$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft File: 4DC8A0E80696AD1A2419ACE881334BE812506228.mft (raw, json) Hash identifier: OByIzow5u0OigczaY34/s+VgsykaBVJLqri4t+8dNn0= Subject key identifier: 20:99:91:30:0D:3A:2D:0F:28:38:2A:62:DF:E7:D4:9B:D7:51:26:53 Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 52A0165BED9A20A7AEA939D2C63BF5BCD7BC7EF9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft Manifest number: 41 Signing time: Fri 24 Jul 2026 01:07:12 +0000 Manifest this update: Fri 24 Jul 2026 01:02:12 +0000 Manifest next update: Sat 25 Jul 2026 04:01:12 +0000 Files and hashes: 1: 3136322e342e3233372e302f32342d3234203d3e20323136313338.roa (hash: iHPBbo6GY/OiVgx3tWQE5WWeIebeHvBdmG8NcpKpNvA=) 2: 3136322e342e3233362e302f32342d3234203d3e20323032373336.roa (hash: dfD2OtCiIrSPgIlzeqY7nYIoRL0d0Rm5WuZ+VoPuEIc=) 3: 3136322e342e3233372e302f32342d3234203d3e20313937353337.roa (hash: 1bHqJJ3DE9NMijQ59MuD8OFFyw3UfsZ36yCMVQaeUME=) 4: 3136322e342e3233362e302f32342d3234203d3e20313937353337.roa (hash: +tTGktskMMOWc8Ety/WMBt1UkK/mDxd3gLrUS6bHiGw=) 5: 3136322e342e3233362e302f32342d3234203d3e20323136313338.roa (hash: KUa2XsqZOPgJ781I73XluMs/ebzGtEQhMS4Dy5L8rXs=) 6: 3136322e342e3233362e302f32332d3233203d3e20313331363330.roa (hash: W1CiJP1fcJGIBc6vJyxp+aVBKQhzLI93m00Pia4UGPk=) 7: 3136322e342e3233372e302f32342d3234203d3e20323032373336.roa (hash: w52thh8Ebtpos+XU7qjpIWopgPCDyo6UfDelxnyPqdM=) 8: 4DC8A0E80696AD1A2419ACE881334BE812506228.crl (hash: NQD74RJHboC8z8UALCDtmIB6TZ1SaDpO9OBIDF8iZQw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a0:16:5b:ed:9a:20:a7:ae:a9:39:d2:c6:3b:f5:bc:d7:bc:7e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Jul 24 01:02:12 2026 GMT Not After : Jul 25 04:01:12 2026 GMT Subject: CN=209991300D3A2D0F28382A62DFE7D49BD7512653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:29:2e:77:1b:cb:a6:d2:d3:0b:4b:3b:eb: 37:4d:57:94:1e:47:82:a7:c5:f9:bc:34:a5:ea:0b: df:19:27:4c:d3:83:c5:f5:d2:1f:a1:80:56:d8:04: 75:05:dc:c8:51:77:a8:80:e1:95:54:e6:5e:80:52: 75:57:e2:da:93:a6:a6:92:66:62:67:1b:06:4d:84: 2c:bc:de:fd:99:e0:93:06:45:4b:15:61:5f:97:7d: 87:53:9f:d5:0c:a5:3d:64:60:af:91:6e:3b:ec:bc: 9f:9b:05:c9:e4:70:22:9e:d7:0f:d2:84:b4:04:23: ba:f0:8a:7d:e6:a0:49:4e:ff:da:15:dd:b8:0c:e3: 9c:07:86:b0:31:3f:5c:31:f7:0f:43:0b:5e:9e:f0: df:c4:6a:84:64:ee:30:ae:1f:fb:5c:86:39:73:0c: 8f:05:75:d0:7e:a1:d7:06:71:ec:a6:95:4c:4d:64: 99:41:74:21:4e:9b:a6:d4:df:d5:f2:2f:5c:f9:49: 26:c9:3e:6d:20:c5:1f:f1:2d:e0:9b:72:44:52:04: bf:6b:d8:8e:5b:0e:21:a1:80:00:9c:3e:be:f2:aa: 0b:dc:59:55:b5:16:f0:65:48:b6:b3:8e:55:61:75: f3:1f:2b:d7:e7:fb:34:ad:55:f8:83:80:77:56:06: 0c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:99:91:30:0D:3A:2D:0F:28:38:2A:62:DF:E7:D4:9B:D7:51:26:53 X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:09:de:c1:26:c5:80:2f:f3:9e:5c:11:af:d4:fa:a4:00:83: c4:73:b7:64:89:3a:5f:de:c7:f2:cf:de:ac:f1:ff:96:cb:f8: d8:ef:6a:cf:05:9e:01:be:55:74:6d:45:7d:87:4b:85:7a:51: 68:93:9a:fe:b0:31:4f:aa:63:5a:a4:2f:a0:68:2b:c7:82:f2: d5:b3:64:2c:6a:89:1c:6c:c5:c4:17:5f:1a:21:56:f4:ea:77: 3c:03:a3:53:24:bf:84:d2:c5:ff:e3:7a:d8:c1:86:2f:60:9e: 74:61:3c:82:12:ba:54:d3:60:f5:55:47:70:74:78:9c:ff:18: 76:98:68:d1:1a:7e:3a:82:3e:72:3f:2a:2d:f9:8b:75:bb:ee: 11:7c:a3:01:b0:32:71:dc:87:b3:a2:80:17:7f:ef:6d:02:c2: 35:ff:e6:ba:8b:a9:b8:fd:57:5a:2e:de:0b:f3:f6:c5:f2:02: d1:11:76:5e:83:b7:29:e2:bf:4f:31:2b:6a:58:41:7f:75:67: b2:a5:c9:60:50:5c:c3:53:64:86:6b:6c:e2:50:f2:11:e0:9f: ff:e8:d6:03:31:ea:ed:74:06:f7:cd:81:e5:9d:ff:cb:85:dd: 61:80:1c:81:6b:f5:1a:e3:f4:1e:99:ab:06:d2:78:80:b2:4e: 85:e3:3d:cf -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUUqAWW+2aIKeuqTnSxjv1vNe8fvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA3MjQwMTAyMTJaFw0yNjA3MjUwNDAxMTJaMDMxMTAvBgNV BAMTKDIwOTk5MTMwMEQzQTJEMEYyODM4MkE2MkRGRTdENDlCRDc1MTI2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jSkudxvLptLTC0s76zdNV5Qe R4Knxfm8NKXqC98ZJ0zTg8X10h+hgFbYBHUF3MhRd6iA4ZVU5l6AUnVX4tqTpqaS ZmJnGwZNhCy83v2Z4JMGRUsVYV+XfYdTn9UMpT1kYK+RbjvsvJ+bBcnkcCKe1w/S hLQEI7rwin3moElO/9oV3bgM45wHhrAxP1wx9w9DC16e8N/EaoRk7jCuH/tchjlz DI8FddB+odcGceymlUxNZJlBdCFOm6bU39XyL1z5SSbJPm0gxR/xLeCbckRSBL9r 2I5bDiGhgACcPr7yqgvcWVW1FvBlSLazjlVhdfMfK9fn+zStVfiDgHdWBgwrAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUIJmRMA06LQ8oOCpi3+fUm9dRJlMwHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvNERDOEEwRTgwNjk2 QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABkJ3sEmxYAv 855cEa/U+qQAg8Rzt2SJOl/ex/LP3qzx/5bL+Njvas8FngG+VXRtRX2HS4V6UWiT mv6wMU+qY1qkL6BoK8eC8tWzZCxqiRxsxcQXXxohVvTqdzwDo1Mkv4TSxf/jetjB hi9gnnRhPIISulTTYPVVR3B0eJz/GHaYaNEafjqCPnI/Ki35i3W77hF8owGwMnHc h7OigBd/720CwjX/5rqLqbj9V1ou3gvz9sXyAtERdl6Dtyniv08xK2pYQX91Z7Kl yWBQXMNTZIZrbOJQ8hHgn//o1gMx6u10BvfNgeWd/8uF3WGAHIFr9Rrj9B6ZqwbS eICyToXjPc8= -----END CERTIFICATE-----Generated at Fri Jul 24 07:30:56 2026 by rpki-client