$ rpki-client -vvf rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft File: 793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft (raw, json) Hash identifier: Nap/51Jc/PHFKcrC7rdb/fd3YzmucYHKWlxED9R1K2Q= Subject key identifier: 67:10:0A:B8:41:BC:55:45:CD:7E:D3:71:DE:76:D9:F1:A9:86:18:84 Authority key identifier: 79:3B:FA:77:CA:1E:60:6E:DD:43:BA:4D:F2:C8:EA:B6:F3:8E:62:A1 Certificate issuer: /CN=793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1 Certificate serial: 1D72CD6906F45B79DA01C0CF3570ACB68098BB24 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft Manifest number: 65 Signing time: Thu 23 Jul 2026 20:36:42 +0000 Manifest this update: Thu 23 Jul 2026 20:31:42 +0000 Manifest next update: Fri 24 Jul 2026 22:44:42 +0000 Files and hashes: 1: 793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.crl (hash: eYJScKgFzO2mq5mee6T0WDSWv68VLdHQAV0gDr1sRXc=) 2: 3130332e36342e32322e302f32332d3234203d3e2037353336.roa (hash: hF+qaCD0mNB8NHiu7Y54C2GPDlGre0i9TzH42K6b29s=) 3: 3130332e36342e32322e302f32332d3234203d3e203234313632.roa (hash: vp18jHFsymMwntPhKjDMhUA6YgN91sjf9Qxya1SYqUU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.crl rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:72:cd:69:06:f4:5b:79:da:01:c0:cf:35:70:ac:b6:80:98:bb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1 Validity Not Before: Jul 23 20:31:42 2026 GMT Not After : Jul 24 22:44:42 2026 GMT Subject: CN=67100AB841BC5545CD7ED371DE76D9F1A9861884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:8b:7a:b0:7d:92:0c:11:db:08:b7:56:d3: ab:92:c7:bf:33:f3:e8:27:5e:4b:b3:ae:13:c9:69: ea:db:05:d0:02:53:09:eb:28:93:e7:ba:24:7c:5b: 40:80:9c:17:33:4f:dd:cb:f6:b3:a7:74:2c:02:3b: 0c:f6:44:6d:95:1d:b5:b5:3b:4e:ab:b2:d2:ec:bd: f6:cc:7b:b2:f7:d6:bd:27:39:bc:b9:5d:55:2a:65: c7:e5:cf:6a:17:72:e9:83:2d:ac:1e:21:05:66:54: 29:64:5b:e9:ae:06:4b:5c:c0:14:21:34:d4:b0:f1: 68:c4:6f:f2:f9:37:f2:00:c2:4a:72:ec:83:60:ac: 93:6e:1e:6a:fd:33:a3:41:a4:47:52:e6:2f:02:f2: 4c:df:c9:ca:22:42:7b:17:b6:50:ad:90:a9:f3:76: 4e:de:00:2a:12:4c:3f:9d:9a:85:be:03:1a:77:fa: a1:f8:dd:16:db:c3:e1:af:5b:b2:84:87:56:bc:1f: 1d:0e:ae:bf:92:50:20:3e:35:57:4a:9d:90:9a:92: c7:be:5e:52:36:84:8b:ab:d0:cb:43:a3:d5:d2:ac: 49:13:f6:02:9c:e7:db:dc:e8:9a:3c:02:c4:d7:bf: d0:9c:bc:37:34:8c:7b:ad:b2:70:b0:ef:a5:54:96: 6a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:10:0A:B8:41:BC:55:45:CD:7E:D3:71:DE:76:D9:F1:A9:86:18:84 X509v3 Authority Key Identifier: keyid:79:3B:FA:77:CA:1E:60:6E:DD:43:BA:4D:F2:C8:EA:B6:F3:8E:62:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a9:d9:03:d6:78:9a:03:a4:42:d3:ea:bc:2c:0c:38:68:a7: c3:f5:20:91:aa:9a:63:25:3a:ab:da:1b:64:63:cb:bd:ea:02: 43:63:05:14:df:f6:32:a5:b3:e8:d2:89:b0:a7:91:ac:40:3a: 53:4d:41:92:2e:74:27:96:12:e8:6c:b9:22:57:69:fd:4c:33: 78:ff:a9:a7:ac:d0:01:d1:95:42:b9:f4:6c:db:a8:64:fb:27: 56:14:8a:d3:68:73:9c:15:90:18:bd:88:ae:9c:44:e1:88:75: 64:59:4a:26:9c:62:67:0a:3f:7e:ab:6d:15:59:59:93:8d:54: cb:fa:81:e2:cc:0b:0e:d2:2a:54:5b:0a:4d:68:3f:22:6c:63: 12:bb:57:9e:2d:d5:7c:2b:cd:8e:82:3e:bb:e9:6e:fd:9e:62: 6c:8e:57:f0:eb:73:55:9d:0a:41:f7:e1:b3:96:98:2d:96:0c: df:21:65:5d:fc:c2:a3:4a:46:5c:95:d9:93:c7:3f:42:34:e5: 1c:0d:fe:c3:64:91:21:83:39:29:cc:05:12:74:eb:1d:b6:cb: 8a:b3:7e:3d:5e:5e:ed:c9:29:08:b5:09:58:fd:29:57:31:0d: 96:36:29:be:fc:da:97:b7:3b:b2:d9:ff:b0:6f:b9:07:b2:83: 4f:e8:82:57 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUHXLNaQb0W3naAcDPNXCstoCYuyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkzQkZBNzdDQTFFNjA2RURENDNCQTRERjJDOEVBQjZG MzhFNjJBMTAeFw0yNjA3MjMyMDMxNDJaFw0yNjA3MjQyMjQ0NDJaMDMxMTAvBgNV BAMTKDY3MTAwQUI4NDFCQzU1NDVDRDdFRDM3MURFNzZEOUYxQTk4NjE4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKIt6sH2SDBHbCLdW06uSx78z 8+gnXkuzrhPJaerbBdACUwnrKJPnuiR8W0CAnBczT93L9rOndCwCOwz2RG2VHbW1 O06rstLsvfbMe7L31r0nOby5XVUqZcflz2oXcumDLaweIQVmVClkW+muBktcwBQh NNSw8WjEb/L5N/IAwkpy7INgrJNuHmr9M6NBpEdS5i8C8kzfycoiQnsXtlCtkKnz dk7eACoSTD+dmoW+Axp3+qH43Rbbw+GvW7KEh1a8Hx0Orr+SUCA+NVdKnZCakse+ XlI2hIur0MtDo9XSrEkT9gKc59vc6Jo8AsTXv9CcvDc0jHutsnCw76VUlmoxAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUZxAKuEG8VUXNftNx3nbZ8amGGIQwHwYDVR0j BBgwFoAUeTv6d8oeYG7dQ7pN8sjqtvOOYqEwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVBUk5J TkczNi8wLzc5M0JGQTc3Q0ExRTYwNkVERDQzQkE0REYyQzhFQUI2RjM4RTYyQTEu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNzkzQkZBNzdDQTFFNjA2RURENDNCQTRE RjJDOEVBQjZGMzhFNjJBMS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0xFQVJOSU5HMzYvMC83OTNC RkE3N0NBMUU2MDZFREQ0M0JBNERGMkM4RUFCNkYzOEU2MkExLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA kanZA9Z4mgOkQtPqvCwMOGinw/UgkaqaYyU6q9obZGPLveoCQ2MFFN/2MqWz6NKJ sKeRrEA6U01Bki50J5YS6Gy5Ildp/UwzeP+pp6zQAdGVQrn0bNuoZPsnVhSK02hz nBWQGL2IrpxE4Yh1ZFlKJpxiZwo/fqttFVlZk41Uy/qB4swLDtIqVFsKTWg/Imxj ErtXni3VfCvNjoI+u+lu/Z5ibI5X8OtzVZ0KQffhs5aYLZYM3yFlXfzCo0pGXJXZ k8c/QjTlHA3+w2SRIYM5KcwFEnTrHbbLirN+PV5e7ckpCLUJWP0pVzENljYpvvza l7c7stn/sG+5B7KDT+iCVw== -----END CERTIFICATE-----Generated at Fri Jul 24 05:09:17 2026 by rpki-client