$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft File: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft (raw, json) Hash identifier: vromEgjANocyTav9DsxRFMAY4F2pmEKshCZzI1GV2H0= Subject key identifier: C4:E1:62:E0:1D:FA:3D:A2:2A:1E:BE:6C:D4:C8:4D:BD:70:18:AF:E1 Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94 Certificate issuer: /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94 Certificate serial: 68F73F38CB8D31951DE968EF21519E655DEB6D4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:07:19 +0000 Manifest this update: Fri 24 Jul 2026 02:02:19 +0000 Manifest next update: Sat 25 Jul 2026 02:26:19 +0000 Files and hashes: 1: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (hash: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=) 2: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (hash: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=) 3: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl (hash: bcWV1f62J7QhgghSOe5V7Ao5i/YFIoSyjgdFzi0Afng=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f7:3f:38:cb:8d:31:95:1d:e9:68:ef:21:51:9e:65:5d:eb:6d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94 Validity Not Before: Jul 24 02:02:19 2026 GMT Not After : Jul 25 02:26:19 2026 GMT Subject: CN=C4E162E01DFA3DA22A1EBE6CD4C84DBD7018AFE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:d9:cd:60:9b:57:59:b2:cf:9a:61:92:0f: 60:c4:35:3f:a6:59:13:ca:9d:2b:89:9c:4c:22:11: 36:d4:16:b3:21:f0:f7:17:8a:71:34:60:d6:e7:49: 37:3f:3f:e2:a3:5a:8f:7a:bc:f4:99:92:f9:b5:79: 8b:8f:b4:4a:90:a4:47:1f:98:88:5f:4e:51:4a:b1: 35:ba:e0:e2:fe:d8:29:04:94:ab:da:29:c6:c0:6a: 4f:83:63:a1:1d:e8:a5:2e:fd:12:84:15:61:9c:52: 5d:22:2a:54:fb:05:fc:2b:fa:a1:e0:e9:86:4f:d8: 71:c6:63:47:5e:16:84:48:14:76:3e:e0:2c:42:c0: d7:3b:4f:8e:a6:83:df:2f:f7:98:72:e0:9a:a3:2f: 84:94:5d:49:45:1e:e4:bf:ef:06:3e:82:4d:2e:56: 4d:e2:32:0d:42:27:1d:de:19:fe:df:6e:71:e6:de: fd:33:b3:06:a7:aa:51:9a:4a:d5:63:4a:9d:f0:10: 15:0e:63:28:57:80:14:71:f0:67:10:8e:77:90:b4: 52:3a:13:ba:1a:a8:7c:d9:e3:cc:e8:2a:21:2e:0b: f8:66:a0:06:44:e3:94:a4:2c:9f:0f:42:b9:0a:4b: 8b:5b:a5:1b:00:14:cc:34:1e:6a:62:ed:68:9d:46: 58:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E1:62:E0:1D:FA:3D:A2:2A:1E:BE:6C:D4:C8:4D:BD:70:18:AF:E1 X509v3 Authority Key Identifier: keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:44:f6:f2:b2:5c:e4:48:5d:e2:7f:47:fd:5f:60:93:53:6d: b7:16:9b:c9:62:6a:fc:7b:5e:d0:cc:9a:cb:97:45:c7:ec:a0: ec:92:47:00:71:a2:64:99:cd:a5:63:f1:5b:4c:2d:63:0c:4f: f1:2d:1f:54:38:a1:d1:42:06:79:61:6e:ad:93:74:29:67:39: fe:92:cd:f1:68:1e:55:39:37:5e:89:29:95:30:73:58:a7:b4: 01:72:b7:86:b4:f8:00:10:d8:c3:06:a5:c1:5e:31:c0:2f:a8: cc:2a:44:1a:28:5a:80:9f:60:bb:14:4d:fb:91:48:55:cc:d5: dd:8a:39:53:9d:63:44:ac:ad:e7:70:9f:13:ff:51:b1:6e:db: 6c:ba:0b:c8:c8:19:e9:16:86:d5:9f:40:f8:05:d0:1f:c0:b8: 5a:e4:30:d5:30:48:84:c5:0f:1c:9f:7b:06:3b:78:2d:c5:b8: e6:7e:93:af:bd:24:f1:33:92:c7:af:72:70:21:b6:34:03:75: f0:b1:86:07:9c:e1:f6:59:90:67:b1:bf:b0:b4:da:0c:df:c6: d4:63:7d:ea:b9:04:fc:e4:5d:0d:b6:b8:5e:58:b1:27:df:61: ad:6d:a5:f7:bd:33:bc:2a:4d:8e:2e:2b:0b:7c:75:8e:c3:6d: a6:ae:8c:90 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUaPc/OMuNMZUd6WjvIVGeZV3rbUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFOTRDNzc4OUFEQTdFNUY1NDBGREJFOTU4MkQ4RUE3 QUE0NkE5NDAeFw0yNjA3MjQwMjAyMTlaFw0yNjA3MjUwMjI2MTlaMDMxMTAvBgNV BAMTKEM0RTE2MkUwMURGQTNEQTIyQTFFQkU2Q0Q0Qzg0REJENzAxOEFGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVNNnNYJtXWbLPmmGSD2DENT+m WRPKnSuJnEwiETbUFrMh8PcXinE0YNbnSTc/P+KjWo96vPSZkvm1eYuPtEqQpEcf mIhfTlFKsTW64OL+2CkElKvaKcbAak+DY6Ed6KUu/RKEFWGcUl0iKlT7Bfwr+qHg 6YZP2HHGY0deFoRIFHY+4CxCwNc7T46mg98v95hy4JqjL4SUXUlFHuS/7wY+gk0u Vk3iMg1CJx3eGf7fbnHm3v0zswanqlGaStVjSp3wEBUOYyhXgBRx8GcQjneQtFI6 E7oaqHzZ48zoKiEuC/hmoAZE45SkLJ8PQrkKS4tbpRsAFMw0Hmpi7WidRli/AgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUxOFi4B36PaIqHr5s1MhNvXAYr+EwHwYDVR0j BBgwFoAUZelMd4mtp+X1QP2+lYLY6nqkapQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP TkcvMS82NUU5NEM3Nzg5QURBN0U1RjU0MEZEQkU5NTgyRDhFQTdBQTQ2QTk0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzY1RTk0Qzc3ODlBREE3RTVGNTQwRkRCRTk1 ODJEOEVBN0FBNDZBOTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8xLzY1RTk0Qzc3 ODlBREE3RTVGNTQwRkRCRTk1ODJEOEVBN0FBNDZBOTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXRPby slzkSF3if0f9X2CTU223FpvJYmr8e17QzJrLl0XH7KDskkcAcaJkmc2lY/FbTC1j DE/xLR9UOKHRQgZ5YW6tk3QpZzn+ks3xaB5VOTdeiSmVMHNYp7QBcreGtPgAENjD BqXBXjHAL6jMKkQaKFqAn2C7FE37kUhVzNXdijlTnWNErK3ncJ8T/1GxbttsugvI yBnpFobVn0D4BdAfwLha5DDVMEiExQ8cn3sGO3gtxbjmfpOvvSTxM5LHr3JwIbY0 A3XwsYYHnOH2WZBnsb+wtNoM38bUY33quQT85F0NtrheWLEn32GtbaX3vTO8Kk2O LisLfHWOw22mroyQ -----END CERTIFICATE-----Generated at Fri Jul 24 09:56:26 2026 by rpki-client