$ rpki-client -vvf rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft File: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft (raw, json) Hash identifier: sMdBOongTYvaHXbMV+e4T5kzIdgu1wddCq+vZ2b5RII= Subject key identifier: D8:74:ED:73:E8:59:50:03:D4:79:90:23:61:10:85:9B:D6:5D:A1:C3 Authority key identifier: 6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B Certificate issuer: /CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B Certificate serial: 1E902AD68E1A0B651F5DF61B5B124D83B7104D2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft Manifest number: 64 Signing time: Fri 24 Jul 2026 00:17:06 +0000 Manifest this update: Fri 24 Jul 2026 00:12:06 +0000 Manifest next update: Sat 25 Jul 2026 01:29:06 +0000 Files and hashes: 1: 3136302e3138372e3130302e302f32332d3234203d3e20313532363138.roa (hash: ReCvGN0RaLIF0GT345qHVTZeOV9Xxm1dcLiUZvQe6oQ=) 2: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl (hash: nyne9MfF8OlEMQR3eMe2U1NIAK+d6AGvriFPFHC9ct8=) 3: 3136302e3138372e3130302e302f32332d3234203d3e20313532313739.roa (hash: 2CcgEMkqiT9SKKomSlBmDsKGF4RvxfhpXN/K83M0KAs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:90:2a:d6:8e:1a:0b:65:1f:5d:f6:1b:5b:12:4d:83:b7:10:4d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B Validity Not Before: Jul 24 00:12:06 2026 GMT Not After : Jul 25 01:29:06 2026 GMT Subject: CN=D874ED73E8595003D47990236110859BD65DA1C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:e1:66:2a:ad:51:8c:1b:b2:a1:a6:00:6f: bd:e4:56:a9:49:3a:76:18:b4:96:8c:4c:ac:f9:49: 32:f3:4a:d0:54:64:b0:89:ae:36:1f:25:54:1d:be: 6c:9c:6d:7e:4d:f8:46:7c:03:62:28:f1:93:ab:2e: 3a:8c:ec:92:ec:57:e6:d7:5e:5e:bc:6f:9d:ec:5c: f4:6e:e4:48:72:e9:03:c0:cd:f5:4e:4a:d8:89:a1: 0f:dc:82:00:06:a6:fc:0f:d1:0a:04:4c:bd:0b:e8: ec:c8:05:16:7a:66:c3:0f:34:1d:3a:06:3f:fb:e4: 05:da:9c:4d:a6:1e:a1:5a:cc:ed:5e:ee:fa:53:01: dc:a9:25:8a:b3:83:37:1c:c3:da:8f:6a:fd:86:d5: 1a:d2:d1:08:48:fa:68:9e:49:56:3f:af:9e:01:99: b6:98:4a:24:5e:7b:34:11:81:70:a4:1e:db:8e:26: 57:29:cf:af:0b:e6:3d:68:6c:7a:61:f6:5e:d5:58: 95:ea:a8:26:29:0d:7f:03:26:85:c6:d0:79:03:11: 55:99:df:83:52:81:66:bd:cc:b3:f8:39:63:cc:fc: 36:bc:26:5b:e1:5a:20:56:ba:8e:d0:dc:6f:45:b8: 55:e6:67:02:75:f0:57:23:d9:11:53:a2:54:a8:e6: 6c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:74:ED:73:E8:59:50:03:D4:79:90:23:61:10:85:9B:D6:5D:A1:C3 X509v3 Authority Key Identifier: keyid:6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:29:34:ca:64:79:b6:c3:07:5b:cc:f2:50:30:21:73:f4:4e: 21:a3:2c:a6:e6:7e:b2:f3:ed:33:9f:25:5c:aa:d9:71:4e:b1: c6:62:37:e7:d6:55:c1:6c:40:0f:63:c2:90:05:a3:7e:d0:63: 90:88:6d:60:a5:16:05:83:66:d5:7d:43:26:52:c5:a2:1e:6b: 82:1e:25:40:38:18:59:57:b1:78:07:33:e9:6c:d1:18:62:67: d8:37:c1:00:92:3c:bb:c2:11:d5:29:99:04:08:78:a3:2f:8e: b4:a8:64:4f:63:9f:37:73:ea:18:30:12:4a:32:c9:47:8c:1d: 5c:d9:30:d7:4c:92:03:96:ff:d5:ff:9b:c5:1e:2f:e5:a6:b3: a4:e1:eb:37:95:67:80:27:56:fd:13:47:ed:89:4a:2f:56:31: 72:01:88:f1:13:83:5a:a6:3e:58:25:72:d5:f2:ea:19:0a:18: ba:4c:ea:a1:01:e7:f2:e4:03:e3:91:ea:0f:89:2a:df:55:42: c6:29:b3:cb:b3:ea:cb:3b:54:c8:7b:2e:39:64:3b:89:9b:4f: aa:dd:0c:f4:5f:c0:50:1a:1a:fa:50:a4:f0:a5:d4:ff:6b:66: 5c:76:0c:1c:37:bb:bc:02:19:fa:1f:21:fa:1e:e8:87:e4:d2: 7e:5b:9c:24 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUHpAq1o4aC2UfXfYbWxJNg7cQTSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGQUEwQUQ0QUU4RUUwQjQyMDkxOTA5RkE0NEM3RkYz MUI3NDY1QjAeFw0yNjA3MjQwMDEyMDZaFw0yNjA3MjUwMTI5MDZaMDMxMTAvBgNV BAMTKEQ4NzRFRDczRTg1OTUwMDNENDc5OTAyMzYxMTA4NTlCRDY1REExQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/OFmKq1RjBuyoaYAb73kVqlJ OnYYtJaMTKz5STLzStBUZLCJrjYfJVQdvmycbX5N+EZ8A2Io8ZOrLjqM7JLsV+bX Xl68b53sXPRu5Ehy6QPAzfVOStiJoQ/cggAGpvwP0QoETL0L6OzIBRZ6ZsMPNB06 Bj/75AXanE2mHqFazO1e7vpTAdypJYqzgzccw9qPav2G1RrS0QhI+mieSVY/r54B mbaYSiReezQRgXCkHtuOJlcpz68L5j1obHph9l7VWJXqqCYpDX8DJoXG0HkDEVWZ 34NSgWa9zLP4OWPM/Da8JlvhWiBWuo7Q3G9FuFXmZwJ18Fcj2RFTolSo5mzTAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU2HTtc+hZUAPUeZAjYRCFm9ZdocMwHwYDVR0j BBgwFoAUbPqgrUro7gtCCRkJ+kTH/zG3RlswDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTk9UX1RG Tl9DTy8xLzZDRkFBMEFENEFFOEVFMEI0MjA5MTkwOUZBNDRDN0ZGMzFCNzQ2NUIu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzAvNkNGQUEwQUQ0QUU4RUUwQjQyMDkxOTA5 RkE0NEM3RkYzMUI3NDY1Qi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05PVF9URk5fQ08vMS82Q0ZB QTBBRDRBRThFRTBCNDIwOTE5MDlGQTQ0QzdGRjMxQjc0NjVCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Nik0ymR5tsMHW8zyUDAhc/ROIaMspuZ+svPtM58lXKrZcU6xxmI359ZVwWxAD2PC kAWjftBjkIhtYKUWBYNm1X1DJlLFoh5rgh4lQDgYWVexeAcz6WzRGGJn2DfBAJI8 u8IR1SmZBAh4oy+OtKhkT2OfN3PqGDASSjLJR4wdXNkw10ySA5b/1f+bxR4v5aaz pOHrN5VngCdW/RNH7YlKL1YxcgGI8RODWqY+WCVy1fLqGQoYukzqoQHn8uQD45Hq D4kq31VCximzy7PqyztUyHsuOWQ7iZtPqt0M9F/AUBoa+lCk8KXU/2tmXHYMHDe7 vAIZ+h8h+h7oh+TSflucJA== -----END CERTIFICATE-----Generated at Fri Jul 24 13:53:13 2026 by rpki-client