$ rpki-client -vvf rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft File: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft (raw, json) Hash identifier: GO1Yy0/9kThlhxJZPqoit7Cw9RHmcAbSDR7Y2dYDjrA= Subject key identifier: 0D:F4:B2:0C:FF:B8:35:39:31:8A:4B:03:3D:A0:DF:16:56:CA:4C:E3 Authority key identifier: 70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D Certificate issuer: /CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D Certificate serial: 0FAC8FDD487FA5328B118C49F4D5B13F851AADFA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft Manifest number: 65 Signing time: Thu 23 Jul 2026 20:11:39 +0000 Manifest this update: Thu 23 Jul 2026 20:06:39 +0000 Manifest next update: Fri 24 Jul 2026 23:23:39 +0000 Files and hashes: 1: 3232332e32362e31342e302f32332d3234203d3e203231383539.roa (hash: BY1QUUCw56EnMeP3kjSRx3onJmeURrOTVkZdX+EuukE=) 2: 3232332e32362e31342e302f32332d3234203d3e2037343833.roa (hash: EeYUqixDoPSEeN8sw/ZeQjCxnACjgv6gNGFQp+CTsoM=) 3: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl (hash: FSv65hqCXNGEYqxZmBFvBF2yEy5fpRpq87stNV4CfHI=) 4: 3130332e3137352e3139342e302f32332d3234203d3e2037343833.roa (hash: 5l2+J4Wo84X5+Yl5nqEN6UeiO9PszuY1Tb4AzIBJh3U=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ac:8f:dd:48:7f:a5:32:8b:11:8c:49:f4:d5:b1:3f:85:1a:ad:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D Validity Not Before: Jul 23 20:06:39 2026 GMT Not After : Jul 24 23:23:39 2026 GMT Subject: CN=0DF4B20CFFB83539318A4B033DA0DF1656CA4CE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:14:4a:ce:c7:49:7d:93:76:44:55:5a:c5: 77:73:7d:fc:44:1e:e5:4e:d2:44:e0:f9:56:e4:7b: 57:a6:ca:75:63:ca:85:17:d4:62:c7:be:fe:1e:9f: 65:37:0f:24:38:2b:73:11:7f:93:95:b2:31:44:c1: 60:3d:17:c3:50:12:01:77:8f:4f:21:ce:8a:fe:f0: 00:28:85:e6:f7:0a:9c:53:05:ee:36:ed:bc:31:6d: ed:92:ec:40:42:2a:ca:4a:75:d5:47:39:43:0e:52: 11:36:a7:a5:05:7a:27:ab:77:6f:d6:fa:8e:f8:1f: dc:8d:ea:10:f1:88:5f:a8:08:16:79:5a:07:a1:d9: 53:66:00:89:83:1a:69:3d:2e:95:ab:98:6c:aa:3f: b3:2b:dd:2e:fa:1b:dd:fa:cb:f3:68:27:35:51:c2: f5:92:d1:27:86:47:64:cc:72:5a:b9:67:bd:5b:41: ad:ad:9e:6f:db:54:6c:21:21:de:e0:69:af:98:8f: 99:91:a2:ed:ac:37:b9:e7:15:e9:65:b0:d4:dc:22: 7e:ef:89:29:71:ea:a8:26:3d:2d:ab:6b:04:f3:ff: 26:a3:52:6a:c4:b5:07:09:8c:3b:e0:7d:fb:2e:7d: 52:48:e0:31:2e:99:27:6c:4a:de:1b:f8:64:c6:08: 83:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F4:B2:0C:FF:B8:35:39:31:8A:4B:03:3D:A0:DF:16:56:CA:4C:E3 X509v3 Authority Key Identifier: keyid:70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:89:da:81:d1:ad:9b:84:57:06:08:63:2b:bc:d8:e5:19:1b: 49:55:2c:f0:01:c0:12:39:98:80:4f:21:ff:a5:a7:f8:e5:b5: 7b:e1:6b:e6:8a:6c:30:5d:fe:ed:25:e6:d6:6b:8c:e5:5d:e6: 15:d8:ae:dd:83:4c:3d:92:9e:04:e5:24:7b:96:d0:a9:d2:f0: 94:7e:7d:b9:7a:a2:2a:f6:be:c7:0a:d6:1c:56:1f:80:ee:5b: 21:e5:2c:55:8e:47:ba:bc:99:6d:ad:fb:af:bc:b2:f8:24:d8: 56:f0:80:b4:c4:17:3a:e2:18:71:57:3b:b4:fb:4a:68:9f:f1: 1f:d9:32:58:1f:97:d4:b6:cb:5a:79:af:e4:d2:aa:de:4f:89: 5e:2b:06:78:df:a7:2b:50:a3:73:0e:6f:9c:a9:2d:c3:be:64: 89:48:30:9c:4e:f7:18:77:12:27:43:cd:14:55:77:e4:94:7e: 6e:ec:bf:65:ed:e5:e5:98:33:14:b0:08:b8:59:6f:35:a8:b7: 5b:0b:fb:c9:e6:af:26:e1:79:35:fa:72:4e:85:7c:d5:7c:43: 89:6e:1c:4a:43:d3:48:a1:27:68:a1:f7:2c:e3:a8:6b:cc:9f: a7:e9:da:dd:b6:f1:e1:09:55:23:73:87:da:da:aa:e3:39:38: 3f:53:b4:b8 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUD6yP3Uh/pTKLEYxJ9NWxP4UarfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA3QzA1REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzRE Q0Q2MTQxRDAeFw0yNjA3MjMyMDA2MzlaFw0yNjA3MjQyMzIzMzlaMDMxMTAvBgNV BAMTKDBERjRCMjBDRkZCODM1MzkzMThBNEIwMzNEQTBERjE2NTZDQTRDRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAxRKzsdJfZN2RFVaxXdzffxE HuVO0kTg+Vbke1emynVjyoUX1GLHvv4en2U3DyQ4K3MRf5OVsjFEwWA9F8NQEgF3 j08hzor+8AAoheb3CpxTBe427bwxbe2S7EBCKspKddVHOUMOUhE2p6UFeierd2/W +o74H9yN6hDxiF+oCBZ5Wgeh2VNmAImDGmk9LpWrmGyqP7Mr3S76G936y/NoJzVR wvWS0SeGR2TMclq5Z71bQa2tnm/bVGwhId7gaa+Yj5mRou2sN7nnFellsNTcIn7v iSlx6qgmPS2rawTz/yajUmrEtQcJjDvgffsufVJI4DEumSdsSt4b+GTGCIPhAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUDfSyDP+4NTkxiksDPaDfFlbKTOMwHwYDVR0j BBgwFoAUcHwF3AaJHrSivrGGqLthxNzWFB0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFHSUND VUJFLzAvNzA3QzA1REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzREQ0Q2MTQxRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS83MDdDMDVEQzA2ODkxRUI0QTJCRUIxODZB OEJCNjFDNERDRDYxNDFELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFHSUNDVUJFLzAvNzA3QzA1 REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzREQ0Q2MTQxRC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHCJ 2oHRrZuEVwYIYyu82OUZG0lVLPABwBI5mIBPIf+lp/jltXvha+aKbDBd/u0l5tZr jOVd5hXYrt2DTD2SngTlJHuW0KnS8JR+fbl6oir2vscK1hxWH4DuWyHlLFWOR7q8 mW2t+6+8svgk2FbwgLTEFzriGHFXO7T7Smif8R/ZMlgfl9S2y1p5r+TSqt5PiV4r BnjfpytQo3MOb5ypLcO+ZIlIMJxO9xh3EidDzRRVd+SUfm7sv2Xt5eWYMxSwCLhZ bzWot1sL+8nmrybheTX6ck6FfNV8Q4luHEpD00ihJ2ih9yzjqGvMn6fp2t228eEJ VSNzh9raquM5OD9TtLg= -----END CERTIFICATE-----Generated at Fri Jul 24 06:56:51 2026 by rpki-client