$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft File: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft (raw, json) Hash identifier: PDXgk/lrPW1SpsmKd8QOrV73d0V+wHb97Zz2IN3o9nA= Subject key identifier: 9E:72:29:64:02:43:98:51:3F:67:15:20:62:82:F9:5D:28:43:22:40 Authority key identifier: 80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D Certificate issuer: /CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Certificate serial: 203FE32486C3A3D6B6DEC9A4E4370F5C74719C2C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft Manifest number: 66 Signing time: Thu 23 Jul 2026 23:06:55 +0000 Manifest this update: Thu 23 Jul 2026 23:01:55 +0000 Manifest next update: Sat 25 Jul 2026 01:17:55 +0000 Files and hashes: 1: 3130332e3132362e3136342e302f32322d3234203d3e20313331313433.roa (hash: GE6WCLDpaYk350arhm6T0hTObeMU3HA8Pi8MilsnVwk=) 2: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl (hash: 2wh25+w983MLRLBTfu25SNopmLUj/9w9A7DYemUuUCM=) 3: 323430353a333330303a3a2f33322d3936203d3e20313331313433.roa (hash: ZKiaer8NjI3ngd1EbZw69ZFOR2ZlmwyGwjPK8gzDQck=) 4: 3137352e3138342e3234302e302f32312d3234203d3e20313331313433.roa (hash: 0QQUBFrsQpXXTYt4aIh8/MbRTgI4V9RhZAxoH9bVt18=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3f:e3:24:86:c3:a3:d6:b6:de:c9:a4:e4:37:0f:5c:74:71:9c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Validity Not Before: Jul 23 23:01:55 2026 GMT Not After : Jul 25 01:17:55 2026 GMT Subject: CN=9E722964024398513F6715206282F95D28432240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:45:f2:63:10:0f:d6:4c:f1:38:22:ba:38: 44:55:b9:c0:05:c1:68:2b:bb:c9:66:71:3f:dd:0b: 07:0e:9e:01:82:7a:24:ff:cc:2a:96:2d:e5:1b:a9: 31:74:ed:69:c3:18:50:96:31:85:e6:9b:eb:13:cf: 93:dc:6f:3a:36:6c:a7:be:c3:53:04:c7:2f:54:ee: 48:37:56:0d:4f:67:89:80:ec:9d:7b:43:9a:fe:6f: 33:1c:f5:d1:06:17:fc:57:92:53:d8:b7:64:b7:99: 30:cf:da:82:18:3b:dc:5a:31:23:71:7a:08:1f:b6: 8f:3e:7f:c6:cc:c9:87:2d:f0:c0:fb:b8:6f:29:94: b2:46:77:cd:58:d7:02:06:a0:96:23:15:a7:fc:b1: 60:ba:72:45:88:2c:8e:ba:93:c0:5f:39:b9:26:76: 73:04:c8:29:e5:da:28:7e:03:a5:be:b2:d1:07:78: ce:35:f4:49:d4:66:34:5b:8c:a0:94:5b:f1:4e:c8: f9:ce:5c:8e:0e:69:f5:81:14:00:dd:af:3e:d7:eb: e1:29:bf:2b:07:a0:7c:95:5f:21:59:8d:8f:ff:38: 54:13:3e:29:3b:c9:06:43:a4:22:bc:67:43:2b:98: 78:5c:2a:25:cf:cc:5c:4c:76:4e:7a:27:d2:3b:45: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:72:29:64:02:43:98:51:3F:67:15:20:62:82:F9:5D:28:43:22:40 X509v3 Authority Key Identifier: keyid:80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:41:b4:58:c7:24:91:3a:97:61:1e:d0:30:76:ef:94:b2:c9: a2:62:ab:ba:cb:62:fd:86:c3:7a:1b:59:7c:19:a6:9f:29:2d: 62:da:79:19:8e:8c:9c:34:6c:8a:e7:68:84:80:cc:0b:b5:f6: 68:87:ce:8a:2c:c7:04:98:9a:12:f7:00:ac:8e:33:aa:e8:1b: 63:7f:25:64:7b:5f:37:d2:52:9a:47:a3:81:04:a2:28:05:4d: ed:9e:c9:89:db:9a:81:21:a8:f5:0d:cf:81:b0:00:2a:f7:13: 28:0a:77:a4:26:51:3b:47:3b:b5:52:8b:b2:df:f9:97:36:b5: 6e:0e:f4:df:1e:30:95:b4:4b:b3:39:17:c8:c4:b7:a4:f5:b3: 55:c8:ba:99:96:83:73:62:4f:5b:2f:ec:4a:67:5c:9c:11:16: 42:72:06:42:08:e6:01:af:7f:2b:ed:05:25:8e:50:c2:a7:d8: e7:0e:f0:4c:88:75:e1:c4:a8:8a:c0:50:7b:60:be:83:55:30: d7:9f:58:05:a2:70:6a:bd:9a:28:be:fe:15:ae:46:78:5a:1a: 3b:d2:55:17:d5:8e:43:8a:a5:bb:c6:e2:aa:0f:75:28:6e:21: cb:6b:6d:0b:bf:8d:cb:52:68:cb:4a:ad:25:5b:cc:c2:d8:73: fb:3d:0b:5c -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUID/jJIbDo9a23smk5DcPXHRxnCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1RUEzMTRDQzlB ODY3N0YyRDAeFw0yNjA3MjMyMzAxNTVaFw0yNjA3MjUwMTE3NTVaMDMxMTAvBgNV BAMTKDlFNzIyOTY0MDI0Mzk4NTEzRjY3MTUyMDYyODJGOTVEMjg0MzIyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOUXyYxAP1kzxOCK6OERVucAF wWgru8lmcT/dCwcOngGCeiT/zCqWLeUbqTF07WnDGFCWMYXmm+sTz5Pcbzo2bKe+ w1MExy9U7kg3Vg1PZ4mA7J17Q5r+bzMc9dEGF/xXklPYt2S3mTDP2oIYO9xaMSNx eggfto8+f8bMyYct8MD7uG8plLJGd81Y1wIGoJYjFaf8sWC6ckWILI66k8BfObkm dnMEyCnl2ih+A6W+stEHeM419EnUZjRbjKCUW/FOyPnOXI4OafWBFADdrz7X6+Ep vysHoHyVXyFZjY//OFQTPik7yQZDpCK8Z0MrmHhcKiXPzFxMdk56J9I7RXVFAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUnnIpZAJDmFE/ZxUgYoL5XShDIkAwHwYDVR0j BBgwFoAUgJnfwM/IPF3f2Qyl6jFMyahnfy0wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU UlVTVC8wLzgwOTlERkMwQ0ZDODNDNURERkQ5MENBNUVBMzE0Q0M5QTg2NzdGMkQu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1 RUEzMTRDQzlBODY3N0YyRC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NISU5BVFJVU1QvMC84MDk5 REZDMENGQzgzQzVEREZEOTBDQTVFQTMxNENDOUE4Njc3RjJELm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA SEG0WMckkTqXYR7QMHbvlLLJomKrusti/YbDehtZfBmmnyktYtp5GY6MnDRsiudo hIDMC7X2aIfOiizHBJiaEvcArI4zqugbY38lZHtfN9JSmkejgQSiKAVN7Z7Jidua gSGo9Q3PgbAAKvcTKAp3pCZRO0c7tVKLst/5lza1bg703x4wlbRLszkXyMS3pPWz Vci6mZaDc2JPWy/sSmdcnBEWQnIGQgjmAa9/K+0FJY5QwqfY5w7wTIh14cSoisBQ e2C+g1Uw159YBaJwar2aKL7+Fa5GeFoaO9JVF9WOQ4qlu8biqg91KG4hy2ttC7+N y1Joy0qtJVvMwthz+z0LXA== -----END CERTIFICATE-----Generated at Fri Jul 24 07:28:12 2026 by rpki-client