$ rpki-client -vvf rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft File: 56C0B74262A19F328983C278635DE9570AFEB948.mft (raw, json) Hash identifier: lDmsQE/wtlvJTIUjWO+ujTcygemZx7rt+5vkgqo6Koo= Subject key identifier: 8F:F6:0F:01:49:8A:1D:4C:78:BD:1A:D7:72:A6:3A:43:98:9B:12:9E Authority key identifier: 56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48 Certificate issuer: /CN=56C0B74262A19F328983C278635DE9570AFEB948 Certificate serial: 2454E132F2337A1CF9D3EE41104538282C5A673D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft Manifest number: 04 Signing time: Tue 12 May 2026 13:01:07 +0000 Manifest this update: Tue 12 May 2026 12:56:07 +0000 Manifest next update: Wed 13 May 2026 16:53:07 +0000 Files and hashes: 1: 323430323a343932303a3a2f33322d3438203d3e203138303434.roa (hash: w+sTaFe8OsYZPZPjwuyvLTqcXmP0CcIo8Vy8833aYz8=) 2: 56C0B74262A19F328983C278635DE9570AFEB948.crl (hash: CcquWe4JKZzP/TUT/dn5NSFVuU+Ogo1h+FU0HFeQMOE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:54:e1:32:f2:33:7a:1c:f9:d3:ee:41:10:45:38:28:2c:5a:67:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56C0B74262A19F328983C278635DE9570AFEB948 Validity Not Before: May 12 12:56:07 2026 GMT Not After : May 13 16:53:07 2026 GMT Subject: CN=8FF60F01498A1D4C78BD1AD772A63A43989B129E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:dc:71:ed:9c:82:11:91:5e:ea:eb:62:b3: aa:65:66:83:b1:90:f7:de:fe:d0:c2:41:17:9a:f5: 59:5c:f9:6a:24:8e:3a:46:55:7c:26:fb:53:f7:7f: f4:23:1c:a3:d6:1b:8f:54:9c:17:51:67:b9:6a:e4: be:62:33:49:6c:f2:58:cb:16:9a:ca:d1:da:b8:1b: a5:42:ff:77:93:bf:5d:a1:58:10:84:dd:d5:3b:89: ce:24:3a:b1:3c:d5:e2:04:e5:49:ee:40:c9:53:75: b0:6e:e3:b9:58:64:f5:0f:a5:c6:d9:db:73:3d:92: 26:b3:1e:24:69:33:5e:b0:92:4b:f7:96:f1:9c:2e: f1:e1:39:e7:d1:ef:31:c0:a3:43:71:5a:b7:da:9f: c6:7d:7c:76:04:87:97:e5:9f:dc:77:e3:4b:fe:cd: cf:96:5a:cd:55:30:a2:1a:d9:5d:55:da:17:65:62: 83:d9:8b:79:04:04:0a:9f:1f:ca:5a:08:cc:1a:a5: 3c:52:a8:ec:e6:9e:59:3e:48:1b:ab:81:ee:f2:c4: f0:25:29:38:1c:99:7f:92:fd:a8:26:27:45:3a:ae: 9c:e0:7c:3a:d7:a9:06:de:7f:0e:bf:b5:6b:5e:5a: 69:69:39:2d:65:83:3b:90:97:e5:55:ef:4b:8e:4f: 19:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F6:0F:01:49:8A:1D:4C:78:BD:1A:D7:72:A6:3A:43:98:9B:12:9E X509v3 Authority Key Identifier: keyid:56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:79:e2:32:26:ef:94:b6:84:b7:c3:e7:09:27:3d:b4:7c:97: 72:71:5a:57:d3:af:a9:0e:40:c0:c0:7d:4d:40:75:ff:c0:0b: 08:7c:60:c5:91:69:9d:dc:e3:7d:6a:bf:90:cc:8f:89:de:ee: a3:63:f8:8a:45:76:3b:7f:c1:a2:22:a1:87:24:cd:5b:9e:af: e9:5c:95:9c:65:1e:0b:3c:54:cf:9e:ea:a7:f0:32:82:eb:91: f5:05:57:0e:a5:29:68:74:f7:60:c5:36:ec:8e:ea:44:8d:8f: b9:31:3b:ca:36:17:39:71:7b:b8:e1:c7:a5:b8:e6:9a:3c:85: 00:99:5f:ba:c7:b4:63:1d:05:84:89:2e:a8:2a:39:0c:69:5b: c2:14:da:fa:f6:5b:ef:df:be:c0:9e:c7:5b:b2:71:d1:ec:02: 65:9e:00:9d:24:af:aa:39:fb:ac:e3:0f:7a:7b:86:86:a4:84: b5:fa:82:89:4e:e3:95:52:21:7d:1c:c0:e3:55:24:ad:96:84: fd:0a:1a:b3:7b:7e:74:81:8a:7a:f7:af:4d:34:bc:fc:c2:85: ea:a2:2c:1b:ef:4e:b0:a2:79:65:90:76:bb:20:80:f3:a5:c3: 97:f1:22:53:e4:68:cf:a5:ad:57:f6:bf:21:be:e2:ed:2c:a4: 5c:67:2d:16 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUJFThMvIzehz50+5BEEU4KCxaZz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZDMEI3NDI2MkExOUYzMjg5ODNDMjc4NjM1REU5NTcw QUZFQjk0ODAeFw0yNjA1MTIxMjU2MDdaFw0yNjA1MTMxNjUzMDdaMDMxMTAvBgNV BAMTKDhGRjYwRjAxNDk4QTFENEM3OEJEMUFENzcyQTYzQTQzOTg5QjEyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQndxx7ZyCEZFe6utis6plZoOx kPfe/tDCQRea9Vlc+WokjjpGVXwm+1P3f/QjHKPWG49UnBdRZ7lq5L5iM0ls8ljL FprK0dq4G6VC/3eTv12hWBCE3dU7ic4kOrE81eIE5UnuQMlTdbBu47lYZPUPpcbZ 23M9kiazHiRpM16wkkv3lvGcLvHhOefR7zHAo0NxWrfan8Z9fHYEh5fln9x340v+ zc+WWs1VMKIa2V1V2hdlYoPZi3kEBAqfH8paCMwapTxSqOzmnlk+SBurge7yxPAl KTgcmX+S/agmJ0U6rpzgfDrXqQbefw6/tWteWmlpOS1lgzuQl+VV70uOTxmHAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUj/YPAUmKHUx4vRrXcqY6Q5ibEp4wHwYDVR0j BBgwFoAUVsC3QmKhnzKJg8J4Y13pVwr+uUgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FOUkFZ Uy8wLzU2QzBCNzQyNjJBMTlGMzI4OTgzQzI3ODYzNURFOTU3MEFGRUI5NDguY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTZDMEI3NDI2MkExOUYzMjg5ODNDMjc4NjM1 REU5NTcwQUZFQjk0OC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tBTlJBWVMvMC81NkMwQjc0MjYy QTE5RjMyODk4M0MyNzg2MzVERTk1NzBBRkVCOTQ4Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXniMibv lLaEt8PnCSc9tHyXcnFaV9OvqQ5AwMB9TUB1/8ALCHxgxZFpndzjfWq/kMyPid7u o2P4ikV2O3/BoiKhhyTNW56v6VyVnGUeCzxUz57qp/AyguuR9QVXDqUpaHT3YMU2 7I7qRI2PuTE7yjYXOXF7uOHHpbjmmjyFAJlfuse0Yx0FhIkuqCo5DGlbwhTa+vZb 79++wJ7HW7Jx0ewCZZ4AnSSvqjn7rOMPenuGhqSEtfqCiU7jlVIhfRzA41UkrZaE /Qoas3t+dIGKevevTTS8/MKF6qIsG+9OsKJ5ZZB2uyCA86XDl/EiU+Roz6WtV/a/ Ib7i7SykXGctFg== -----END CERTIFICATE-----Generated at Wed May 13 03:59:28 2026 by rpki-client