$ rpki-client -vvf rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft File: 2E8003B145695D652CFF3D58625D3B0A3535AD84.mft (raw, json) Hash identifier: feOjR5stF1MeOY4ESRCIU3jiA+xK9/c7HULpOSLEN14= Subject key identifier: F4:F8:AA:07:3A:B5:D1:5B:DA:56:9D:4A:D9:4A:4F:C6:3E:27:78:39 Authority key identifier: 2E:80:03:B1:45:69:5D:65:2C:FF:3D:58:62:5D:3B:0A:35:35:AD:84 Certificate issuer: /CN=2E8003B145695D652CFF3D58625D3B0A3535AD84 Certificate serial: 06108D03CD4C684C061375765A67AF8E76AE4589 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft Manifest number: 63 Signing time: Fri 24 Jul 2026 09:33:08 +0000 Manifest this update: Fri 24 Jul 2026 09:28:08 +0000 Manifest next update: Sat 25 Jul 2026 11:27:08 +0000 Files and hashes: 1: 2E8003B145695D652CFF3D58625D3B0A3535AD84.crl (hash: xMT/yCVYKyp1pYwsbAyhtjLHiSjAT/pZuThMYowIR40=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.crl rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:10:8d:03:cd:4c:68:4c:06:13:75:76:5a:67:af:8e:76:ae:45:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8003B145695D652CFF3D58625D3B0A3535AD84 Validity Not Before: Jul 24 09:28:08 2026 GMT Not After : Jul 25 11:27:08 2026 GMT Subject: CN=F4F8AA073AB5D15BDA569D4AD94A4FC63E277839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:67:25:94:f0:a2:b4:f3:c3:fd:dd:55:19:38: c8:0c:82:03:c4:2c:23:5f:16:c9:ba:03:ca:8d:7f: cf:0f:be:65:69:46:e7:39:a2:b5:4d:81:12:18:eb: ba:df:92:5f:52:82:73:9a:61:54:0f:db:35:12:b5: 72:aa:52:52:88:2e:6a:c7:5c:1c:b8:6c:c3:4b:4d: 39:bd:9b:b5:fd:7a:fe:b9:dc:dd:7e:4e:98:b4:36: 68:00:11:f4:24:1d:b5:87:22:f4:a7:54:42:19:09: ea:c9:a0:67:c4:84:4f:bf:98:b6:72:6d:40:53:83: ba:fc:53:f8:b6:cc:21:02:66:63:06:3b:11:90:23: 20:be:f9:eb:e5:00:e7:3f:be:9c:53:c1:c0:0e:4a: 23:b6:14:7b:d0:d3:e9:49:c2:f2:fc:df:2e:70:98: 9e:b8:f4:76:8e:35:d6:49:f4:09:58:91:68:e0:43: 1b:57:4a:5e:58:6c:69:a5:2c:91:b5:2d:d0:ce:63: 45:21:9a:5f:39:91:12:88:86:20:02:08:ba:4f:13: 6b:13:7a:74:0f:e2:a3:5a:b6:d3:48:c5:fd:9b:0d: 02:61:ad:d5:b9:46:f2:d6:e2:00:60:bb:22:01:7e: 27:12:1c:5b:0f:e1:c5:8f:c5:06:3b:c2:16:ab:90: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F8:AA:07:3A:B5:D1:5B:DA:56:9D:4A:D9:4A:4F:C6:3E:27:78:39 X509v3 Authority Key Identifier: keyid:2E:80:03:B1:45:69:5D:65:2C:FF:3D:58:62:5D:3B:0A:35:35:AD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:f7:ca:03:0a:e9:28:e8:42:ce:6a:57:84:8b:f4:60:3a:da: c7:cd:4a:da:f7:78:cc:a4:b0:af:a3:77:97:50:ce:7a:69:2a: b3:99:21:e4:2a:d4:34:09:e4:13:4f:9a:0a:aa:30:32:2e:d9: 1e:e7:83:e1:f4:d5:bd:80:c8:53:96:95:04:75:dc:5c:d5:3b: 15:d9:fe:25:67:a4:33:b1:5d:b4:aa:2d:92:26:f0:ec:c2:72: 81:46:c4:d9:8f:0f:b3:dd:85:52:6d:2e:89:74:66:4a:e5:2e: 6c:1a:35:e7:b8:52:ee:50:cd:9b:c3:2e:83:7e:41:99:2e:0a: 3d:aa:36:1e:9d:8f:11:93:0f:c1:f2:41:05:90:26:4f:30:ab: 78:2a:cd:dd:c1:e8:9e:73:b4:32:9f:6e:f2:64:27:f5:5a:04: 18:b8:76:cf:3d:7a:25:a2:99:3e:70:7b:7e:10:33:36:de:9b: 4a:31:26:db:04:e0:fd:09:ce:0f:ff:51:45:61:17:45:34:92: 34:08:94:ca:01:52:17:ec:c2:5d:09:d9:5e:d0:e1:ee:69:ea: 3e:f6:39:f3:dd:b5:23:85:c8:21:34:52:dc:81:ad:6d:ef:d0: ed:67:e4:c4:d1:d1:63:6d:17:51:e7:98:cf:55:16:68:22:09: fa:2b:08:97 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUBhCNA81MaEwGE3V2WmevjnauRYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4MDAzQjE0NTY5NUQ2NTJDRkYzRDU4NjI1RDNCMEEz NTM1QUQ4NDAeFw0yNjA3MjQwOTI4MDhaFw0yNjA3MjUxMTI3MDhaMDMxMTAvBgNV BAMTKEY0RjhBQTA3M0FCNUQxNUJEQTU2OUQ0QUQ5NEE0RkM2M0UyNzc4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZyWU8KK088P93VUZOMgMggPE LCNfFsm6A8qNf88PvmVpRuc5orVNgRIY67rfkl9SgnOaYVQP2zUStXKqUlKILmrH XBy4bMNLTTm9m7X9ev653N1+Tpi0NmgAEfQkHbWHIvSnVEIZCerJoGfEhE+/mLZy bUBTg7r8U/i2zCECZmMGOxGQIyC++evlAOc/vpxTwcAOSiO2FHvQ0+lJwvL83y5w mJ649HaONdZJ9AlYkWjgQxtXSl5YbGmlLJG1LdDOY0Uhml85kRKIhiACCLpPE2sT enQP4qNattNIxf2bDQJhrdW5RvLW4gBguyIBficSHFsP4cWPxQY7wharkDa9AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU9PiqBzq10VvaVp1K2UpPxj4neDkwHwYDVR0j BBgwFoAULoADsUVpXWUs/z1YYl07CjU1rYQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAv MkU4MDAzQjE0NTY5NUQ2NTJDRkYzRDU4NjI1RDNCMEEzNTM1QUQ4NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yRTgwMDNCMTQ1Njk1RDY1MkNGRjNENTg2MjVEM0Iw QTM1MzVBRDg0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAvMkU4MDAzQjE0NTY5NUQ2NTJD RkYzRDU4NjI1RDNCMEEzNTM1QUQ4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADL3ygMK6SjoQs5qV4SL 9GA62sfNStr3eMyksK+jd5dQznppKrOZIeQq1DQJ5BNPmgqqMDIu2R7ng+H01b2A yFOWlQR13FzVOxXZ/iVnpDOxXbSqLZIm8OzCcoFGxNmPD7PdhVJtLol0ZkrlLmwa Nee4Uu5QzZvDLoN+QZkuCj2qNh6djxGTD8HyQQWQJk8wq3gqzd3B6J5ztDKfbvJk J/VaBBi4ds89eiWimT5we34QMzbem0oxJtsE4P0Jzg//UUVhF0U0kjQIlMoBUhfs wl0J2V7Q4e5p6j72OfPdtSOFyCE0UtyBrW3v0O1n5MTR0WNtF1HnmM9VFmgiCfor CJc= -----END CERTIFICATE-----Generated at Fri Jul 24 14:35:19 2026 by rpki-client