$ rpki-client -vvf rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft File: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft (raw, json) Hash identifier: HH82qU+KilgPkCLpk+ndIFBKWylvovkgNuXhCTJF8EU= Subject key identifier: 99:B1:7A:0A:49:3F:51:94:E0:29:76:D4:61:5D:DC:72:B6:6D:B1:46 Authority key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA Certificate issuer: /CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA Certificate serial: 553D64ACD0A0D87DF340036C0A506C6A3484330A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft Manifest number: 67 Signing time: Thu 23 Jul 2026 21:01:45 +0000 Manifest this update: Thu 23 Jul 2026 20:56:45 +0000 Manifest next update: Fri 24 Jul 2026 21:48:45 +0000 Files and hashes: 1: 323430343a646230303a3a2f33322d3332203d3e203138313739.roa (hash: ScKz5v7qY5jPX8fFHjF9zU3+yWebwV6lUVVjO7sfadI=) 2: F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl (hash: Q6LBlhHNnMWd+nWOEvJzMuN2ppGCuiFQqHw60dWSYC4=) 3: 3130332e31362e3234342e302f32322d3232203d3e203138313739.roa (hash: 7gfsjGvmdQGtAgO0An6FiUxxSYVdxi5kO9sx5OvgxYQ=) 4: 3231312e37382e3234302e302f32302d3232203d3e203138313739.roa (hash: wtDOplvpAqeejc+mSEqtFsj/OGKvnvcOzFKX6zd6nQY=) 5: 3130332e32302e3137362e302f32322d3232203d3e203138313739.roa (hash: PNKjey9tKMdDR4FRuzXEfmnFsMhGJbtdw6pFSO4K0J8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3d:64:ac:d0:a0:d8:7d:f3:40:03:6c:0a:50:6c:6a:34:84:33:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA Validity Not Before: Jul 23 20:56:45 2026 GMT Not After : Jul 24 21:48:45 2026 GMT Subject: CN=99B17A0A493F5194E02976D4615DDC72B66DB146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a2:5c:65:aa:3f:c7:ca:6f:59:68:e1:d4:49: 53:73:12:06:df:cf:77:60:24:4a:2e:c9:73:5c:83: fc:45:7e:e1:70:96:a2:ad:63:98:74:c2:52:24:14: c3:59:47:c5:2b:fa:4a:0f:d3:5d:84:63:c7:f7:74: 19:a3:8b:a6:e7:32:4a:9c:2a:ae:2a:75:c4:89:7b: 66:11:fe:8e:e1:f4:e5:72:db:4d:33:e3:f8:3d:26: 0e:90:60:81:02:c0:1c:82:a0:15:71:45:89:3a:a5: 2b:e4:ec:6d:ab:36:73:95:8e:cc:51:38:c5:44:32: df:eb:f8:cb:71:df:76:2a:5c:e7:b1:59:ca:5e:45: f6:35:6b:78:22:18:13:24:69:9d:b1:8b:e2:49:ae: 9e:09:eb:35:e5:59:f5:97:ee:e6:7b:16:13:f5:aa: 96:b6:83:6a:16:76:3e:ca:be:f0:a0:ce:bf:28:ab: 34:0c:da:9a:79:4d:22:ac:1b:fa:32:a4:f0:28:99: 5f:29:98:01:d1:a3:fb:fd:d2:53:52:fc:05:c9:c1: 93:e9:f5:a2:72:13:db:64:a3:a6:2e:cd:a8:a3:24: e0:28:4d:6e:32:8e:68:28:58:9c:c5:4d:51:55:d3: ed:da:31:81:47:46:6e:98:56:4a:cb:01:54:7e:65: 5d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B1:7A:0A:49:3F:51:94:E0:29:76:D4:61:5D:DC:72:B6:6D:B1:46 X509v3 Authority Key Identifier: keyid:F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1a:85:bd:94:9f:85:8f:c8:3e:9f:ba:86:2b:2e:77:c0:b2: bc:49:6d:d7:f8:23:2d:73:84:0b:3f:4e:35:d3:fe:5e:23:cd: 9a:1a:94:41:d1:8c:a5:29:06:98:56:40:c2:47:a6:2b:42:13: bc:67:01:44:33:8e:24:19:0a:f8:2a:f1:1a:c7:a5:f9:48:d2: 8b:9a:f2:2a:23:3b:26:11:bb:97:46:23:2a:30:99:b8:5a:35: 5d:6a:12:7d:bf:7d:e4:11:32:bc:1c:fe:d4:f7:f3:87:6e:3c: 26:07:73:12:9c:ab:dd:58:c6:19:0b:c6:0d:c4:89:a3:1d:2e: 26:3f:75:4e:f7:f1:dc:a5:73:f3:b0:f5:c8:e2:87:36:e2:7a: 14:b1:ff:5b:24:f8:0c:ff:db:18:a5:d9:c3:0f:e0:0a:a4:9a: d2:d7:21:5c:dc:c4:79:a4:22:3f:d3:de:0b:fd:22:99:7b:38: 39:b5:fa:80:01:c6:0b:c1:0b:ca:86:cb:69:2f:d7:f2:f2:e4: 91:87:01:c9:7c:0c:03:6f:ce:1c:59:32:1b:1f:97:4e:38:a3: 31:ea:a7:84:fe:01:b6:60:de:bc:ea:ee:d1:e1:34:47:d8:ea: f7:c3:ec:59:2a:48:fa:42:2f:bd:fb:a5:c9:fd:1e:b4:ef:96: 21:f7:82:6b -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUVT1krNCg2H3zQANsClBsajSEMwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFDRUFFNEFFMTNBNzFBRjZBMDcwOUE0QzMwMEFEQTQ2 MjNBMkNBQTAeFw0yNjA3MjMyMDU2NDVaFw0yNjA3MjQyMTQ4NDVaMDMxMTAvBgNV BAMTKDk5QjE3QTBBNDkzRjUxOTRFMDI5NzZENDYxNUREQzcyQjY2REIxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXolxlqj/Hym9ZaOHUSVNzEgbf z3dgJEouyXNcg/xFfuFwlqKtY5h0wlIkFMNZR8Ur+koP012EY8f3dBmji6bnMkqc Kq4qdcSJe2YR/o7h9OVy200z4/g9Jg6QYIECwByCoBVxRYk6pSvk7G2rNnOVjsxR OMVEMt/r+Mtx33YqXOexWcpeRfY1a3giGBMkaZ2xi+JJrp4J6zXlWfWX7uZ7FhP1 qpa2g2oWdj7KvvCgzr8oqzQM2pp5TSKsG/oypPAomV8pmAHRo/v90lNS/AXJwZPp 9aJyE9tko6YuzaijJOAoTW4yjmgoWJzFTVFV0+3aMYFHRm6YVkrLAVR+ZV2XAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUmbF6Ckk/UZTgKXbUYV3ccrZtsUYwHwYDVR0j BBgwFoAU8c6uSuE6ca9qBwmkwwCtpGI6LKowDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlUQUNN REMvMC9GMUNFQUU0QUUxM0E3MUFGNkEwNzA5QTRDMzAwQURBNDYyM0EyQ0FBLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0YxQ0VBRTRBRTEzQTcxQUY2QTA3MDlBNEMz MDBBREE0NjIzQTJDQUEuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NSVRBQ01EQy8wL0YxQ0VBRTRB RTEzQTcxQUY2QTA3MDlBNEMzMDBBREE0NjIzQTJDQUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6GoW9 lJ+Fj8g+n7qGKy53wLK8SW3X+CMtc4QLP0410/5eI82aGpRB0YylKQaYVkDCR6Yr QhO8ZwFEM44kGQr4KvEax6X5SNKLmvIqIzsmEbuXRiMqMJm4WjVdahJ9v33kETK8 HP7U9/OHbjwmB3MSnKvdWMYZC8YNxImjHS4mP3VO9/HcpXPzsPXI4oc24noUsf9b JPgM/9sYpdnDD+AKpJrS1yFc3MR5pCI/094L/SKZezg5tfqAAcYLwQvKhstpL9fy 8uSRhwHJfAwDb84cWTIbH5dOOKMx6qeE/gG2YN686u7R4TRH2Or3w+xZKkj6Qi+9 +6XJ/R6075Yh94Jr -----END CERTIFICATE-----Generated at Fri Jul 24 07:27:52 2026 by rpki-client