$ rpki-client -vvf rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft File: 8F1212A19454D2A49786359CAC45368F821417D6.mft (raw, json) Hash identifier: TKne5nAC4mIJR1nxnpDo28qq2IGSSxYNeOutB1DZgEc= Subject key identifier: 4F:86:8B:8E:F0:29:5B:8B:CC:C7:35:6A:21:18:BB:BA:51:6C:4A:2B Authority key identifier: 8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 Certificate issuer: /CN=8F1212A19454D2A49786359CAC45368F821417D6 Certificate serial: 7889DB81A34F6D98E091747CF1E3F143E6A49D31 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft Manifest number: 67 Signing time: Fri 24 Jul 2026 07:37:54 +0000 Manifest this update: Fri 24 Jul 2026 07:32:54 +0000 Manifest next update: Sat 25 Jul 2026 10:17:54 +0000 Files and hashes: 1: 323430363a643763303a3a2f33322d3438203d3e203338383339.roa (hash: Z694/6d2G+L3RUACrnL4ZOBmDtfn2t+JQdVIPZHPNRw=) 2: 323430363a643763303a3a2f33322d3438203d3e203338303038.roa (hash: uMtY/GmVL72No2RBdo9smGFIzi+iIhlXKaPRp7r/VTo=) 3: 3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa (hash: fgIPz4pRjg9MozWHN5C9tmdzsbKi6XEfF4wUaKsvsnA=) 4: 8F1212A19454D2A49786359CAC45368F821417D6.crl (hash: NNwKtlxO95W3C5V5ZjsiGYjnSYRRviwc9mL9eHcD7gc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:89:db:81:a3:4f:6d:98:e0:91:74:7c:f1:e3:f1:43:e6:a4:9d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1212A19454D2A49786359CAC45368F821417D6 Validity Not Before: Jul 24 07:32:54 2026 GMT Not After : Jul 25 10:17:54 2026 GMT Subject: CN=4F868B8EF0295B8BCCC7356A2118BBBA516C4A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:4f:d3:dc:fe:00:e3:25:e9:a0:ac:c1:6a: 43:e4:74:a0:11:bf:cb:f7:5e:8c:4a:2a:e4:98:ab: 84:37:5c:59:da:7e:46:24:21:fe:57:d1:74:d5:2c: f5:04:88:58:b2:d7:eb:e7:b0:ef:ba:7a:c1:55:59: 9f:f5:24:53:83:ab:87:c2:35:6c:57:ec:dd:3f:c3: 94:b2:7f:e5:26:96:8e:40:66:aa:ab:81:ab:96:64: 88:d4:13:72:10:74:6d:bb:a9:bf:95:56:04:15:db: ce:9d:79:cd:75:c2:6f:44:57:57:2e:92:8a:8e:b9: e9:2e:f4:69:62:d1:e6:b3:75:d9:2f:46:14:5e:b3: bf:ee:b6:09:56:8d:3b:ea:1f:b5:97:eb:73:87:31: 87:aa:f7:34:c6:ec:85:5c:fc:b0:1d:1c:ad:42:78: d4:64:99:93:7d:8d:74:e1:a0:36:86:52:8f:91:8a: b9:9e:37:74:30:39:15:7e:62:fb:9d:e6:49:6e:fd: 33:94:d4:93:18:ab:26:6f:de:1e:6d:c0:16:25:61: d4:3b:92:32:f5:cb:6f:05:29:5b:42:27:ad:a6:ca: 2e:d5:92:f3:9d:c7:a7:55:d3:bf:38:33:24:c8:85: a4:21:cf:b0:7c:a4:c8:62:68:79:fb:fc:6c:75:df: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:86:8B:8E:F0:29:5B:8B:CC:C7:35:6A:21:18:BB:BA:51:6C:4A:2B X509v3 Authority Key Identifier: keyid:8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:aa:fb:5a:25:59:48:77:5f:b1:2b:9d:0b:7e:5a:0f:b9:30: 08:d0:e0:ec:b6:f5:f6:8b:db:b9:f0:a2:87:a0:0e:b1:87:f6: 0b:8f:25:bf:a8:f4:05:d1:84:83:e7:73:84:90:4c:7b:55:4d: 4f:19:76:5f:16:a2:fe:6f:89:9e:eb:32:25:4f:44:13:78:cc: ae:26:e0:97:76:8a:1c:b4:a4:a9:02:5a:77:d8:e6:f5:f2:9d: c2:6e:dc:cc:c9:39:9a:01:86:f1:55:d2:90:74:a7:47:fa:f7: 51:59:63:d0:d7:f1:b5:5f:a8:c8:d8:22:b9:79:25:25:82:94: 0c:ce:31:2e:b1:79:66:b1:0c:25:dc:b5:1a:06:d0:bd:66:95: c7:67:31:c5:ed:39:9c:e4:ad:4e:a3:fa:68:95:66:ba:21:af: dd:60:7f:b8:a8:fa:05:c0:2a:c5:6c:64:65:b8:0c:39:7b:5a: b9:d9:2b:e8:9a:9a:d9:d3:3d:6c:43:f9:78:46:3b:ca:31:d6: 68:4e:68:7a:e8:c8:db:a7:7b:b3:bd:7b:0d:1f:cd:df:2d:95: 55:4f:a9:e3:78:13:88:19:13:fe:2b:f0:5e:39:a8:5d:93:6e: bd:3a:7e:2e:99:78:4a:25:b0:43:b0:78:c0:d1:5b:f3:9d:d4: 02:aa:4f:ff -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUeInbgaNPbZjgkXR88ePxQ+aknTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4 MjE0MTdENjAeFw0yNjA3MjQwNzMyNTRaFw0yNjA3MjUxMDE3NTRaMDMxMTAvBgNV BAMTKDRGODY4QjhFRjAyOTVCOEJDQ0M3MzU2QTIxMThCQkJBNTE2QzRBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaQE/T3P4A4yXpoKzBakPkdKAR v8v3XoxKKuSYq4Q3XFnafkYkIf5X0XTVLPUEiFiy1+vnsO+6esFVWZ/1JFODq4fC NWxX7N0/w5Syf+Umlo5AZqqrgauWZIjUE3IQdG27qb+VVgQV286dec11wm9EV1cu koqOueku9Gli0eazddkvRhRes7/utglWjTvqH7WX63OHMYeq9zTG7IVc/LAdHK1C eNRkmZN9jXThoDaGUo+RirmeN3QwORV+Yvud5klu/TOU1JMYqyZv3h5twBYlYdQ7 kjL1y28FKVtCJ62myi7VkvOdx6dV0784MyTIhaQhz7B8pMhiaHn7/Gx131InAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUT4aLjvApW4vMxzVqIRi7ulFsSiswHwYDVR0j BBgwFoAUjxISoZRU0qSXhjWcrEU2j4IUF9YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVL LzAvOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84RjEyMTJBMTk0NTREMkE0OTc4NjM1OUNBQzQ1 MzY4RjgyMTQxN0Q2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVLLzAvOEYxMjEyQTE5NDU0 RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJiq+1olWUh3 X7ErnQt+Wg+5MAjQ4Oy29faL27nwooegDrGH9guPJb+o9AXRhIPnc4SQTHtVTU8Z dl8Wov5viZ7rMiVPRBN4zK4m4Jd2ihy0pKkCWnfY5vXyncJu3MzJOZoBhvFV0pB0 p0f691FZY9DX8bVfqMjYIrl5JSWClAzOMS6xeWaxDCXctRoG0L1mlcdnMcXtOZzk rU6j+miVZrohr91gf7io+gXAKsVsZGW4DDl7WrnZK+iamtnTPWxD+XhGO8ox1mhO aHroyNune7O9ew0fzd8tlVVPqeN4E4gZE/4r8F45qF2Tbr06fi6ZeEolsEOweMDR W/Od1AKqT/8= -----END CERTIFICATE-----Generated at Fri Jul 24 10:38:43 2026 by rpki-client