$ rpki-client -vvf rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft File: 0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft (raw, json) Hash identifier: HYqlafW8WTS7oSY02gM+rMpL2PCS0nc3t/KcQLZPbHY= Subject key identifier: F8:19:EF:A8:62:A8:2A:BD:42:E2:16:8A:FC:B7:53:6E:7C:F1:2E:CA Authority key identifier: 0D:C9:06:EA:C8:AF:A1:6F:54:C8:F9:EF:9E:CC:B9:A2:B9:0B:5B:1B Certificate issuer: /CN=0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B Certificate serial: 23EA8B135849612A7A12EB6270BFCD44592C15B0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft Manifest number: 65 Signing time: Fri 24 Jul 2026 05:12:38 +0000 Manifest this update: Fri 24 Jul 2026 05:07:38 +0000 Manifest next update: Sat 25 Jul 2026 07:42:38 +0000 Files and hashes: 1: 3136312e3234382e3133322e302f32332d3234203d3e20313331363435.roa (hash: zTyEt/E/NAPbMASFWkS4yWV2xmBH0gl0BW2wGqKTvmQ=) 2: 0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl (hash: CR1xQdEfbZFvqRJKje0tn4r9+NOBEBGDtIXjUyC9qWY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ea:8b:13:58:49:61:2a:7a:12:eb:62:70:bf:cd:44:59:2c:15:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B Validity Not Before: Jul 24 05:07:38 2026 GMT Not After : Jul 25 07:42:38 2026 GMT Subject: CN=F819EFA862A82ABD42E2168AFCB7536E7CF12ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:ec:38:ff:42:55:75:80:17:d7:c8:17:17: 0e:7d:82:4f:94:ee:64:f5:1b:44:cb:f0:85:76:f6: 94:b0:ca:f1:45:01:cf:29:7a:4e:36:ef:88:c9:66: 43:db:11:d2:cf:47:39:6a:77:0a:9e:f3:e9:d1:74: e5:d1:d9:b4:db:4a:62:2e:05:b1:09:8b:ae:d9:55: 91:85:56:7d:3b:f4:74:01:13:81:67:65:7d:73:e6: 29:9d:4d:aa:3d:4e:d1:8b:0c:63:fe:13:0a:84:22: dc:54:9a:60:3e:94:7e:39:83:eb:9c:75:20:ca:ed: 63:9a:ba:8f:b5:7c:e7:69:7d:03:ab:c3:fb:2a:16: 37:a1:48:7b:16:9a:5b:fa:9c:c5:62:52:cb:b0:eb: d1:d0:9a:6a:b3:fa:83:f1:03:85:75:f0:f4:87:1b: f0:5b:5f:46:5c:15:a4:8a:b2:df:b3:9e:aa:51:86: d5:b5:7b:7f:9e:87:6a:48:81:72:83:0e:a7:95:c9: a0:64:af:7d:c5:47:e0:bc:44:db:ed:02:29:2c:44: 61:47:8f:53:8b:16:93:e2:17:a2:ab:28:76:50:c8: 57:55:b4:96:79:e8:3e:a7:0f:2b:ce:24:5f:b4:7b: 62:97:e9:9e:c2:a9:dd:61:c4:42:6e:32:23:6a:43: da:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:19:EF:A8:62:A8:2A:BD:42:E2:16:8A:FC:B7:53:6E:7C:F1:2E:CA X509v3 Authority Key Identifier: keyid:0D:C9:06:EA:C8:AF:A1:6F:54:C8:F9:EF:9E:CC:B9:A2:B9:0B:5B:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:68:eb:02:d8:fe:21:df:e7:4e:7f:53:7b:31:6f:2d:4c:89: e4:d9:ea:2c:ce:35:3f:c4:96:49:ea:7f:cc:1c:a1:ae:95:90: 29:0f:c8:f5:c9:7f:7c:e8:31:a9:2f:6e:b3:da:b2:db:23:9d: 75:11:de:d1:f6:d5:33:27:d8:3e:e1:a9:74:64:71:94:55:a6: 6a:84:de:e1:81:ad:fb:da:18:70:d6:9e:f4:ba:db:c4:e0:59: 3d:b4:7a:34:56:ea:50:b2:6a:ea:2b:64:dc:6a:4c:6a:80:b5: e4:2b:18:b2:16:03:74:80:f3:0d:f3:bc:8d:c3:ca:4e:26:d1: 0c:a7:71:63:49:0a:04:1c:db:14:9e:22:92:e2:54:23:35:73: a0:c8:e1:6b:0f:6c:37:ec:d6:39:42:46:c1:ae:ea:ac:b6:a8: 82:d1:1d:97:09:13:e5:10:48:60:92:8e:66:6b:ca:9d:b2:34: 32:83:f9:da:ec:79:8c:b8:cc:c8:0d:57:24:5a:68:06:04:7f: a0:18:99:f7:91:5d:31:44:4f:7d:22:02:97:94:90:62:8b:80: f7:99:0f:de:84:28:ef:f4:25:8d:c7:1e:43:75:53:ba:f0:1b: a8:9b:29:86:b3:f4:ad:34:6b:79:3b:06:1d:e1:1f:2e:16:90: eb:51:1c:be -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUI+qLE1hJYSp6EuticL/NRFksFbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERDOTA2RUFDOEFGQTE2RjU0QzhGOUVGOUVDQ0I5QTJC OTBCNUIxQjAeFw0yNjA3MjQwNTA3MzhaFw0yNjA3MjUwNzQyMzhaMDMxMTAvBgNV BAMTKEY4MTlFRkE4NjJBODJBQkQ0MkUyMTY4QUZDQjc1MzZFN0NGMTJFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAz+w4/0JVdYAX18gXFw59gk+U 7mT1G0TL8IV29pSwyvFFAc8pek4274jJZkPbEdLPRzlqdwqe8+nRdOXR2bTbSmIu BbEJi67ZVZGFVn079HQBE4FnZX1z5imdTao9TtGLDGP+EwqEItxUmmA+lH45g+uc dSDK7WOauo+1fOdpfQOrw/sqFjehSHsWmlv6nMViUsuw69HQmmqz+oPxA4V18PSH G/BbX0ZcFaSKst+znqpRhtW1e3+eh2pIgXKDDqeVyaBkr33FR+C8RNvtAiksRGFH j1OLFpPiF6KrKHZQyFdVtJZ56D6nDyvOJF+0e2KX6Z7Cqd1hxEJuMiNqQ9oZAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU+BnvqGKoKr1C4haK/LdTbnzxLsowHwYDVR0j BBgwFoAUDckG6sivoW9UyPnvnsy5orkLWxswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tJUy8x LzBEQzkwNkVBQzhBRkExNkY1NEM4RjlFRjlFQ0NCOUEyQjkwQjVCMUIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvMERDOTA2RUFDOEFGQTE2RjU0QzhGOUVGOUVDQ0I5 QTJCOTBCNUIxQi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tLSVMvMS8wREM5MDZFQUM4QUZBMTZG NTRDOEY5RUY5RUNDQjlBMkI5MEI1QjFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmjrAtj+Id/nTn9T ezFvLUyJ5NnqLM41P8SWSep/zByhrpWQKQ/I9cl/fOgxqS9us9qy2yOddRHe0fbV MyfYPuGpdGRxlFWmaoTe4YGt+9oYcNae9LrbxOBZPbR6NFbqULJq6itk3GpMaoC1 5CsYshYDdIDzDfO8jcPKTibRDKdxY0kKBBzbFJ4ikuJUIzVzoMjhaw9sN+zWOUJG wa7qrLaogtEdlwkT5RBIYJKOZmvKnbI0MoP52ux5jLjMyA1XJFpoBgR/oBiZ95Fd MURPfSICl5SQYouA95kP3oQo7/QljcceQ3VTuvAbqJsphrP0rTRreTsGHeEfLhaQ 61Ecvg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:34:57 2026 by rpki-client