$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft File: D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft (raw, json) Hash identifier: +cBMgmV0e55VRvnEg3U3G7vfAoGffLmWeaPNrcYYgmc= Subject key identifier: 05:1A:14:45:0D:FE:2D:21:1A:62:D2:E8:08:29:00:B7:FC:4B:E4:6E Authority key identifier: D7:4E:5E:C5:E6:22:5B:99:9D:92:3B:D3:44:97:A3:06:0E:DA:0B:3B Certificate issuer: /CN=D74E5EC5E6225B999D923BD34497A3060EDA0B3B Certificate serial: 3FE2E6622DCFCC7EE807ADDE9D8C52F567F39767 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft Manifest number: 04 Signing time: Tue 12 May 2026 13:06:10 +0000 Manifest this update: Tue 12 May 2026 13:01:10 +0000 Manifest next update: Wed 13 May 2026 13:40:10 +0000 Files and hashes: 1: D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl (hash: MziKXWTes5nqsp5TfMtfSU35znIrT9VBBDKOiBoogCU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e2:e6:62:2d:cf:cc:7e:e8:07:ad:de:9d:8c:52:f5:67:f3:97:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D74E5EC5E6225B999D923BD34497A3060EDA0B3B Validity Not Before: May 12 13:01:10 2026 GMT Not After : May 13 13:40:10 2026 GMT Subject: CN=051A14450DFE2D211A62D2E8082900B7FC4BE46E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:08:f7:e9:ec:28:25:45:87:b1:9a:4f:aa:f8: 36:04:42:67:22:f8:56:3e:44:8f:b4:1e:c3:d1:ad: d1:b2:fd:e0:0b:2a:c9:9a:1c:0a:c6:e6:30:56:06: 39:56:97:52:9c:8d:1e:5a:20:0d:f6:70:af:1d:a9: 78:ce:70:7d:be:5f:ea:0c:50:17:30:8b:27:89:1e: cc:70:aa:8f:07:0b:dd:15:94:a8:e9:ce:6d:87:8e: 43:6b:6f:55:31:ab:25:3f:1d:46:86:88:89:e9:45: 78:ec:64:b0:70:a9:3c:95:94:8b:23:b0:dd:73:0a: 2f:3d:af:e7:f8:ac:57:50:36:07:6e:70:88:cf:72: 07:e3:dd:35:36:9a:2e:56:ef:ca:10:68:c8:21:61: 6f:e1:71:5d:2f:f9:11:28:fc:d6:be:a0:5b:c3:71: 73:9d:d6:8d:83:01:98:9b:49:5c:8b:1a:59:b2:f3: 92:a5:f7:8b:c1:68:15:ab:fb:f6:ee:ea:87:22:c5: be:cf:bf:ec:9c:a9:a3:c6:93:9b:22:f4:e3:b8:15: 1e:8a:e1:d3:da:c7:9f:7f:b1:8e:3a:d5:d3:dd:46: 77:dd:a0:63:3a:c8:86:6e:2e:07:36:cc:a6:36:f1: 09:0a:b0:a8:6e:f1:01:b1:cf:67:aa:d2:4f:5c:f7: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1A:14:45:0D:FE:2D:21:1A:62:D2:E8:08:29:00:B7:FC:4B:E4:6E X509v3 Authority Key Identifier: keyid:D7:4E:5E:C5:E6:22:5B:99:9D:92:3B:D3:44:97:A3:06:0E:DA:0B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:bd:bb:85:20:00:ef:69:34:40:1d:28:4c:45:b8:7e:ae:4c: fa:e3:10:40:d4:4b:86:57:e7:e7:a0:5f:dc:22:12:47:ec:8d: 40:1c:56:84:2f:5d:31:91:05:f9:06:df:dd:6c:fb:c7:28:84: 2a:c4:d6:a1:59:ec:d9:73:cc:08:99:98:ed:41:e2:1c:6c:cf: b7:b6:52:aa:fd:e0:35:8a:42:f3:b7:27:52:e3:e4:da:77:e8: de:8e:b8:76:af:05:8d:c4:e0:65:b7:16:5b:b7:c8:f2:09:3b: ae:b1:5a:18:a8:5f:ee:70:75:9c:e6:97:3b:93:fc:4d:52:7e: 18:85:45:1a:ed:e6:55:a9:82:26:60:55:9a:5c:8d:5d:49:b0: fb:e3:3a:52:f9:ba:0b:1d:cb:b8:6b:40:b4:3c:66:4a:f3:8b: f0:08:84:42:8a:8e:09:df:68:1d:d6:0e:bd:2b:80:36:48:aa: 6e:a8:00:3d:ec:15:95:ef:90:7e:f0:c0:b3:13:3f:07:8a:08: 2c:b6:2c:5b:d4:a8:44:94:6e:1e:eb:d9:ea:5c:32:35:11:d0: f6:5f:58:68:83:a3:a8:71:75:07:94:97:f4:4b:a0:0c:06:d7: 64:1a:e3:4b:e2:a3:88:26:43:10:a8:d3:b9:43:b5:9e:44:0c: 0a:f2:41:f1 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUP+LmYi3PzH7oB63enYxS9Wfzl2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc0RTVFQzVFNjIyNUI5OTlEOTIzQkQzNDQ5N0EzMDYw RURBMEIzQjAeFw0yNjA1MTIxMzAxMTBaFw0yNjA1MTMxMzQwMTBaMDMxMTAvBgNV BAMTKDA1MUExNDQ1MERGRTJEMjExQTYyRDJFODA4MjkwMEI3RkM0QkU0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKCPfp7CglRYexmk+q+DYEQmci +FY+RI+0HsPRrdGy/eALKsmaHArG5jBWBjlWl1KcjR5aIA32cK8dqXjOcH2+X+oM UBcwiyeJHsxwqo8HC90VlKjpzm2HjkNrb1UxqyU/HUaGiInpRXjsZLBwqTyVlIsj sN1zCi89r+f4rFdQNgducIjPcgfj3TU2mi5W78oQaMghYW/hcV0v+REo/Na+oFvD cXOd1o2DAZibSVyLGlmy85Kl94vBaBWr+/bu6ocixb7Pv+ycqaPGk5si9OO4FR6K 4dPax59/sY461dPdRnfdoGM6yIZuLgc2zKY28QkKsKhu8QGxz2eq0k9c93jzAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUBRoURQ3+LSEaYtLoCCkAt/xL5G4wHwYDVR0j BBgwFoAU105exeYiW5mdkjvTRJejBg7aCzswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO S1RXLzAvRDc0RTVFQzVFNjIyNUI5OTlEOTIzQkQzNDQ5N0EzMDYwRURBMEIzQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9ENzRFNUVDNUU2MjI1Qjk5OUQ5MjNCRDM0 NDk3QTMwNjBFREEwQjNCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1RXLzAvRDc0RTVF QzVFNjIyNUI5OTlEOTIzQkQzNDQ5N0EzMDYwRURBMEIzQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKO9 u4UgAO9pNEAdKExFuH6uTPrjEEDUS4ZX5+egX9wiEkfsjUAcVoQvXTGRBfkG391s +8cohCrE1qFZ7NlzzAiZmO1B4hxsz7e2Uqr94DWKQvO3J1Lj5Np36N6OuHavBY3E 4GW3Flu3yPIJO66xWhioX+5wdZzmlzuT/E1SfhiFRRrt5lWpgiZgVZpcjV1JsPvj OlL5ugsdy7hrQLQ8Zkrzi/AIhEKKjgnfaB3WDr0rgDZIqm6oAD3sFZXvkH7wwLMT PweKCCy2LFvUqESUbh7r2epcMjUR0PZfWGiDo6hxdQeUl/RLoAwG12Qa40vio4gm QxCo07lDtZ5EDAryQfE= -----END CERTIFICATE-----Generated at Wed May 13 05:25:32 2026 by rpki-client