$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft File: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft (raw, json) Hash identifier: MBkaSKzIG57FTnfFt7/3kRXWwX+7EgYNuCXhPIKUw0Y= Subject key identifier: EF:C2:10:B7:F8:0B:27:53:9D:B5:F8:27:6C:12:4D:30:B2:D2:0B:41 Authority key identifier: CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD Certificate issuer: /CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD Certificate serial: 1B2676A8F6F00B9ED7CE45F082A5025E430C32B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft Manifest number: 66 Signing time: Fri 24 Jul 2026 00:37:07 +0000 Manifest this update: Fri 24 Jul 2026 00:32:07 +0000 Manifest next update: Sat 25 Jul 2026 02:30:07 +0000 Files and hashes: 1: 3130332e3132332e3138392e302f32342d3234203d3e2039393234.roa (hash: ehfoOrBXE/RYfQPRqQV54VXyN1X6HRTFxmEyqkWRtOI=) 2: 3130332e3132332e3138382e302f32342d3234203d3e203138303432.roa (hash: VGG3iALCYmsIo1frTwJ57vcG6Z53Cw4xXzO8I+lKQrc=) 3: 3130332e3132332e3139302e302f32342d3234203d3e2039393234.roa (hash: MkYfWxcvdtrJJbnLts1+66GKlU7GZ8ty9L0jiRzo53o=) 4: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl (hash: fMWMqGObgDR5K09lrDmgbnyNn/zBzQQ9lAxDNRP44Yo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:26:76:a8:f6:f0:0b:9e:d7:ce:45:f0:82:a5:02:5e:43:0c:32:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD Validity Not Before: Jul 24 00:32:07 2026 GMT Not After : Jul 25 02:30:07 2026 GMT Subject: CN=EFC210B7F80B27539DB5F8276C124D30B2D20B41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:1f:9e:39:29:60:25:32:4e:ab:b7:17:b5: f6:3c:d5:4f:c1:c3:be:9d:45:d7:9e:4d:fc:09:f0: 3f:c0:c2:21:f6:3f:b5:78:f7:df:3e:f6:b4:a0:51: 63:e1:b9:63:3c:16:80:0d:f8:32:58:0e:d9:1e:b8: ae:26:ad:15:b8:b0:e3:5e:02:81:03:91:e7:17:04: c1:a5:cf:d4:8c:dc:ec:89:f5:b1:e1:38:7c:8d:87: 27:0c:ab:2c:96:1a:99:c4:66:e9:3e:0c:95:8a:16: 4e:0d:79:a5:93:9b:3b:ff:2c:7d:93:61:82:8e:ba: 80:66:65:60:87:2a:ce:1f:6f:ee:07:cb:5c:c2:ef: 70:9d:55:19:0a:7d:1d:da:2c:d0:0d:76:33:0e:ff: 1b:4e:9e:1e:cc:e2:f0:04:7b:86:5b:1a:3f:7a:4f: ce:26:ba:89:fb:cb:6d:b1:73:f8:61:be:92:81:30: 7a:1a:92:eb:6f:34:d6:27:10:55:de:63:13:53:3c: b5:14:2f:76:90:14:67:d5:1f:60:20:7c:a7:8a:ce: fc:2b:47:52:5e:7d:70:f9:6a:6c:69:52:ad:7c:39: d9:9a:03:12:de:35:32:d8:c6:95:75:63:8b:0c:f4: c8:80:3a:b0:56:e6:39:05:bf:ba:49:72:55:9b:5f: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C2:10:B7:F8:0B:27:53:9D:B5:F8:27:6C:12:4D:30:B2:D2:0B:41 X509v3 Authority Key Identifier: keyid:CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:55:8c:ca:81:8b:aa:c5:53:0e:a3:02:09:56:a2:8e:b6:42: 86:49:dd:72:93:8a:43:04:35:f1:9b:be:8e:c8:ad:ff:91:17: 71:30:67:01:b7:21:c4:03:d6:4d:e1:6b:d8:25:bc:b8:c1:b8: d9:34:5a:11:4a:27:60:1a:00:d2:c4:aa:fc:32:6b:f9:f5:ca: b6:63:68:fc:4a:9f:39:2f:54:d8:02:80:9d:2c:a8:0d:04:7d: 3f:37:b5:9f:53:69:b5:b8:d6:af:1e:ed:fd:03:ce:c9:33:41: 25:fd:18:fe:66:ab:25:a8:c1:00:c9:9a:9b:a0:e6:94:61:db: 65:92:68:4b:ed:5c:61:7d:37:93:d2:e1:a8:80:14:ee:60:fd: 19:28:f3:16:bc:cf:d4:a5:b2:ba:77:b0:c8:d8:d3:a5:13:98: 0e:ea:2d:6e:a7:78:61:61:9c:bc:53:3f:fa:a4:6c:be:a9:ba: fc:52:93:8c:c1:31:80:86:bf:17:89:7c:b0:c2:5d:b5:95:6b: 09:0f:8a:a3:fb:36:07:f5:0c:27:e2:dc:dd:eb:7e:16:a6:36: 49:fd:1c:dc:80:67:36:4b:55:b1:1c:31:14:7b:c8:37:a8:17: 77:31:b3:fb:09:44:d3:4c:28:dd:40:b1:bf:1f:85:79:9d:0d: 86:67:47:9e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGyZ2qPbwC57XzkXwgqUCXkMMMrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1QTgxMDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4 RUVBQ0NERDAeFw0yNjA3MjQwMDMyMDdaFw0yNjA3MjUwMjMwMDdaMDMxMTAvBgNV BAMTKEVGQzIxMEI3RjgwQjI3NTM5REI1RjgyNzZDMTI0RDMwQjJEMjBCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PB+eOSlgJTJOq7cXtfY81U/B w76dRdeeTfwJ8D/AwiH2P7V4998+9rSgUWPhuWM8FoAN+DJYDtkeuK4mrRW4sONe AoEDkecXBMGlz9SM3OyJ9bHhOHyNhycMqyyWGpnEZuk+DJWKFk4NeaWTmzv/LH2T YYKOuoBmZWCHKs4fb+4Hy1zC73CdVRkKfR3aLNANdjMO/xtOnh7M4vAEe4ZbGj96 T84muon7y22xc/hhvpKBMHoakutvNNYnEFXeYxNTPLUUL3aQFGfVH2AgfKeKzvwr R1JefXD5amxpUq18OdmaAxLeNTLYxpV1Y4sM9MiAOrBW5jkFv7pJclWbX2UDAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU78IQt/gLJ1OdtfgnbBJNMLLSC0EwHwYDVR0j BBgwFoAUzlqBALoJlKK4B/X0+3QcUo7qzN0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFM SUZFLzAvQ0U1QTgxMDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4RUVBQ0NERC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9DRTVBODEwMEJBMDk5NEEyQjgwN0Y1RjRG Qjc0MUM1MjhFRUFDQ0RELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFMSUZFLzAvQ0U1QTgx MDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4RUVBQ0NERC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFJV jMqBi6rFUw6jAglWoo62QoZJ3XKTikMENfGbvo7Irf+RF3EwZwG3IcQD1k3ha9gl vLjBuNk0WhFKJ2AaANLEqvwya/n1yrZjaPxKnzkvVNgCgJ0sqA0EfT83tZ9TabW4 1q8e7f0DzskzQSX9GP5mqyWowQDJmpug5pRh22WSaEvtXGF9N5PS4aiAFO5g/Rko 8xa8z9Slsrp3sMjY06UTmA7qLW6neGFhnLxTP/qkbL6puvxSk4zBMYCGvxeJfLDC XbWVawkPiqP7Ngf1DCfi3N3rfhamNkn9HNyAZzZLVbEcMRR7yDeoF3cxs/sJRNNM KN1Asb8fhXmdDYZnR54= -----END CERTIFICATE-----Generated at Fri Jul 24 07:26:25 2026 by rpki-client