$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft File: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft (raw, json) Hash identifier: FPZ9SgKX6rs1AXp+z1kvHl0EvbsV2QeSrjHZc1kte3M= Subject key identifier: E8:AC:75:79:DD:84:EA:CF:52:23:84:55:C8:D0:8F:FE:CC:74:A1:A9 Authority key identifier: 28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07 Certificate issuer: /CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407 Certificate serial: 24BEDA6C2270D8986391EFAEB301EA401BA56CD0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft Manifest number: 66 Signing time: Fri 24 Jul 2026 10:08:13 +0000 Manifest this update: Fri 24 Jul 2026 10:03:13 +0000 Manifest next update: Sat 25 Jul 2026 12:17:13 +0000 Files and hashes: 1: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl (hash: oxrdnXYO2VMpZ3keVW1KjPPGWfpWLQGDU0VbAGfnXkg=) 2: 3136302e3138372e3139382e302f32332d3234203d3e20313532363135.roa (hash: I6RgBeSwuI+mSenPcIlVAxSTnNAaaE4/xzzLMyb2FH0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:be:da:6c:22:70:d8:98:63:91:ef:ae:b3:01:ea:40:1b:a5:6c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407 Validity Not Before: Jul 24 10:03:13 2026 GMT Not After : Jul 25 12:17:13 2026 GMT Subject: CN=E8AC7579DD84EACF52238455C8D08FFECC74A1A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:e0:3c:1e:c6:a4:38:55:83:be:40:c2:23: e9:14:43:9b:c5:77:d8:6a:44:81:83:e8:5d:3a:1a: 5a:41:fa:ac:fa:ab:14:4f:d2:fd:57:9f:e9:9b:f2: ad:87:a5:67:ef:6f:45:35:6e:d4:69:81:06:c0:01: 3f:0b:92:db:66:a3:6d:30:05:01:49:30:80:54:d0: cf:cb:14:41:0e:97:78:c4:50:ee:39:d4:b0:c5:df: 5a:45:38:6c:76:2b:15:56:3a:f3:20:53:94:4e:1f: 60:c3:b2:a5:cc:30:c5:d3:a2:77:b9:07:bf:13:79: 61:28:e6:f6:e8:28:e8:86:bc:d3:c5:04:70:26:39: 23:96:6d:3d:46:21:6f:1b:71:61:5b:21:85:23:e1: d1:a2:4f:45:f9:2f:d8:d7:2e:2c:6a:28:45:29:90: d5:12:71:fe:22:fd:02:c9:c2:1b:db:6f:81:c4:a8: db:6d:2f:0a:95:6b:dd:62:28:26:8e:7a:25:4b:f4: 8f:d3:68:f7:a3:d5:6e:ef:e7:3f:d2:b7:01:d6:e9: d9:7d:10:02:09:d1:9a:ba:d7:39:13:f8:08:4a:51: c3:01:6e:1c:9b:49:d3:fd:1e:42:3b:fa:2e:88:96: 08:ca:2e:d2:c6:2b:2b:5c:ad:3f:e9:92:99:a2:37: 49:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AC:75:79:DD:84:EA:CF:52:23:84:55:C8:D0:8F:FE:CC:74:A1:A9 X509v3 Authority Key Identifier: keyid:28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:41:02:b1:1a:3e:fd:ba:a5:b4:99:8f:10:4d:a7:01:4e:3d: a0:2d:59:eb:b0:bd:45:3b:e4:c9:54:b5:a0:52:5a:25:2a:83: a9:7d:44:c5:7b:bc:f4:14:a6:ad:da:8e:65:b0:7d:bd:77:dd: fc:f4:6f:1d:1d:00:03:f1:44:53:65:f9:cc:de:87:6d:38:c2: c6:e9:b8:e1:49:3d:0c:3d:f3:3b:f7:b9:20:89:e8:c5:6a:ab: fc:95:26:39:ee:ba:da:7e:1f:3c:8a:e6:41:7b:d3:45:17:56: 49:f1:7e:ca:9d:05:7c:cd:8d:7c:cd:e0:04:92:f8:02:a4:6f: 95:b4:24:c3:c7:26:5d:81:e9:af:0f:06:3d:de:c5:2b:cb:d8: c5:7f:63:4a:ce:75:3c:11:2a:96:ca:b2:96:12:c9:dc:b4:21: 13:a2:7d:03:68:64:d5:c6:cb:7e:86:98:f2:b2:6c:49:98:5c: 03:17:d7:9e:15:88:d6:60:83:16:1f:be:e6:8b:5c:8c:32:64: e1:99:f4:0a:94:dd:59:cc:65:5f:60:95:79:ab:5c:93:a6:2f: fc:a4:65:26:8e:ad:4f:2e:c4:77:cb:94:48:c5:75:85:c5:da: 5c:df:19:d7:6f:05:91:05:fd:a8:2e:69:b4:7f:bf:d2:25:97: b8:c4:b1:5b -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUJL7abCJw2Jhjke+uswHqQBulbNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMUZEMDNDOEIwNDBBOTg3NEE5MEQ0NjU0MzIyQUNE RkNBMzQwNzAeFw0yNjA3MjQxMDAzMTNaFw0yNjA3MjUxMjE3MTNaMDMxMTAvBgNV BAMTKEU4QUM3NTc5REQ4NEVBQ0Y1MjIzODQ1NUM4RDA4RkZFQ0M3NEExQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJtuA8HsakOFWDvkDCI+kUQ5vF d9hqRIGD6F06GlpB+qz6qxRP0v1Xn+mb8q2HpWfvb0U1btRpgQbAAT8Lkttmo20w BQFJMIBU0M/LFEEOl3jEUO451LDF31pFOGx2KxVWOvMgU5ROH2DDsqXMMMXTone5 B78TeWEo5vboKOiGvNPFBHAmOSOWbT1GIW8bcWFbIYUj4dGiT0X5L9jXLixqKEUp kNUScf4i/QLJwhvbb4HEqNttLwqVa91iKCaOeiVL9I/TaPej1W7v5z/StwHW6dl9 EAIJ0Zq61zkT+AhKUcMBbhybSdP9HkI7+i6IlgjKLtLGKytcrT/pkpmiN0k7AgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU6Kx1ed2E6s9SI4RVyNCP/sx0oakwHwYDVR0j BBgwFoAUKOH9A8iwQKmHSpDUZUMirN/KNAcwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVTU1Z VEVDSC8xLzI4RTFGRDAzQzhCMDQwQTk4NzRBOTBENDY1NDMyMkFDREZDQTM0MDcu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzAvMjhFMUZEMDNDOEIwNDBBOTg3NEE5MEQ0 NjU0MzIyQUNERkNBMzQwNy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NIVU1NWVRFQ0gvMS8yOEUx RkQwM0M4QjA0MEE5ODc0QTkwRDQ2NTQzMjJBQ0RGQ0EzNDA3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA dkECsRo+/bqltJmPEE2nAU49oC1Z67C9RTvkyVS1oFJaJSqDqX1ExXu89BSmrdqO ZbB9vXfd/PRvHR0AA/FEU2X5zN6HbTjCxum44Uk9DD3zO/e5IInoxWqr/JUmOe66 2n4fPIrmQXvTRRdWSfF+yp0FfM2NfM3gBJL4AqRvlbQkw8cmXYHprw8GPd7FK8vY xX9jSs51PBEqlsqylhLJ3LQhE6J9A2hk1cbLfoaY8rJsSZhcAxfXnhWI1mCDFh++ 5otcjDJk4Zn0CpTdWcxlX2CVeatck6Yv/KRlJo6tTy7Ed8uUSMV1hcXaXN8Z128F kQX9qC5ptH+/0iWXuMSxWw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:14:47 2026 by rpki-client