$ rpki-client -vvf rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft File: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft (raw, json) Hash identifier: YRz3ux5q6qQATDRJCrP5/f0KNzQEe+ry6cctqipPZjs= Subject key identifier: 49:12:D9:4C:8E:37:09:05:16:E9:59:28:A7:0E:2C:8C:DA:A9:61:2C Authority key identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 Certificate issuer: /CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Certificate serial: 5016899669F51A2E519C09C98CEB729A8543C73B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft Manifest number: 65 Signing time: Thu 23 Jul 2026 17:41:20 +0000 Manifest this update: Thu 23 Jul 2026 17:36:20 +0000 Manifest next update: Fri 24 Jul 2026 17:53:20 +0000 Files and hashes: 1: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl (hash: FqnsOBzVDjZiUkdaP6aIbHsTBtblnsUYUb13QWKfs8Y=) 2: 3136302e3139312e342e302f32332d3234203d3e203338303432.roa (hash: uC4SAyffO7EbE3rGS0jHS6n7C39qBWkfFa7uUUduW8s=) 3: 3136302e3139312e342e302f32332d3234203d3e20313438393936.roa (hash: WDQ6isA31vRFBEKAPNTN2h03bliS7XG3+ZDUsxu5ekM=) 4: 3136302e3139312e342e302f32332d3234203d3e20313334383233.roa (hash: MvSn3+N3E0x49y2zyFZseXhPFbhPYX7FDxa/hvK0XxA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:16:89:96:69:f5:1a:2e:51:9c:09:c9:8c:eb:72:9a:85:43:c7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Validity Not Before: Jul 23 17:36:20 2026 GMT Not After : Jul 24 17:53:20 2026 GMT Subject: CN=4912D94C8E37090516E95928A70E2C8CDAA9612C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:64:56:80:3c:0d:ac:e4:b4:4c:b2:30:98: 04:49:01:03:c7:73:b6:ba:26:09:15:8a:95:25:71: 32:10:4a:7b:44:a0:55:06:db:5b:1a:6c:23:d0:e8: 83:2c:e1:ca:d1:4f:0c:36:f0:df:c2:4e:ab:02:0a: f4:1a:f8:0f:e5:75:3c:34:6d:72:e9:99:16:11:98: 38:cd:5e:d1:28:87:35:dd:db:b9:b1:30:dc:f0:2b: b3:b7:6c:f1:1b:7f:78:7a:26:7d:79:7f:42:f7:d7: 9b:cd:15:e1:e6:7e:f6:ae:63:2c:b6:46:ad:8b:f8: 5e:79:70:0b:d2:e8:57:a6:7a:e4:e1:c5:5a:84:14: b3:13:92:1c:6a:1f:0a:06:b0:9e:31:0b:80:79:5a: 52:17:a2:6a:8f:d1:b8:8a:b8:f1:3f:ff:42:0c:78: 03:98:95:d6:df:6a:00:a8:ae:c8:be:68:e6:d0:5a: 90:af:a6:a3:7b:ce:d1:40:8a:67:e5:a6:54:d4:4f: 23:bb:e5:c7:9e:30:80:e3:43:99:41:e1:d2:3d:f0: 18:00:fe:86:b7:14:bb:f8:a8:73:86:36:65:ee:a4: 13:68:59:84:dc:b2:2f:21:6c:89:a2:ee:85:5d:df: 5e:75:a8:88:56:20:b0:01:66:5e:5a:17:01:60:1b: 85:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:12:D9:4C:8E:37:09:05:16:E9:59:28:A7:0E:2C:8C:DA:A9:61:2C X509v3 Authority Key Identifier: keyid:EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b2:a4:3a:10:8f:ac:e9:1a:85:d2:6d:24:f9:c4:fa:99:0c: 41:cf:ce:05:b8:f8:75:51:00:32:92:27:94:9e:f9:28:42:05: 08:6d:09:53:97:5e:99:41:bc:18:58:c9:c7:47:29:80:8d:48: 0f:3c:ba:f4:da:ed:d1:e8:22:b2:0e:1e:88:37:88:10:86:1e: 49:15:8a:49:ca:e5:bf:cf:55:f3:bd:65:de:0e:04:1e:da:e4: dc:ec:3b:7e:fb:dc:b9:a2:f4:7a:59:74:67:95:e1:32:c9:c3: 71:e9:33:89:1f:19:98:01:8f:1d:13:18:05:c3:14:35:42:76: 39:4b:9e:d6:cc:bd:49:58:0c:3b:2f:21:7a:77:08:b7:4a:8a: 4b:4f:3f:22:5b:52:9b:60:29:6f:bb:01:58:ec:65:fd:3c:c5: 09:10:43:e6:41:cb:c2:01:44:24:4c:4c:cb:00:52:2e:85:0f: 3e:25:02:e7:74:2a:59:58:70:1c:da:5a:31:8a:90:a7:10:ff: a8:b7:7e:1b:a1:03:76:a1:5f:ab:d7:8f:bc:7b:20:9d:4d:92: 9d:7e:07:bc:b3:ba:ee:6e:ee:0f:cb:4d:d0:a4:26:1c:4d:46: e9:18:f4:7e:e3:fb:bf:37:d4:77:d1:40:4b:c7:6a:26:41:94: 77:fd:32:f0 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUUBaJlmn1Gi5RnAnJjOtymoVDxzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYxRDEwNDg0RUZBNzlBQkMwMThGQTBFRkE3RjNCMEMx NkVFNDNBNzAeFw0yNjA3MjMxNzM2MjBaFw0yNjA3MjQxNzUzMjBaMDMxMTAvBgNV BAMTKDQ5MTJEOTRDOEUzNzA5MDUxNkU5NTkyOEE3MEUyQzhDREFBOTYxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCynGRWgDwNrOS0TLIwmARJAQPH c7a6JgkVipUlcTIQSntEoFUG21sabCPQ6IMs4crRTww28N/CTqsCCvQa+A/ldTw0 bXLpmRYRmDjNXtEohzXd27mxMNzwK7O3bPEbf3h6Jn15f0L315vNFeHmfvauYyy2 Rq2L+F55cAvS6FemeuThxVqEFLMTkhxqHwoGsJ4xC4B5WlIXomqP0biKuPE//0IM eAOYldbfagCorsi+aObQWpCvpqN7ztFAimflplTUTyO75ceeMIDjQ5lB4dI98BgA /oa3FLv4qHOGNmXupBNoWYTcsi8hbImi7oVd3151qIhWILABZl5aFwFgG4VxAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUSRLZTI43CQUW6Vkopw4sjNqpYSwwHwYDVR0j BBgwFoAU7x0QSE76eavAGPoO+n87DBbuQ6cwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1ZS0wv MC9FRjFEMTA0ODRFRkE3OUFCQzAxOEZBMEVGQTdGM0IwQzE2RUU0M0E3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0VGMUQxMDQ4NEVGQTc5QUJDMDE4RkEwRUZBN0Yz QjBDMTZFRTQzQTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTVlLTC8wL0VGMUQxMDQ4NEVGQTc5 QUJDMDE4RkEwRUZBN0YzQjBDMTZFRTQzQTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBsqQ6EI+s6RqF 0m0k+cT6mQxBz84FuPh1UQAykieUnvkoQgUIbQlTl16ZQbwYWMnHRymAjUgPPLr0 2u3R6CKyDh6IN4gQhh5JFYpJyuW/z1XzvWXeDgQe2uTc7Dt++9y5ovR6WXRnleEy ycNx6TOJHxmYAY8dExgFwxQ1QnY5S57WzL1JWAw7LyF6dwi3SopLTz8iW1KbYClv uwFY7GX9PMUJEEPmQcvCAUQkTEzLAFIuhQ8+JQLndCpZWHAc2loxipCnEP+ot34b oQN2oV+r14+8eyCdTZKdfge8s7rubu4Py03QpCYcTUbpGPR+4/u/N9R30UBLx2om QZR3/TLw -----END CERTIFICATE-----Generated at Fri Jul 24 08:16:26 2026 by rpki-client