$ rpki-client -vvf rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft File: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft (raw, json) Hash identifier: CZ4nG18avg2BwsZGwpZ3XUAHVg5+4GJ9kperID0CgsM= Subject key identifier: EC:9C:CA:29:48:66:16:61:2B:DC:7C:1A:7B:C1:1C:6F:4C:34:96:AC Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Certificate serial: 61AB04451D5BD0FB6D4E9F576FB17D0BCA21BEF7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft Manifest number: 6A Signing time: Thu 23 Jul 2026 19:26:36 +0000 Manifest this update: Thu 23 Jul 2026 19:21:36 +0000 Manifest next update: Fri 24 Jul 2026 20:40:36 +0000 Files and hashes: 1: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl (hash: PW1VOMiwJ+cVVVcV7fHKu7bCa4ugw52N/ic/opFXEsE=) 2: 3130332e3232372e3232342e302f32332d3234203d3e20313334383233.roa (hash: GuzN1ophfvX5EgHLKpJRkwlqpD4JGNW35OZ+ZCoqD78=) 3: 3130332e3232372e3232352e302f32342d3234203d3e20313438393936.roa (hash: 3Fs3YXCHVhPim686QjSLVypvleRfB5cNa4r0sVni22s=) 4: 3130332e3137372e33322e302f32332d3234203d3e203338303432.roa (hash: xPDyINdFmufQbNbHGWy0zvLscglHenPHYxlwfT+v00s=) 5: 3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa (hash: cQkjcrDW6Cw958N6gtJjxyd/adphXQyJjpPcfgZ5xG4=) 6: 3130332e3232372e3232342e302f32332d3234203d3e20313438393936.roa (hash: Pe+GfCAU9CJUhyX0GcmCiKMiXy/uVxymKcKinAclsuQ=) 7: 3130332e3137372e33322e302f32342d3234203d3e20323134343332.roa (hash: 2YaoD0V9MTmYaytjBdN3g/2JltFPIOscJRsxuw7e/EQ=) 8: 3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa (hash: qkqrj9/N2V1M+ri4JRAjh2Xtl5l0eXftPC6OL0jPaCQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ab:04:45:1d:5b:d0:fb:6d:4e:9f:57:6f:b1:7d:0b:ca:21:be:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Validity Not Before: Jul 23 19:21:36 2026 GMT Not After : Jul 24 20:40:36 2026 GMT Subject: CN=EC9CCA29486616612BDC7C1A7BC11C6F4C3496AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:c7:ee:51:2d:e1:ad:dd:2f:2b:c4:b8:90: 1d:84:9b:bf:7f:e6:31:16:79:79:3e:78:46:81:94: 3a:b3:d5:85:25:44:c4:44:27:60:ef:d1:3a:a2:16: f5:b2:a1:b2:4a:67:46:f6:07:41:dd:97:f7:b7:a2: 26:10:48:df:0d:05:0f:ee:c8:9e:16:83:7d:3b:a2: f0:80:41:15:47:62:32:7c:55:c0:21:58:bc:b2:70: 73:f1:72:25:c6:5f:cb:9e:f9:ce:2f:ff:63:20:a4: 20:06:30:06:d4:2e:2f:30:f5:a7:c1:c7:da:3b:57: 9f:7c:02:40:66:a6:01:1f:1f:d1:34:c8:d3:e2:3f: 66:d5:36:ff:f9:6f:bf:0d:27:6c:11:c5:cb:35:5f: 57:90:a1:a6:24:1d:49:29:09:f8:50:a6:51:e0:ea: 91:05:d7:e0:03:41:18:89:41:ee:dd:81:d4:d9:94: 26:cb:d6:1c:fd:95:7f:9a:ad:a2:75:c4:ca:f1:56: f3:c3:c0:10:ec:41:0f:93:7d:85:f6:ae:b7:de:52: 85:7d:d3:db:10:23:0c:78:67:ac:b5:45:63:4a:8d: d5:b2:ad:cb:d6:24:6a:35:11:34:c3:5f:a3:83:82: f7:f5:87:7e:93:48:51:1d:25:8a:7d:76:43:5b:f1: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9C:CA:29:48:66:16:61:2B:DC:7C:1A:7B:C1:1C:6F:4C:34:96:AC X509v3 Authority Key Identifier: keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:70:5f:26:77:2f:26:54:0a:30:6c:ae:14:c1:9e:35:21:79: 86:53:02:4b:6b:ec:c2:6e:3c:d7:82:df:2a:87:86:66:50:e1: fa:82:58:5f:d3:aa:62:60:b4:d4:54:d0:d7:c4:dd:19:78:44: 32:4c:ea:68:31:37:41:6e:3d:78:9e:4e:6d:29:c0:0c:03:52: 72:19:1e:5b:e2:72:34:88:35:70:67:36:0b:ca:1d:8c:b5:99: 48:77:0f:9b:1f:d5:48:7a:1b:a9:ac:b8:3b:34:b5:c3:63:72: e1:76:99:6f:f2:61:76:4d:81:e7:ce:ac:b8:b0:c2:cb:dd:25: c3:9d:dd:9d:32:f4:6f:7a:41:8e:6b:c5:6d:77:13:a6:0a:4d: 13:96:d1:3f:26:b3:1f:2e:a3:16:8b:b9:3b:17:48:22:d0:0a: d2:40:50:72:df:c7:a2:9c:83:8f:69:7f:b8:59:d8:b2:75:d6: 40:94:76:4d:c7:38:8b:31:fb:71:24:db:45:ad:ea:c3:8c:84: d1:51:7f:1e:31:68:41:31:86:4c:bc:9e:f8:d4:e1:c6:fb:ef: f1:61:19:a4:89:c1:ac:c6:89:3e:39:26:75:2d:5c:54:4e:8e: 31:10:03:75:64:ab:84:4d:7a:22:32:91:ad:51:63:11:46:73: da:da:fd:3f -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUYasERR1b0PttTp9Xb7F9C8ohvvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MjdFNEU1M0JBNTE3QkJDNUM3OThDRjBEM0FGODcw Mzc1QzBCMDAeFw0yNjA3MjMxOTIxMzZaFw0yNjA3MjQyMDQwMzZaMDMxMTAvBgNV BAMTKEVDOUNDQTI5NDg2NjE2NjEyQkRDN0MxQTdCQzExQzZGNEMzNDk2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPE8fuUS3hrd0vK8S4kB2Em79/ 5jEWeXk+eEaBlDqz1YUlRMREJ2Dv0TqiFvWyobJKZ0b2B0Hdl/e3oiYQSN8NBQ/u yJ4Wg307ovCAQRVHYjJ8VcAhWLyycHPxciXGX8ue+c4v/2MgpCAGMAbULi8w9afB x9o7V598AkBmpgEfH9E0yNPiP2bVNv/5b78NJ2wRxcs1X1eQoaYkHUkpCfhQplHg 6pEF1+ADQRiJQe7dgdTZlCbL1hz9lX+araJ1xMrxVvPDwBDsQQ+TfYX2rrfeUoV9 09sQIwx4Z6y1RWNKjdWyrcvWJGo1ETTDX6ODgvf1h36TSFEdJYp9dkNb8ZTbAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU7JzKKUhmFmEr3Hwae8Ecb0w0lqwwHwYDVR0j BBgwFoAUp4J+TlO6UXu8XHmM8NOvhwN1wLAwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1DUlMv MC9BNzgyN0U0RTUzQkE1MTdCQkM1Qzc5OENGMEQzQUY4NzAzNzVDMEIwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0E3ODI3RTRFNTNCQTUxN0JCQzVDNzk4Q0YwRDNB Rjg3MDM3NUMwQjAuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTUNSUy8wL0E3ODI3RTRFNTNCQTUx N0JCQzVDNzk4Q0YwRDNBRjg3MDM3NUMwQjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAcF8mdy8mVAow bK4UwZ41IXmGUwJLa+zCbjzXgt8qh4ZmUOH6glhf06piYLTUVNDXxN0ZeEQyTOpo MTdBbj14nk5tKcAMA1JyGR5b4nI0iDVwZzYLyh2MtZlIdw+bH9VIehuprLg7NLXD Y3Lhdplv8mF2TYHnzqy4sMLL3SXDnd2dMvRvekGOa8VtdxOmCk0TltE/JrMfLqMW i7k7F0gi0ArSQFBy38einIOPaX+4WdiyddZAlHZNxziLMftxJNtFrerDjITRUX8e MWhBMYZMvJ741OHG++/xYRmkicGsxok+OSZ1LVxUTo4xEAN1ZKuETXoiMpGtUWMR RnPa2v0/ -----END CERTIFICATE-----Generated at Fri Jul 24 02:46:08 2026 by rpki-client