$ rpki-client -vvf rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft File: 4CB3ABB1B4A024A701223CD715911D996706E3AA.mft (raw, json) Hash identifier: natZn5Xv/mArRoUA3jXhm2Viac75RMe1qNFiq72Ph0Y= Subject key identifier: 14:A7:86:CB:D5:1D:B8:15:44:48:BD:11:F5:B2:90:AF:5E:C1:45:83 Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA Certificate issuer: /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Certificate serial: 2A4126FB86429824AAD2C1710174ED7F12A63579 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft Manifest number: 66 Signing time: Thu 23 Jul 2026 20:21:40 +0000 Manifest this update: Thu 23 Jul 2026 20:16:40 +0000 Manifest next update: Fri 24 Jul 2026 23:18:40 +0000 Files and hashes: 1: 3130332e31342e3137302e302f32332d3234203d3e203338303432.roa (hash: 5mtwz/x5xstPzEWwV0mjjdNtyAKuFHozbJj1pgp59P4=) 2: 323430303a623061303a3a2f33322d3332203d3e203633393038.roa (hash: zreCdGN4BpY2/KXE7Xi0nbMj8CRAQTw3exmLLk8qka8=) 3: 4CB3ABB1B4A024A701223CD715911D996706E3AA.crl (hash: +8+uxAKvNEHBpA7D3xeGTkyFfNisOnv8fxkdTN7hgYs=) 4: 3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa (hash: GNYnz7E4zPrfGEpitBkpgKcXAY1dNLMFN8QmTypJQrA=) 5: 3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa (hash: 0yV6274hzedLbyBXIX24PIgFkE/qG4nC2HGR5DvDDRk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:41:26:fb:86:42:98:24:aa:d2:c1:71:01:74:ed:7f:12:a6:35:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Validity Not Before: Jul 23 20:16:40 2026 GMT Not After : Jul 24 23:18:40 2026 GMT Subject: CN=14A786CBD51DB8154448BD11F5B290AF5EC14583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:0a:ed:ad:2b:7b:58:a7:6d:dc:b5:dd:6d: 62:d7:31:f1:95:59:5d:f1:11:5b:88:bb:5f:27:86: 6b:07:28:eb:f0:fd:b8:50:9b:5d:18:70:e1:53:64: 67:c6:2c:5e:4c:1d:f9:ba:60:62:e6:7f:25:9e:3b: 22:3d:ef:c5:7f:d0:5f:7c:ce:bc:c7:e9:e6:8b:50: 37:ec:99:ab:44:14:0a:86:c4:19:b1:10:33:0f:f6: 06:03:81:c9:4a:72:0d:71:ad:7c:88:bf:43:ef:a0: ec:5b:34:86:8f:35:e9:de:7b:9c:ac:ea:d2:25:84: 17:e3:e4:24:70:a4:72:25:a8:42:3b:8f:6d:a3:cd: e9:56:6a:18:24:58:a4:86:3e:59:01:16:5b:21:48: 08:30:e8:3a:7d:82:75:e9:09:f2:60:14:83:a2:a1: c6:e8:a9:d5:26:2d:b1:f1:d6:9f:e3:43:52:5e:af: 51:95:b0:f7:9c:fc:3d:0d:20:b4:55:33:9b:94:a7: ca:ab:7b:b7:76:23:ac:44:03:af:a7:3c:bb:27:30: 57:40:6f:63:86:16:36:f6:f9:b9:23:0b:ce:2c:c7: b9:cc:b0:3d:e8:03:4c:59:e9:5b:8a:19:7a:a9:70: 04:2c:92:5f:8c:bb:81:3c:07:08:6d:a3:48:c8:23: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A7:86:CB:D5:1D:B8:15:44:48:BD:11:F5:B2:90:AF:5E:C1:45:83 X509v3 Authority Key Identifier: keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:2f:64:26:52:93:ee:44:26:d0:54:ec:eb:f6:75:4d:79:22: d4:52:b8:03:55:00:e8:7d:72:da:55:51:14:06:61:0d:c7:5c: 3c:56:62:2f:07:d2:c5:1a:7d:d8:f5:7b:c7:83:e1:f7:26:95: 74:dd:cd:98:6c:ea:1f:2a:d3:55:db:c3:aa:ec:a9:41:bd:f0: e6:bf:e4:3c:89:93:52:91:12:9e:80:5f:d2:a9:39:b5:fd:3f: 9e:c9:17:a1:3b:0b:f9:ef:f6:30:e6:bd:5b:0d:ea:3a:d4:b7: 9d:06:c9:50:6a:98:cb:8e:4f:95:d9:e2:43:b9:39:ed:29:60: f2:44:16:3b:84:3f:55:6a:f2:84:08:c0:6a:df:79:52:70:46: e2:a0:a3:83:7c:bb:b1:49:67:01:50:b9:33:25:3a:a1:c9:e0: 4d:a5:fe:fd:66:0e:23:51:6a:f2:9f:c6:00:11:25:c9:d2:5a: d1:a4:f7:8b:5c:33:e3:c5:40:33:e0:99:a3:43:2f:50:e5:cf: 74:ca:2b:37:9b:d4:f0:44:f1:9b:75:af:c2:8c:d8:38:91:06: b0:fb:1e:9f:c3:19:56:1f:84:4e:5c:c7:0a:c4:2d:b4:2a:57: cc:0f:dc:7c:05:f1:65:74:13:8c:c1:1b:fb:cd:5d:25:0c:46: a7:c5:bc:a4 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUKkEm+4ZCmCSq0sFxAXTtfxKmNXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCM0FCQjFCNEEwMjRBNzAxMjIzQ0Q3MTU5MTFEOTk2 NzA2RTNBQTAeFw0yNjA3MjMyMDE2NDBaFw0yNjA3MjQyMzE4NDBaMDMxMTAvBgNV BAMTKDE0QTc4NkNCRDUxREI4MTU0NDQ4QkQxMUY1QjI5MEFGNUVDMTQ1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SgrtrSt7WKdt3LXdbWLXMfGV WV3xEVuIu18nhmsHKOvw/bhQm10YcOFTZGfGLF5MHfm6YGLmfyWeOyI978V/0F98 zrzH6eaLUDfsmatEFAqGxBmxEDMP9gYDgclKcg1xrXyIv0PvoOxbNIaPNenee5ys 6tIlhBfj5CRwpHIlqEI7j22jzelWahgkWKSGPlkBFlshSAgw6Dp9gnXpCfJgFIOi ocboqdUmLbHx1p/jQ1Jer1GVsPec/D0NILRVM5uUp8qre7d2I6xEA6+nPLsnMFdA b2OGFjb2+bkjC84sx7nMsD3oA0xZ6VuKGXqpcAQskl+Mu4E8Bwhto0jIIygXAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUFKeGy9UduBVESL0R9bKQr17BRYMwHwYDVR0j BBgwFoAUTLOrsbSgJKcBIjzXFZEdmWcG46owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1BTWVMv MC80Q0IzQUJCMUI0QTAyNEE3MDEyMjNDRDcxNTkxMUQ5OTY3MDZFM0FBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzRDQjNBQkIxQjRBMDI0QTcwMTIyM0NENzE1OTEx RDk5NjcwNkUzQUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8wLzRDQjNBQkIxQjRBMDI0 QTcwMTIyM0NENzE1OTExRDk5NjcwNkUzQUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjL2QmUpPuRCbQ VOzr9nVNeSLUUrgDVQDofXLaVVEUBmENx1w8VmIvB9LFGn3Y9XvHg+H3JpV03c2Y bOofKtNV28Oq7KlBvfDmv+Q8iZNSkRKegF/SqTm1/T+eyRehOwv57/Yw5r1bDeo6 1LedBslQapjLjk+V2eJDuTntKWDyRBY7hD9VavKECMBq33lScEbioKODfLuxSWcB ULkzJTqhyeBNpf79Zg4jUWryn8YAESXJ0lrRpPeLXDPjxUAz4JmjQy9Q5c90yis3 m9TwRPGbda/CjNg4kQaw+x6fwxlWH4ROXMcKxC20KlfMD9x8BfFldBOMwRv7zV0l DEanxbyk -----END CERTIFICATE-----Generated at Fri Jul 24 12:19:06 2026 by rpki-client