$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft File: D31DE8192962A403BB6809455D9C0776F79CC527.mft (raw, json) Hash identifier: FhJyDtz5EqRRuQjjiABZp5W5XQiaf5E2hKprmxfDyVk= Subject key identifier: CE:3B:F9:C4:16:06:CB:64:F5:F2:1A:8B:D1:42:BE:A6:73:E9:C5:7E Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527 Certificate serial: 2DF738618AB7A71A1C66D6DEAA9E8BD582B3236A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft Manifest number: 6B Signing time: Fri 24 Jul 2026 09:23:07 +0000 Manifest this update: Fri 24 Jul 2026 09:18:07 +0000 Manifest next update: Sat 25 Jul 2026 12:36:07 +0000 Files and hashes: 1: D31DE8192962A403BB6809455D9C0776F79CC527.crl (hash: XnWypDyLkn84hKA4MR2vwFaVLCk0pbLB92mVt5Peu/w=) 2: 36312e35362e31362e302f32302d3230203d3e203138343131.roa (hash: cpOU01Iw58/YmjLPrJqeRjungi3bbe0B4tFLVOzxjxc=) 3: 3131392e33302e31362e302f32302d3230203d3e203138343131.roa (hash: VDIgNrS0Bj4C/eZLO2BtqOoH9/X324CutCA0RmZUaVs=) 4: 36312e35362e32352e302f32342d3234203d3e203138343131.roa (hash: qLfcOZVogzNc0fPW8DS0BFg+aXm72rn141irJHfF/2A=) 5: 36312e35362e32362e302f32342d3234203d3e203138343131.roa (hash: nzkDFeWq9DKB8SnYVh/zKHjUR7e4Y9fE95qdnDZlMiI=) 6: 36312e35362e31362e302f32302d3234203d3e203138343131.roa (hash: OaBE8mWI96DAhvnsCUNb1Lo3ZA5eC1WiiVCLBOSaZW4=) 7: 36312e35362e32342e302f32342d3234203d3e203138343131.roa (hash: 4W+qJBNLOJOWIRvtB6qDddjGArtbipAJUnwCauAbtiw=) 8: 36312e35362e31382e302f32342d3234203d3e203138343131.roa (hash: gjwd7BV9O1873cFPhEXU/7D/wbFE9dSEUv4zzhFHYw8=) 9: 3131392e33302e31362e302f32302d3234203d3e203138343131.roa (hash: b/aL5o5ZJ2+jJ6WA1q4dCKtGxzeUgsNC1ybEW3+mJZY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f7:38:61:8a:b7:a7:1a:1c:66:d6:de:aa:9e:8b:d5:82:b3:23:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527 Validity Not Before: Jul 24 09:18:07 2026 GMT Not After : Jul 25 12:36:07 2026 GMT Subject: CN=CE3BF9C41606CB64F5F21A8BD142BEA673E9C57E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:2a:04:03:05:b3:95:4d:09:d1:05:44:1f: 7c:d3:47:20:07:e2:c8:5f:5f:a0:3f:a7:38:ed:35: f7:b5:5a:b3:03:88:4b:2d:82:45:b3:1e:69:f1:f4: 4b:68:f3:ce:f5:a9:91:85:d8:a0:d9:3d:3c:84:4a: c1:04:84:fc:91:43:f6:df:3c:d8:a9:ad:36:97:10: 68:4e:d8:e9:fa:1a:e3:c9:91:4f:63:b6:23:2e:27: 09:15:cc:39:3a:10:d6:ed:7e:fc:ce:ca:64:42:27: 7e:50:4e:4a:ab:43:3e:d5:16:af:4e:84:b7:5c:de: 0b:82:3f:ae:7c:04:6a:81:84:17:ba:be:00:61:cc: ff:fc:a7:4c:b7:34:1c:97:76:23:9c:e4:77:6e:1b: 9a:80:d4:9f:91:7f:ed:22:fb:84:97:cd:2b:cd:35: 4e:cd:19:f5:77:04:39:a4:4b:2b:1a:f7:f9:e3:f3: 4a:3c:0e:a2:63:56:c1:d2:42:cf:71:00:7a:e5:d4: 76:01:78:fd:42:61:3e:f8:e0:6a:b2:4e:8d:3b:ea: af:a3:0c:c7:a7:6c:0b:c8:6e:b2:cf:3e:70:ca:ca: 42:aa:c0:25:8a:f7:8a:12:d8:d3:ff:63:cd:d5:26: 02:57:aa:e7:50:f0:4c:c0:aa:2d:27:73:05:19:6a: 67:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3B:F9:C4:16:06:CB:64:F5:F2:1A:8B:D1:42:BE:A6:73:E9:C5:7E X509v3 Authority Key Identifier: keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cd:11:5a:c0:18:8e:bd:24:b9:fd:a5:25:03:ba:a7:1c:f2: db:e3:96:4e:0f:fa:14:c3:55:7d:65:d7:bb:d8:58:c9:94:86: 04:7f:95:a4:14:44:68:db:bd:fa:60:1d:40:01:6c:a8:50:b9: 70:97:4a:0d:12:77:2f:ad:4e:5e:62:18:72:66:57:8c:89:43: b7:e8:7d:0d:cd:f2:28:6d:96:97:68:61:b5:e7:18:0a:51:f1: 14:b8:7e:57:32:6a:4f:54:b8:c3:fe:03:a0:7c:d7:61:75:fe: d8:fa:0b:09:b9:ca:49:07:e7:3f:a2:26:8d:05:c3:42:9e:5c: a7:92:1e:73:da:d4:dd:b1:bd:9e:b3:6c:51:b9:b8:32:2a:80: 2a:85:db:17:37:74:cd:f9:5f:8e:16:f8:e9:53:c0:99:37:3a: b8:66:13:77:b6:13:26:f2:86:1c:ac:2d:19:48:1c:c5:ec:e6: 10:37:88:4b:fa:6c:34:66:f9:c8:7b:e2:28:b1:e6:f7:6c:a1: 88:54:be:82:76:cd:43:68:ef:df:ef:3e:43:e1:87:83:41:1f: e6:49:c3:02:8c:ae:e7:c3:aa:48:43:2b:cf:5d:44:1c:58:31: 82:83:b9:fd:f3:68:cf:98:8f:3a:cc:41:14:50:5c:88:0f:2a: 04:03:87:b9 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIULfc4YYq3pxocZtbeqp6L1YKzI2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxREU4MTkyOTYyQTQwM0JCNjgwOTQ1NUQ5QzA3NzZG NzlDQzUyNzAeFw0yNjA3MjQwOTE4MDdaFw0yNjA3MjUxMjM2MDdaMDMxMTAvBgNV BAMTKENFM0JGOUM0MTYwNkNCNjRGNUYyMUE4QkQxNDJCRUE2NzNFOUM1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLioEAwWzlU0J0QVEH3zTRyAH 4shfX6A/pzjtNfe1WrMDiEstgkWzHmnx9Eto8871qZGF2KDZPTyESsEEhPyRQ/bf PNiprTaXEGhO2On6GuPJkU9jtiMuJwkVzDk6ENbtfvzOymRCJ35QTkqrQz7VFq9O hLdc3guCP658BGqBhBe6vgBhzP/8p0y3NByXdiOc5HduG5qA1J+Rf+0i+4SXzSvN NU7NGfV3BDmkSysa9/nj80o8DqJjVsHSQs9xAHrl1HYBeP1CYT744GqyTo076q+j DMenbAvIbrLPPnDKykKqwCWK94oS2NP/Y83VJgJXqudQ8EzAqi0ncwUZamf7AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUzjv5xBYGy2T18hqL0UK+pnPpxX4wHwYDVR0j BBgwFoAU0x3oGSlipAO7aAlFXZwHdvecxScwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRURUTlMv MC9EMzFERTgxOTI5NjJBNDAzQkI2ODA5NDU1RDlDMDc3NkY3OUNDNTI3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0QzMURFODE5Mjk2MkE0MDNCQjY4MDk0NTVEOUMw Nzc2Rjc5Q0M1MjcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FRFROUy8wL0QzMURFODE5Mjk2MkE0 MDNCQjY4MDk0NTVEOUMwNzc2Rjc5Q0M1MjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvzRFawBiOvSS5 /aUlA7qnHPLb45ZOD/oUw1V9Zde72FjJlIYEf5WkFERo2736YB1AAWyoULlwl0oN EncvrU5eYhhyZleMiUO36H0NzfIobZaXaGG15xgKUfEUuH5XMmpPVLjD/gOgfNdh df7Y+gsJucpJB+c/oiaNBcNCnlynkh5z2tTdsb2es2xRubgyKoAqhdsXN3TN+V+O FvjpU8CZNzq4ZhN3thMm8oYcrC0ZSBzF7OYQN4hL+mw0ZvnIe+Ioseb3bKGIVL6C ds1DaO/f7z5D4YeDQR/mScMCjK7nw6pIQyvPXUQcWDGCg7n982jPmI86zEEUUFyI DyoEA4e5 -----END CERTIFICATE-----Generated at Fri Jul 24 13:21:11 2026 by rpki-client