$ rpki-client -vvf rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft File: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft (raw, json) Hash identifier: 5cioSfIjU/iS8HUYKEaHRtkVnk9/sdPkrDOjMsid500= Subject key identifier: 7C:3B:5D:4E:B3:21:F8:2B:48:B9:EE:51:06:83:BC:C4:E9:CE:42:9A Authority key identifier: E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44 Certificate issuer: /CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44 Certificate serial: 7500375B63FF9FDFDA24AE221C0CF01650500B8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft Manifest number: 67 Signing time: Fri 24 Jul 2026 09:43:09 +0000 Manifest this update: Fri 24 Jul 2026 09:38:09 +0000 Manifest next update: Sat 25 Jul 2026 10:11:09 +0000 Files and hashes: 1: 3130332e3134342e33342e302f32332d3234203d3e20313331363636.roa (hash: Wv08z2tY7w2z0229EEvjyYYNTE6epIRCshOK3YEh39Y=) 2: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl (hash: /KLNW3lzcdnB8KaPRlqe3jYpzWATsPpifcVucRgRim8=) 3: 3231312e37362e3139302e302f32332d3234203d3e20313331363636.roa (hash: dIKzwOV/Rg8kX37DO7rzZtMhciZlDJrIMJrJMoEYC/o=) 4: 3230322e3132332e3132342e302f32332d3234203d3e20313331363636.roa (hash: G254ASDsdEOL8B4Bo3zdknO7xdbQNcKopBri7j6oisI=) 5: 323430353a363434303a3a2f33322d3332203d3e20313331363636.roa (hash: QB2gyR5XQYs4MfGBjgJf/jtuHKKTmEl5qfrVI5ynL/A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:00:37:5b:63:ff:9f:df:da:24:ae:22:1c:0c:f0:16:50:50:0b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44 Validity Not Before: Jul 24 09:38:09 2026 GMT Not After : Jul 25 10:11:09 2026 GMT Subject: CN=7C3B5D4EB321F82B48B9EE510683BCC4E9CE429A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8e:26:9c:a0:c1:20:10:55:eb:54:22:6d:6f: 97:b1:32:20:dd:56:f2:b1:68:1f:9e:62:4b:57:64: 34:56:5a:39:81:7d:a6:ea:36:59:69:a3:33:6c:8c: e2:56:35:48:7f:62:78:8a:b9:80:4f:41:6b:ca:88: f8:21:e1:22:e9:da:e6:06:1f:a6:32:04:b5:ca:ce: 05:9f:65:17:cc:ca:10:a0:2e:88:b1:10:2b:3e:5e: 17:b1:08:9c:f4:20:63:53:f2:c7:fb:b8:b3:24:94: 90:7b:3b:71:8e:bc:79:19:f4:77:0c:36:11:5a:cb: 2b:08:22:d0:7c:bf:d1:92:1a:b4:cf:92:ea:28:89: d2:18:36:c2:aa:cf:ee:4a:45:9b:69:10:4b:b0:de: 8c:7e:75:23:1e:24:c7:8d:34:b6:1e:39:b9:c0:da: 39:e7:9b:65:d7:e5:52:06:2b:2b:b4:a8:e5:fd:ab: 99:f6:dc:2d:22:6b:35:e5:cc:12:55:78:ab:29:8f: 56:13:05:f8:6d:61:4a:ae:88:98:a8:e4:b3:58:6a: c8:89:bf:a8:9d:d3:a5:56:b8:df:15:70:6c:00:42: b3:90:93:b8:41:4f:f1:90:04:59:e3:d5:d0:a7:49: c3:6e:e0:dc:28:89:83:38:74:ba:7d:64:55:43:cf: e0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3B:5D:4E:B3:21:F8:2B:48:B9:EE:51:06:83:BC:C4:E9:CE:42:9A X509v3 Authority Key Identifier: keyid:E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4c:cc:b3:ae:b8:58:85:f2:bf:03:4c:5e:87:45:16:b9:ec: 67:2b:84:47:7a:7b:cf:7c:90:1a:af:0b:43:36:d8:9e:37:2b: 8f:df:57:d9:70:a6:23:63:92:af:28:7d:73:87:d0:a9:85:65: 44:1e:e9:63:a8:a1:cd:a2:91:9f:85:51:dd:33:65:9d:f7:9c: d1:73:23:f0:1d:15:c8:36:c1:d7:9d:ba:02:22:50:f5:cd:7d: 9d:22:a9:25:dc:6d:2a:2a:d8:f7:df:6b:69:63:d1:04:c4:19: ec:fd:cc:30:f1:c5:70:ab:35:bd:ad:5a:25:b3:6a:7f:a9:85: f7:26:c1:80:d2:de:77:90:a3:3c:3e:6b:00:df:ca:58:48:ba: 3e:6c:14:cd:9e:17:29:ee:69:0a:ce:63:a9:3d:b2:d9:3e:f0: 0f:1f:62:ba:fd:c7:6c:13:11:f0:27:3c:7c:4a:db:c1:8b:5b: a7:33:62:46:38:0d:00:93:5d:32:83:5b:d0:81:a4:68:ff:80: 95:78:37:30:15:ee:5c:45:ac:eb:64:f3:ac:a8:6d:67:5a:17: 59:b3:73:9b:4f:64:f8:54:bc:5e:1a:95:bb:41:0c:69:63:5d: 69:31:2d:f9:1f:f4:1b:37:b2:b3:b3:3c:2d:06:8e:c1:15:67: 1c:92:18:a0 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUdQA3W2P/n9/aJK4iHAzwFlBQC44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDI2QzA5NDQ5Q0VCNEVFNUZEN0NDMjAwQjA3M0NB NTNCQ0E0NDAeFw0yNjA3MjQwOTM4MDlaFw0yNjA3MjUxMDExMDlaMDMxMTAvBgNV BAMTKDdDM0I1RDRFQjMyMUY4MkI0OEI5RUU1MTA2ODNCQ0M0RTlDRTQyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvjiacoMEgEFXrVCJtb5exMiDd VvKxaB+eYktXZDRWWjmBfabqNllpozNsjOJWNUh/YniKuYBPQWvKiPgh4SLp2uYG H6YyBLXKzgWfZRfMyhCgLoixECs+XhexCJz0IGNT8sf7uLMklJB7O3GOvHkZ9HcM NhFayysIItB8v9GSGrTPkuooidIYNsKqz+5KRZtpEEuw3ox+dSMeJMeNNLYeObnA 2jnnm2XX5VIGKyu0qOX9q5n23C0iazXlzBJVeKspj1YTBfhtYUquiJio5LNYasiJ v6id06VWuN8VcGwAQrOQk7hBT/GQBFnj1dCnScNu4NwoiYM4dLp9ZFVDz+DzAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUfDtdTrMh+CtIue5RBoO8xOnOQpowHwYDVR0j BBgwFoAU6H0mwJRJzrTuX9fMIAsHPKU7ykQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFNULzAv RTg3RDI2QzA5NDQ5Q0VCNEVFNUZEN0NDMjAwQjA3M0NBNTNCQ0E0NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9FODdEMjZDMDk0NDlDRUI0RUU1RkQ3Q0MyMDBCMDcz Q0E1M0JDQTQ0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFNULzAvRTg3RDI2QzA5NDQ5Q0VCNEVF NUZEN0NDMjAwQjA3M0NBNTNCQ0E0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADNMzLOuuFiF8r8DTF6H RRa57GcrhEd6e898kBqvC0M22J43K4/fV9lwpiNjkq8ofXOH0KmFZUQe6WOooc2i kZ+FUd0zZZ33nNFzI/AdFcg2wdedugIiUPXNfZ0iqSXcbSoq2Pffa2lj0QTEGez9 zDDxxXCrNb2tWiWzan+phfcmwYDS3neQozw+awDfylhIuj5sFM2eFynuaQrOY6k9 stk+8A8fYrr9x2wTEfAnPHxK28GLW6czYkY4DQCTXTKDW9CBpGj/gJV4NzAV7lxF rOtk86yobWdaF1mzc5tPZPhUvF4albtBDGljXWkxLfkf9Bs3srOzPC0GjsEVZxyS GKA= -----END CERTIFICATE-----Generated at Fri Jul 24 14:34:48 2026 by rpki-client