$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft File: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft (raw, json) Hash identifier: wCutCGDjp462k/5SG6IM65Nbf3JgbFurMYP7v/kzzKk= Subject key identifier: 4D:C7:3E:BE:67:63:AE:9F:06:52:EB:E8:C5:39:0C:CB:1D:62:00:9E Authority key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25 Certificate issuer: /CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25 Certificate serial: 73EEA6E8F0813D221D0FEF24987C9AD958C88225 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft Manifest number: 65 Signing time: Thu 23 Jul 2026 16:56:10 +0000 Manifest this update: Thu 23 Jul 2026 16:51:10 +0000 Manifest next update: Fri 24 Jul 2026 19:52:10 +0000 Files and hashes: 1: 3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa (hash: 5vM1t1el5nYZJRxVKo6mmnrOcGRvisTj4oU5YWdMajw=) 2: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl (hash: dFNSZCbF+91tx/8vWHTfk3cWChLzu6pfnObJ0qlT3+c=) 3: 3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa (hash: xeGUxts4a0IBuIHgiewir0gp38fQafeLm2d3Cwvi9SE=) 4: 3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa (hash: sgvshajZGUxIlcU63EqLfebE4wegi3sti647jzuqblg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ee:a6:e8:f0:81:3d:22:1d:0f:ef:24:98:7c:9a:d9:58:c8:82:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25 Validity Not Before: Jul 23 16:51:10 2026 GMT Not After : Jul 24 19:52:10 2026 GMT Subject: CN=4DC73EBE6763AE9F0652EBE8C5390CCB1D62009E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:a9:99:1e:f2:cb:6a:df:3c:e8:14:84:12: 3c:ce:08:a3:dd:08:a2:50:cf:ca:4f:e1:c3:a8:f2: 07:dd:ec:9a:b0:c9:dc:ba:7f:95:d3:02:c9:73:67: e8:53:25:1e:62:08:64:26:83:85:81:4f:6e:1c:00: e9:ff:f7:58:74:d3:41:6d:9a:c7:6f:12:0d:cd:83: f9:cd:9e:45:61:84:12:84:db:c7:ca:49:79:7d:fa: 14:dd:b2:94:24:62:24:c0:7a:c2:d5:01:58:71:87: 4c:a2:b6:b1:75:76:46:91:28:d7:80:cc:dd:bb:c5: 66:60:61:1f:de:3f:eb:d2:5c:fa:a2:2e:90:2d:a9: 0e:a1:b2:ad:09:2c:03:e2:bb:4d:70:32:6c:42:eb: 37:e7:c8:0c:85:ad:f4:ac:7f:22:26:da:c7:16:be: f0:ef:9d:fb:d4:20:08:69:82:70:dc:38:bf:3a:95: a1:32:c8:69:2f:d8:8c:e4:28:21:a9:36:eb:47:93: b3:d9:69:b9:26:2c:0f:6e:30:0d:ee:28:d1:8b:03: e3:8d:35:d3:15:a4:62:77:a3:b0:47:f7:f3:33:81: 7b:1f:41:48:c3:24:a0:85:99:b1:79:a0:f4:30:53: 0f:5f:70:c2:09:f4:c3:2c:55:44:24:99:6d:70:90: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C7:3E:BE:67:63:AE:9F:06:52:EB:E8:C5:39:0C:CB:1D:62:00:9E X509v3 Authority Key Identifier: keyid:D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a3:4f:ab:57:83:37:0c:9e:af:f6:b3:85:e0:e1:01:64:0c: 08:ba:3d:df:9c:0a:49:ef:d7:f1:82:b7:6f:00:ec:93:af:4b: a7:10:ee:5b:90:83:f4:96:25:ff:7b:b9:2d:08:81:ba:4e:9f: bc:fa:3a:a1:ed:b4:dc:c8:87:4c:82:40:0b:03:ab:ae:9f:5b: 9b:86:86:71:36:16:f9:79:eb:44:57:92:9c:99:81:3e:bd:d8: b5:56:27:45:96:3b:34:1f:e5:74:87:81:b2:a5:bb:9e:17:42: c2:66:70:e6:64:61:46:8f:27:6b:1b:13:03:14:75:2f:1d:0a: c9:0c:89:69:ac:8c:07:b2:05:2b:cf:af:29:18:68:24:8e:26: 1d:b0:85:bd:e8:f4:d1:f4:ad:8d:9e:f3:eb:34:9b:08:cf:b5: 2c:c7:63:b7:93:a6:4a:a3:31:a7:4f:f5:f6:e8:2f:ea:a5:c3: 28:8b:a0:68:21:b1:c9:ba:69:b0:17:be:81:52:71:ed:3c:71: 6d:04:4b:02:54:08:d7:bc:8f:b0:8f:1e:24:42:ea:67:f4:81: 5a:1d:76:46:61:9d:f6:f5:6b:a4:d5:1d:34:7a:c9:f7:4d:0a: e5:6e:0d:9b:87:22:35:43:31:eb:1d:f7:27:f4:54:15:cf:3e: 95:74:76:f8 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUc+6m6PCBPSIdD+8kmHya2VjIgiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkxRjZCMTdBNURGRTNCMjMzNkQxQUUzRTIzM0QxMEIy RDYyQUEyNTAeFw0yNjA3MjMxNjUxMTBaFw0yNjA3MjQxOTUyMTBaMDMxMTAvBgNV BAMTKDREQzczRUJFNjc2M0FFOUYwNjUyRUJFOEM1MzkwQ0NCMUQ2MjAwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInKmZHvLLat886BSEEjzOCKPd CKJQz8pP4cOo8gfd7Jqwydy6f5XTAslzZ+hTJR5iCGQmg4WBT24cAOn/91h000Ft msdvEg3Ng/nNnkVhhBKE28fKSXl9+hTdspQkYiTAesLVAVhxh0yitrF1dkaRKNeA zN27xWZgYR/eP+vSXPqiLpAtqQ6hsq0JLAPiu01wMmxC6zfnyAyFrfSsfyIm2scW vvDvnfvUIAhpgnDcOL86laEyyGkv2IzkKCGpNutHk7PZabkmLA9uMA3uKNGLA+ON NdMVpGJ3o7BH9/MzgXsfQUjDJKCFmbF5oPQwUw9fcMIJ9MMsVUQkmW1wkCcVAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUTcc+vmdjrp8GUuvoxTkMyx1iAJ4wHwYDVR0j BBgwFoAU2R9rF6Xf47IzbRrj4jPRCy1iqiUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJ LzEvRDkxRjZCMTdBNURGRTNCMjMzNkQxQUUzRTIzM0QxMEIyRDYyQUEyNS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC9EOTFGNkIxN0E1REZFM0IyMzM2RDFBRTNFMjMz RDEwQjJENjJBQTI1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJLzEvRDkxRjZCMTdBNURG RTNCMjMzNkQxQUUzRTIzM0QxMEIyRDYyQUEyNS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAACjT6tXgzcM nq/2s4Xg4QFkDAi6Pd+cCknv1/GCt28A7JOvS6cQ7luQg/SWJf97uS0IgbpOn7z6 OqHttNzIh0yCQAsDq66fW5uGhnE2Fvl560RXkpyZgT692LVWJ0WWOzQf5XSHgbKl u54XQsJmcOZkYUaPJ2sbEwMUdS8dCskMiWmsjAeyBSvPrykYaCSOJh2whb3o9NH0 rY2e8+s0mwjPtSzHY7eTpkqjMadP9fboL+qlwyiLoGghscm6abAXvoFSce08cW0E SwJUCNe8j7CPHiRC6mf0gVoddkZhnfb1a6TVHTR6yfdNCuVuDZuHIjVDMesd9yf0 VBXPPpV0dvg= -----END CERTIFICATE-----Generated at Fri Jul 24 12:07:29 2026 by rpki-client