$ rpki-client -vvf rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft File: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft (raw, json) Hash identifier: 21aFkBoH758XIqf89zRDTl7aP/SR55bF1leltteItSQ= Subject key identifier: F9:86:E4:72:EC:93:5B:5B:2E:4C:37:28:FF:BA:50:40:CC:BF:D7:AD Authority key identifier: 5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E Certificate issuer: /CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Certificate serial: 6856D735BA2B7340B6432E4E558BE20AF3E5C0CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft Manifest number: 67 Signing time: Fri 24 Jul 2026 00:12:05 +0000 Manifest this update: Fri 24 Jul 2026 00:07:05 +0000 Manifest next update: Sat 25 Jul 2026 01:34:05 +0000 Files and hashes: 1: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl (hash: eJUam94UOsw8F4yaWl84NYBs3Utibf7XtfmV4kdzuZE=) 2: 323430333a623334303a3a2f33322d3332203d3e2039393232.roa (hash: gstqBh9leADrly9mEk8JDvYH97tC5t4YGpfgybnlAak=) 3: 323430333a623334303a3a2f33322d3332203d3e2037343832.roa (hash: hiAMshIFeOvfI56eDRx+E/hRaz9fkWvi1Lc3t0AuAEM=) 4: 3130332e3133302e34382e302f32322d3234203d3e2039393232.roa (hash: aCIxecjNLFEVzEOiCgmZ0K9yJGY1pe87ewnv5AFzkXs=) 5: 3130332e3133302e34382e302f32322d3234203d3e2037343832.roa (hash: 1XWO79v70d0DECH7Xj/kPutEjOsPSVEabfarX+KunFQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:56:d7:35:ba:2b:73:40:b6:43:2e:4e:55:8b:e2:0a:f3:e5:c0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Validity Not Before: Jul 24 00:07:05 2026 GMT Not After : Jul 25 01:34:05 2026 GMT Subject: CN=F986E472EC935B5B2E4C3728FFBA5040CCBFD7AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:f3:0d:db:c1:95:21:b3:30:a3:68:49:23: 1a:ab:83:34:26:55:86:a1:6d:e4:18:91:36:83:77: 10:73:ce:4a:f0:0f:bd:10:5e:57:f3:45:01:d8:c2: 67:8f:40:79:09:5f:c1:54:16:dc:80:82:c3:c7:c2: 9a:71:a1:be:a3:7d:0f:9c:00:ca:40:fe:65:a3:0b: 04:42:c9:02:5c:e0:62:55:32:40:3a:5a:c2:a2:71: 35:95:f6:31:d2:cc:db:5e:50:52:f5:15:67:4c:5a: 01:c9:71:f4:c7:cb:3d:9d:68:ba:e2:e3:98:e4:12: a3:cd:13:bf:84:52:27:18:64:c8:5e:4b:1b:03:0e: 2b:4b:89:b6:7b:d5:b1:da:c6:9b:c8:22:20:ac:4f: 2b:46:65:99:66:30:bb:25:48:2f:6b:a1:53:d1:58: ee:d1:21:55:62:b7:81:0b:e5:b5:2f:db:9e:51:fe: 04:79:02:65:36:e5:bc:10:60:60:37:03:87:2f:96: 25:41:df:63:20:6e:e3:d4:72:e5:a4:90:3d:72:49: bd:a1:ee:64:70:24:c9:f4:3e:13:40:c8:56:14:6e: cc:9a:87:cb:46:c9:de:d5:f1:cc:9e:43:63:1f:42: 82:f0:0d:a6:46:c9:73:80:f5:39:62:22:36:59:06: 7a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:86:E4:72:EC:93:5B:5B:2E:4C:37:28:FF:BA:50:40:CC:BF:D7:AD X509v3 Authority Key Identifier: keyid:5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fe:6b:87:7e:10:70:43:4b:f9:20:d1:02:60:d6:98:1f:6c: 89:2d:91:90:8e:58:6a:0d:2a:8b:df:56:ec:b5:ab:f9:70:ff: dc:cb:27:eb:8a:c2:dd:60:2f:53:ef:67:47:b2:6d:08:91:c2: a7:a3:06:05:10:96:9f:78:01:68:47:2f:fa:02:91:4d:25:c5: 93:8a:d9:d7:42:7b:27:de:22:53:5c:02:b0:b3:50:92:12:82: 41:3b:f3:91:63:41:cb:27:e9:f6:54:31:90:ff:70:10:f5:31: b8:20:ed:fc:9c:87:13:cc:db:c4:b7:17:6f:67:37:16:9c:9a: 45:a8:e9:aa:42:45:6c:09:08:ab:88:21:ad:55:88:7b:18:52: d2:fd:4b:58:22:58:25:4a:43:e2:96:d6:e7:e3:78:24:28:7c: f6:0d:26:99:21:93:84:81:4b:9f:46:ac:d7:67:25:c6:42:78: 1b:6b:a1:d2:da:6c:53:1c:dd:21:7f:4d:86:c7:42:88:e3:82: 7b:05:52:bf:4e:64:16:02:1c:03:0f:6b:70:c3:82:85:91:e7: 09:66:a6:10:bd:12:8b:63:db:1a:f2:b8:c2:26:89:93:03:a7: 42:0c:10:e6:5d:bd:67:56:63:4e:31:3c:56:65:bb:39:c1:aa: 8a:e7:32:6e -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUaFbXNborc0C2Qy5OVYviCvPlwMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVD NTg4QkE5RTAeFw0yNjA3MjQwMDA3MDVaFw0yNjA3MjUwMTM0MDVaMDMxMTAvBgNV BAMTKEY5ODZFNDcyRUM5MzVCNUIyRTRDMzcyOEZGQkE1MDQwQ0NCRkQ3QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fPMN28GVIbMwo2hJIxqrgzQm VYahbeQYkTaDdxBzzkrwD70QXlfzRQHYwmePQHkJX8FUFtyAgsPHwppxob6jfQ+c AMpA/mWjCwRCyQJc4GJVMkA6WsKicTWV9jHSzNteUFL1FWdMWgHJcfTHyz2daLri 45jkEqPNE7+EUicYZMheSxsDDitLibZ71bHaxpvIIiCsTytGZZlmMLslSC9roVPR WO7RIVVit4EL5bUv255R/gR5AmU25bwQYGA3A4cvliVB32MgbuPUcuWkkD1ySb2h 7mRwJMn0PhNAyFYUbsyah8tGyd7V8cyeQ2MfQoLwDaZGyXOA9TliIjZZBnqHAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU+YbkcuyTW1suTDco/7pQQMy/160wHwYDVR0j BBgwFoAUWivuJDlbNvT/qVdT9nMVFcWIup4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVU LzAvNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS81QTJCRUUyNDM5NUIzNkY0RkZBOTU3NTNGNjcz MTUxNUM1ODhCQTlFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVULzAvNUEyQkVFMjQzOTVC MzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB7+a4d+EHBD S/kg0QJg1pgfbIktkZCOWGoNKovfVuy1q/lw/9zLJ+uKwt1gL1PvZ0eybQiRwqej BgUQlp94AWhHL/oCkU0lxZOK2ddCeyfeIlNcArCzUJISgkE785FjQcsn6fZUMZD/ cBD1Mbgg7fychxPM28S3F29nNxacmkWo6apCRWwJCKuIIa1ViHsYUtL9S1giWCVK Q+KW1ufjeCQofPYNJpkhk4SBS59GrNdnJcZCeBtrodLabFMc3SF/TYbHQojjgnsF Ur9OZBYCHAMPa3DDgoWR5wlmphC9Eotj2xryuMImiZMDp0IMEOZdvWdWY04xPFZl uznBqornMm4= -----END CERTIFICATE-----Generated at Fri Jul 24 08:36:15 2026 by rpki-client