVW75sP2gLcpzfxKSQEG7Kwu6UNDvx1mfjGMC0mixsDWP/mAM k6/H4k8xe6/DAkCU2SNQexfHadn4qsGJblCWaJS8NxTvaATTjqhEqLcUZhCnGYQX PeSdeEe0demO49jqDSGXxA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:28:09 2026 by rpki-client