$ rpki-client -vvf rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft File: 3D576C4841082805B3CDBD7337F3963A8833174B.mft (raw, json) Hash identifier: 1xiJgGCRmgsblxjElgIA77QrX/ozc21+xC+octzU6DQ= Subject key identifier: 5A:35:59:FF:72:5C:8A:E1:27:64:C7:9D:3B:03:1B:E4:A4:18:DF:D4 Authority key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B Certificate issuer: /CN=3D576C4841082805B3CDBD7337F3963A8833174B Certificate serial: 233717DAA0AD71812B15DA6E6A728BD19799C08C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft Manifest number: 6A Signing time: Thu 23 Jul 2026 22:06:50 +0000 Manifest this update: Thu 23 Jul 2026 22:01:50 +0000 Manifest next update: Sat 25 Jul 2026 01:06:50 +0000 Files and hashes: 1: 3130332e3131392e3231332e302f32342d3234203d3e203136353039.roa (hash: PL2cz2Hbk/JdNHMN06li8HzqoQzLhVGaxZWqRcHi6hM=) 2: 3130332e3131392e3231332e302f32342d3234203d3e20313331363239.roa (hash: EJjmwH6YAXPBMwmijz6eL3wQvRP4K1M4tTn06rZJrIA=) 3: 3130332e3131392e3231352e302f32342d3234203d3e20313339363337.roa (hash: jPTm5d5SYsezMtn+BRkYU2/hKNSbQfuFpXU/01PcOeQ=) 4: 3130332e3131392e3231322e302f32322d3234203d3e20313331363239.roa (hash: eXsmebarUaems23bSj2ZcVD8dLS2085WCpxoaq88x4M=) 5: 3130332e3131392e3231332e302f32342d3234203d3e203134363138.roa (hash: sldyxDcFqyW0yrBmnmv5iDOduZFppPbQvxaSJnOI1Vw=) 6: 3130332e3131392e3231342e302f32342d3234203d3e20313333333735.roa (hash: /UvybhcLKT1KK1desdUWoCsOTWNrRkdvIjVquH9d4MA=) 7: 3130332e3131392e3231342e302f32342d3234203d3e20313339363337.roa (hash: BkQPXEKbvmbpHuwtKiewh9JYhpq3BksNtpHsw33H1fI=) 8: 3130332e3131392e3231342e302f32342d3234203d3e20313331363239.roa (hash: ATTGrI+LdxvHy7tZZvIf74Pi92V/OccZmHc6iAFqFXM=) 9: 3130332e3131392e3231322e302f32322d3234203d3e20313333373437.roa (hash: zPQusnanznelCXG1KdOD21zkqA+VphGwDoshIYxRbJ0=) 10: 3D576C4841082805B3CDBD7337F3963A8833174B.crl (hash: W97jqiqnNf5n7aEgSplnMyUNneOuJruI/Ydf6KvPjmI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:37:17:da:a0:ad:71:81:2b:15:da:6e:6a:72:8b:d1:97:99:c0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D576C4841082805B3CDBD7337F3963A8833174B Validity Not Before: Jul 23 22:01:50 2026 GMT Not After : Jul 25 01:06:50 2026 GMT Subject: CN=5A3559FF725C8AE12764C79D3B031BE4A418DFD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:bd:25:ee:8a:11:95:f2:e1:cf:c8:73:af: 27:00:6e:a4:33:ab:15:ac:c6:00:fd:e2:1b:d3:f3: 50:d1:78:e8:95:b4:26:2e:cd:ae:20:c6:2a:58:fb: 81:88:b8:8b:23:5a:1a:4f:cf:94:09:3c:bb:49:90: b0:54:72:8a:d9:5f:f1:cc:b7:99:0c:d2:29:06:37: 30:9d:20:ee:af:ac:a2:74:a3:9c:80:11:61:13:32: 9f:3b:c6:72:b5:9c:8c:7e:8d:e0:43:5f:52:3d:64: cc:20:33:2f:fe:48:b4:03:07:db:ee:4c:b3:88:46: 58:c5:08:03:fd:c4:bc:7f:3f:90:81:b3:23:bf:7a: 3b:10:57:9f:30:7b:b2:0a:b9:d5:7a:10:34:e4:a8: 49:d2:07:70:8b:eb:e1:b9:b8:77:4a:63:e0:f1:36: 67:a0:13:81:e4:a2:5a:77:88:a3:22:b1:96:33:1a: f2:02:fa:2f:3f:92:91:83:03:9a:ea:65:8f:ac:c2: 76:bf:20:d6:15:8d:a6:cd:ac:1f:21:56:df:a1:66: 3b:0f:33:6d:e9:90:c0:c7:0e:ff:f4:a5:83:53:32: 92:31:8c:69:3c:f2:ab:34:97:a4:f6:ad:f2:b0:d6: 2f:62:84:a8:cc:09:15:e1:39:1e:20:7a:8b:73:8a: d9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:35:59:FF:72:5C:8A:E1:27:64:C7:9D:3B:03:1B:E4:A4:18:DF:D4 X509v3 Authority Key Identifier: keyid:3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:bb:10:69:c1:36:f6:af:2b:70:92:4d:81:b9:0d:73:b1:a7: 47:07:40:e2:76:05:dc:bf:5a:e6:90:18:1c:4b:1a:81:f3:e2: 98:6e:d3:c9:4d:4f:8c:08:1f:db:9e:59:75:a3:d1:9d:05:c4: 0a:11:a5:e1:b2:36:4c:07:29:8a:04:bd:cc:68:11:10:8f:6b: 2a:68:5a:0a:e7:4f:26:32:cf:9c:72:71:bd:06:f7:d4:6c:31: e2:7c:e3:50:52:5e:22:65:47:5a:e7:bc:3d:b7:eb:93:e9:4d: 1e:db:31:09:9e:a1:f3:22:99:98:0e:76:10:43:b8:3b:00:1c: 4c:c7:21:82:1e:a9:71:cc:7e:36:d2:42:cb:b6:fc:62:f9:74: 6a:c0:e3:e3:5a:f5:3d:d8:cb:f2:8e:04:28:97:a7:81:38:fb: 72:a4:af:47:0c:b3:1b:b1:b3:9d:32:38:20:5c:5d:30:b0:33: f3:05:cb:5a:5d:cd:c6:9b:c6:72:52:35:b1:85:84:2f:69:f8: 7b:99:9a:67:e2:e2:32:68:21:25:25:79:88:34:68:21:b9:60: c1:94:ca:77:6c:0b:ac:87:32:64:d2:75:0b:1b:67:f5:0c:52: a4:5c:8d:ac:79:0a:9a:ad:de:a2:b8:00:df:72:06:05:b4:94: 07:75:49:b8 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUIzcX2qCtcYErFdpuanKL0ZeZwIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q1NzZDNDg0MTA4MjgwNUIzQ0RCRDczMzdGMzk2M0E4 ODMzMTc0QjAeFw0yNjA3MjMyMjAxNTBaFw0yNjA3MjUwMTA2NTBaMDMxMTAvBgNV BAMTKDVBMzU1OUZGNzI1QzhBRTEyNzY0Qzc5RDNCMDMxQkU0QTQxOERGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClI70l7ooRlfLhz8hzrycAbqQz qxWsxgD94hvT81DReOiVtCYuza4gxipY+4GIuIsjWhpPz5QJPLtJkLBUcorZX/HM t5kM0ikGNzCdIO6vrKJ0o5yAEWETMp87xnK1nIx+jeBDX1I9ZMwgMy/+SLQDB9vu TLOIRljFCAP9xLx/P5CBsyO/ejsQV58we7IKudV6EDTkqEnSB3CL6+G5uHdKY+Dx NmegE4Hkolp3iKMisZYzGvIC+i8/kpGDA5rqZY+swna/INYVjabNrB8hVt+hZjsP M23pkMDHDv/0pYNTMpIxjGk88qs0l6T2rfKw1i9ihKjMCRXhOR4geotzitltAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUWjVZ/3JciuEnZMedOwMb5KQY39QwHwYDVR0j BBgwFoAUPVdsSEEIKAWzzb1zN/OWOogzF0swDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0tNQVRF Uy8wLzNENTc2QzQ4NDEwODI4MDVCM0NEQkQ3MzM3RjM5NjNBODgzMzE3NEIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvM0Q1NzZDNDg0MTA4MjgwNUIzQ0RCRDczMzdG Mzk2M0E4ODMzMTc0Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NLTUFURVMvMC8zRDU3NkM0ODQx MDgyODA1QjNDREJENzMzN0YzOTYzQTg4MzMxNzRCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrsQacE2 9q8rcJJNgbkNc7GnRwdA4nYF3L9a5pAYHEsagfPimG7TyU1PjAgf255ZdaPRnQXE ChGl4bI2TAcpigS9zGgREI9rKmhaCudPJjLPnHJxvQb31Gwx4nzjUFJeImVHWue8 Pbfrk+lNHtsxCZ6h8yKZmA52EEO4OwAcTMchgh6pccx+NtJCy7b8Yvl0asDj41r1 PdjL8o4EKJengTj7cqSvRwyzG7GznTI4IFxdMLAz8wXLWl3NxpvGclI1sYWEL2n4 e5maZ+LiMmghJSV5iDRoIblgwZTKd2wLrIcyZNJ1Cxtn9QxSpFyNrHkKmq3eorgA 33IGBbSUB3VJuA== -----END CERTIFICATE-----Generated at Fri Jul 24 05:35:53 2026 by rpki-client