$ rpki-client -vvf rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft File: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft (raw, json) Hash identifier: Xh4rlm1n6FTy6xbNHPL+lt89vKE86kks09IoHcnAlYY= Subject key identifier: 60:07:7C:82:74:11:79:CA:9E:68:10:91:8A:7D:B2:BC:19:3E:DA:F4 Authority key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA Certificate issuer: /CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Certificate serial: 5B4F5005B11A79BF81DC3E46CF27E74E0403FFBE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft Manifest number: 67 Signing time: Thu 23 Jul 2026 16:08:12 +0000 Manifest this update: Thu 23 Jul 2026 16:03:12 +0000 Manifest next update: Fri 24 Jul 2026 19:08:12 +0000 Files and hashes: 1: 3130332e3137332e39342e302f32332d3234203d3e2039393230.roa (hash: 4AY9mKhgxxuuSl6y1Sy2exIP/SFNw2gXcIDmergV1Y0=) 2: 323430373a653463303a3a2f34382d3438203d3e20313532363134.roa (hash: vgzFcwGEYe/SuHzv/bradPPbtlCxt1g9+kfxNVcgqL0=) 3: 3130332e3137332e39342e302f32332d3234203d3e20313532363134.roa (hash: DFwmEzDSWwn1n/LKb3VnZN0eid9zGs6vXBGXUYxrvVE=) 4: 3130332e3137332e39352e302f32342d3234203d3e2039393230.roa (hash: GRWZ7hnM+/dWxb1R4FqblAJoXVc3WKwBr5Lvm8NY3Iw=) 5: 3130332e3137332e39342e302f32342d3234203d3e2039393230.roa (hash: LLLHTnX1lDVfIT/USPcy8uRSK7AEjVy8r3OHlXaKRtA=) 6: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl (hash: adCnXW2WKD+iYCTtYT0w8UOL2zTyd0FslTFUHTB8osQ=) 7: 323430373a653463303a313a3a2f34382d3438203d3e2039393230.roa (hash: SPZzDHWF7IOGU0RefkHatr6T+UuWJ43wu5dvfPsUlBc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4f:50:05:b1:1a:79:bf:81:dc:3e:46:cf:27:e7:4e:04:03:ff:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Validity Not Before: Jul 23 16:03:12 2026 GMT Not After : Jul 24 19:08:12 2026 GMT Subject: CN=60077C82741179CA9E6810918A7DB2BC193EDAF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:fb:98:72:63:7a:3b:57:47:f9:f5:75:83: d9:66:7e:96:d9:ca:40:00:85:42:64:f3:aa:48:0e: e5:1c:e8:d0:97:d7:e1:a1:26:54:65:95:19:0c:ee: 7e:71:4c:6a:97:10:cc:b0:df:59:20:13:ac:fd:a1: 0c:c1:5b:0c:a6:e4:74:08:d4:c0:02:38:03:e4:d3: 46:e6:f7:b3:cc:44:4c:f0:1c:f0:26:33:4e:79:25: 3c:b1:02:63:5b:3b:f5:1d:13:c9:01:b1:12:01:31: 35:cf:9e:8f:ba:2c:bf:cb:c3:4b:3d:21:c5:81:ab: 95:bf:84:b0:3c:33:8a:7b:ab:f9:37:b9:41:fd:1c: 82:aa:e4:34:84:7c:2b:04:9b:d4:ae:fe:a8:4b:e5: fd:b6:c6:39:9b:6f:a7:d4:a2:b1:a9:42:21:88:c5: 39:02:d9:b7:a9:6c:4f:f0:7f:38:64:e5:5e:46:4e: c2:f4:bf:19:4a:49:cd:3b:11:02:dd:6f:43:13:9b: a4:4f:00:23:82:6f:d0:7f:88:f1:93:ca:55:d9:fb: 5a:04:e0:89:cd:01:24:04:1d:4a:eb:70:d3:44:83: 71:33:33:03:54:23:ca:5c:63:24:47:94:40:68:60: 38:50:54:fa:b1:e9:5b:25:fd:43:52:b3:0d:06:23: 5f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:07:7C:82:74:11:79:CA:9E:68:10:91:8A:7D:B2:BC:19:3E:DA:F4 X509v3 Authority Key Identifier: keyid:41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:6d:82:e3:0a:7d:e2:3d:cc:d9:6b:c9:13:0f:bb:d1:9b:52: 65:02:66:28:8a:e8:b6:22:57:cf:33:fb:2f:4b:df:e7:52:48: 45:a8:24:59:a7:69:14:da:41:23:b4:1e:63:e1:f5:58:20:6b: 37:09:63:28:1b:54:64:28:a5:99:4c:1f:4c:d1:3d:9f:3c:28: 72:9a:f6:6c:99:f7:27:53:15:16:e4:14:ed:f2:45:dd:b0:7a: 9e:89:b7:f2:36:99:cd:55:a0:e2:9e:ae:af:23:d7:1e:95:47: d1:0c:65:8c:70:5c:30:1f:a9:24:90:8e:d7:92:15:d7:72:4b: 93:cb:4f:e7:ff:59:b8:3a:28:b3:1b:e4:fe:2b:25:bb:2f:f7: dd:95:d2:f8:27:a2:ac:af:7f:63:42:fa:08:9d:b0:7a:38:54: 81:f5:5a:9d:71:0e:31:a6:e5:17:51:18:72:32:eb:52:8c:05: 6e:b7:30:18:95:88:05:96:62:90:64:ff:50:25:f5:7e:33:f6: 0c:16:42:5a:69:17:62:4a:c9:20:68:d3:3d:3a:3f:cb:7d:e8: 01:bb:fe:fe:82:47:7c:b8:91:09:8b:9e:91:6e:6a:b9:22:c2: 30:1b:92:d5:3d:49:17:a7:ec:b7:10:6a:f4:cf:03:e4:8f:67: ce:f1:7d:c9 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUW09QBbEaeb+B3D5GzyfnTgQD/74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFCRUI2NTY2OEUxNjQ5RURFOTcyOEU0RkY0ODU5MUZB MEM1ODJCQTAeFw0yNjA3MjMxNjAzMTJaFw0yNjA3MjQxOTA4MTJaMDMxMTAvBgNV BAMTKDYwMDc3QzgyNzQxMTc5Q0E5RTY4MTA5MThBN0RCMkJDMTkzRURBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhvuYcmN6O1dH+fV1g9lmfpbZ ykAAhUJk86pIDuUc6NCX1+GhJlRllRkM7n5xTGqXEMyw31kgE6z9oQzBWwym5HQI 1MACOAPk00bm97PMREzwHPAmM055JTyxAmNbO/UdE8kBsRIBMTXPno+6LL/Lw0s9 IcWBq5W/hLA8M4p7q/k3uUH9HIKq5DSEfCsEm9Su/qhL5f22xjmbb6fUorGpQiGI xTkC2bepbE/wfzhk5V5GTsL0vxlKSc07EQLdb0MTm6RPACOCb9B/iPGTylXZ+1oE 4InNASQEHUrrcNNEg3EzMwNUI8pcYyRHlEBoYDhQVPqx6Vsl/UNSsw0GI1/LAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUYAd8gnQRecqeaBCRin2yvBk+2vQwHwYDVR0j BBgwFoAUQb62VmjhZJ7elyjk/0hZH6DFgrowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVNUVkMv MC80MUJFQjY1NjY4RTE2NDlFREU5NzI4RTRGRjQ4NTkxRkEwQzU4MkJBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzQxQkVCNjU2NjhFMTY0OUVERTk3MjhFNEZGNDg1 OTFGQTBDNTgyQkEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JU1RWQy8wLzQxQkVCNjU2NjhFMTY0 OUVERTk3MjhFNEZGNDg1OTFGQTBDNTgyQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDAbYLjCn3iPczZ a8kTD7vRm1JlAmYoiui2IlfPM/svS9/nUkhFqCRZp2kU2kEjtB5j4fVYIGs3CWMo G1RkKKWZTB9M0T2fPChymvZsmfcnUxUW5BTt8kXdsHqeibfyNpnNVaDinq6vI9ce lUfRDGWMcFwwH6kkkI7XkhXXckuTy0/n/1m4OiizG+T+KyW7L/fdldL4J6Ksr39j QvoInbB6OFSB9VqdcQ4xpuUXURhyMutSjAVutzAYlYgFlmKQZP9QJfV+M/YMFkJa aRdiSskgaNM9Oj/LfegBu/7+gkd8uJEJi56Rbmq5IsIwG5LVPUkXp+y3EGr0zwPk j2fO8X3J -----END CERTIFICATE-----Generated at Fri Jul 24 04:19:44 2026 by rpki-client