$ rpki-client -vvf rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft File: 86E5C9C6D878819F10BEC976A116DB8148A15794.mft (raw, json) Hash identifier: Y+X7Lr6fWfLFPRF7iD4yRrjhyEKBsiEEq0rsxOOaWcs= Subject key identifier: 6D:1A:7F:E3:57:34:E3:ED:B1:80:6D:73:73:D9:D6:BD:40:D8:68:DA Authority key identifier: 86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94 Certificate issuer: /CN=86E5C9C6D878819F10BEC976A116DB8148A15794 Certificate serial: 19592A39DE5673E297B09B6044A499FE51BF124B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer Subject info access: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft Manifest number: 65 Signing time: Fri 24 Jul 2026 07:37:54 +0000 Manifest this update: Fri 24 Jul 2026 07:32:54 +0000 Manifest next update: Sat 25 Jul 2026 09:36:54 +0000 Files and hashes: 1: 86E5C9C6D878819F10BEC976A116DB8148A15794.crl (hash: 2hXbseH5WYpfOgIaR53kRNOPpulnBd7Fvp0viyiZf1U=) 2: 3134302e39322e302e302f31362d3234203d3e2031363539.roa (hash: rvl3iJZidfPVj8QIpPoFpRfFHf2uQD3RRvMQXspZm6A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:59:2a:39:de:56:73:e2:97:b0:9b:60:44:a4:99:fe:51:bf:12:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E5C9C6D878819F10BEC976A116DB8148A15794 Validity Not Before: Jul 24 07:32:54 2026 GMT Not After : Jul 25 09:36:54 2026 GMT Subject: CN=6D1A7FE35734E3EDB1806D7373D9D6BD40D868DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:73:51:0a:07:fe:cc:b9:99:51:ed:d3:cc: de:42:72:cb:e5:c8:6e:bd:3a:38:78:bb:6e:d0:4e: c2:08:ec:19:88:62:32:9c:58:83:6a:3b:23:74:bb: 9b:16:74:2f:86:fa:7a:eb:fb:89:7a:f0:5f:4c:74: cf:28:eb:29:4d:fd:81:07:be:f0:16:34:b2:36:f5: 69:69:9a:97:24:d4:8c:7f:08:50:6f:f6:d7:db:10: 9f:88:0f:29:e4:48:25:34:1d:d0:e1:8c:60:8c:1d: bc:5c:31:bc:fa:c7:df:32:0a:8e:f2:53:e7:5a:25: 7c:b6:d9:3c:5e:f7:26:37:b7:73:9e:17:62:e2:1a: a0:f8:a9:86:5a:d4:43:fb:b7:2e:66:03:c5:ba:a9: 32:7c:03:fe:72:14:56:5c:e6:e6:a4:9e:47:6a:a5: c1:96:2b:0d:1f:5f:b6:f8:ad:c7:d9:aa:b3:a4:d3: 3b:4a:4b:45:b5:48:1c:d2:8f:7d:80:a9:93:7a:f1: a5:ed:0d:d0:7d:8a:7c:50:ad:c1:3f:e0:90:55:fe: 74:61:f2:c5:f3:0a:2c:a4:5e:9d:72:70:d0:e6:54: df:97:28:d2:53:83:aa:de:f6:06:42:e2:db:55:54: 9a:14:b9:0f:9b:c4:91:f8:39:c0:f1:e2:49:3c:a6: d3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1A:7F:E3:57:34:E3:ED:B1:80:6D:73:73:D9:D6:BD:40:D8:68:DA X509v3 Authority Key Identifier: keyid:86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:dc:db:fa:fe:e8:5b:81:0a:b2:21:01:66:db:8c:51:19:76: 2a:94:15:e1:b9:96:37:ea:15:cf:73:64:c1:51:cc:08:e9:d9: d9:3f:9a:67:86:78:e2:a3:ef:3a:52:8b:6d:b4:a5:f6:c3:40: b6:69:aa:49:35:d4:1c:95:8c:17:91:c1:95:9b:f4:8b:a8:11: c5:49:f6:94:2f:6c:de:fd:16:a6:76:0c:a6:37:fc:df:28:20: 94:b4:b8:c7:83:78:c9:f0:31:0d:3e:87:d1:fb:90:75:17:8a: ce:7b:8e:b4:fe:4e:70:3f:0e:30:c2:07:13:94:e7:1e:cb:84: c5:ed:8b:08:3b:9f:20:07:f4:89:1f:fc:37:b7:ad:8f:f0:84: 44:96:f0:0c:2e:75:a7:a2:e3:98:6c:e1:06:b4:49:f3:83:35: 85:ca:e4:58:98:2e:6c:ce:da:34:14:5c:cf:47:39:30:90:c8: 43:bc:70:e2:95:ad:91:64:ac:2c:20:12:fd:f9:d6:a2:c6:57: ec:08:da:71:01:b0:d3:ce:7f:0f:7c:26:c3:31:47:6b:3c:5d: 49:97:a8:fd:48:46:67:53:9b:93:72:ed:5d:60:f3:08:d3:7b: 73:54:ca:67:1f:d2:cb:9f:d6:dc:56:9e:53:58:47:ee:e7:2d: a9:9e:1c:20 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUGVkqOd5Wc+KXsJtgRKSZ/lG/EkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNUM5QzZEODc4ODE5RjEwQkVDOTc2QTExNkRCODE0 OEExNTc5NDAeFw0yNjA3MjQwNzMyNTRaFw0yNjA3MjUwOTM2NTRaMDMxMTAvBgNV BAMTKDZEMUE3RkUzNTczNEUzRURCMTgwNkQ3MzczRDlENkJENDBEODY4REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NXNRCgf+zLmZUe3TzN5Ccsvl yG69Ojh4u27QTsII7BmIYjKcWINqOyN0u5sWdC+G+nrr+4l68F9MdM8o6ylN/YEH vvAWNLI29Wlpmpck1Ix/CFBv9tfbEJ+IDynkSCU0HdDhjGCMHbxcMbz6x98yCo7y U+daJXy22Txe9yY3t3OeF2LiGqD4qYZa1EP7ty5mA8W6qTJ8A/5yFFZc5uaknkdq pcGWKw0fX7b4rcfZqrOk0ztKS0W1SBzSj32AqZN68aXtDdB9inxQrcE/4JBV/nRh 8sXzCiykXp1ycNDmVN+XKNJTg6re9gZC4ttVVJoUuQ+bxJH4OcDx4kk8ptOrAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUbRp/41c04+2xgG1zc9nWvUDYaNowHwYDVR0j BBgwFoAUhuXJxth4gZ8Qvsl2oRbbgUihV5QwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSUlJLzAv ODZFNUM5QzZEODc4ODE5RjEwQkVDOTc2QTExNkRCODE0OEExNTc5NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMC84NkU1QzlDNkQ4Nzg4MTlGMTBCRUM5NzZBMTE2REI4 MTQ4QTE1Nzk0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSUlJLzAvODZFNUM5QzZEODc4ODE5RjEw QkVDOTc2QTExNkRCODE0OEExNTc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEvc2/r+6FuBCrIhAWbb jFEZdiqUFeG5ljfqFc9zZMFRzAjp2dk/mmeGeOKj7zpSi220pfbDQLZpqkk11ByV jBeRwZWb9IuoEcVJ9pQvbN79FqZ2DKY3/N8oIJS0uMeDeMnwMQ0+h9H7kHUXis57 jrT+TnA/DjDCBxOU5x7LhMXtiwg7nyAH9Ikf/De3rY/whESW8Awudaei45hs4Qa0 SfODNYXK5FiYLmzO2jQUXM9HOTCQyEO8cOKVrZFkrCwgEv351qLGV+wI2nEBsNPO fw98JsMxR2s8XUmXqP1IRmdTm5Ny7V1g8wjTe3NUymcf0suf1txWnlNYR+7nLame HCA= -----END CERTIFICATE-----Generated at Fri Jul 24 13:52:17 2026 by rpki-client