$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft File: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft (raw, json) Hash identifier: IaxDO4uyQELbVYoGI3AkUcEpV7q9p9qsbG/IsCRO0VA= Subject key identifier: AD:B2:14:3C:8B:8F:A4:EC:0F:E2:50:59:5E:45:F0:0F:4F:40:37:D0 Authority key identifier: BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA Certificate issuer: /CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Certificate serial: 6C123F3D8FBE624BD644F7EBB52EDC31DAE32518 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 17:16:15 +0000 Manifest this update: Thu 23 Jul 2026 17:11:15 +0000 Manifest next update: Fri 24 Jul 2026 20:49:15 +0000 Files and hashes: 1: 323430323a346432303a313a3a2f34382d3438203d3e20313331363533.roa (hash: X9wIzhuw1c0lYPQ7mtcEb2gQt9tzHi6f24KHdsIqRUI=) 2: 323430323a346432303a3a2f34382d3438203d3e20313532363236.roa (hash: gWGrH7k/E1wfVhOhIGsZWVZwwwOvXG8dp1buitprMVE=) 3: 323430323a346432303a3a2f34382d3438203d3e20323133343330.roa (hash: yXLG5aJYFzJQAOcQmz7saI6BueUDkIVJ2tp9ey7Y/oo=) 4: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl (hash: P8Qxm6Z6dR0EAdHNIKoW6Z4MWbg/QeaNVNo1hRyYS2Q=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:12:3f:3d:8f:be:62:4b:d6:44:f7:eb:b5:2e:dc:31:da:e3:25:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Validity Not Before: Jul 23 17:11:15 2026 GMT Not After : Jul 24 20:49:15 2026 GMT Subject: CN=ADB2143C8B8FA4EC0FE250595E45F00F4F4037D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:20:73:f5:7d:60:cc:e9:36:c8:e3:9f:76: fd:96:db:84:56:90:f7:dc:d8:7c:99:9b:5c:01:45: 43:7e:81:3e:20:ff:f0:d7:a3:3b:03:5d:cb:a8:18: 76:24:ce:c1:02:d1:95:27:73:39:2a:a4:a9:96:b4: da:d3:12:e5:71:11:7c:a4:8c:c2:4b:86:22:2d:ef: 14:ed:5d:4e:0a:71:fb:47:5c:2b:cf:00:83:3f:74: 48:41:e4:d3:f4:58:07:aa:31:05:28:3e:b6:ec:bb: 81:5b:0f:ca:39:76:2a:33:70:b7:e4:3f:3d:99:3b: ad:29:98:c9:01:b8:15:af:2c:7e:03:a7:c9:4c:b9: 6f:54:54:8d:a5:a0:15:0f:9c:08:58:d1:cc:60:de: 25:0b:ba:dc:31:06:1a:61:5f:5c:8f:ca:45:b0:e3: 4e:8e:ba:0a:4b:64:33:d8:d6:f7:1e:7f:3e:9d:b6: e6:2a:c6:f9:d5:1d:90:7b:1a:1b:7c:2e:02:c9:4f: 72:12:73:28:e2:5b:10:1c:af:11:aa:d2:37:d0:da: 0b:7a:ef:98:97:83:e5:7c:5c:62:25:16:e4:80:29: 91:11:da:10:dd:b9:32:a1:e6:b4:f0:1b:13:6e:b6: e2:7c:bf:f9:d9:62:c9:54:03:bc:f5:6b:07:b4:e3: b0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B2:14:3C:8B:8F:A4:EC:0F:E2:50:59:5E:45:F0:0F:4F:40:37:D0 X509v3 Authority Key Identifier: keyid:BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:69:af:b8:7b:11:8c:93:ec:9a:04:17:6b:64:12:2b:a9:fc: 81:e1:4b:6c:d7:d0:7e:bd:1b:5d:d7:51:ea:e2:1d:1a:3d:50: 4a:a8:20:5f:61:fc:e6:de:ab:8f:ff:71:9d:0a:bd:9b:16:6a: 2e:be:9a:ea:2c:7a:42:0b:27:9f:89:47:09:ad:46:3d:a2:88: 24:49:77:26:87:24:d9:e3:67:0c:3e:31:b5:91:1d:3d:03:66: 29:a7:36:12:cb:68:0d:5d:ad:bb:23:d2:83:87:4b:eb:21:f4: df:c5:13:06:10:6b:c1:70:9d:2f:80:2d:81:bb:49:41:e7:d8: 4f:e2:ed:5b:37:cb:19:11:dd:3d:c9:54:b2:a5:7b:b8:05:fd: 58:ca:da:4d:63:a0:77:18:c9:cb:78:2a:ff:b8:f3:b7:a0:64: aa:46:e2:7a:11:75:89:58:c0:21:aa:4f:a9:27:bd:cc:0b:cc: 28:ae:79:b9:be:d3:b9:b5:cb:be:25:6d:51:5f:ea:03:a1:bc: f1:77:0b:72:40:92:a7:a2:93:0d:7d:27:7e:69:e9:c9:bf:d0: f6:c3:5a:c7:b7:5e:c9:53:7d:a0:6c:bc:90:42:da:c1:38:7d: 19:e1:12:97:3c:c1:b7:ee:e6:8e:e3:5e:8c:e7:58:7b:29:f3: d8:e2:bc:47 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUbBI/PY++YkvWRPfrtS7cMdrjJRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3 QTlFMDVEQTAeFw0yNjA3MjMxNzExMTVaFw0yNjA3MjQyMDQ5MTVaMDMxMTAvBgNV BAMTKEFEQjIxNDNDOEI4RkE0RUMwRkUyNTA1OTVFNDVGMDBGNEY0MDM3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfyBz9X1gzOk2yOOfdv2W24RW kPfc2HyZm1wBRUN+gT4g//DXozsDXcuoGHYkzsEC0ZUnczkqpKmWtNrTEuVxEXyk jMJLhiIt7xTtXU4KcftHXCvPAIM/dEhB5NP0WAeqMQUoPrbsu4FbD8o5diozcLfk Pz2ZO60pmMkBuBWvLH4Dp8lMuW9UVI2loBUPnAhY0cxg3iULutwxBhphX1yPykWw 406OugpLZDPY1vcefz6dtuYqxvnVHZB7Ght8LgLJT3IScyjiWxAcrxGq0jfQ2gt6 75iXg+V8XGIlFuSAKZER2hDduTKh5rTwGxNutuJ8v/nZYslUA7z1awe047CfAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUrbIUPIuPpOwP4lBZXkXwD09AN9AwHwYDVR0j BBgwFoAUvtclxBPHpDb1ogDyB/PLOnqeBdowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURC QVNFLzAvQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9CRUQ3MjVDNDEzQzdBNDM2RjVBMjAwRjIw N0YzQ0IzQTdBOUUwNURBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURCQVNFLzAvQkVENzI1 QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH1p r7h7EYyT7JoEF2tkEiup/IHhS2zX0H69G13XUeriHRo9UEqoIF9h/Obeq4//cZ0K vZsWai6+muosekILJ5+JRwmtRj2iiCRJdyaHJNnjZww+MbWRHT0DZimnNhLLaA1d rbsj0oOHS+sh9N/FEwYQa8FwnS+ALYG7SUHn2E/i7Vs3yxkR3T3JVLKle7gF/VjK 2k1joHcYyct4Kv+487egZKpG4noRdYlYwCGqT6knvcwLzCiuebm+07m1y74lbVFf 6gOhvPF3C3JAkqeikw19J35p6cm/0PbDWse3XslTfaBsvJBC2sE4fRnhEpc8wbfu 5o7jXoznWHsp89jivEc= -----END CERTIFICATE-----Generated at Fri Jul 24 12:04:11 2026 by rpki-client