$ rpki-client -vvf rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft File: 67919719E801E94CCA89D7569D37B67D252A261F.mft (raw, json) Hash identifier: 7JbpIxbEWiDFNnQIZcZhFe55kWKmvrewZe+i0IiwqMw= Subject key identifier: 53:4F:D6:03:3C:19:31:A3:59:87:5C:56:34:22:7C:B3:6B:CF:19:33 Authority key identifier: 67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F Certificate issuer: /CN=67919719E801E94CCA89D7569D37B67D252A261F Certificate serial: 4839325BC510598ACF30DC91D3C3CD4554C111DD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft Manifest number: 04 Signing time: Tue 12 May 2026 13:06:08 +0000 Manifest this update: Tue 12 May 2026 13:01:08 +0000 Manifest next update: Wed 13 May 2026 14:30:08 +0000 Files and hashes: 1: 323430303a353065303a3a2f33322d3634203d3e203633383933.roa (hash: W+Ffc6VUEComE7wKXCSRqfcLvgJdlvoiPW+6XMV3r6s=) 2: 67919719E801E94CCA89D7569D37B67D252A261F.crl (hash: tkEGjTqurXR6A081sglBtABKJrbGDmmrSEGh/daCY0o=) 3: 3130332e3138302e31382e302f32332d3234203d3e203633383933.roa (hash: YHu6xUiyV20ecZfxOWBbvKCz1hQvQ5fZsJlGMsXnUjk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:39:32:5b:c5:10:59:8a:cf:30:dc:91:d3:c3:cd:45:54:c1:11:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67919719E801E94CCA89D7569D37B67D252A261F Validity Not Before: May 12 13:01:08 2026 GMT Not After : May 13 14:30:08 2026 GMT Subject: CN=534FD6033C1931A359875C5634227CB36BCF1933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:17:24:a8:bd:f2:fe:b4:78:59:8e:bf:90: e7:76:62:1f:60:fa:05:fe:cd:da:4f:68:64:31:a5: e6:dd:28:1f:36:65:a9:17:65:f3:33:bd:d2:25:ba: 1a:6b:6a:be:0c:e5:e5:e6:f5:d6:05:34:72:62:36: 9b:73:0b:4d:8d:18:cc:ea:29:dd:7f:d8:03:41:01: 97:8f:58:95:16:d4:07:dc:e6:f6:80:d0:a4:94:43: 57:74:77:39:4c:6e:3f:79:c4:b5:52:d9:fb:66:37: 82:62:4f:71:cf:46:ef:b7:83:9f:66:48:84:9c:48: 37:d5:29:8f:99:f0:2f:ac:83:f7:59:ae:b8:94:d2: 2c:50:5b:69:1d:b8:0f:35:70:2c:46:c7:2a:19:2b: c4:c7:f3:3a:aa:5b:4d:61:bb:af:d7:89:99:ed:89: c4:ac:9c:2a:98:6f:17:ca:6f:dd:e4:59:65:be:3b: d1:08:ca:46:bf:d2:51:28:c6:d4:ba:da:8f:47:f8: 08:91:8c:3c:9a:51:f1:3f:95:52:8c:7d:3f:58:f0: ef:15:38:86:e3:27:ac:26:e6:b2:e9:05:9b:44:4c: b9:ed:28:ef:95:f3:76:65:e1:e1:87:1d:c3:24:d1: 67:87:4b:db:3f:44:09:ee:e7:64:1b:07:47:dd:a3: d4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4F:D6:03:3C:19:31:A3:59:87:5C:56:34:22:7C:B3:6B:CF:19:33 X509v3 Authority Key Identifier: keyid:67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5e:6e:b7:3b:8d:26:f8:e9:d8:6e:01:9b:d3:ee:21:5f:55: f2:70:3b:de:02:e5:30:e0:20:b9:44:38:92:c3:a3:65:86:ce: ee:a3:ae:a1:45:25:e1:0a:6b:f0:17:bf:f6:f9:77:5d:c6:1c: 93:96:8a:f9:d7:e0:34:80:05:41:07:d7:50:36:21:1b:62:84: f3:ac:70:db:f6:ae:37:bc:eb:1a:95:eb:89:45:fd:ed:cd:7d: aa:6c:cc:33:43:fc:2f:17:87:b7:80:b7:98:d4:e8:07:88:f3: e4:27:9a:75:8b:29:4c:40:47:bb:d8:44:31:1e:89:8b:fb:cc: f3:02:fc:d5:91:06:ef:c5:eb:44:22:4a:df:84:f6:d3:91:00: a2:92:c5:5d:0e:12:9f:a3:ad:1e:66:f4:74:5c:70:5c:b8:88: b4:12:23:20:28:dd:15:b8:a4:0e:06:7c:45:94:55:26:29:22: 27:4b:cd:43:bc:31:ad:94:ca:e5:a6:a3:ba:bc:6d:15:9a:5a: 1b:04:e0:b6:7a:d0:a4:29:f5:8c:0a:65:4c:8d:73:3c:75:ef: 51:c4:04:dc:2c:30:ad:f0:43:3a:d2:44:7c:74:64:94:10:b3: 7f:61:50:33:85:b8:e2:eb:67:d2:62:2f:cc:2a:91:3c:e1:89: 4b:14:2b:bb -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUSDkyW8UQWYrPMNyR08PNRVTBEd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2OUQzN0I2N0Qy NTJBMjYxRjAeFw0yNjA1MTIxMzAxMDhaFw0yNjA1MTMxNDMwMDhaMDMxMTAvBgNV BAMTKDUzNEZENjAzM0MxOTMxQTM1OTg3NUM1NjM0MjI3Q0IzNkJDRjE5MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSRckqL3y/rR4WY6/kOd2Yh9g +gX+zdpPaGQxpebdKB82ZakXZfMzvdIluhprar4M5eXm9dYFNHJiNptzC02NGMzq Kd1/2ANBAZePWJUW1Afc5vaA0KSUQ1d0dzlMbj95xLVS2ftmN4JiT3HPRu+3g59m SIScSDfVKY+Z8C+sg/dZrriU0ixQW2kduA81cCxGxyoZK8TH8zqqW01hu6/XiZnt icSsnCqYbxfKb93kWWW+O9EIyka/0lEoxtS62o9H+AiRjDyaUfE/lVKMfT9Y8O8V OIbjJ6wm5rLpBZtETLntKO+V83Zl4eGHHcMk0WeHS9s/RAnu52QbB0fdo9SrAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUU0/WAzwZMaNZh1xWNCJ8s2vPGTMwHwYDVR0j BBgwFoAUZ5GXGegB6UzKiddWnTe2fSUqJh8wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENDMTIy MzM0Mi8wLzY3OTE5NzE5RTgwMUU5NENDQTg5RDc1NjlEMzdCNjdEMjUyQTI2MUYu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2 OUQzN0I2N0QyNTJBMjYxRi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RDQzEyMjMzNDIvMC82Nzkx OTcxOUU4MDFFOTRDQ0E4OUQ3NTY5RDM3QjY3RDI1MkEyNjFGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA RF5utzuNJvjp2G4Bm9PuIV9V8nA73gLlMOAguUQ4ksOjZYbO7qOuoUUl4Qpr8Be/ 9vl3XcYck5aK+dfgNIAFQQfXUDYhG2KE86xw2/auN7zrGpXriUX97c19qmzMM0P8 LxeHt4C3mNToB4jz5CeadYspTEBHu9hEMR6Ji/vM8wL81ZEG78XrRCJK34T205EA opLFXQ4Sn6OtHmb0dFxwXLiItBIjICjdFbikDgZ8RZRVJikiJ0vNQ7wxrZTK5aaj urxtFZpaGwTgtnrQpCn1jAplTI1zPHXvUcQE3CwwrfBDOtJEfHRklBCzf2FQM4W4 4utn0mIvzCqRPOGJSxQruw== -----END CERTIFICATE-----Generated at Wed May 13 03:55:25 2026 by rpki-client