$ rpki-client -vvf rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft File: 2D50476E80CFF23F1675B2EF9B63BB103C893243.mft (raw, json) Hash identifier: N5DaSWC3r/Qf9zJIDTXb+RNHOGhn8IFOtMaO8PKan2M= Subject key identifier: 8A:8D:E3:63:BF:79:92:36:3F:51:C9:8C:32:37:AB:FB:34:56:D7:3F Authority key identifier: 2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43 Certificate issuer: /CN=2D50476E80CFF23F1675B2EF9B63BB103C893243 Certificate serial: 21C9C292EDA41B3BDA8321A6B1F8D0112A3A1DA2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 15:48:09 +0000 Manifest this update: Thu 23 Jul 2026 15:43:09 +0000 Manifest next update: Fri 24 Jul 2026 17:48:09 +0000 Files and hashes: 1: 2D50476E80CFF23F1675B2EF9B63BB103C893243.crl (hash: SHNDX2gvwYdjlw+aEhjQLZSR2zABaOJbyHArHNpoxH4=) 2: 3130332e3138332e3135342e302f32332d3234203d3e2037343833.roa (hash: nxCey52fLbG4LlN5x0FYINGVY7pYCO3Y1zJpZMqwSeA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c9:c2:92:ed:a4:1b:3b:da:83:21:a6:b1:f8:d0:11:2a:3a:1d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D50476E80CFF23F1675B2EF9B63BB103C893243 Validity Not Before: Jul 23 15:43:09 2026 GMT Not After : Jul 24 17:48:09 2026 GMT Subject: CN=8A8DE363BF7992363F51C98C3237ABFB3456D73F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b2:95:36:77:a1:57:01:34:c5:6d:df:73:a1: 17:43:66:4c:49:bc:3a:b2:a8:ef:b5:da:62:fc:c7: 99:3d:d5:7c:fb:d3:64:d8:ea:61:a4:d4:9e:1d:a9: 0b:b5:47:f1:44:98:51:b7:b2:e2:40:e9:57:90:cc: 92:77:b6:0c:09:22:2f:ac:77:c7:92:52:62:60:82: 90:d3:24:4f:ad:5a:48:22:4a:fd:cc:58:da:37:22: e1:83:5c:d2:7d:12:52:3d:c1:03:40:e2:ba:40:76: 05:12:07:39:5f:ec:fd:29:25:f5:74:33:cd:e8:99: 23:6a:9c:1a:d1:f5:6c:d4:40:4b:7a:62:07:7b:34: af:76:f1:e1:47:d2:83:c9:83:9f:a7:36:37:80:7a: 48:9d:33:3e:e1:b6:4e:82:ad:60:1b:84:fb:e3:b0: bd:2a:b1:f9:b1:64:61:07:7f:0f:4c:f9:73:51:2e: 30:b4:17:c6:33:3c:a9:23:a6:2d:69:01:67:0c:53: 40:52:1e:f3:30:2b:9d:c2:65:9c:d7:d9:04:ec:75: 8a:80:e5:92:bd:ef:8d:55:13:6f:ae:61:22:9d:af: a9:4e:f3:6e:16:de:17:c7:5e:26:19:32:71:47:8c: 16:df:a1:1e:1f:fa:3b:a8:72:50:bd:d4:42:8a:ac: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:E3:63:BF:79:92:36:3F:51:C9:8C:32:37:AB:FB:34:56:D7:3F X509v3 Authority Key Identifier: keyid:2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:53:a8:f2:0a:37:79:62:6e:a8:38:3f:ff:82:bf:ba:c6:12: ab:ce:87:61:32:45:2a:5b:d1:91:6c:a4:97:97:d5:6b:3a:07: 74:76:48:62:61:82:6e:a8:87:78:79:a9:51:4c:1f:02:c1:c7: 30:c9:ff:b3:3b:6d:f8:4b:5a:24:a0:ed:28:74:f9:87:dd:8e: 2f:30:d3:e3:7f:ff:89:28:c3:ad:8b:e8:36:2e:2f:51:a6:f7: d0:a7:a0:b0:12:f9:9d:46:58:27:cb:5c:19:1e:bb:e3:ba:cf: 44:27:c9:28:16:aa:98:24:43:6e:2a:ca:b2:7f:d8:51:85:42: 88:6f:cc:b2:15:5e:1a:03:99:26:83:20:3a:9e:b7:8b:3f:ee: c1:84:a9:62:ef:b7:d5:05:86:68:98:ed:7c:54:75:0d:17:84: 70:8d:7c:b8:cb:a6:ae:96:3c:ab:f4:0a:6d:be:af:37:c7:8a: c8:13:1d:4b:b2:1d:ae:67:fb:7b:59:10:01:c1:ae:73:1f:f9: 4f:19:a0:e2:d8:c5:7b:5b:a9:16:c9:ff:2a:d3:37:87:81:6d: b8:92:ee:d9:87:4b:10:2b:d8:99:ee:59:79:8a:d3:80:4a:07: 7e:c8:53:d1:5d:22:80:fa:41:60:73:c7:99:d7:d9:c2:1c:0b: 7b:26:a7:b6 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUIcnCku2kGzvagyGmsfjQESo6HaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MDQ3NkU4MENGRjIzRjE2NzVCMkVGOUI2M0JCMTAz Qzg5MzI0MzAeFw0yNjA3MjMxNTQzMDlaFw0yNjA3MjQxNzQ4MDlaMDMxMTAvBgNV BAMTKDhBOERFMzYzQkY3OTkyMzYzRjUxQzk4QzMyMzdBQkZCMzQ1NkQ3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbspU2d6FXATTFbd9zoRdDZkxJ vDqyqO+12mL8x5k91Xz702TY6mGk1J4dqQu1R/FEmFG3suJA6VeQzJJ3tgwJIi+s d8eSUmJggpDTJE+tWkgiSv3MWNo3IuGDXNJ9ElI9wQNA4rpAdgUSBzlf7P0pJfV0 M83omSNqnBrR9WzUQEt6Ygd7NK928eFH0oPJg5+nNjeAekidMz7htk6CrWAbhPvj sL0qsfmxZGEHfw9M+XNRLjC0F8YzPKkjpi1pAWcMU0BSHvMwK53CZZzX2QTsdYqA 5ZK9741VE2+uYSKdr6lO824W3hfHXiYZMnFHjBbfoR4f+juoclC91EKKrO/ZAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUio3jY795kjY/UcmMMjer+zRW1z8wHwYDVR0j BBgwFoAULVBHboDP8j8WdbLvm2O7EDyJMkMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1lWQy8w LzJENTA0NzZFODBDRkYyM0YxNjc1QjJFRjlCNjNCQjEwM0M4OTMyNDMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMkQ1MDQ3NkU4MENGRjIzRjE2NzVCMkVGOUI2M0JC MTAzQzg5MzI0My5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NZVkMvMC8yRDUwNDc2RTgwQ0ZGMjNG MTY3NUIyRUY5QjYzQkIxMDNDODkzMjQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFOo8go3eWJuqDg/ /4K/usYSq86HYTJFKlvRkWykl5fVazoHdHZIYmGCbqiHeHmpUUwfAsHHMMn/sztt +EtaJKDtKHT5h92OLzDT43//iSjDrYvoNi4vUab30KegsBL5nUZYJ8tcGR6747rP RCfJKBaqmCRDbirKsn/YUYVCiG/MshVeGgOZJoMgOp63iz/uwYSpYu+31QWGaJjt fFR1DReEcI18uMumrpY8q/QKbb6vN8eKyBMdS7Idrmf7e1kQAcGucx/5Txmg4tjF e1upFsn/KtM3h4FtuJLu2YdLECvYme5ZeYrTgEoHfshT0V0igPpBYHPHmdfZwhwL eyantg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:27:38 2026 by rpki-client