$ rpki-client -vvf rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft File: 61F2C234A51074E0978404BDC79AA79130040B00.mft (raw, json) Hash identifier: z2NK0jhsy3ouri1vnv3rKu6V0EMArPueuEcpXUJueFM= Subject key identifier: DB:17:D2:24:4B:43:96:32:B7:05:9F:4B:19:D5:4A:3B:78:CC:6F:E2 Authority key identifier: 61:F2:C2:34:A5:10:74:E0:97:84:04:BD:C7:9A:A7:91:30:04:0B:00 Certificate issuer: /CN=61F2C234A51074E0978404BDC79AA79130040B00 Certificate serial: 4430881222620A11D0CC5B6E1692F7028B6F1ADB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft Manifest number: 06 Signing time: Tue 12 May 2026 12:35:58 +0000 Manifest this update: Tue 12 May 2026 12:30:58 +0000 Manifest next update: Wed 13 May 2026 16:26:58 +0000 Files and hashes: 1: 3130332e3134372e3133302e302f32332d3234203d3e20313331363737.roa (hash: VGWA54tpU9ZSYiEjleM6DRC35GLg1lZvqOaYCzFR4yI=) 2: 323430353a623863303a3a2f33322d3634203d3e20313331363737.roa (hash: AnPDeDj6hR2bEdYvy6SAFA3A/pHmArnFaxzCcI0NAKA=) 3: 323430353a623863303a3a2f33322d3634203d3e20313331363734.roa (hash: zPchVf+BzdWdK6jtiyFuKEMvAaWvPZafeIufyi+NDAU=) 4: 3130332e3134372e3133302e302f32332d3234203d3e20313331363734.roa (hash: hPsd6S2D9hMin8P77QyQ2OhAm+/bYf9j5m2G2tBdGrg=) 5: 61F2C234A51074E0978404BDC79AA79130040B00.crl (hash: FD0CPsVrp+BfpfuOVH/ZmJeiLmg8C2X/Q1NcwUpawLc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.crl rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:30:88:12:22:62:0a:11:d0:cc:5b:6e:16:92:f7:02:8b:6f:1a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61F2C234A51074E0978404BDC79AA79130040B00 Validity Not Before: May 12 12:30:58 2026 GMT Not After : May 13 16:26:58 2026 GMT Subject: CN=DB17D2244B439632B7059F4B19D54A3B78CC6FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d6:8a:ad:9d:c2:a0:8a:8c:de:78:3d:5f:e5: 9d:ef:eb:ae:02:2f:60:16:75:3b:fe:7b:5f:53:fb: b1:59:5b:2d:62:64:c2:1a:24:d7:34:ca:d1:45:1d: 28:74:ad:7d:89:87:25:27:c1:c5:22:f1:82:0b:42: 41:87:fd:48:d3:f4:83:04:31:ef:ba:ae:a3:04:86: e7:39:1d:87:60:04:c8:70:77:6f:d9:ca:c3:cd:ef: e5:b1:3e:fa:be:b4:e7:61:34:56:ea:ac:52:58:30: 85:fd:f3:b8:be:39:60:01:77:c1:54:01:3e:8f:9a: 59:ef:c3:2b:ea:da:b0:c9:76:96:25:ad:bf:dc:13: 2e:88:ce:21:e2:56:71:8b:81:cd:d7:a8:68:3e:0c: e3:d4:69:91:65:4a:d5:c3:a1:22:60:6e:06:64:5e: e3:d9:dd:2a:bc:23:2d:db:34:7d:39:56:8a:12:78: b5:cb:2a:df:30:13:da:33:e7:d4:97:33:f7:0b:20: 22:84:0c:a9:2f:b0:54:b7:c4:78:9a:b4:43:a0:ae: 4c:11:7b:05:26:61:1a:57:70:9b:3c:32:b0:ac:19: 90:78:b1:e1:65:75:ef:d6:8f:5c:2a:f5:98:7b:40: 7a:11:9c:16:06:e0:96:47:83:fe:b4:bf:f9:4e:37: 5d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:17:D2:24:4B:43:96:32:B7:05:9F:4B:19:D5:4A:3B:78:CC:6F:E2 X509v3 Authority Key Identifier: keyid:61:F2:C2:34:A5:10:74:E0:97:84:04:BD:C7:9A:A7:91:30:04:0B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f7:11:52:33:c0:fc:30:0a:85:f6:b1:5a:a5:c7:62:e9:9a: 18:8d:b4:7f:07:51:d5:75:e2:76:33:d2:dd:33:47:58:4e:ee: 71:69:84:db:72:1a:07:f5:ee:11:9d:53:6f:1f:97:45:28:36: 90:dd:fd:9f:16:53:44:52:4a:dd:55:af:84:bc:dc:56:5b:a5: bc:c7:68:91:4f:47:f5:0f:0b:48:8d:b2:dd:d2:4f:4f:ca:a0: 38:f9:a8:6c:4c:30:1c:58:d7:2e:42:51:d6:f1:dc:e7:a1:e7: 82:aa:86:42:e4:87:9e:7b:42:a3:26:7f:59:0e:5b:9b:07:09: 4d:5f:89:ca:75:cd:ea:54:70:11:5d:fc:0b:2b:0c:24:49:b8: cc:52:06:e2:b2:69:b7:d8:b2:32:cf:bd:e7:2f:99:a1:39:46: f2:e9:c4:e3:d7:b2:4c:8f:3d:22:e2:d2:a0:c9:09:f4:6e:89: 4f:e9:b9:78:19:65:8a:7e:34:51:ee:5d:44:76:c1:00:8d:91: 16:81:d0:2e:46:84:40:a9:b2:7a:9d:c8:85:a9:4c:ca:00:b0: 59:5a:47:72:0b:45:3a:6a:38:89:91:a0:11:ec:f3:fc:79:0a: 0e:51:1b:6c:10:3c:bc:13:7a:5c:0f:5b:43:61:b4:5e:3a:41: f3:61:a8:3d -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIURDCIEiJiChHQzFtuFpL3AotvGtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFGMkMyMzRBNTEwNzRFMDk3ODQwNEJEQzc5QUE3OTEz MDA0MEIwMDAeFw0yNjA1MTIxMjMwNThaFw0yNjA1MTMxNjI2NThaMDMxMTAvBgNV BAMTKERCMTdEMjI0NEI0Mzk2MzJCNzA1OUY0QjE5RDU0QTNCNzhDQzZGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv1oqtncKgiozeeD1f5Z3v664C L2AWdTv+e19T+7FZWy1iZMIaJNc0ytFFHSh0rX2JhyUnwcUi8YILQkGH/UjT9IME Me+6rqMEhuc5HYdgBMhwd2/ZysPN7+WxPvq+tOdhNFbqrFJYMIX987i+OWABd8FU AT6Pmlnvwyvq2rDJdpYlrb/cEy6IziHiVnGLgc3XqGg+DOPUaZFlStXDoSJgbgZk XuPZ3Sq8Iy3bNH05VooSeLXLKt8wE9oz59SXM/cLICKEDKkvsFS3xHiatEOgrkwR ewUmYRpXcJs8MrCsGZB4seFlde/Wj1wq9Zh7QHoRnBYG4JZHg/60v/lON12vAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU2xfSJEtDljK3BZ9LGdVKO3jMb+IwHwYDVR0j BBgwFoAUYfLCNKUQdOCXhAS9x5qnkTAECwAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTlJJ Q0gvMC82MUYyQzIzNEE1MTA3NEUwOTc4NDA0QkRDNzlBQTc5MTMwMDQwQjAwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzYxRjJDMjM0QTUxMDc0RTA5Nzg0MDRCREM3 OUFBNzkxMzAwNDBCMDAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9PUEVOUklDSC8wLzYxRjJDMjM0 QTUxMDc0RTA5Nzg0MDRCREM3OUFBNzkxMzAwNDBCMDAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB89xFS M8D8MAqF9rFapcdi6ZoYjbR/B1HVdeJ2M9LdM0dYTu5xaYTbchoH9e4RnVNvH5dF KDaQ3f2fFlNEUkrdVa+EvNxWW6W8x2iRT0f1DwtIjbLd0k9PyqA4+ahsTDAcWNcu QlHW8dznoeeCqoZC5Ieee0KjJn9ZDlubBwlNX4nKdc3qVHARXfwLKwwkSbjMUgbi smm32LIyz73nL5mhOUby6cTj17JMjz0i4tKgyQn0bolP6bl4GWWKfjRR7l1EdsEA jZEWgdAuRoRAqbJ6nciFqUzKALBZWkdyC0U6ajiJkaAR7PP8eQoOURtsEDy8E3pc D1tDYbReOkHzYag9 -----END CERTIFICATE-----Generated at Wed May 13 04:17:19 2026 by rpki-client