$ rpki-client -vvf rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft File: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft (raw, json) Hash identifier: Mw18cp978Sn7VJXevHIiwEZUeuMKrC3aRCPPvnRqzmA= Subject key identifier: 62:83:FB:18:D4:4C:0C:E0:2C:0A:8C:D8:9A:8F:7D:0E:55:B4:FB:3F Authority key identifier: 6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B Certificate issuer: /CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B Certificate serial: 1018B0ECDE13C418E7525DAEAE9BD423D1EE9932 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft Manifest number: 65 Signing time: Fri 24 Jul 2026 17:33:57 +0000 Manifest this update: Fri 24 Jul 2026 17:28:57 +0000 Manifest next update: Sat 25 Jul 2026 18:57:57 +0000 Files and hashes: 1: 3136302e3138372e3130302e302f32332d3234203d3e20313532363138.roa (hash: ReCvGN0RaLIF0GT345qHVTZeOV9Xxm1dcLiUZvQe6oQ=) 2: 3136302e3138372e3130302e302f32332d3234203d3e20313532313739.roa (hash: 2CcgEMkqiT9SKKomSlBmDsKGF4RvxfhpXN/K83M0KAs=) 3: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl (hash: Z8DjsgRxZeTXEhzhe+NrMYVmG3mQMbFU37ZGDU8ubzg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 18:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:18:b0:ec:de:13:c4:18:e7:52:5d:ae:ae:9b:d4:23:d1:ee:99:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B Validity Not Before: Jul 24 17:28:57 2026 GMT Not After : Jul 25 18:57:57 2026 GMT Subject: CN=6283FB18D44C0CE02C0A8CD89A8F7D0E55B4FB3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:4f:a9:8c:ab:a1:55:4b:01:1a:1c:42:25: c1:d2:cb:bd:e5:44:a6:c2:02:d4:a7:a3:94:b0:ab: 52:2a:49:66:8b:82:fc:09:8f:1f:ae:67:bf:23:6a: b4:04:37:c9:b1:1c:f9:08:4a:9e:1a:29:32:f6:c4: 3e:8c:53:34:07:18:ef:71:51:29:88:e5:42:83:d2: f0:a9:f5:cd:02:7a:66:dc:e5:33:74:ae:d8:d4:bd: 6a:5d:ed:cb:e8:7b:1a:33:02:9e:38:78:a3:e7:54: f6:2a:27:12:08:c2:d2:24:a4:97:58:68:7a:76:48: bd:e3:94:e0:6a:ac:5f:14:19:bd:f8:5e:11:62:dd: 3c:a1:31:9a:95:ce:6d:a0:f2:cf:34:48:39:50:f3: d6:91:ed:da:98:eb:a7:52:ec:ea:e3:3c:b2:f9:bb: 38:f5:0f:dc:76:12:0f:8c:76:4d:18:1d:70:1d:63: 50:70:a7:e5:36:b4:fc:09:43:35:0a:88:f5:7a:2d: 53:ec:a9:76:f8:43:02:60:5d:33:8a:0e:68:1c:6a: 67:d1:14:cb:b6:75:77:56:f7:51:64:e7:60:4e:39: 90:c9:53:14:0b:11:d2:b9:f4:b2:5d:46:fb:32:29: a9:c1:cc:05:80:e9:95:0f:bb:b3:9e:79:33:45:0e: e7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:83:FB:18:D4:4C:0C:E0:2C:0A:8C:D8:9A:8F:7D:0E:55:B4:FB:3F X509v3 Authority Key Identifier: keyid:6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f6:06:f9:3f:49:20:fe:66:be:2a:bb:ed:a0:b7:6b:64:73: 50:b3:6b:ee:a9:47:88:b0:bc:9e:1b:5a:10:b1:23:ff:76:55: 32:0d:d8:84:65:66:5a:07:34:70:4b:d3:72:c2:ee:6f:78:7d: ec:d4:e3:f3:50:e4:b9:84:55:90:ca:ce:89:94:52:ec:d0:aa: 70:21:c4:61:13:18:9b:cd:f7:6a:8a:85:05:5a:24:dc:70:70: d7:36:d9:71:e9:60:df:39:7a:1c:70:78:7c:d6:85:8b:81:fe: bc:35:0e:2a:7c:44:71:31:7e:59:eb:1b:fb:0c:75:56:1d:69: 71:be:d9:7b:05:ce:f2:49:a4:fc:bf:66:1d:5b:e1:8c:f6:96: 7d:15:56:cd:bf:6e:dd:13:9c:89:ce:77:ad:58:ce:01:5c:b0: 14:eb:9c:f5:c7:a0:84:bf:f3:be:0b:81:d6:d0:dd:ec:45:fe: 8d:be:a7:01:92:51:2d:60:b4:e7:82:6e:a6:14:d5:63:7f:1e: e1:0f:b2:8d:d9:92:3a:59:58:2e:29:73:41:ee:45:a1:7d:8b: e5:d3:56:48:94:40:39:86:17:ca:54:29:f2:f0:25:8b:ae:ca: fd:4b:0a:04:b3:91:e0:e8:84:c3:60:e2:d1:83:2f:6a:28:ca: 58:79:77:d3 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUEBiw7N4TxBjnUl2urpvUI9HumTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGQUEwQUQ0QUU4RUUwQjQyMDkxOTA5RkE0NEM3RkYz MUI3NDY1QjAeFw0yNjA3MjQxNzI4NTdaFw0yNjA3MjUxODU3NTdaMDMxMTAvBgNV BAMTKDYyODNGQjE4RDQ0QzBDRTAyQzBBOENEODlBOEY3RDBFNTVCNEZCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxw0+pjKuhVUsBGhxCJcHSy73l RKbCAtSno5Swq1IqSWaLgvwJjx+uZ78jarQEN8mxHPkISp4aKTL2xD6MUzQHGO9x USmI5UKD0vCp9c0Cembc5TN0rtjUvWpd7cvoexozAp44eKPnVPYqJxIIwtIkpJdY aHp2SL3jlOBqrF8UGb34XhFi3TyhMZqVzm2g8s80SDlQ89aR7dqY66dS7OrjPLL5 uzj1D9x2Eg+Mdk0YHXAdY1Bwp+U2tPwJQzUKiPV6LVPsqXb4QwJgXTOKDmgcamfR FMu2dXdW91Fk52BOOZDJUxQLEdK59LJdRvsyKanBzAWA6ZUPu7OeeTNFDuenAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUYoP7GNRMDOAsCozYmo99DlW0+z8wHwYDVR0j BBgwFoAUbPqgrUro7gtCCRkJ+kTH/zG3RlswDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTk9UX1RG Tl9DTy8xLzZDRkFBMEFENEFFOEVFMEI0MjA5MTkwOUZBNDRDN0ZGMzFCNzQ2NUIu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzAvNkNGQUEwQUQ0QUU4RUUwQjQyMDkxOTA5 RkE0NEM3RkYzMUI3NDY1Qi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05PVF9URk5fQ08vMS82Q0ZB QTBBRDRBRThFRTBCNDIwOTE5MDlGQTQ0QzdGRjMxQjc0NjVCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA P/YG+T9JIP5mviq77aC3a2RzULNr7qlHiLC8nhtaELEj/3ZVMg3YhGVmWgc0cEvT csLub3h97NTj81DkuYRVkMrOiZRS7NCqcCHEYRMYm833aoqFBVok3HBw1zbZcelg 3zl6HHB4fNaFi4H+vDUOKnxEcTF+Wesb+wx1Vh1pcb7ZewXO8kmk/L9mHVvhjPaW fRVWzb9u3ROcic53rVjOAVywFOuc9ceghL/zvguB1tDd7EX+jb6nAZJRLWC054Ju phTVY38e4Q+yjdmSOllYLilzQe5FoX2L5dNWSJRAOYYXylQp8vAli67K/UsKBLOR 4OiEw2Di0YMvaijKWHl30w== -----END CERTIFICATE-----Generated at Sat Jul 25 00:24:50 2026 by rpki-client