$ rpki-client -vvf rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft File: 5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft (raw, json) Hash identifier: uvUaY3PhbWjH1mJ86RLaUns4+lm/AB+80UbSJaZNt6s= Subject key identifier: 46:63:D8:54:9F:F0:3D:0E:2B:B7:D4:B8:D8:01:D3:35:3B:DE:46:DA Authority key identifier: 5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C Certificate issuer: /CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C Certificate serial: 60CCB64C8700437A51D95DA853C0E55976DEAC50 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 18:41:29 +0000 Manifest this update: Thu 23 Jul 2026 18:36:29 +0000 Manifest next update: Fri 24 Jul 2026 21:44:29 +0000 Files and hashes: 1: 32372e302e3135322e302f32322d3234203d3e20313331363037.roa (hash: DvXwVOOH787nnj2iKzFJiQBBroV8f+Ma+r+Jza0TzM4=) 2: 5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl (hash: GIUnpPQzHeCxmybiTTXc5rjkaLR+4mk21V0liHodpqw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:cc:b6:4c:87:00:43:7a:51:d9:5d:a8:53:c0:e5:59:76:de:ac:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C Validity Not Before: Jul 23 18:36:29 2026 GMT Not After : Jul 24 21:44:29 2026 GMT Subject: CN=4663D8549FF03D0E2BB7D4B8D801D3353BDE46DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:85:0a:11:98:d4:2d:0e:b2:bd:83:89:32:92: 3c:5c:cb:f2:46:ca:bb:a2:e4:91:af:45:85:86:57: db:cb:3c:71:4d:1c:90:fa:04:b8:2d:1b:8a:a5:6a: cb:65:5f:33:55:39:bc:cc:ba:d2:1c:02:49:8a:d0: b4:82:8f:b3:63:ca:72:cc:b7:ce:3c:ee:c1:84:35: 8d:12:53:d4:86:14:b4:d8:1f:76:29:af:92:50:b9: 54:ac:5f:0e:ff:1b:dc:3d:11:7f:28:8c:b9:75:b3: 0e:1e:49:23:d6:38:30:43:93:85:08:3e:5a:9c:39: 40:66:6b:98:46:ab:1c:de:c8:21:51:0a:76:ef:54: 49:32:40:00:ce:36:65:0c:fd:c3:20:a3:67:06:93: 6f:42:ce:e0:cd:22:40:b8:b5:21:09:fc:8b:2a:56: c9:0b:d2:f6:19:cf:f0:9c:ad:f7:2e:0d:14:fd:16: 3e:0e:4a:8e:14:bf:ea:4a:e5:a4:17:83:97:56:e2: ee:79:39:a8:02:17:be:c4:f7:06:2d:cf:e6:91:d1: 7f:72:b2:50:57:04:43:d9:34:df:c8:cd:61:4c:a1: be:f0:05:7e:01:e5:ef:c1:23:13:c0:f7:80:e6:df: e2:da:b3:b9:8c:7c:9c:7e:dd:4a:98:21:c4:48:10: 4f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:63:D8:54:9F:F0:3D:0E:2B:B7:D4:B8:D8:01:D3:35:3B:DE:46:DA X509v3 Authority Key Identifier: keyid:5A:4C:57:23:25:82:51:A2:F2:23:37:EC:5A:BE:9F:2B:1A:E2:FB:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCTV/0/5A4C5723258251A2F22337EC5ABE9F2B1AE2FB4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:43:57:3c:11:e5:3e:ac:38:c9:51:c5:18:c1:2f:03:9d:29: 2a:e4:d0:37:01:cf:2c:a1:f1:da:f0:88:2a:4f:97:02:1a:3a: 08:b8:9a:6c:62:11:e4:f4:4b:e3:2e:8e:3e:ab:e6:7f:6e:74: 85:14:08:d2:a3:bb:5d:8b:98:19:7e:ca:a4:f9:19:f8:ac:05: 18:0e:fa:eb:a7:13:70:61:88:a0:ef:4e:35:37:75:af:d0:71: 9f:bb:d0:37:5d:3b:19:59:c9:a9:18:33:5e:1d:f9:95:96:f2: bd:07:90:10:b7:f0:40:e5:e0:62:f4:53:90:45:68:a4:37:a0: 4d:dc:25:17:34:da:fc:a7:fb:5b:e8:9d:b8:51:bd:4e:ab:91: 91:af:fc:91:09:c2:1e:5b:10:a0:e0:46:ba:15:41:ad:78:6a: 3d:bc:4e:15:1c:04:52:0d:cf:38:1d:16:4c:90:ec:61:69:38: 7e:b5:07:60:f2:f5:82:50:1a:17:94:e6:ae:86:05:c6:fb:37: e3:2a:45:75:27:80:74:61:16:ad:15:c4:76:e4:f1:0e:55:46: b6:3c:c7:95:19:ee:d6:ab:4f:59:10:21:a2:f4:fa:1b:ca:9b: 3d:3e:35:1e:b4:71:e1:4c:72:6e:83:24:11:44:9a:bc:ad:ea: b5:bb:e7:11 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUYMy2TIcAQ3pR2V2oU8DlWXberFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0QzU3MjMyNTgyNTFBMkYyMjMzN0VDNUFCRTlGMkIx QUUyRkI0QzAeFw0yNjA3MjMxODM2MjlaFw0yNjA3MjQyMTQ0MjlaMDMxMTAvBgNV BAMTKDQ2NjNEODU0OUZGMDNEMEUyQkI3RDRCOEQ4MDFEMzM1M0JERTQ2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhhQoRmNQtDrK9g4kykjxcy/JG yrui5JGvRYWGV9vLPHFNHJD6BLgtG4qlastlXzNVObzMutIcAkmK0LSCj7NjynLM t8487sGENY0SU9SGFLTYH3Ypr5JQuVSsXw7/G9w9EX8ojLl1sw4eSSPWODBDk4UI PlqcOUBma5hGqxzeyCFRCnbvVEkyQADONmUM/cMgo2cGk29CzuDNIkC4tSEJ/Isq VskL0vYZz/CcrfcuDRT9Fj4OSo4Uv+pK5aQXg5dW4u55OagCF77E9wYtz+aR0X9y slBXBEPZNN/IzWFMob7wBX4B5e/BIxPA94Dm3+Las7mMfJx+3UqYIcRIEE/7AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQURmPYVJ/wPQ4rt9S42AHTNTveRtowHwYDVR0j BBgwFoAUWkxXIyWCUaLyIzfsWr6fKxri+0wwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENUVi8w LzVBNEM1NzIzMjU4MjUxQTJGMjIzMzdFQzVBQkU5RjJCMUFFMkZCNEMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNUE0QzU3MjMyNTgyNTFBMkYyMjMzN0VDNUFCRTlG MkIxQUUyRkI0Qy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RDVFYvMC81QTRDNTcyMzI1ODI1MUEy RjIyMzM3RUM1QUJFOUYyQjFBRTJGQjRDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAENXPBHlPqw4yVHF GMEvA50pKuTQNwHPLKHx2vCIKk+XAho6CLiabGIR5PRL4y6OPqvmf250hRQI0qO7 XYuYGX7KpPkZ+KwFGA7666cTcGGIoO9ONTd1r9Bxn7vQN107GVnJqRgzXh35lZby vQeQELfwQOXgYvRTkEVopDegTdwlFzTa/Kf7W+iduFG9TquRka/8kQnCHlsQoOBG uhVBrXhqPbxOFRwEUg3POB0WTJDsYWk4frUHYPL1glAaF5TmroYFxvs34ypFdSeA dGEWrRXEduTxDlVGtjzHlRnu1qtPWRAhovT6G8qbPT41HrRx4UxyboMkEUSavK3q tbvnEQ== -----END CERTIFICATE-----Generated at Fri Jul 24 06:55:52 2026 by rpki-client