$ rpki-client -vvf rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft File: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft (raw, json) Hash identifier: Gn9gz3lSPNpvgcWx2+g9jG6eL54p7ZEZy1ik8ojBocc= Subject key identifier: 1F:04:DA:33:EB:60:B8:AB:6C:50:CB:40:88:F8:8C:E0:C2:A2:9A:C5 Authority key identifier: 21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 Certificate issuer: /CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Certificate serial: 5E2A37F122BB6BC1E0F05741EBC0378269F4C4D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft Manifest number: 66 Signing time: Thu 23 Jul 2026 20:51:44 +0000 Manifest this update: Thu 23 Jul 2026 20:46:44 +0000 Manifest next update: Fri 24 Jul 2026 22:08:44 +0000 Files and hashes: 1: 3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa (hash: AS3qH/RjBUke7M3rlCKwKKx7OXc4/iKqzu9OBdcpsSg=) 2: 3130332e3131372e3133322e302f32332d3234203d3e203231383539.roa (hash: V7xrPLp5f+XdiNXnNwOKJbYVBx4iv5pqsU5W1y0I9ac=) 3: 3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa (hash: yNF0rjdZhiThfjXcp9q9ny7hpelDoujpqo41tWTYbEo=) 4: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl (hash: 8LjoHpYa68Q17nHi+GVs6UsDE1Sja/dJ/9bWHMNFGHU=) 5: 3130332e3131372e3133322e302f32332d3234203d3e2039363737.roa (hash: L4VMPfmAF+ujWD/W3Q/uT3gBZ3GdNZkDF1QTrHGw11I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:2a:37:f1:22:bb:6b:c1:e0:f0:57:41:eb:c0:37:82:69:f4:c4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Validity Not Before: Jul 23 20:46:44 2026 GMT Not After : Jul 24 22:08:44 2026 GMT Subject: CN=1F04DA33EB60B8AB6C50CB4088F88CE0C2A29AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:ef:db:c5:6b:62:95:cc:87:85:27:c2:e9: 44:99:b4:f0:cb:7d:5b:83:f8:e6:f5:59:16:41:17: 27:39:5d:46:f9:44:17:1d:19:a5:15:78:cb:80:0f: 37:d8:82:c5:f6:c4:0d:4f:41:88:f0:ab:77:a6:fb: de:ea:45:5e:06:e8:62:51:15:77:28:5f:88:ab:c6: e3:34:b1:9a:81:46:88:ea:ec:5c:5a:37:0c:9c:22: 33:e7:36:ae:66:1b:52:08:ff:84:57:0d:d0:c3:78: 6a:91:0b:24:aa:41:df:de:20:aa:db:ef:6a:7b:df: 79:aa:80:d7:a7:3c:90:65:b0:c2:03:76:af:ec:2d: 04:4f:a9:48:96:84:1f:c6:39:31:35:1c:12:aa:ac: ec:f3:82:2a:f6:ba:a8:2c:06:22:90:d4:c9:0a:fd: 8e:6d:7b:3b:59:14:11:cb:b5:ab:36:74:15:1b:7e: dd:6c:58:ae:7d:d9:e7:fb:0a:6d:db:01:0f:6f:61: c0:5f:02:e6:47:27:04:ca:8f:00:b1:d4:27:3f:ad: 5a:e5:01:2e:af:92:f2:2f:fc:cb:58:8b:6d:0d:80: 06:89:9d:34:91:0a:6b:8d:c6:43:4a:0b:28:4c:c3: 8c:86:d8:57:bd:43:52:52:c9:7c:ca:b9:28:e7:24: 6c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:04:DA:33:EB:60:B8:AB:6C:50:CB:40:88:F8:8C:E0:C2:A2:9A:C5 X509v3 Authority Key Identifier: keyid:21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a9:b3:3f:34:c6:04:3b:86:de:f8:55:f0:48:d7:a6:17:fa: 7d:dc:85:b7:b7:d1:df:20:ce:71:c8:c0:1a:43:4a:a2:22:a8: ae:aa:6b:9c:9c:ac:e3:79:22:61:00:ab:27:43:1e:70:45:ba: 7c:42:38:63:0d:3f:bc:3b:d8:01:87:00:3d:d8:82:30:b3:4d: 07:f4:61:7c:d5:3a:96:5f:6a:89:1d:da:64:37:3a:7a:7c:6f: ef:f0:fb:58:19:88:38:5d:16:30:b9:22:17:ac:8c:00:4a:0f: d1:3d:00:73:28:75:fb:50:6a:9a:4f:4a:53:87:79:a7:47:d4: c2:03:4f:ca:bd:c7:2b:2b:17:34:32:58:47:92:ce:13:54:8f: 67:2e:bb:9d:e4:57:0c:b2:f6:fb:5b:24:e6:d3:f1:67:df:d7: 6b:31:2e:7b:d0:18:11:41:0c:a2:39:02:8a:c8:e2:10:d4:da: 56:67:7a:08:0e:1a:c2:a2:4f:00:20:b4:1b:a7:d5:de:39:08: 67:e0:e0:0d:8c:e1:35:d7:5a:b5:16:1e:8e:1f:63:f9:3c:61: 38:7c:31:b0:6a:a5:99:35:b0:32:80:92:8e:03:57:00:55:7f: cd:19:c0:6a:d1:7f:f5:d1:78:ae:af:6d:38:40:7e:1d:8b:46: 41:01:b0:34 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUXio38SK7a8Hg8FdB68A3gmn0xNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQz RkNGQjVCMzAeFw0yNjA3MjMyMDQ2NDRaFw0yNjA3MjQyMjA4NDRaMDMxMTAvBgNV BAMTKDFGMDREQTMzRUI2MEI4QUI2QzUwQ0I0MDg4Rjg4Q0UwQzJBMjlBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2k+/bxWtilcyHhSfC6USZtPDL fVuD+Ob1WRZBFyc5XUb5RBcdGaUVeMuADzfYgsX2xA1PQYjwq3em+97qRV4G6GJR FXcoX4irxuM0sZqBRojq7FxaNwycIjPnNq5mG1II/4RXDdDDeGqRCySqQd/eIKrb 72p733mqgNenPJBlsMIDdq/sLQRPqUiWhB/GOTE1HBKqrOzzgir2uqgsBiKQ1MkK /Y5teztZFBHLtas2dBUbft1sWK592ef7Cm3bAQ9vYcBfAuZHJwTKjwCx1Cc/rVrl AS6vkvIv/MtYi20NgAaJnTSRCmuNxkNKCyhMw4yG2Fe9Q1JSyXzKuSjnJGznAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUHwTaM+tguKtsUMtAiPiM4MKimsUwHwYDVR0j BBgwFoAUIbYtYOGrU4A7IpzPg8F5/T/PtbMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAv MjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yMUI2MkQ2MEUxQUI1MzgwM0IyMjlDQ0Y4M0MxNzlG RDNGQ0ZCNUIzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAvMjFCNjJENjBFMUFCNTM4MDNC MjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKCpsz80xgQ7ht74VfBI 16YX+n3chbe30d8gznHIwBpDSqIiqK6qa5ycrON5ImEAqydDHnBFunxCOGMNP7w7 2AGHAD3YgjCzTQf0YXzVOpZfaokd2mQ3Onp8b+/w+1gZiDhdFjC5IhesjABKD9E9 AHModftQappPSlOHeadH1MIDT8q9xysrFzQyWEeSzhNUj2cuu53kVwyy9vtbJObT 8Wff12sxLnvQGBFBDKI5AorI4hDU2lZneggOGsKiTwAgtBun1d45CGfg4A2M4TXX WrUWHo4fY/k8YTh8MbBqpZk1sDKAko4DVwBVf80ZwGrRf/XReK6vbThAfh2LRkEB sDQ= -----END CERTIFICATE-----Generated at Fri Jul 24 06:17:17 2026 by rpki-client