$ rpki-client -vvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft File: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft (raw, json) Hash identifier: 7i6qJ9LuCT7SCPCu55IBlOKyvvcyUgbm56vUZUEdbw0= Subject key identifier: CA:3D:D5:A1:27:7C:DD:2D:12:71:84:38:9F:53:6F:61:1D:71:5A:39 Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C Certificate issuer: /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C Certificate serial: 3A2DF9EFA7C70EA9C524EC5828E1866C4FDFF294 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 21:36:46 +0000 Manifest this update: Thu 23 Jul 2026 21:31:46 +0000 Manifest next update: Sat 25 Jul 2026 00:38:46 +0000 Files and hashes: 1: 3134342e37392e36362e302f32332d3234203d3e203138303433.roa (hash: I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=) 2: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl (hash: kxNBwT2Iq4UNV/t45GpChsk+gupPG9AuNIYSPQX7cCQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2d:f9:ef:a7:c7:0e:a9:c5:24:ec:58:28:e1:86:6c:4f:df:f2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C Validity Not Before: Jul 23 21:31:46 2026 GMT Not After : Jul 25 00:38:46 2026 GMT Subject: CN=CA3DD5A1277CDD2D127184389F536F611D715A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:93:1b:b5:f4:8f:0b:d1:e9:8d:25:0d:b0:35: 83:f9:68:25:c9:60:aa:f2:6c:7d:9f:e5:89:32:94: fa:3e:58:3d:c1:97:2c:44:a0:5d:2c:b5:2d:9c:86: 1e:b5:ff:e4:c2:c6:ed:21:c7:0e:6b:bf:6a:f2:48: 46:7a:b4:ca:6f:da:bb:24:8c:dc:2e:91:69:0d:b6: 53:bb:b3:b7:14:0f:8c:29:b8:75:e8:f9:de:b7:89: 0a:bc:e7:c7:6e:c9:56:c1:c8:44:03:11:a2:b5:3d: 71:45:41:3b:e3:28:b0:f8:ea:aa:c7:ff:6b:3e:70: 71:b9:c3:d7:d8:87:c6:91:16:66:fd:30:12:10:8e: ee:18:1e:68:5f:93:64:32:e7:52:5c:b6:12:83:ea: e3:1e:fd:89:24:2a:9b:b9:e2:f7:a1:18:10:cd:11: 37:59:a1:5d:bf:a7:cf:e8:53:36:29:84:ca:e0:12: 24:d0:7f:97:7e:e9:0a:fe:06:14:38:db:e6:12:85: 77:c4:26:dd:56:c6:0e:a2:a3:63:39:8a:2c:ca:bb: 7a:2a:f3:03:45:75:87:53:13:36:25:f1:e4:7c:87: 03:64:32:c2:c9:d9:40:98:47:2f:ed:f9:fb:05:7f: 20:13:fe:06:30:cd:c1:dd:dd:d4:a6:13:01:e3:6f: e0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3D:D5:A1:27:7C:DD:2D:12:71:84:38:9F:53:6F:61:1D:71:5A:39 X509v3 Authority Key Identifier: keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:78:1d:d8:63:bf:07:fa:de:0d:c7:a4:cc:bc:98:a0:d6:38: eb:59:cd:b0:07:11:bd:59:3e:b5:00:e1:39:db:10:41:a4:0d: 70:59:a4:9f:8a:62:b7:9f:bc:d0:29:ff:41:2d:b6:7a:cc:d0: 91:95:0c:63:81:15:81:2f:d5:3c:ef:b9:10:e3:33:d1:79:d5: ed:83:13:eb:86:18:14:e3:9e:78:d3:58:0b:48:20:96:9f:f8: 1e:45:dd:36:32:15:fe:7b:dc:c8:98:9b:fb:1a:95:6d:75:c2: 78:4e:47:02:61:cf:c1:6b:06:ac:d8:6c:c7:e4:04:2f:c8:a6: ac:79:35:e6:3f:59:73:d8:da:ee:5f:a9:1d:74:07:76:2a:cd: 2b:49:8a:86:bb:f5:79:72:af:aa:6b:18:a4:7d:40:63:f0:4e: b9:c0:d7:b0:05:79:f3:35:29:87:f2:7c:aa:3c:66:fe:90:02: a3:6f:48:24:5c:b9:17:4e:7d:a7:57:db:07:c5:07:2e:38:5a: cb:1f:97:79:08:bc:8c:8f:23:74:4e:8e:9d:42:6d:fc:94:19: 65:d3:34:8c:42:2c:a6:a1:a9:f2:23:ab:52:22:9b:e1:47:74: 8e:c4:31:b3:fc:e4:f7:f2:f5:8d:87:d4:67:8e:23:1f:bd:c1: d3:28:01:ac -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUOi3576fHDqnFJOxYKOGGbE/f8pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlEOThFOENCQkFCRENERjdCMjIyREE1MDBGNUNERTYz RkYyREEwQzAeFw0yNjA3MjMyMTMxNDZaFw0yNjA3MjUwMDM4NDZaMDMxMTAvBgNV BAMTKENBM0RENUExMjc3Q0REMkQxMjcxODQzODlGNTM2RjYxMUQ3MTVBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkxu19I8L0emNJQ2wNYP5aCXJ YKrybH2f5YkylPo+WD3BlyxEoF0stS2chh61/+TCxu0hxw5rv2rySEZ6tMpv2rsk jNwukWkNtlO7s7cUD4wpuHXo+d63iQq858duyVbByEQDEaK1PXFFQTvjKLD46qrH /2s+cHG5w9fYh8aRFmb9MBIQju4YHmhfk2Qy51JcthKD6uMe/YkkKpu54vehGBDN ETdZoV2/p8/oUzYphMrgEiTQf5d+6Qr+BhQ42+YShXfEJt1Wxg6io2M5iizKu3oq 8wNFdYdTEzYl8eR8hwNkMsLJ2UCYRy/t+fsFfyAT/gYwzcHd3dSmEwHjb+CxAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUyj3VoSd83S0ScYQ4n1NvYR1xWjkwHwYDVR0j BBgwFoAUWdmOjLur3N97Ii2lAPXN5j/y2gwwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSENDR19I Q0VCLzEvNTlEOThFOENCQkFCRENERjdCMjIyREE1MDBGNUNERTYzRkYyREEwQy5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC81OUQ5OEU4Q0JCQUJEQ0RGN0IyMjJEQTUw MEY1Q0RFNjNGRjJEQTBDLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSENDR19IQ0VCLzEvNTlEOThF OENCQkFCRENERjdCMjIyREE1MDBGNUNERTYzRkYyREEwQy5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAZ4 Hdhjvwf63g3HpMy8mKDWOOtZzbAHEb1ZPrUA4TnbEEGkDXBZpJ+KYrefvNAp/0Et tnrM0JGVDGOBFYEv1TzvuRDjM9F51e2DE+uGGBTjnnjTWAtIIJaf+B5F3TYyFf57 3MiYm/salW11wnhORwJhz8FrBqzYbMfkBC/Ipqx5NeY/WXPY2u5fqR10B3YqzStJ ioa79Xlyr6prGKR9QGPwTrnA17AFefM1KYfyfKo8Zv6QAqNvSCRcuRdOfadX2wfF By44Wssfl3kIvIyPI3ROjp1CbfyUGWXTNIxCLKahqfIjq1Iim+FHdI7EMbP85Pfy 9Y2H1GeOIx+9wdMoAaw= -----END CERTIFICATE-----Generated at Fri Jul 24 08:42:36 2026 by rpki-client