$ rpki-client -vvf rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft File: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft (raw, json) Hash identifier: 1/Ab/oeqOXfjG47xONMKK7KB6SS806Lhtyn2Wx2wKGo= Subject key identifier: DA:89:5A:F2:4D:A6:65:B0:3F:7F:61:7B:6C:9D:B7:F5:FF:BF:92:76 Authority key identifier: 0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67 Certificate issuer: /CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67 Certificate serial: 2CE3C3EFCAC502F4044F0B8A3D9D3BA0F2FD2B40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft Manifest number: 63 Signing time: Thu 23 Jul 2026 12:37:26 +0000 Manifest this update: Thu 23 Jul 2026 12:32:26 +0000 Manifest next update: Fri 24 Jul 2026 14:34:26 +0000 Files and hashes: 1: 36312e36312e3234302e302f32302d3234203d3e203138343232.roa (hash: OENg2dUxKfNMtI2u30bsu1HnbjPScDlxxKzl3KfntJg=) 2: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl (hash: X6njq56oL2JHJVlI3YDp/KctvdR19XAEws+ZsrpxlT0=) 3: 323030313a6564383a3a2f33322d3536203d3e203138343232.roa (hash: Xt2JiIyAeWDi9a4QRWUHvmXeXOlqKybS5a3x4Jwl6ss=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e3:c3:ef:ca:c5:02:f4:04:4f:0b:8a:3d:9d:3b:a0:f2:fd:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67 Validity Not Before: Jul 23 12:32:26 2026 GMT Not After : Jul 24 14:34:26 2026 GMT Subject: CN=DA895AF24DA665B03F7F617B6C9DB7F5FFBF9276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9a:38:84:2f:d7:4d:1d:dd:e2:10:12:fc:e1: 2f:67:c3:84:35:ec:68:3c:55:81:f5:c0:ef:2b:d8: b7:6b:e2:48:21:5c:97:57:d3:ae:8c:fd:d9:35:37: 4d:56:fb:11:4c:61:ca:9e:9b:1e:60:2f:07:4f:ec: b1:fa:d1:c2:37:55:48:5f:61:01:c3:37:c9:a6:b2: 6e:f7:51:b7:4e:c8:29:e3:1f:cd:e5:1a:59:9b:2b: a9:96:f0:50:29:1b:b3:17:7f:74:e0:cd:59:27:57: 67:32:17:93:e5:bb:61:cc:39:22:ce:b9:45:b1:24: 29:d5:47:00:ee:76:39:7a:c0:7c:02:a4:f7:50:cf: de:95:fd:d8:19:12:ee:77:d7:7b:69:26:e4:ee:d5: d1:74:7b:a0:2a:5a:9c:dd:04:b5:2d:0c:e0:a3:71: 8c:83:25:b3:1f:94:27:8b:64:e3:5b:a3:ab:ef:ac: 7c:d9:1e:19:2f:a3:d4:76:b9:39:8a:58:55:d9:19: 5d:70:83:72:79:18:52:a7:ae:e2:61:a7:27:65:78: 83:3e:cd:e4:c4:e1:f3:a0:ad:9e:42:32:96:86:c3: 21:34:1f:d5:5a:74:9f:fb:39:7c:17:b5:11:39:42: a8:2a:17:69:5f:0b:67:39:ed:04:d5:8c:b8:d6:bc: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:89:5A:F2:4D:A6:65:B0:3F:7F:61:7B:6C:9D:B7:F5:FF:BF:92:76 X509v3 Authority Key Identifier: keyid:0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:40:df:d5:9f:bf:e7:77:0a:81:8f:fe:61:eb:a6:93:4f:ba: cf:01:e2:4e:7a:df:53:e8:22:46:6a:0e:f0:9d:1a:09:cd:41: 7f:a0:3d:d9:77:cd:ef:3a:a9:c9:34:85:17:2c:f2:d1:eb:2f: 5f:21:81:0c:58:47:ca:7a:22:69:1e:70:5a:35:27:05:07:b7: 44:8f:2d:08:d1:0f:1a:03:3f:59:29:f6:e8:1b:d1:f2:9c:b0: ee:ec:df:2e:16:0c:14:10:5e:5f:63:b8:9f:a3:a3:d0:73:f3: 33:4c:31:64:8b:81:60:e2:a7:f1:c8:f8:54:a9:aa:0a:f8:9a: f7:1a:7e:43:38:83:32:39:fa:49:e8:c2:da:4b:48:83:e4:ef: 5f:00:75:4d:b2:e9:68:0a:16:ff:46:d8:a4:6e:c1:bf:60:7e: 76:73:90:b6:c0:87:82:5d:8d:1c:00:56:ab:a8:2d:05:05:ac: f9:87:94:ab:5d:2e:3c:08:4e:83:74:d9:43:66:e3:8f:36:5c: b9:78:a0:c2:14:3f:c4:59:35:2d:97:0a:33:c0:26:c0:59:e1: 43:b7:e9:9a:d5:8a:ad:3d:0f:58:19:97:55:31:25:78:24:08: dd:fe:9d:4f:9d:5a:9b:19:f6:3a:6f:da:96:36:86:62:61:e9: da:a6:64:9e -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIULOPD78rFAvQETwuKPZ07oPL9K0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFFRkJGQ0M1MjY2MjIyQzg0NTNGRTVCNDY4QzM2N0Mw OTVDOEY2NzAeFw0yNjA3MjMxMjMyMjZaFw0yNjA3MjQxNDM0MjZaMDMxMTAvBgNV BAMTKERBODk1QUYyNERBNjY1QjAzRjdGNjE3QjZDOURCN0Y1RkZCRjkyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mjiEL9dNHd3iEBL84S9nw4Q1 7Gg8VYH1wO8r2Ldr4kghXJdX066M/dk1N01W+xFMYcqemx5gLwdP7LH60cI3VUhf YQHDN8mmsm73UbdOyCnjH83lGlmbK6mW8FApG7MXf3TgzVknV2cyF5Plu2HMOSLO uUWxJCnVRwDudjl6wHwCpPdQz96V/dgZEu5313tpJuTu1dF0e6AqWpzdBLUtDOCj cYyDJbMflCeLZONbo6vvrHzZHhkvo9R2uTmKWFXZGV1wg3J5GFKnruJhpydleIM+ zeTE4fOgrZ5CMpaGwyE0H9VadJ/7OXwXtRE5QqgqF2lfC2c57QTVjLjWvDO5AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQU2ola8k2mZbA/f2F7bJ239f+/knYwHwYDVR0j BBgwFoAUCu+/zFJmIiyEU/5bRow2fAlcj2cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVRSSU5F VC8wLzBBRUZCRkNDNTI2NjIyMkM4NDUzRkU1QjQ2OEMzNjdDMDk1QzhGNjcuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMEFFRkJGQ0M1MjY2MjIyQzg0NTNGRTVCNDY4 QzM2N0MwOTVDOEY2Ny5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0lUUklORVQvMC8wQUVGQkZDQzUy NjYyMjJDODQ1M0ZFNUI0NjhDMzY3QzA5NUM4RjY3Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0Df1Z+/ 53cKgY/+Yeumk0+6zwHiTnrfU+giRmoO8J0aCc1Bf6A92XfN7zqpyTSFFyzy0esv XyGBDFhHynoiaR5wWjUnBQe3RI8tCNEPGgM/WSn26BvR8pyw7uzfLhYMFBBeX2O4 n6Oj0HPzM0wxZIuBYOKn8cj4VKmqCvia9xp+QziDMjn6SejC2ktIg+TvXwB1TbLp aAoW/0bYpG7Bv2B+dnOQtsCHgl2NHABWq6gtBQWs+YeUq10uPAhOg3TZQ2bjjzZc uXigwhQ/xFk1LZcKM8AmwFnhQ7fpmtWKrT0PWBmXVTEleCQI3f6dT51amxn2Om/a ljaGYmHp2qZkng== -----END CERTIFICATE-----Generated at Fri Jul 24 04:03:36 2026 by rpki-client