$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft File: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft (raw, json) Hash identifier: y8pVtSfCER9GSJrovdiyhXzqWMUg8sGe7R0vMaypgQo= Subject key identifier: 77:F2:F9:36:93:43:ED:B9:14:6A:5F:57:C1:6C:3C:A8:61:2D:87:C2 Authority key identifier: E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 Certificate issuer: /CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Certificate serial: 7BE7D02A0E6C2075F84C973DB53DA514291CCA04 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft Manifest number: 3F Signing time: Thu 23 Jul 2026 18:06:26 +0000 Manifest this update: Thu 23 Jul 2026 18:01:26 +0000 Manifest next update: Fri 24 Jul 2026 19:05:26 +0000 Files and hashes: 1: 323430323a363432303a3a2f33322d3438203d3e20313331363330.roa (hash: oxQPGNBMj2CJJd3CtDlG2Tl/miuEDB0GkZlm0cd0pJk=) 2: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl (hash: 7a9mL35WReyF17Gw2jlgDaX3eUMLwp0YDaXulvxPiLA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e7:d0:2a:0e:6c:20:75:f8:4c:97:3d:b5:3d:a5:14:29:1c:ca:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Validity Not Before: Jul 23 18:01:26 2026 GMT Not After : Jul 24 19:05:26 2026 GMT Subject: CN=77F2F9369343EDB9146A5F57C16C3CA8612D87C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6d:e3:89:69:d5:68:0d:6d:ac:8e:13:44:f9: a2:dd:9c:fb:d0:d1:a2:e0:7c:ce:25:0d:47:bd:74: 6b:16:38:58:81:9d:c3:17:d2:8c:be:65:f7:ad:09: bb:b2:31:61:69:58:5c:7e:f6:b9:4a:2f:a7:80:1b: 72:fb:2b:a2:e6:be:e1:d9:48:ce:ca:3e:5e:30:54: a7:61:f7:97:bc:98:0b:d3:98:6f:85:74:e4:07:a2: 95:dd:cd:f9:da:9d:a2:1c:35:bf:07:c2:47:c2:3c: 58:b9:06:06:b3:ea:a5:60:0d:cb:3a:c7:c9:62:07: 5c:19:ad:5a:c7:54:85:e0:6d:a9:65:9e:af:ae:3f: 79:15:ab:a1:bd:e3:14:b4:47:f9:e6:a9:2b:27:f5: 23:13:5a:21:90:d1:88:87:12:51:76:9a:fb:15:4c: 9a:49:ea:cd:a5:23:1b:0a:e6:f8:e8:bc:3a:8d:99: 2a:d0:51:b9:ff:15:10:af:92:54:bf:47:b6:e4:d3: ba:09:bf:94:15:01:e9:4b:34:51:56:28:49:3b:6b: 3d:1d:b2:f1:e3:89:3d:3d:92:49:ab:f7:01:2e:70: 99:b1:9b:90:5a:1b:cd:97:49:fd:91:5c:70:56:cd: 05:06:14:38:e3:a4:aa:16:d7:11:53:35:fe:e7:f1: eb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F2:F9:36:93:43:ED:B9:14:6A:5F:57:C1:6C:3C:A8:61:2D:87:C2 X509v3 Authority Key Identifier: keyid:E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:27:ba:55:9c:0d:c9:cb:38:63:52:31:9f:21:f5:a8:13:76: f8:52:c7:c4:d2:ea:ad:11:2c:14:94:01:c5:ee:16:34:6c:0d: a3:2e:e8:32:89:51:d7:c4:c9:3c:22:cc:80:23:50:38:b5:02: 73:4d:6f:54:03:bf:02:b3:29:8b:76:bd:fc:cb:71:01:3f:0b: 3b:20:6e:61:ed:11:b4:c3:46:2c:e1:0a:4c:03:9b:2e:fb:77: b2:ca:56:b9:59:55:85:3a:29:24:ba:70:e5:79:e8:9b:00:3a: 86:d6:66:5f:0e:b0:4a:d8:ab:64:bb:57:30:cd:07:39:1c:86: 46:71:1b:bf:c5:ab:7a:a9:50:9c:76:7c:3b:7b:6c:b6:5a:82: 70:c5:04:8f:46:5f:f5:2c:37:59:0b:1d:4b:66:06:80:46:4b: dd:3a:01:2d:be:2b:72:b6:68:98:08:0a:fe:43:f7:b5:28:5c: 0b:01:d8:24:8c:83:f9:d9:ad:af:69:76:0a:da:b3:c2:90:60: 2f:45:db:b1:e6:1e:c0:15:17:c5:ef:cf:c7:2d:a5:ed:f8:3b: 3b:21:e7:37:cd:9e:a4:60:67:0f:92:42:67:e8:25:d5:0f:31: 87:19:4d:62:84:93:5f:ad:1e:ff:fb:99:84:47:f2:d5:30:e3: a3:f4:32:a4 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUe+fQKg5sIHX4TJc9tT2lFCkcygQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRD MUEzOUJCMDAeFw0yNjA3MjMxODAxMjZaFw0yNjA3MjQxOTA1MjZaMDMxMTAvBgNV BAMTKDc3RjJGOTM2OTM0M0VEQjkxNDZBNUY1N0MxNkMzQ0E4NjEyRDg3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDubeOJadVoDW2sjhNE+aLdnPvQ 0aLgfM4lDUe9dGsWOFiBncMX0oy+ZfetCbuyMWFpWFx+9rlKL6eAG3L7K6LmvuHZ SM7KPl4wVKdh95e8mAvTmG+FdOQHopXdzfnanaIcNb8HwkfCPFi5Bgaz6qVgDcs6 x8liB1wZrVrHVIXgballnq+uP3kVq6G94xS0R/nmqSsn9SMTWiGQ0YiHElF2mvsV TJpJ6s2lIxsK5vjovDqNmSrQUbn/FRCvklS/R7bk07oJv5QVAelLNFFWKEk7az0d svHjiT09kkmr9wEucJmxm5BaG82XSf2RXHBWzQUGFDjjpKoW1xFTNf7n8euHAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUd/L5NpND7bkUal9XwWw8qGEth8IwHwYDVR0j BBgwFoAU5oxMEDApuEFCpcqz77hS/cGjm7AwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzEvRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS9FNjhDNEMxMDMwMjlCODQxNDJBNUNBQjNFRkI4 NTJGREMxQTM5QkIwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzEvRTY4QzRDMTAzMDI5 Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAInulWcDcnL OGNSMZ8h9agTdvhSx8TS6q0RLBSUAcXuFjRsDaMu6DKJUdfEyTwizIAjUDi1AnNN b1QDvwKzKYt2vfzLcQE/CzsgbmHtEbTDRizhCkwDmy77d7LKVrlZVYU6KSS6cOV5 6JsAOobWZl8OsErYq2S7VzDNBzkchkZxG7/Fq3qpUJx2fDt7bLZagnDFBI9GX/Us N1kLHUtmBoBGS906AS2+K3K2aJgICv5D97UoXAsB2CSMg/nZra9pdgras8KQYC9F 27HmHsAVF8Xvz8ctpe34Ozsh5zfNnqRgZw+SQmfoJdUPMYcZTWKEk1+tHv/7mYRH 8tUw46P0MqQ= -----END CERTIFICATE-----Generated at Fri Jul 24 03:38:03 2026 by rpki-client