$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft File: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft (raw, json) Hash identifier: VHAgqOICpax680o5rsT9iFHrd2PSwOjz7AnRrxLF1l0= Subject key identifier: 14:48:E7:29:9F:63:19:8D:FF:8C:C4:93:09:5D:24:5D:BC:E2:D8:E0 Authority key identifier: E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB Certificate issuer: /CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB Certificate serial: 32EAEBFE7EEADE4DF83F5BF239946ED6540AFE7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft Manifest number: 66 Signing time: Thu 23 Jul 2026 17:31:17 +0000 Manifest this update: Thu 23 Jul 2026 17:26:17 +0000 Manifest next update: Fri 24 Jul 2026 19:57:17 +0000 Files and hashes: 1: 3232332e32362e31302e302f32332d3234203d3e2037353338.roa (hash: WltkBuqhKCJsRwS/4iiBwpBsyVQ3CFzN130wVvwvOIg=) 2: 3232332e32362e31302e302f32332d3234203d3e2037343833.roa (hash: KY91dZeL6/YwGvfBK0FnKFAVL/6EOM1qXx3UNjlNsSo=) 3: 3232332e32362e31302e302f32332d3234203d3e203231383539.roa (hash: KeYIdvmIdFmXoaD7PfpE0neyX1HamQXTrD45lQIfHyQ=) 4: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl (hash: Avs0pQonRpa3UjdRTaLJvgx8fi50RyIfAO/aYcBAOOc=) 5: 3130332e3137352e3136362e302f32332d3234203d3e2037343833.roa (hash: M1t938UdIZV1R1GsREb23xynohkO0qzg0e3CIh+SGGk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ea:eb:fe:7e:ea:de:4d:f8:3f:5b:f2:39:94:6e:d6:54:0a:fe:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB Validity Not Before: Jul 23 17:26:17 2026 GMT Not After : Jul 24 19:57:17 2026 GMT Subject: CN=1448E7299F63198DFF8CC493095D245DBCE2D8E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:dd:b4:b1:86:ae:4d:ab:3c:f4:3f:10:89: 85:78:da:90:08:23:95:16:b5:15:4c:02:3f:c9:00: 7e:1e:fd:8c:c1:de:da:a6:b6:a8:19:bf:36:52:a3: ae:1c:9a:22:c6:c2:9b:de:a4:ff:58:c9:74:34:47: 0a:46:be:b6:7c:7c:e2:e1:34:4a:3a:88:e4:1e:9a: fb:61:10:58:a1:5b:4a:b8:2d:84:d7:df:d4:44:02: 35:d3:aa:c9:0a:ec:dc:cc:21:9f:5b:9c:f6:cd:70: 77:3e:8c:28:70:18:5b:03:90:f7:25:78:4a:27:2d: 22:30:cb:ab:fa:0c:cc:c1:6f:f8:b7:d7:0f:29:4b: 6b:a4:1c:1d:0b:6f:c1:85:c1:93:d8:c0:b8:02:1e: 6e:44:1e:ea:16:b6:a0:aa:c0:cf:0e:71:7c:83:b5: 1e:e7:56:22:e8:64:61:60:5b:e7:3c:60:44:ea:3c: 1b:21:a4:01:ee:e1:2d:5c:ba:a7:56:13:e9:46:6a: dc:5f:94:1c:1c:1c:60:9d:a4:3d:df:2f:52:78:5b: 6e:04:8e:f5:ff:35:6f:f6:2e:fd:92:48:71:13:c4: 6e:a0:83:5c:b9:63:3c:2a:f0:2f:f5:9e:dc:a5:58: 6b:fc:32:a2:85:3a:9f:cc:61:94:a3:9f:16:c4:d5: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:48:E7:29:9F:63:19:8D:FF:8C:C4:93:09:5D:24:5D:BC:E2:D8:E0 X509v3 Authority Key Identifier: keyid:E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:8e:9e:a9:79:6a:e7:27:1c:a4:eb:e6:a6:25:d0:05:53:35: c7:63:f2:2f:80:9b:6b:6b:7b:ac:34:76:1a:04:ba:cc:40:61: ff:23:5f:ea:7f:28:c8:5d:af:9b:50:21:60:b6:a7:59:af:e6: 36:20:91:21:0b:92:18:48:46:12:db:fe:71:d9:57:c2:41:cf: 79:1c:82:4f:7b:77:82:b8:41:b0:c7:19:a5:59:72:5a:ef:c0: 97:6d:47:e1:e5:43:96:ba:fb:c8:c7:b4:3b:9f:a8:a3:8a:63: ac:07:a5:70:41:cf:17:71:4e:c1:aa:75:c8:5e:71:ef:40:db: 98:62:9b:22:e1:b6:89:b5:21:6d:38:45:cd:b1:20:23:8f:51: 14:07:a7:43:50:93:98:46:d7:07:44:4a:9a:e3:26:7d:c7:90: 0a:62:75:b9:bd:0e:ee:0d:4e:cf:df:d3:47:b3:cc:a0:6e:1c: be:e1:a9:19:86:dd:bf:aa:ed:1d:f1:2d:6e:3c:47:ed:99:18: d2:92:f8:73:e1:82:e0:9b:0d:9e:cb:ef:c8:f1:fc:ed:25:34: 05:01:5d:c9:cf:7e:bd:9a:99:f6:7a:4b:9f:55:81:cd:1e:8a: 5f:50:d2:1e:b6:e5:ae:6a:71:fb:55:cd:80:11:12:5c:11:57: 88:85:b0:3e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMurr/n7q3k34P1vyOZRu1lQK/n0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MjNERkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMx RTM4N0VDQjAeFw0yNjA3MjMxNzI2MTdaFw0yNjA3MjQxOTU3MTdaMDMxMTAvBgNV BAMTKDE0NDhFNzI5OUY2MzE5OERGRjhDQzQ5MzA5NUQyNDVEQkNFMkQ4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5y920sYauTas89D8QiYV42pAI I5UWtRVMAj/JAH4e/YzB3tqmtqgZvzZSo64cmiLGwpvepP9YyXQ0RwpGvrZ8fOLh NEo6iOQemvthEFihW0q4LYTX39REAjXTqskK7NzMIZ9bnPbNcHc+jChwGFsDkPcl eEonLSIwy6v6DMzBb/i31w8pS2ukHB0Lb8GFwZPYwLgCHm5EHuoWtqCqwM8OcXyD tR7nViLoZGFgW+c8YETqPBshpAHu4S1cuqdWE+lGatxflBwcHGCdpD3fL1J4W24E jvX/NW/2Lv2SSHETxG6gg1y5Yzwq8C/1ntylWGv8MqKFOp/MYZSjnxbE1U93AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUFEjnKZ9jGY3/jMSTCV0kXbzi2OAwHwYDVR0j BBgwFoAU44I9/qIf7wTjJp65rMO9rB44fsswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURO T0RFLzAvRTM4MjNERkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMxRTM4N0VDQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FMzgyM0RGRUEyMUZFRjA0RTMyNjlFQjlB Q0MzQkRBQzFFMzg3RUNCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVUROT0RFLzAvRTM4MjNE RkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMxRTM4N0VDQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAICO nql5aucnHKTr5qYl0AVTNcdj8i+Am2tre6w0dhoEusxAYf8jX+p/KMhdr5tQIWC2 p1mv5jYgkSELkhhIRhLb/nHZV8JBz3kcgk97d4K4QbDHGaVZclrvwJdtR+HlQ5a6 +8jHtDufqKOKY6wHpXBBzxdxTsGqdchece9A25himyLhtom1IW04Rc2xICOPURQH p0NQk5hG1wdESprjJn3HkApidbm9Du4NTs/f00ezzKBuHL7hqRmG3b+q7R3xLW48 R+2ZGNKS+HPhguCbDZ7L78jx/O0lNAUBXcnPfr2amfZ6S59Vgc0eil9Q0h625a5q cftVzYARElwRV4iFsD4= -----END CERTIFICATE-----Generated at Fri Jul 24 01:13:06 2026 by rpki-client