$ rpki-client -vvf rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft File: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft (raw, json) Hash identifier: zRKhBVfsJQ50KY7U34wrdA+dPvoVdbQ/OWNn7nZkbqQ= Subject key identifier: 24:33:41:24:8A:FB:39:60:6D:A1:A9:62:64:B8:B4:4D:B8:BA:A5:45 Authority key identifier: 42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 Certificate issuer: /CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Certificate serial: 1B8D69EEB2D5B83C0273780D57BE591673506A30 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft Manifest number: 65 Signing time: Thu 23 Jul 2026 17:26:17 +0000 Manifest this update: Thu 23 Jul 2026 17:21:17 +0000 Manifest next update: Fri 24 Jul 2026 20:45:17 +0000 Files and hashes: 1: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl (hash: f9GjOr4i026xlBKs4GPDw4j6NRUdgnFZNdwKDKJ1gdE=) 2: 3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa (hash: U1mFwcarBwcENEkbti0C1yVEmBtDzRAAAqYz8mcIUOg=) 3: 3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa (hash: GSRooEfHneMScmMay9/suUawwfISd9M2Zp/oSqWxd5c=) 4: 323430353a653463303a3a2f33322d3634203d3e20313331363737.roa (hash: 81X32lIDsqpLyEd5Xpy3ESJVHUbt39R1tegiSMqE1PY=) 5: 323430353a653463303a3a2f33322d3634203d3e20313331363734.roa (hash: R5XmHRGNRbL/JzVgicSjGM6c3avdhtCi9gHhhibn8Iw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8d:69:ee:b2:d5:b8:3c:02:73:78:0d:57:be:59:16:73:50:6a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Validity Not Before: Jul 23 17:21:17 2026 GMT Not After : Jul 24 20:45:17 2026 GMT Subject: CN=243341248AFB39606DA1A96264B8B44DB8BAA545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:d0:61:a2:c3:0a:eb:bc:80:85:d1:60:bc: 52:ef:61:a1:1d:6d:00:b4:5d:1b:8c:7e:33:44:be: 1e:1e:3b:84:18:26:33:9a:a2:36:2c:b7:ec:db:ed: a6:5a:c1:3b:d0:4f:88:e9:66:ff:34:b7:78:79:c5: 01:5f:73:83:99:b7:71:fd:e9:6a:8b:25:8b:da:ed: cb:95:ef:8e:5a:22:da:6b:bc:81:78:1d:b4:81:e5: 6d:a4:57:be:ab:6f:d1:39:b8:96:e4:45:28:e2:31: 48:a0:7c:06:54:37:e7:aa:bf:76:4c:5d:12:59:21: 6a:7c:c8:f3:c9:a6:67:4a:e3:4e:62:43:a7:b0:37: 71:05:dd:e0:35:c1:31:91:aa:61:39:6b:a0:df:14: a3:cd:4c:4a:64:69:d5:c5:76:e4:ab:37:d7:43:ce: a6:c0:ff:1f:b3:35:5d:fd:17:cb:62:d9:13:b5:72: 18:c1:84:af:0e:8c:8f:25:22:f3:48:f1:69:e9:9a: 63:b7:73:0f:ec:aa:95:70:8c:d2:3a:17:85:16:cf: 0d:08:bd:bb:f4:85:7f:ae:45:0d:1d:7c:00:7a:1d: 82:e3:6e:ca:72:c3:e3:b5:15:84:bc:1f:88:87:71: 1e:76:f2:30:b6:78:22:e0:2f:f1:8f:72:7d:09:dd: 3f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:33:41:24:8A:FB:39:60:6D:A1:A9:62:64:B8:B4:4D:B8:BA:A5:45 X509v3 Authority Key Identifier: keyid:42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:6e:47:9a:39:06:ae:9c:3b:ad:38:bc:59:31:92:84:10:57: 23:7d:0b:33:1a:1e:7b:df:0a:98:23:79:62:c4:9f:f5:07:a5: 16:61:34:00:2e:17:da:c0:4c:97:38:a8:b9:c3:c5:3c:83:e7: c5:fc:bd:a5:53:16:d4:9f:3a:d2:9c:2c:6d:7c:2d:8c:aa:3f: 4f:1b:11:81:a4:d0:a8:22:b2:ea:99:25:96:9d:ef:1f:75:dc: c1:9c:37:9b:f2:56:b4:29:41:7e:81:21:a2:52:80:87:a7:0f: 83:b8:2a:d7:14:de:77:08:2d:40:1c:c5:ac:87:d2:ef:fd:02: c0:4a:03:e1:0f:81:e9:44:b8:f2:67:fa:44:88:19:59:c6:bb: 27:36:a2:dd:31:66:0a:8a:30:49:e5:d7:56:e4:14:02:b4:8e: 48:4e:b7:a5:5f:c4:d1:fb:a5:e0:f0:f0:7b:be:08:c4:12:56: 81:a8:d4:ac:e3:ff:c6:cb:4f:69:0e:2a:d7:b6:7d:4e:78:77: 3d:22:e9:35:95:77:30:06:67:7d:e7:86:5d:b1:e6:a3:78:7e: dc:8b:f7:2e:51:c9:6d:4f:24:05:d9:66:ff:14:12:2d:0c:8b: f9:67:29:3d:db:87:d6:f0:9e:bb:9e:38:b1:67:5d:0e:ec:4f: d8:26:5b:63 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUG41p7rLVuDwCc3gNV75ZFnNQajAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1RTA4REVB ODYyMDE2MjAeFw0yNjA3MjMxNzIxMTdaFw0yNjA3MjQyMDQ1MTdaMDMxMTAvBgNV BAMTKDI0MzM0MTI0OEFGQjM5NjA2REExQTk2MjY0QjhCNDREQjhCQUE1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgtBhosMK67yAhdFgvFLvYaEd bQC0XRuMfjNEvh4eO4QYJjOaojYst+zb7aZawTvQT4jpZv80t3h5xQFfc4OZt3H9 6WqLJYva7cuV745aItprvIF4HbSB5W2kV76rb9E5uJbkRSjiMUigfAZUN+eqv3ZM XRJZIWp8yPPJpmdK405iQ6ewN3EF3eA1wTGRqmE5a6DfFKPNTEpkadXFduSrN9dD zqbA/x+zNV39F8ti2RO1chjBhK8OjI8lIvNI8WnpmmO3cw/sqpVwjNI6F4UWzw0I vbv0hX+uRQ0dfAB6HYLjbspyw+O1FYS8H4iHcR528jC2eCLgL/GPcn0J3T81AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUJDNBJIr7OWBtoaliZLi0Tbi6pUUwHwYDVR0j BBgwFoAUQsf3jp/aALnKPi0d314I3qhiAWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTkZP Ui8wLzQyQzdGNzhFOUZEQTAwQjlDQTNFMkQxRERGNUUwOERFQTg2MjAxNjIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1 RTA4REVBODYyMDE2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL09QRU5GT1IvMC80MkM3Rjc4RTlG REEwMEI5Q0EzRTJEMURERjVFMDhERUE4NjIwMTYyLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYW5HmjkG rpw7rTi8WTGShBBXI30LMxoee98KmCN5YsSf9QelFmE0AC4X2sBMlzioucPFPIPn xfy9pVMW1J860pwsbXwtjKo/TxsRgaTQqCKy6pkllp3vH3XcwZw3m/JWtClBfoEh olKAh6cPg7gq1xTedwgtQBzFrIfS7/0CwEoD4Q+B6US48mf6RIgZWca7Jzai3TFm CoowSeXXVuQUArSOSE63pV/E0ful4PDwe74IxBJWgajUrOP/xstPaQ4q17Z9Tnh3 PSLpNZV3MAZnfeeGXbHmo3h+3Iv3LlHJbU8kBdlm/xQSLQyL+WcpPduH1vCeu544 sWddDuxP2CZbYw== -----END CERTIFICATE-----Generated at Fri Jul 24 02:39:46 2026 by rpki-client