$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft File: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft (raw, json) Hash identifier: nSdmML1V9o8cHM55l311e7oclkr7gXH+MAPzZ6+dw2Y= Subject key identifier: 4E:78:DF:35:D6:EA:7B:95:E1:49:77:A1:12:66:8D:EB:BC:68:23:81 Authority key identifier: 2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22 Certificate issuer: /CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22 Certificate serial: 7C36C065E566B96AEAA4CC97BCC854A1BE9C3169 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft Manifest number: 64 Signing time: Fri 24 Jul 2026 00:57:11 +0000 Manifest this update: Fri 24 Jul 2026 00:52:11 +0000 Manifest next update: Sat 25 Jul 2026 02:03:11 +0000 Files and hashes: 1: 3130332e3134302e3233322e302f32342d3234203d3e203332323432.roa (hash: q7dF1jX4ROfIjFDlO5sVW9hRX9k2oXkr8fjwFlVtFmE=) 2: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl (hash: k2rPU0BWDRh3fLL2fuNO/eUZOIyLmCfmpfGA/tW/G0E=) 3: 3130332e3134302e3233332e302f32342d3234203d3e203332323432.roa (hash: dWqlZ57qGRFx6N79EQLtYosKEY+TDhYs9JMAewBJPsQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:36:c0:65:e5:66:b9:6a:ea:a4:cc:97:bc:c8:54:a1:be:9c:31:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22 Validity Not Before: Jul 24 00:52:11 2026 GMT Not After : Jul 25 02:03:11 2026 GMT Subject: CN=4E78DF35D6EA7B95E14977A112668DEBBC682381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:bd:60:af:1f:f2:a2:87:41:ba:d6:74:a0: 7a:57:3f:41:86:5a:82:be:79:5c:b1:77:86:86:06: 7b:0a:c9:4e:a8:4f:0a:0d:fa:a9:00:b1:01:e4:94: ad:75:09:6d:da:19:dd:77:2d:72:f6:1e:1d:e9:0c: 80:19:f2:07:3d:51:e9:e5:ae:b8:c8:58:fd:fe:80: 2e:d6:07:96:ea:91:ec:83:3b:3f:97:9f:be:9a:88: 2f:0d:09:7f:4e:3a:08:ce:2e:2f:4b:2d:0d:4d:e0: c9:53:89:87:80:08:ee:92:7f:ed:57:a5:81:26:d5: 23:d5:c5:08:5c:52:6b:3a:ff:f7:fb:94:85:a5:c1: 32:3a:29:a5:22:e8:62:09:45:86:85:80:c5:10:08: 61:4b:58:01:25:55:27:2b:c3:79:d2:30:dd:d0:ab: 5c:86:78:84:83:11:f5:28:c1:e7:db:c5:c8:2b:54: 68:b2:a8:87:1b:c0:aa:84:3a:80:c8:e2:43:4c:af: 47:7a:fe:91:4c:60:f2:05:ea:85:45:44:1a:27:fe: 3d:e3:59:f1:c0:09:04:3a:3a:cc:54:90:6e:fd:a2: a0:b9:9a:ef:ef:0a:6f:e7:a6:79:93:db:46:97:6b: cb:9a:16:66:d4:d7:aa:4b:06:4d:6e:f1:cc:03:f5: 64:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:78:DF:35:D6:EA:7B:95:E1:49:77:A1:12:66:8D:EB:BC:68:23:81 X509v3 Authority Key Identifier: keyid:2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:75:d1:6b:32:01:a0:31:90:77:29:24:33:ea:d7:4c:d4:fb: 3b:e1:8e:81:d7:a7:79:7b:a8:86:40:e4:9f:b6:ac:22:1f:31: d5:8e:d8:2d:4e:d9:1e:a1:09:cb:da:b4:5f:10:2b:18:00:3b: 8d:c0:8b:98:10:fa:b8:82:34:fc:51:ab:f2:4c:9c:57:d1:88: 60:9e:75:b5:bf:0b:f9:e9:16:53:e9:75:80:02:4b:e3:20:6e: 57:55:90:a3:1e:14:c8:e8:25:54:01:bd:e7:25:47:cd:f4:17: 59:2a:2d:ec:99:61:53:24:04:7c:b1:90:90:ef:4f:6f:54:0b: e4:e6:37:ba:b6:9b:fc:74:1b:ba:84:75:f3:84:ac:68:d8:34: 87:66:a9:1d:5f:db:59:c9:41:f9:a2:74:1e:7f:b7:05:a5:39: 48:f6:02:11:cd:62:30:7d:61:4c:1d:6a:6c:37:f2:d1:03:df: 0f:ac:5a:ed:64:fd:d0:18:43:66:77:5d:49:2e:9c:e6:5c:71: 92:8f:85:81:50:8c:0e:07:77:e8:ad:ec:ad:ca:df:57:fa:fa: 49:96:d3:43:04:36:87:eb:b3:67:36:22:e3:16:93:93:10:96: 64:82:5d:15:c6:0b:43:f3:0c:27:0e:bc:3e:1a:87:d0:13:38: bf:86:f1:0a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUfDbAZeVmuWrqpMyXvMhUob6cMWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OEZCMEFENkNCNENGREY3MzY0NzkxRDE0MzVBRDQ4 QzY3NUQyMjAeFw0yNjA3MjQwMDUyMTFaFw0yNjA3MjUwMjAzMTFaMDMxMTAvBgNV BAMTKDRFNzhERjM1RDZFQTdCOTVFMTQ5NzdBMTEyNjY4REVCQkM2ODIzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZb1grx/yoodButZ0oHpXP0GG WoK+eVyxd4aGBnsKyU6oTwoN+qkAsQHklK11CW3aGd13LXL2Hh3pDIAZ8gc9Uenl rrjIWP3+gC7WB5bqkeyDOz+Xn76aiC8NCX9OOgjOLi9LLQ1N4MlTiYeACO6Sf+1X pYEm1SPVxQhcUms6//f7lIWlwTI6KaUi6GIJRYaFgMUQCGFLWAElVScrw3nSMN3Q q1yGeISDEfUowefbxcgrVGiyqIcbwKqEOoDI4kNMr0d6/pFMYPIF6oVFRBon/j3j WfHACQQ6OsxUkG79oqC5mu/vCm/npnmT20aXa8uaFmbU16pLBk1u8cwD9WQ/AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUTnjfNdbqe5XhSXehEmaN67xoI4EwHwYDVR0j BBgwFoAULVj7CtbLTP33NkeR0UNa1IxnXSIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDTC8w LzJENThGQjBBRDZDQjRDRkRGNzM2NDc5MUQxNDM1QUQ0OEM2NzVEMjIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMkQ1OEZCMEFENkNCNENGREY3MzY0NzkxRDE0MzVB RDQ4QzY3NUQyMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0wvMC8yRDU4RkIwQUQ2Q0I0Q0ZE RjczNjQ3OTFEMTQzNUFENDhDNjc1RDIyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHXRazIBoDGQdykk M+rXTNT7O+GOgdeneXuohkDkn7asIh8x1Y7YLU7ZHqEJy9q0XxArGAA7jcCLmBD6 uII0/FGr8kycV9GIYJ51tb8L+ekWU+l1gAJL4yBuV1WQox4UyOglVAG95yVHzfQX WSot7JlhUyQEfLGQkO9Pb1QL5OY3urab/HQbuoR184SsaNg0h2apHV/bWclB+aJ0 Hn+3BaU5SPYCEc1iMH1hTB1qbDfy0QPfD6xa7WT90BhDZnddSS6c5lxxko+FgVCM Dgd36K3srcrfV/r6SZbTQwQ2h+uzZzYi4xaTkxCWZIJdFcYLQ/MMJw68PhqH0BM4 v4bxCg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:28:49 2026 by rpki-client