$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft File: 4F029ED27C82844F72C10999E3E77841D888E8A5.mft (raw, json) Hash identifier: Lx8SV6yfZjLOyNUW7QCTb4ryrGXCqCsnM6OpehzXBbQ= Subject key identifier: 0A:B9:DF:32:DF:D0:88:10:DE:58:BC:B5:69:EF:A1:AA:34:D8:53:74 Authority key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 Certificate issuer: /CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Certificate serial: 7A15D5FA3393C304D2804FC8B2FE7F1399C01BF1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft Manifest number: 66 Signing time: Thu 23 Jul 2026 23:36:58 +0000 Manifest this update: Thu 23 Jul 2026 23:31:58 +0000 Manifest next update: Sat 25 Jul 2026 00:31:58 +0000 Files and hashes: 1: 3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa (hash: mrGHrLU6IhLiSFGZj4xNfph3sl5DRFLwfN+J+P0jaGY=) 2: 3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa (hash: UO7gvVHXWOf9xNngHpaJcF4QjHFiPZ4bxN2SGXLKeFI=) 3: 3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa (hash: SV9WMKCo6lqqmo4TlONcJhx+nWmHLOoLn96eGrQjUkk=) 4: 4F029ED27C82844F72C10999E3E77841D888E8A5.crl (hash: vbTOnD66/h1d4Y+3RotCxp1N060UP865552V6lgE+uk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:15:d5:fa:33:93:c3:04:d2:80:4f:c8:b2:fe:7f:13:99:c0:1b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Validity Not Before: Jul 23 23:31:58 2026 GMT Not After : Jul 25 00:31:58 2026 GMT Subject: CN=0AB9DF32DFD08810DE58BCB569EFA1AA34D85374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:93:99:96:59:8d:27:e5:8d:c3:7e:cb:b6: bc:7e:4b:66:de:58:f0:d0:8f:66:a8:61:b4:d6:27: 17:28:80:d4:ea:2b:c1:85:9b:bf:70:30:29:05:a3: 2e:2d:48:77:a8:5d:da:e4:39:9f:eb:29:8a:00:3f: 66:b9:43:3d:b6:8f:1d:4d:c4:1c:44:52:8b:69:b4: fe:00:fc:53:56:da:3a:aa:df:ac:a0:40:cb:5e:01: 85:00:45:b1:f5:c1:49:b8:74:b7:0d:f0:09:16:b4: ce:d1:3b:0d:f6:47:50:02:e7:86:af:aa:63:da:f7: 95:dd:60:7a:88:16:eb:bc:72:76:b8:8e:d2:85:d2: 5d:c1:eb:9a:3e:a0:c4:01:62:e7:cb:06:01:8b:46: 80:df:d1:d0:10:74:90:9f:f1:cd:40:26:2f:73:23: c5:08:f7:cc:79:64:26:2a:77:c1:8c:6c:34:ea:c6: bb:cf:90:bf:69:18:01:f4:d1:4b:06:22:98:24:14: 0c:93:03:84:18:72:9d:01:28:6b:cf:bf:83:8b:5a: 1a:50:36:ce:43:3d:8b:fa:ba:31:ea:6d:fd:6a:09: d9:b5:7b:c0:d6:56:ac:98:b4:ee:30:d5:fe:64:0c: 3c:33:a4:6e:e5:4a:6b:90:4f:bf:5c:a5:85:09:a1: ad:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B9:DF:32:DF:D0:88:10:DE:58:BC:B5:69:EF:A1:AA:34:D8:53:74 X509v3 Authority Key Identifier: keyid:4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:eb:fe:b8:55:f9:38:f6:59:d2:1c:73:ea:14:46:e5:87:c1: ed:8c:1e:23:0e:54:74:49:6c:56:77:cb:c5:11:70:d4:e1:77: fb:f6:1e:86:56:48:ab:ab:29:d8:57:ae:bc:78:e6:4e:9d:79: 26:ad:cc:b5:bb:92:e1:0d:b2:73:93:c2:c1:8f:ee:28:a5:9c: 34:76:52:db:1b:d5:c1:f2:08:90:f4:ec:00:3d:12:4f:95:7c: 94:6b:f1:60:33:18:7c:e7:19:9f:e1:e5:99:c0:9c:8c:31:15: 10:0f:29:72:c4:d5:fd:be:30:00:8b:c5:d3:7c:33:af:64:e5: 54:06:15:89:b7:78:32:9a:78:f2:1c:8b:36:7c:0a:33:b7:b3: 6e:c7:1d:2d:cd:cd:be:cf:f1:f7:35:12:ac:42:4d:50:7f:57: 22:5e:f9:d2:91:3e:21:54:ec:16:45:26:eb:2c:b9:91:35:44: 5b:6f:98:8e:78:27:78:17:94:e3:04:91:e9:b0:2a:67:56:2c: 59:4b:40:6c:ed:d6:ed:24:4d:37:00:b2:2d:b5:80:a4:8b:63: 3c:a5:03:38:f0:72:3d:d0:e1:0b:db:3b:87:f0:93:8a:b1:a4: 0c:74:05:f6:36:1e:43:e6:3b:90:5c:6a:e4:d4:4d:e6:23:87: 65:56:53:d6 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUehXV+jOTwwTSgE/Isv5/E5nAG/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjlFRDI3QzgyODQ0RjcyQzEwOTk5RTNFNzc4NDFE ODg4RThBNTAeFw0yNjA3MjMyMzMxNThaFw0yNjA3MjUwMDMxNThaMDMxMTAvBgNV BAMTKDBBQjlERjMyREZEMDg4MTBERTU4QkNCNTY5RUZBMUFBMzREODUzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC895OZllmNJ+WNw37Ltrx+S2be WPDQj2aoYbTWJxcogNTqK8GFm79wMCkFoy4tSHeoXdrkOZ/rKYoAP2a5Qz22jx1N xBxEUotptP4A/FNW2jqq36ygQMteAYUARbH1wUm4dLcN8AkWtM7ROw32R1AC54av qmPa95XdYHqIFuu8cna4jtKF0l3B65o+oMQBYufLBgGLRoDf0dAQdJCf8c1AJi9z I8UI98x5ZCYqd8GMbDTqxrvPkL9pGAH00UsGIpgkFAyTA4QYcp0BKGvPv4OLWhpQ Ns5DPYv6ujHqbf1qCdm1e8DWVqyYtO4w1f5kDDwzpG7lSmuQT79cpYUJoa31AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUCrnfMt/QiBDeWLy1ae+hqjTYU3QwHwYDVR0j BBgwFoAUTwKe0nyChE9ywQmZ4+d4QdiI6KUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v MS80RjAyOUVEMjdDODI4NDRGNzJDMTA5OTlFM0U3Nzg0MUQ4ODhFOEE1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzRGMDI5RUQyN0M4Mjg0NEY3MkMxMDk5OUUzRTc3 ODQxRDg4OEU4QTUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8xLzRGMDI5RUQyN0M4Mjg0 NEY3MkMxMDk5OUUzRTc3ODQxRDg4OEU4QTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAy6/64Vfk49lnS HHPqFEblh8HtjB4jDlR0SWxWd8vFEXDU4Xf79h6GVkirqynYV668eOZOnXkmrcy1 u5LhDbJzk8LBj+4opZw0dlLbG9XB8giQ9OwAPRJPlXyUa/FgMxh85xmf4eWZwJyM MRUQDylyxNX9vjAAi8XTfDOvZOVUBhWJt3gymnjyHIs2fAozt7Nuxx0tzc2+z/H3 NRKsQk1Qf1ciXvnSkT4hVOwWRSbrLLmRNURbb5iOeCd4F5TjBJHpsCpnVixZS0Bs 7dbtJE03ALIttYCki2M8pQM48HI90OEL2zuH8JOKsaQMdAX2Nh5D5juQXGrk1E3m I4dlVlPW -----END CERTIFICATE-----Generated at Fri Jul 24 14:27:44 2026 by rpki-client