$ rpki-client -vvvf rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft File: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft (raw, json) Hash identifier: rQFckhL/P8Szq4nB+0dnSYeXJiynx9/mOgIVCUjxQk0= Subject key identifier: 01:74:2C:AC:9E:5B:8A:12:40:F9:C7:8B:7C:93:AA:5B:CE:71:A5:90 Authority key identifier: 70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D Certificate issuer: /CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D Certificate serial: 548A57FF4685769389C6D4AB4B4B99700DB62671 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft Manifest number: B7 Signing time: Wed 23 Sep 2026 09:52:13 +0000 Manifest this update: Wed 23 Sep 2026 09:47:13 +0000 Manifest next update: Thu 24 Sep 2026 12:57:13 +0000 Files and hashes: 1: 3232332e32362e31342e302f32332d3234203d3e203231383539.roa (hash: BY1QUUCw56EnMeP3kjSRx3onJmeURrOTVkZdX+EuukE=) 2: 3130332e3137352e3139342e302f32332d3234203d3e2037343833.roa (hash: 5l2+J4Wo84X5+Yl5nqEN6UeiO9PszuY1Tb4AzIBJh3U=) 3: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl (hash: /PUXNkW801tW4tX0l5Bwhl43eTV9mUpvjXMHoxmFBi4=) 4: 3232332e32362e31342e302f32332d3234203d3e2037343833.roa (hash: EeYUqixDoPSEeN8sw/ZeQjCxnACjgv6gNGFQp+CTsoM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:8a:57:ff:46:85:76:93:89:c6:d4:ab:4b:4b:99:70:0d:b6:26:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D Validity Not Before: Sep 23 09:47:13 2026 GMT Not After : Sep 24 12:57:13 2026 GMT Subject: CN=01742CAC9E5B8A1240F9C78B7C93AA5BCE71A590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:de:bc:b6:6f:d7:4f:da:2e:67:49:e5:46: 8e:44:4e:62:a5:54:c3:f5:e0:28:e8:7a:14:76:87: d6:bd:2f:4e:7c:a1:8f:f9:d1:58:53:ae:63:38:27: b7:d9:39:1a:1b:9b:54:13:08:76:46:cb:e8:5e:69: 6a:7b:96:85:31:04:e6:98:e3:70:e9:5b:11:45:de: 88:3d:58:97:42:b6:17:ed:f6:35:35:2b:a6:d5:62: 52:05:e2:81:d2:2d:70:c0:ef:83:8b:55:ee:8f:d1: 9b:e0:d2:a9:52:a3:1f:0e:46:79:b4:0f:1a:d6:4b: 03:6d:0d:d4:26:64:1a:80:0d:3c:71:80:6d:dc:91: d5:e6:94:07:83:a1:39:8c:1d:bc:5b:d0:9c:f3:77: 08:4f:4d:c4:71:d1:ef:83:6d:c3:ce:99:d3:16:c2: cd:79:eb:a4:e7:d8:2e:09:f1:55:52:cc:84:03:f5: 70:d2:ad:d1:cc:db:fe:d0:37:06:b5:02:c8:cf:15: eb:3f:13:c5:0f:4c:9d:16:35:aa:9b:5c:06:29:fc: 4e:2e:f9:9a:5d:2f:81:e5:88:ee:9a:77:b3:dc:7e: fe:06:5a:17:5b:c9:49:4d:32:ba:d4:18:a5:bf:85: 32:40:c1:a4:12:9e:6c:8a:4e:b4:ca:e1:76:67:d7: 09:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:74:2C:AC:9E:5B:8A:12:40:F9:C7:8B:7C:93:AA:5B:CE:71:A5:90 X509v3 Authority Key Identifier: keyid:70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:46:1b:b7:37:a2:27:a6:46:fa:67:b3:ca:88:bb:01:04:8c: 26:cd:05:f7:79:83:ac:b9:c5:39:4d:38:18:c5:98:4b:9f:2c: da:5e:e5:c3:87:74:ef:b5:08:c8:84:ae:78:46:91:32:be:cd: 34:b8:b0:8f:df:7a:23:1b:60:31:6e:b3:ce:b2:e7:16:e1:03: 5f:40:a5:ee:f9:c6:b7:65:a4:b3:99:d1:03:e2:18:fe:f0:ee: 74:82:f6:b7:02:40:4d:ee:ec:42:f7:3b:26:8e:be:82:5e:05: 56:29:ba:d3:cd:3d:e8:8b:18:0d:45:1e:02:04:b6:1a:27:a8: 74:bf:6f:f5:22:41:55:6d:83:40:4f:c2:87:2d:41:51:9c:af: e3:31:71:92:fa:7b:3e:da:25:93:be:51:13:06:d2:6d:a9:5d: ee:1a:50:b1:e0:3d:62:f7:b9:4b:1c:bd:3a:c2:ce:f9:b3:af: da:56:66:92:b2:37:0d:7e:0b:99:71:a8:a1:76:24:dc:54:ea: d8:e6:da:7d:68:61:72:75:0b:88:24:f0:ec:b2:1b:2d:3e:74: a7:6c:e1:2f:fa:52:87:43:c4:a4:11:d4:b4:ac:bd:ac:b1:05: 6b:c6:4c:70:99:bd:4c:69:6e:61:af:34:a6:0e:7a:2f:1c:33: d0:62:7c:f4 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUVIpX/0aFdpOJxtSrS0uZcA22JnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA3QzA1REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzRE Q0Q2MTQxRDAeFw0yNjA5MjMwOTQ3MTNaFw0yNjA5MjQxMjU3MTNaMDMxMTAvBgNV BAMTKDAxNzQyQ0FDOUU1QjhBMTI0MEY5Qzc4QjdDOTNBQTVCQ0U3MUE1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Ud68tm/XT9ouZ0nlRo5ETmKl VMP14CjoehR2h9a9L058oY/50VhTrmM4J7fZORobm1QTCHZGy+heaWp7loUxBOaY 43DpWxFF3og9WJdCthft9jU1K6bVYlIF4oHSLXDA74OLVe6P0Zvg0qlSox8ORnm0 DxrWSwNtDdQmZBqADTxxgG3ckdXmlAeDoTmMHbxb0JzzdwhPTcRx0e+DbcPOmdMW ws1566Tn2C4J8VVSzIQD9XDSrdHM2/7QNwa1AsjPFes/E8UPTJ0WNaqbXAYp/E4u +ZpdL4HliO6ad7Pcfv4GWhdbyUlNMrrUGKW/hTJAwaQSnmyKTrTK4XZn1wmbAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUAXQsrJ5bihJA+ceLfJOqW85xpZAwHwYDVR0j BBgwFoAUcHwF3AaJHrSivrGGqLthxNzWFB0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFHSUND VUJFLzAvNzA3QzA1REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzREQ0Q2MTQxRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS83MDdDMDVEQzA2ODkxRUI0QTJCRUIxODZB OEJCNjFDNERDRDYxNDFELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFHSUNDVUJFLzAvNzA3QzA1 REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzREQ0Q2MTQxRC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGNG G7c3oiemRvpns8qIuwEEjCbNBfd5g6y5xTlNOBjFmEufLNpe5cOHdO+1CMiErnhG kTK+zTS4sI/feiMbYDFus86y5xbhA19Ape75xrdlpLOZ0QPiGP7w7nSC9rcCQE3u 7EL3OyaOvoJeBVYputPNPeiLGA1FHgIEthonqHS/b/UiQVVtg0BPwoctQVGcr+Mx cZL6ez7aJZO+URMG0m2pXe4aULHgPWL3uUscvTrCzvmzr9pWZpKyNw1+C5lxqKF2 JNxU6tjm2n1oYXJ1C4gk8OyyGy0+dKds4S/6UodDxKQR1LSsvayxBWvGTHCZvUxp bmGvNKYOei8cM9BifPQ= -----END CERTIFICATE-----Generated at Wed Sep 23 23:10:49 2026 by rpki-client