$ rpki-client -vvf rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft File: 28E8C034945DF0971A657E251911BBA0B2819562.mft (raw, json) Hash identifier: Txv5uQcSiqBwslTWm0c8lmNOSwsYwTWdaoQig+Hyxn0= Subject key identifier: BB:1A:81:F9:FB:B3:6A:E5:35:53:D2:0B:6D:94:8F:9B:E3:D7:04:52 Authority key identifier: 28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62 Certificate issuer: /CN=28E8C034945DF0971A657E251911BBA0B2819562 Certificate serial: 456C204E7D0D5EAA96D292ACE0F767D2B626B691 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft Manifest number: 67 Signing time: Fri 24 Jul 2026 02:22:19 +0000 Manifest this update: Fri 24 Jul 2026 02:17:19 +0000 Manifest next update: Sat 25 Jul 2026 04:18:19 +0000 Files and hashes: 1: 28E8C034945DF0971A657E251911BBA0B2819562.crl (hash: riDVlYmcRdZWi0emgvQ1W4htA3MiNE3htioO+NnkHSo=) 2: 323430353a613063303a3a2f33322d3438203d3e20313331363731.roa (hash: 6HrkEzQ2Yg1WTlAGALA+Lw5WYBWkKQgOUE2P3VYv1e4=) 3: 3130332e3134362e3231332e302f32342d3234203d3e20313331363731.roa (hash: LYwHjGxEzckNqePKzYBLQw/Fecl7B+Zct0xOoyvOLzg=) 4: 3130332e3134362e3231322e302f32332d3234203d3e20313331363731.roa (hash: pMS5Ph8mPGJU3UpJ7IjmKfi+Ix8We0Zd68WwZnbms2Y=) 5: 3130332e3134362e3231322e302f32342d3234203d3e20313331363731.roa (hash: v0VyC7X7thLb1BBUBYlXdyclFoTUZxEmzXZ1GE31WD8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6c:20:4e:7d:0d:5e:aa:96:d2:92:ac:e0:f7:67:d2:b6:26:b6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E8C034945DF0971A657E251911BBA0B2819562 Validity Not Before: Jul 24 02:17:19 2026 GMT Not After : Jul 25 04:18:19 2026 GMT Subject: CN=BB1A81F9FBB36AE53553D20B6D948F9BE3D70452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b3:54:0a:e0:6f:d7:f5:3a:81:35:ee:78:69: df:8a:43:91:0e:a8:64:8b:98:50:e5:da:9f:9b:4e: c8:29:e8:16:b1:fc:77:75:f6:20:31:02:fd:73:09: da:61:89:89:f2:cb:f8:05:3b:3b:4a:0f:22:66:52: 44:6f:b0:93:2f:9a:b2:9c:67:73:46:96:cc:42:de: d9:b4:10:11:1c:19:69:27:5f:2e:7d:de:b3:9a:1c: f1:20:c2:d3:60:43:17:50:a1:8e:9e:41:3c:22:91: f1:81:80:5a:e8:cc:75:d5:a1:51:0c:a5:5b:2d:99: 47:25:d4:ce:64:74:0f:c3:9a:65:7e:b1:2d:57:ec: 77:78:59:72:fe:de:44:fa:fa:c6:05:21:08:0c:fc: 8c:21:a2:d5:61:54:aa:93:6b:b2:ba:64:50:9f:9e: a2:f4:75:3d:21:9d:41:9c:90:66:12:8f:40:9a:78: 3b:cc:b3:52:c0:e7:65:70:af:40:be:dc:1b:19:05: 23:bc:7d:fe:b7:dc:d5:06:46:e0:3d:3a:ac:39:3f: 51:42:9f:82:80:4a:ef:81:12:e7:0b:ad:d0:c3:08: 86:a4:64:01:e1:cd:85:c7:b9:6e:6f:ca:5a:9e:2f: a0:42:37:d2:d1:76:85:97:14:80:d8:21:1b:5c:d8: 95:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1A:81:F9:FB:B3:6A:E5:35:53:D2:0B:6D:94:8F:9B:E3:D7:04:52 X509v3 Authority Key Identifier: keyid:28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ad:f2:b6:dc:22:e1:21:6a:a6:00:5b:16:b2:2f:69:20:bd: 48:f0:b1:3e:f2:5a:f9:9e:19:35:4d:aa:c1:27:0c:25:ae:6b: 2c:be:bd:a9:91:fd:d9:5b:ae:4f:a7:97:4d:6a:6a:42:73:5a: d7:f5:2a:b1:92:50:a3:df:b6:8b:7a:5b:26:de:de:0d:6a:8d: 33:00:17:fc:7b:8d:c6:05:a4:14:66:95:3d:09:fb:9e:83:a9: e0:00:d8:8f:b0:15:3a:0f:63:72:82:60:97:81:24:5c:6d:2c: 03:d6:b1:9e:f5:e1:e4:84:a4:66:5f:0e:1b:0e:04:8a:84:68: 49:69:c1:fc:c0:0d:c0:b0:f7:70:5c:c6:3f:38:88:fc:91:ef: 5e:f4:d6:0e:f1:33:3f:07:e1:a9:d2:96:6a:82:63:1c:9e:73: 42:dc:74:06:7f:99:3e:47:c1:49:d0:83:15:c7:2a:95:29:b2: d6:b6:cb:15:71:0d:bc:e0:3b:79:7a:0f:32:2d:3f:26:12:d0: 44:8c:d9:fa:70:33:ab:0d:8b:5b:8b:f3:ad:80:67:bd:d7:98: c8:29:0c:df:64:42:30:1c:7b:d8:98:f4:71:1a:75:26:d2:6f: 3f:fa:33:84:6d:b6:24:96:82:e1:69:98:11:e7:aa:f7:25:06: e5:4c:a5:87 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIURWwgTn0NXqqW0pKs4Pdn0rYmtpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkxMUJCQTBC MjgxOTU2MjAeFw0yNjA3MjQwMjE3MTlaFw0yNjA3MjUwNDE4MTlaMDMxMTAvBgNV BAMTKEJCMUE4MUY5RkJCMzZBRTUzNTUzRDIwQjZEOTQ4RjlCRTNENzA0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCls1QK4G/X9TqBNe54ad+KQ5EO qGSLmFDl2p+bTsgp6Bax/Hd19iAxAv1zCdphiYnyy/gFOztKDyJmUkRvsJMvmrKc Z3NGlsxC3tm0EBEcGWknXy593rOaHPEgwtNgQxdQoY6eQTwikfGBgFrozHXVoVEM pVstmUcl1M5kdA/DmmV+sS1X7Hd4WXL+3kT6+sYFIQgM/IwhotVhVKqTa7K6ZFCf nqL0dT0hnUGckGYSj0CaeDvMs1LA52Vwr0C+3BsZBSO8ff633NUGRuA9Oqw5P1FC n4KASu+BEucLrdDDCIakZAHhzYXHuW5vylqeL6BCN9LRdoWXFIDYIRtc2JVHAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUuxqB+fuzauU1U9ILbZSPm+PXBFIwHwYDVR0j BBgwFoAUKOjANJRd8JcaZX4lGRG7oLKBlWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkFOVEFT WS8wLzI4RThDMDM0OTQ1REYwOTcxQTY1N0UyNTE5MTFCQkEwQjI4MTk1NjIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkx MUJCQTBCMjgxOTU2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0ZBTlRBU1kvMC8yOEU4QzAzNDk0 NURGMDk3MUE2NTdFMjUxOTExQkJBMEIyODE5NTYyLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALK3yttwi 4SFqpgBbFrIvaSC9SPCxPvJa+Z4ZNU2qwScMJa5rLL69qZH92VuuT6eXTWpqQnNa 1/UqsZJQo9+2i3pbJt7eDWqNMwAX/HuNxgWkFGaVPQn7noOp4ADYj7AVOg9jcoJg l4EkXG0sA9axnvXh5ISkZl8OGw4EioRoSWnB/MANwLD3cFzGPziI/JHvXvTWDvEz PwfhqdKWaoJjHJ5zQtx0Bn+ZPkfBSdCDFccqlSmy1rbLFXENvOA7eXoPMi0/JhLQ RIzZ+nAzqw2LW4vzrYBnvdeYyCkM32RCMBx72Jj0cRp1JtJvP/ozhG22JJaC4WmY Eeeq9yUG5Uylhw== -----END CERTIFICATE-----Generated at Fri Jul 24 11:06:50 2026 by rpki-client