$ rpki-client -vvf rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft File: B5BCB843FC62D50C018D67AAECEC768693B898BB.mft (raw, json) Hash identifier: A3wXWd6UwV7ZH3Fk++1sttMSq8HfaVvtpyVYJtXVMzc= Subject key identifier: BC:8F:A3:07:9D:CC:4F:15:08:D5:F2:D3:5A:20:BE:73:E3:BC:9A:23 Authority key identifier: B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB Certificate issuer: /CN=B5BCB843FC62D50C018D67AAECEC768693B898BB Certificate serial: 68A1C83DEE5AF72E7B132324BD015B6C88B5ADA6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft Manifest number: 68 Signing time: Thu 23 Jul 2026 19:16:33 +0000 Manifest this update: Thu 23 Jul 2026 19:11:33 +0000 Manifest next update: Fri 24 Jul 2026 22:06:33 +0000 Files and hashes: 1: 3135372e32302e3133342e302f32342d3234203d3e20343030363138.roa (hash: XXKYaMUQ9ja5C/x9TwazrmKnnlLWSfJb+JMU6MAgrIw=) 2: 3135372e32302e3133342e302f32332d3234203d3e203332353935.roa (hash: 2miGNbONfgJVnuMX1O6Xis0X2QHCKO3xHvx8nDoW3Q0=) 3: 3135372e32302e3133352e302f32342d3234203d3e20313431303031.roa (hash: WOYBOovAsDkyK43+ASCyGIyOHFzLI6jt6PTK/EFmDKY=) 4: B5BCB843FC62D50C018D67AAECEC768693B898BB.crl (hash: 4vT0cirBi83KR8AARRdRV5pWOqieUbekqoGBC2S62GU=) 5: 3135372e32302e3133352e302f32342d3234203d3e20313339333538.roa (hash: NLBte/Xngt5YiZc1cKE0ofpG8JJd20KTmhuGOcBYInE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a1:c8:3d:ee:5a:f7:2e:7b:13:23:24:bd:01:5b:6c:88:b5:ad:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5BCB843FC62D50C018D67AAECEC768693B898BB Validity Not Before: Jul 23 19:11:33 2026 GMT Not After : Jul 24 22:06:33 2026 GMT Subject: CN=BC8FA3079DCC4F1508D5F2D35A20BE73E3BC9A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:fc:7f:39:e5:c2:de:1f:23:97:ad:53:3f: a9:5b:dd:47:4a:83:a9:ac:80:05:56:d4:af:84:37: 6f:a8:a3:cc:81:4d:0b:45:0c:8f:3c:81:4f:36:1d: 4e:e8:c1:84:d0:fd:e6:76:e8:03:4e:9f:f6:a6:b5: c7:b3:ef:61:53:74:8a:1e:4a:d2:65:74:83:e1:ee: 87:75:c2:67:a7:04:47:70:e8:40:91:38:19:05:53: 6a:f2:6b:08:93:1e:b4:1e:80:1b:8e:22:bd:fa:12: 1b:80:33:a3:23:a5:80:90:9f:ca:a4:6d:46:af:aa: 91:c0:22:13:b5:79:c6:07:aa:aa:f4:cd:b3:6d:a7: d3:d4:13:2b:c1:84:2f:6b:55:a2:19:e7:61:1a:c8: ab:d6:76:60:34:7b:49:33:3b:b8:23:03:5e:86:ad: 7b:f5:e6:76:3c:00:4e:7b:64:00:2a:55:8a:cd:31: ae:cd:07:9d:86:1e:8b:4e:3b:4e:c9:71:83:d1:53: 14:83:53:d0:1d:38:ce:55:6f:58:f4:0e:ba:91:82: e3:71:65:5f:7e:79:3d:34:33:f7:83:45:3e:56:39: 5f:7d:0f:6a:6b:f3:c4:dc:84:5d:0e:d8:d6:9e:1c: fa:52:8c:75:1a:17:68:a2:97:85:bd:e6:c1:86:8d: 11:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8F:A3:07:9D:CC:4F:15:08:D5:F2:D3:5A:20:BE:73:E3:BC:9A:23 X509v3 Authority Key Identifier: keyid:B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:84:36:f1:88:e6:f9:57:bd:50:6e:3c:9a:5a:70:a5:bd:2d: b9:f9:2a:73:71:16:cd:a7:00:e5:3f:23:9c:ba:13:51:61:f7: b1:93:51:66:6f:fd:44:ab:c9:e9:3f:70:bf:a5:7f:be:57:fe: 57:2e:44:a2:0b:68:a8:c1:f8:5b:8b:c0:3e:3a:cc:d3:a8:9b: af:f1:a2:fc:be:da:ad:46:3a:55:0d:fe:7f:1d:c1:46:a6:fe: 48:03:66:2d:02:cd:92:b6:3a:9e:60:d4:fd:28:c6:b4:40:7a: 4e:b0:78:89:93:6a:d2:1d:e5:41:b1:32:0c:3d:76:49:d7:dc: 98:2e:f5:d1:ea:db:8a:7d:33:0d:23:9b:7a:2a:aa:c1:7b:b5: 71:e9:dd:fe:6b:5a:51:ce:68:74:e0:24:4e:7b:20:f4:8c:be: 91:3a:c4:31:17:35:01:1c:e3:54:d6:04:89:a6:89:7d:54:bd: e8:06:89:92:e1:c4:28:08:65:25:29:22:35:fa:c0:40:5c:88: a8:4b:07:0d:a3:58:da:98:e7:87:18:9b:57:ce:82:ab:6a:96: a1:75:48:08:a2:d7:1b:df:f5:a1:41:ca:f1:b0:1e:89:d0:42: 3c:59:5d:25:8c:b3:af:53:3c:ec:97:83:d5:00:1c:25:ea:64: 4a:b4:89:5c -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUaKHIPe5a9y57EyMkvQFbbIi1raYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVCQ0I4NDNGQzYyRDUwQzAxOEQ2N0FBRUNFQzc2ODY5 M0I4OThCQjAeFw0yNjA3MjMxOTExMzNaFw0yNjA3MjQyMjA2MzNaMDMxMTAvBgNV BAMTKEJDOEZBMzA3OURDQzRGMTUwOEQ1RjJEMzVBMjBCRTczRTNCQzlBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS1/x/OeXC3h8jl61TP6lb3UdK g6msgAVW1K+EN2+oo8yBTQtFDI88gU82HU7owYTQ/eZ26ANOn/amtcez72FTdIoe StJldIPh7od1wmenBEdw6ECROBkFU2ryawiTHrQegBuOIr36EhuAM6MjpYCQn8qk bUavqpHAIhO1ecYHqqr0zbNtp9PUEyvBhC9rVaIZ52EayKvWdmA0e0kzO7gjA16G rXv15nY8AE57ZAAqVYrNMa7NB52GHotOO07JcYPRUxSDU9AdOM5Vb1j0DrqRguNx ZV9+eT00M/eDRT5WOV99D2pr88TchF0O2NaeHPpSjHUaF2iil4W95sGGjREtAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUvI+jB53MTxUI1fLTWiC+c+O8miMwHwYDVR0j BBgwFoAUtby4Q/xi1QwBjWeq7Ox2hpO4mLswDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTTJOSU0v MS9CNUJDQjg0M0ZDNjJENTBDMDE4RDY3QUFFQ0VDNzY4NjkzQjg5OEJCLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I1QkNCODQzRkM2MkQ1MEMwMThENjdBQUVDRUM3 Njg2OTNCODk4QkIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NMk5JTS8xL0I1QkNCODQzRkM2MkQ1 MEMwMThENjdBQUVDRUM3Njg2OTNCODk4QkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArhDbxiOb5V71Q bjyaWnClvS25+SpzcRbNpwDlPyOcuhNRYfexk1Fmb/1Eq8npP3C/pX++V/5XLkSi C2iowfhbi8A+OszTqJuv8aL8vtqtRjpVDf5/HcFGpv5IA2YtAs2StjqeYNT9KMa0 QHpOsHiJk2rSHeVBsTIMPXZJ19yYLvXR6tuKfTMNI5t6KqrBe7Vx6d3+a1pRzmh0 4CROeyD0jL6ROsQxFzUBHONU1gSJpol9VL3oBomS4cQoCGUlKSI1+sBAXIioSwcN o1jamOeHGJtXzoKrapahdUgIotcb3/WhQcrxsB6J0EI8WV0ljLOvUzzsl4PVABwl 6mRKtIlc -----END CERTIFICATE-----Generated at Fri Jul 24 11:05:49 2026 by rpki-client