$ rpki-client -vvf rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft File: 35C866BE000DEAB870C97BED72D0A7807B829E4D.mft (raw, json) Hash identifier: pxofTX01huevr09T9RDGIWFRdD0DbBTJHypr+UGiSvY= Subject key identifier: 20:87:91:0A:21:BA:6F:C2:80:24:42:1C:0E:03:2A:29:C6:7A:58:7F Authority key identifier: 35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D Certificate issuer: /CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Certificate serial: 5EFE579A3446CE701295AFEB5DD65C03366932FA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft Manifest number: 66 Signing time: Thu 23 Jul 2026 22:21:50 +0000 Manifest this update: Thu 23 Jul 2026 22:16:50 +0000 Manifest next update: Fri 24 Jul 2026 22:28:50 +0000 Files and hashes: 1: 35C866BE000DEAB870C97BED72D0A7807B829E4D.crl (hash: fiUhUIM2QyPEo+fLrLEr+3/+xwTR8+QViv1XfC9QoE8=) 2: 3130332e3135322e3232302e302f32332d3234203d3e20313338393937.roa (hash: J/22PWUGVzLaEIWqIEkco35k7PiKuvioKGMBglelLtk=) 3: 323430363a326663303a3a2f33322d3332203d3e20313334383233.roa (hash: T6rxUJGmT1hptwoFyjautezkOkglfrNk05IrJlVztRE=) 4: 3232332e32362e342e302f32332d3234203d3e20313532313739.roa (hash: 1KuxfqT20KEMU13K1PoNgkxwUh6tXjO/u8vuBPBbPvM=) 5: 3230322e3134382e3231302e302f32332d3234203d3e20313532313739.roa (hash: w66ZmETlDQxyi38rji0gzk1176tFqIfyztFJ3VNSIbg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fe:57:9a:34:46:ce:70:12:95:af:eb:5d:d6:5c:03:36:69:32:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Validity Not Before: Jul 23 22:16:50 2026 GMT Not After : Jul 24 22:28:50 2026 GMT Subject: CN=2087910A21BA6FC28024421C0E032A29C67A587F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:51:19:d4:01:14:23:d6:ad:2c:ac:24:95: 4d:94:5a:41:68:4f:37:14:71:b1:c6:b0:c9:69:13: 0a:54:06:49:33:40:6e:f9:0e:71:c0:d2:50:48:89: 8f:34:b4:cb:3d:b1:f8:35:be:d5:2a:d6:41:f4:8e: a1:96:2f:cf:5c:9a:ab:b1:b4:6b:34:98:54:b6:90: 1f:f1:8c:03:6a:54:a7:4c:fb:58:0f:f3:fe:52:df: 07:12:4d:56:73:50:9e:cc:db:ad:1f:9b:fe:ff:9d: 4f:4e:20:26:09:75:0b:a9:fc:fc:38:7a:b9:2b:4e: c5:78:78:31:6c:0f:80:d5:a0:cb:7a:b9:94:b3:70: 90:e0:85:24:a9:76:62:b4:d3:a3:9b:26:d0:ff:26: cb:a0:9d:56:37:ac:c9:f7:b3:21:1e:4e:15:1c:fe: 1c:76:96:a1:66:f4:39:da:78:c7:14:ef:73:43:e0: 90:28:5e:a3:63:7e:90:78:e2:67:f0:fa:c0:aa:05: b9:7a:51:20:43:97:65:4a:76:60:02:c6:55:71:79: fd:45:d2:68:96:4a:13:5b:55:96:41:56:29:c7:5b: 27:f0:4f:db:08:2d:8d:a7:6c:10:c4:56:74:c8:7c: 29:05:29:04:23:b9:ae:bc:d8:03:04:2b:a2:74:bd: 2d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:87:91:0A:21:BA:6F:C2:80:24:42:1C:0E:03:2A:29:C6:7A:58:7F X509v3 Authority Key Identifier: keyid:35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:78:23:15:00:02:2f:59:a0:c9:bc:74:61:96:67:39:db:02: 3f:58:43:c9:a4:72:90:72:ad:60:f2:73:9d:46:fa:6e:ac:c0: c1:16:04:00:9b:f8:ad:82:73:b2:e7:b3:f7:d5:15:87:b7:76: 60:a3:a3:ec:28:24:ef:f9:6f:d2:fb:02:b2:e5:da:75:50:d0: 46:b9:03:c0:9e:4b:2f:9c:3a:64:57:5f:c1:94:5e:40:af:a8: 9c:1e:2f:1e:84:3b:0e:8d:da:cc:4c:29:7a:04:b5:82:e1:dc: 93:79:81:c0:4b:fe:70:b1:e0:c5:46:60:53:a8:1f:bf:e4:e3: 5b:a4:55:93:3c:6c:38:87:b8:ca:a4:43:6f:29:f5:78:05:68: fc:e0:a8:15:9d:fd:04:65:91:e1:f2:7b:d4:57:77:08:97:d1: 64:55:26:54:6e:25:ef:0c:ee:45:b4:94:ba:b7:15:27:fa:f7: 05:1e:35:4b:69:5d:e3:98:35:53:b8:2d:b8:14:28:42:49:58: ab:d8:7f:e7:49:19:70:de:66:42:70:91:8c:a1:7d:e5:3f:08: aa:1a:be:08:99:64:6b:83:dd:c4:9d:ce:f5:65:53:84:17:47: e2:4d:44:4a:bb:6b:a4:24:f0:d1:68:5c:86:e2:fe:fc:95:ae: ed:99:95:ad -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUXv5XmjRGznASla/rXdZcAzZpMvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3 QjgyOUU0RDAeFw0yNjA3MjMyMjE2NTBaFw0yNjA3MjQyMjI4NTBaMDMxMTAvBgNV BAMTKDIwODc5MTBBMjFCQTZGQzI4MDI0NDIxQzBFMDMyQTI5QzY3QTU4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnnFEZ1AEUI9atLKwklU2UWkFo TzcUcbHGsMlpEwpUBkkzQG75DnHA0lBIiY80tMs9sfg1vtUq1kH0jqGWL89cmqux tGs0mFS2kB/xjANqVKdM+1gP8/5S3wcSTVZzUJ7M260fm/7/nU9OICYJdQup/Pw4 erkrTsV4eDFsD4DVoMt6uZSzcJDghSSpdmK006ObJtD/JsugnVY3rMn3syEeThUc /hx2lqFm9DnaeMcU73ND4JAoXqNjfpB44mfw+sCqBbl6USBDl2VKdmACxlVxef1F 0miWShNbVZZBVinHWyfwT9sILY2nbBDEVnTIfCkFKQQjua682AMEK6J0vS07AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUIIeRCiG6b8KAJEIcDgMqKcZ6WH8wHwYDVR0j BBgwFoAUNchmvgAN6rhwyXvtctCngHuCnk0wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAv MzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3QjgyOUU0RC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zNUM4NjZCRTAwMERFQUI4NzBDOTdCRUQ3MkQwQTc4 MDdCODI5RTRELmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAvMzVDODY2QkUwMDBERUFCODcw Qzk3QkVENzJEMEE3ODA3QjgyOUU0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA94IxUAAi9ZoMm8dGGW ZznbAj9YQ8mkcpByrWDyc51G+m6swMEWBACb+K2Cc7Lns/fVFYe3dmCjo+woJO/5 b9L7ArLl2nVQ0Ea5A8CeSy+cOmRXX8GUXkCvqJweLx6EOw6N2sxMKXoEtYLh3JN5 gcBL/nCx4MVGYFOoH7/k41ukVZM8bDiHuMqkQ28p9XgFaPzgqBWd/QRlkeHye9RX dwiX0WRVJlRuJe8M7kW0lLq3FSf69wUeNUtpXeOYNVO4LbgUKEJJWKvYf+dJGXDe ZkJwkYyhfeU/CKoavgiZZGuD3cSdzvVlU4QXR+JNREq7a6Qk8NFoXIbi/vyVru2Z la0= -----END CERTIFICATE-----Generated at Fri Jul 24 04:31:51 2026 by rpki-client