$ rpki-client -vvf rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft File: FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft (raw, json) Hash identifier: YE7nMNZAfeuZTN5BR9JknEZG0c7wJVqBhutY9+3m0IA= Subject key identifier: 49:7E:21:76:1D:15:01:BB:4A:1A:1D:BB:24:74:59:99:58:A4:3C:FC Authority key identifier: FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B Certificate issuer: /CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B Certificate serial: 172F25BF24735458628D4B26A2CA1047634F412D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft Manifest number: 64 Signing time: Fri 24 Jul 2026 00:12:04 +0000 Manifest this update: Fri 24 Jul 2026 00:07:04 +0000 Manifest next update: Sat 25 Jul 2026 00:36:04 +0000 Files and hashes: 1: FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl (hash: V9TMgh/ZPFcp+BoekkTXgIikbifB1h3Lv1Rd5P3FqdQ=) 2: 323430313a653736303a3a2f33322d3438203d3e20313331363435.roa (hash: 8YC3WhfA/JwpTpT4EA1dLfSVRzAraHz3m65LBo1nSas=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2f:25:bf:24:73:54:58:62:8d:4b:26:a2:ca:10:47:63:4f:41:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B Validity Not Before: Jul 24 00:07:04 2026 GMT Not After : Jul 25 00:36:04 2026 GMT Subject: CN=497E21761D1501BB4A1A1DBB2474599958A43CFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:49:b1:bf:c1:2f:20:49:76:04:f5:46:bd: 69:9a:23:22:c6:a2:58:29:2b:ee:01:1d:b7:d4:87: 06:c4:d1:97:02:a9:ee:be:cd:30:7f:b4:72:57:7a: 89:4d:3d:de:77:21:20:34:40:f8:de:39:9f:e7:ce: ea:7c:ab:fe:32:16:1c:85:13:ae:d4:39:60:b5:2c: 31:72:65:eb:58:0e:2e:19:05:1e:10:89:66:42:12: 8d:c7:76:72:67:69:fa:f4:6d:9e:f7:82:f5:37:94: e0:65:b6:f4:43:72:e5:3d:7b:76:ac:e4:6e:85:09: 4e:16:2f:c5:0e:17:01:22:43:eb:9b:6a:c6:bb:bf: 01:5f:3a:80:2c:87:f2:35:f7:ed:fc:c3:0d:61:22: 31:0f:83:6d:2f:8a:7c:4a:25:04:f6:e3:2e:67:ac: a9:9a:ab:de:5d:e1:1b:4c:25:87:13:74:7b:40:21: 47:c2:05:99:c8:9b:c1:a0:9e:c9:d5:2a:cf:ff:26: 1f:08:c4:f1:cc:c0:ec:17:ce:17:0e:42:26:31:51: 01:b0:49:a4:da:54:06:82:29:2d:ff:ea:c7:8a:6f: f2:3a:96:8a:41:ad:b8:c5:c6:ec:49:3d:95:81:18: 13:e6:9b:a2:5b:80:4b:39:58:35:de:c1:59:f5:ca: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7E:21:76:1D:15:01:BB:4A:1A:1D:BB:24:74:59:99:58:A4:3C:FC X509v3 Authority Key Identifier: keyid:FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7f:13:88:5a:ee:4a:e8:9f:b8:2a:29:72:dc:09:79:b3:ad: 2c:d8:86:cd:a3:c8:58:2a:17:e6:e4:03:ca:b1:d0:b7:e6:52: 5a:28:15:11:20:2e:a5:2c:69:8d:6e:b0:03:43:12:5f:10:ab: 40:7f:54:56:21:34:c3:5d:d6:8b:74:5b:1c:f8:9e:57:5e:1f: dd:78:ab:31:7b:3f:8e:19:43:48:b5:26:a3:c0:a8:f3:53:2d: e8:47:55:69:03:d4:4b:07:d3:48:74:7f:ea:80:d6:91:c2:0a: 41:a1:72:39:7e:69:5b:1c:d4:86:e4:1c:f2:49:af:a8:46:ff: c8:44:fd:67:f4:47:22:17:ab:15:53:ef:78:17:b2:46:72:d9: 93:56:6a:07:10:e0:f0:0d:e2:a1:67:da:80:2a:76:b6:28:c5: f1:8d:cb:8f:4c:bd:ab:94:75:c8:c1:fb:3f:f0:42:c7:ba:12: a1:e9:5f:b6:e0:3a:05:e6:24:0c:da:aa:ab:e1:71:45:c8:31: 83:38:f9:5d:e4:6b:4e:da:af:60:13:fc:58:7f:81:b5:23:e6: 08:39:f7:4f:21:be:ad:41:f1:f5:40:79:11:5b:ac:21:7f:57: 38:4b:81:15:6e:ee:c1:ea:9a:dc:c1:83:23:b0:3f:82:a3:78: e3:0b:96:20 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUFy8lvyRzVFhijUsmosoQR2NPQS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3NTJENkUxQTg5QTgyNEJFNkUwNDg1MkQxRjUwNUYw MUVEMTg1QjAeFw0yNjA3MjQwMDA3MDRaFw0yNjA3MjUwMDM2MDRaMDMxMTAvBgNV BAMTKDQ5N0UyMTc2MUQxNTAxQkI0QTFBMURCQjI0NzQ1OTk5NThBNDNDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaoUmxv8EvIEl2BPVGvWmaIyLG olgpK+4BHbfUhwbE0ZcCqe6+zTB/tHJXeolNPd53ISA0QPjeOZ/nzup8q/4yFhyF E67UOWC1LDFyZetYDi4ZBR4QiWZCEo3HdnJnafr0bZ73gvU3lOBltvRDcuU9e3as 5G6FCU4WL8UOFwEiQ+ubasa7vwFfOoAsh/I19+38ww1hIjEPg20vinxKJQT24y5n rKmaq95d4RtMJYcTdHtAIUfCBZnIm8GgnsnVKs//Jh8IxPHMwOwXzhcOQiYxUQGw SaTaVAaCKS3/6seKb/I6lopBrbjFxuxJPZWBGBPmm6JbgEs5WDXewVn1yqnRAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUSX4hdh0VAbtKGh27JHRZmVikPPwwHwYDVR0j BBgwFoAU+3UtbhqJqCS+bgSFLR9QXwHtGFswDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzAv RkI3NTJENkUxQTg5QTgyNEJFNkUwNDg1MkQxRjUwNUYwMUVEMTg1Qi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9GQjc1MkQ2RTFBODlBODI0QkU2RTA0ODUyRDFGNTA1 RjAxRUQxODVCLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzAvRkI3NTJENkUxQTg5QTgyNEJF NkUwNDg1MkQxRjUwNUYwMUVEMTg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGN/E4ha7kron7gqKXLc CXmzrSzYhs2jyFgqF+bkA8qx0LfmUlooFREgLqUsaY1usANDEl8Qq0B/VFYhNMNd 1ot0Wxz4nldeH914qzF7P44ZQ0i1JqPAqPNTLehHVWkD1EsH00h0f+qA1pHCCkGh cjl+aVsc1IbkHPJJr6hG/8hE/Wf0RyIXqxVT73gXskZy2ZNWagcQ4PAN4qFn2oAq drYoxfGNy49MvauUdcjB+z/wQse6EqHpX7bgOgXmJAzaqqvhcUXIMYM4+V3ka07a r2AT/Fh/gbUj5gg5908hvq1B8fVAeRFbrCF/VzhLgRVu7sHqmtzBgyOwP4KjeOML liA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:12:50 2026 by rpki-client