$ rpki-client -vvf rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft File: 9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft (raw, json) Hash identifier: /pyY8mACzSgIvt66U40XutDkr9zstDhp7R20cFwIY2o= Subject key identifier: 70:B0:41:53:74:68:9D:49:FF:3F:85:7A:FA:4A:D4:E8:3E:0A:ED:C1 Authority key identifier: 9D:00:7D:37:3F:38:1C:CA:59:6E:CE:20:FC:27:E8:D7:F7:2B:D5:C2 Certificate issuer: /CN=9D007D373F381CCA596ECE20FC27E8D7F72BD5C2 Certificate serial: 5D30D2D11C400D5B1FB0FD92A3FDE65116D8D093 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft Manifest number: 66 Signing time: Fri 24 Jul 2026 06:32:50 +0000 Manifest this update: Fri 24 Jul 2026 06:27:50 +0000 Manifest next update: Sat 25 Jul 2026 07:54:50 +0000 Files and hashes: 1: 9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl (hash: 0z6m/r349aI45mHl30TAV4UZ2xED1qze3RTY87LbEm0=) 2: 323430363a663334303a3a2f33322d3634203d3e203338383432.roa (hash: dPU2RCL9922koNIK4EbftiZXNxbxs5ADbxLPZLggc34=) 3: 3130332e3136302e3232362e302f32332d3234203d3e20313331363539.roa (hash: E3rZgHSz1Z/QlxuFQ/uZkBfovj2HHfCX638SO+t2sg0=) 4: 3130332e3136302e3232362e302f32332d3234203d3e203338383432.roa (hash: fXBUwxrpMNifp4MO+znwtVxrCjA2c4pDgmAW0x6+dMc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:30:d2:d1:1c:40:0d:5b:1f:b0:fd:92:a3:fd:e6:51:16:d8:d0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D007D373F381CCA596ECE20FC27E8D7F72BD5C2 Validity Not Before: Jul 24 06:27:50 2026 GMT Not After : Jul 25 07:54:50 2026 GMT Subject: CN=70B0415374689D49FF3F857AFA4AD4E83E0AEDC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:54:84:bb:db:74:c8:31:aa:12:a6:54:94: a8:01:22:26:bf:45:45:27:44:f4:5f:bf:ea:87:9c: 56:0f:4f:04:b9:54:ed:1e:ed:fa:c0:d4:f8:b4:54: cb:5d:3a:9c:66:27:54:74:45:9d:ad:b1:ec:de:49: fd:0f:3c:87:34:6d:79:51:60:11:e5:ff:6e:47:4e: 91:e1:bf:44:f4:96:cb:dc:aa:f1:a7:ed:90:82:89: c6:d2:bb:d5:ef:8b:c2:4c:98:a6:ec:dd:76:60:1e: e5:73:21:d7:0f:c0:f8:03:a9:de:7c:6a:0a:87:ee: 55:64:68:6e:fc:07:8e:8d:90:0b:b1:64:9f:36:0c: f4:91:54:81:da:3e:1b:d0:1e:f5:9e:3d:d1:eb:15: 75:5e:14:b7:39:66:52:5e:03:d0:97:61:1f:e0:cc: a1:1f:f0:c0:3c:98:fc:87:65:50:41:cb:4e:e1:df: a6:89:cb:fc:a0:9d:6d:fb:03:8e:73:ee:e6:0b:60: 13:fe:87:f4:67:98:cc:2b:49:af:94:88:2a:24:03: bd:af:60:7e:b6:90:d3:6f:80:20:de:57:81:a1:72: 93:ed:e9:53:87:db:2c:22:7c:6e:30:d3:da:26:a5: 63:89:3d:96:14:87:a4:c0:31:aa:a4:2a:8b:1f:2d: cb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B0:41:53:74:68:9D:49:FF:3F:85:7A:FA:4A:D4:E8:3E:0A:ED:C1 X509v3 Authority Key Identifier: keyid:9D:00:7D:37:3F:38:1C:CA:59:6E:CE:20:FC:27:E8:D7:F7:2B:D5:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a5:62:b5:0f:d1:0b:48:8a:28:cf:03:08:59:4a:e7:b0:92: de:01:df:8e:11:37:10:8a:e6:26:2b:8b:59:d9:4e:a8:c9:b5: a8:4c:3c:e8:28:89:ad:cf:dd:2b:b6:a2:6e:7d:d2:28:68:fa: da:f5:45:20:e6:32:d2:29:f5:9b:3d:8d:6a:c5:f4:6e:e3:c3: 97:19:ac:3c:ea:4b:54:2a:b6:5f:ab:9a:02:fc:39:11:7e:5d: 92:5a:a3:53:c6:8a:37:aa:71:f2:e4:95:8a:f3:81:9e:6e:38: 1e:7d:67:bc:a8:38:f3:99:56:f4:f5:7c:72:9e:63:97:3f:42: 79:60:66:10:cb:52:d6:87:4a:be:95:92:55:b9:5f:c4:e6:e2: 14:e7:f0:be:b0:92:7b:98:63:dc:92:df:e9:45:41:86:b3:fe: 5e:d8:38:90:ae:9f:d4:e7:17:21:d5:c9:7f:98:50:8c:d9:78: 5d:83:03:ec:61:7c:7f:a1:37:d5:8e:0f:43:71:35:cc:fd:c2: 1c:5f:d6:f6:e7:23:f5:d0:a2:b1:41:01:bd:fd:8d:a2:4f:35: 19:6a:12:eb:de:91:67:bb:72:3e:46:f9:f2:ec:a9:7d:18:3f: 03:4b:da:cd:8c:87:ad:05:9f:fa:92:1c:31:91:d6:ff:a8:61: 64:3e:41:2c -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUXTDS0RxADVsfsP2So/3mURbY0JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMDdEMzczRjM4MUNDQTU5NkVDRTIwRkMyN0U4RDdG NzJCRDVDMjAeFw0yNjA3MjQwNjI3NTBaFw0yNjA3MjUwNzU0NTBaMDMxMTAvBgNV BAMTKDcwQjA0MTUzNzQ2ODlENDlGRjNGODU3QUZBNEFENEU4M0UwQUVEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXN1SEu9t0yDGqEqZUlKgBIia/ RUUnRPRfv+qHnFYPTwS5VO0e7frA1Pi0VMtdOpxmJ1R0RZ2tsezeSf0PPIc0bXlR YBHl/25HTpHhv0T0lsvcqvGn7ZCCicbSu9Xvi8JMmKbs3XZgHuVzIdcPwPgDqd58 agqH7lVkaG78B46NkAuxZJ82DPSRVIHaPhvQHvWePdHrFXVeFLc5ZlJeA9CXYR/g zKEf8MA8mPyHZVBBy07h36aJy/ygnW37A45z7uYLYBP+h/RnmMwrSa+UiCokA72v YH62kNNvgCDeV4GhcpPt6VOH2ywifG4w09ompWOJPZYUh6TAMaqkKosfLctZAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUcLBBU3RonUn/P4V6+krU6D4K7cEwHwYDVR0j BBgwFoAUnQB9Nz84HMpZbs4g/Cfo1/cr1cIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE5TTkVU LzAvOUQwMDdEMzczRjM4MUNDQTU5NkVDRTIwRkMyN0U4RDdGNzJCRDVDMi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS85RDAwN0QzNzNGMzgxQ0NBNTk2RUNFMjBGQzI3 RThEN0Y3MkJENUMyLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE5TTkVULzAvOUQwMDdEMzczRjM4 MUNDQTU5NkVDRTIwRkMyN0U4RDdGNzJCRDVDMi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD6lYrUP0QtI iijPAwhZSuewkt4B344RNxCK5iYri1nZTqjJtahMPOgoia3P3Su2om590iho+tr1 RSDmMtIp9Zs9jWrF9G7jw5cZrDzqS1Qqtl+rmgL8ORF+XZJao1PGijeqcfLklYrz gZ5uOB59Z7yoOPOZVvT1fHKeY5c/QnlgZhDLUtaHSr6VklW5X8Tm4hTn8L6wknuY Y9yS3+lFQYaz/l7YOJCun9TnFyHVyX+YUIzZeF2DA+xhfH+hN9WOD0NxNcz9whxf 1vbnI/XQorFBAb39jaJPNRlqEuvekWe7cj5G+fLsqX0YPwNL2s2Mh60Fn/qSHDGR 1v+oYWQ+QSw= -----END CERTIFICATE-----Generated at Fri Jul 24 15:36:22 2026 by rpki-client