$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft File: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft (raw, json) Hash identifier: 621Gg9cO8ZkM9hV6L/f7BihDk1MtlcyhUqhF/L3UJfk= Subject key identifier: DA:4D:80:5D:CD:59:0A:47:D3:CE:76:95:4F:6C:94:7C:64:B5:FF:93 Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 612225A2910DDA084243A0EBAC98797AA9BB2D28 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft Manifest number: 6C Signing time: Fri 24 Jul 2026 03:32:25 +0000 Manifest this update: Fri 24 Jul 2026 03:27:25 +0000 Manifest next update: Sat 25 Jul 2026 04:50:25 +0000 Files and hashes: 1: 3138372e37392e3234372e302f32342d3234203d3e203134383734.roa (hash: xrdOBfPyCEULsjixsbr/Px/rQubD5zMfCzYg1CD5bIk=) 2: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl (hash: HKGa718ON68pTN/HMzvYrw1dT+PQLyq6kH4Ui+q12uQ=) 3: 3138372e37392e3234302e302f32312d3332203d3e20313331363432.roa (hash: 3hkv3oIEXxYKcJ6+wpyKK8B+zNNvwWzz7gTiuX5XoeM=) 4: 3138372e37392e3234362e302f32332d3234203d3e203138313738.roa (hash: lvDvOodv8M6LrOgAyDJTwNdJGzoBoLeykAhTF1kRzCI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:22:25:a2:91:0d:da:08:42:43:a0:eb:ac:98:79:7a:a9:bb:2d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Jul 24 03:27:25 2026 GMT Not After : Jul 25 04:50:25 2026 GMT Subject: CN=DA4D805DCD590A47D3CE76954F6C947C64B5FF93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:e4:3d:66:5d:20:3c:e9:7f:a1:8a:09:52: 96:7a:4e:96:a2:96:93:50:cd:28:1f:95:ed:79:27: a3:37:17:e0:7b:1b:21:b8:8d:f5:cd:e8:fd:a0:bf: 7d:ea:88:af:06:f3:51:b3:b4:13:1e:ac:04:a4:b4: 8d:b4:11:df:5f:9f:b4:57:c4:cd:c9:c2:49:c9:96: dd:e4:de:c6:5d:b8:4e:16:da:88:d6:b2:89:7c:6c: fa:ab:5f:ee:d6:c8:08:1e:e8:d9:6b:ea:9f:da:37: 8e:7d:79:a6:02:0d:69:35:24:5d:75:a3:5c:a5:a5: 63:58:06:d8:6c:53:7c:ec:ac:89:c8:59:32:5f:e4: c9:8e:8f:db:fe:68:2d:1d:64:bf:d1:1a:57:b4:d7: 67:11:25:36:20:fa:45:d7:d1:be:11:d6:be:78:3a: c2:9b:5c:f8:26:48:62:7f:bb:4a:e9:2f:5e:ea:af: 7a:26:6b:ec:5b:96:70:d6:e4:e6:0e:93:fe:1c:74: fb:28:1e:c6:00:0e:eb:bb:dd:29:33:ed:25:a4:e5: 5f:a0:f4:ca:89:04:77:03:7f:0f:bc:11:a0:18:78: 73:8e:20:3c:db:bc:b2:d0:f8:b4:09:46:ba:50:28: 79:af:c2:a4:a7:13:0a:80:f0:cb:63:e6:08:79:f0: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4D:80:5D:CD:59:0A:47:D3:CE:76:95:4F:6C:94:7C:64:B5:FF:93 X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:62:69:a0:48:2a:d7:58:a8:ce:b9:90:06:45:3a:e2:0c:a6: ae:c7:8d:9b:72:8c:b0:2c:5f:a4:e2:7e:d0:99:6e:7e:b1:ea: de:c3:5b:90:2d:b1:8c:2b:8a:f0:79:7b:86:77:d8:5f:b5:6e: 4b:c8:65:85:a2:6b:fd:b2:44:50:0c:60:cf:e8:6e:4c:47:2f: a7:ec:a5:e7:6d:ac:49:bc:4c:a3:1f:16:8c:cb:46:d5:48:63: 4b:12:be:5b:2a:29:f7:46:0e:62:97:64:97:36:1d:9b:d0:7b: e6:95:f8:aa:02:e6:dd:3e:1a:ad:43:bc:b5:86:e8:af:ad:b1: 6d:76:d5:85:6f:b2:b1:0c:e1:58:67:d5:16:d4:78:1f:54:77: cd:2d:98:55:5d:23:9a:29:aa:df:6f:2f:77:cd:d9:df:a6:aa: 9f:c8:02:02:7c:bf:14:98:ed:cc:ba:32:a1:b1:bf:31:85:ef: 78:58:db:19:25:f3:50:e3:5a:9d:b3:c8:c3:b1:be:ea:62:f7: e9:6c:d9:90:d0:99:c4:7d:d3:ec:fc:ee:12:e3:da:ff:24:42: 8c:71:44:e9:4e:6d:d2:28:da:25:69:59:7c:3a:e9:bd:51:c9: ce:95:b1:19:9d:a1:1e:d6:22:00:ed:0a:ff:7a:21:93:28:c8: d2:61:bf:67 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUYSIlopEN2ghCQ6DrrJh5eqm7LSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA3MjQwMzI3MjVaFw0yNjA3MjUwNDUwMjVaMDMxMTAvBgNV BAMTKERBNEQ4MDVEQ0Q1OTBBNDdEM0NFNzY5NTRGNkM5NDdDNjRCNUZGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5O+Q9Zl0gPOl/oYoJUpZ6Tpai lpNQzSgfle15J6M3F+B7GyG4jfXN6P2gv33qiK8G81GztBMerASktI20Ed9fn7RX xM3JwknJlt3k3sZduE4W2ojWsol8bPqrX+7WyAge6Nlr6p/aN459eaYCDWk1JF11 o1ylpWNYBthsU3zsrInIWTJf5MmOj9v+aC0dZL/RGle012cRJTYg+kXX0b4R1r54 OsKbXPgmSGJ/u0rpL17qr3oma+xblnDW5OYOk/4cdPsoHsYADuu73Skz7SWk5V+g 9MqJBHcDfw+8EaAYeHOOIDzbvLLQ+LQJRrpQKHmvwqSnEwqA8Mtj5gh58OL/AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU2k2AXc1ZCkfTznaVT2yUfGS1/5MwHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvM0MyMTkyNjNGMjZCOTlFMkRC Mzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALliaaBIKtdYqM65kAZF OuIMpq7HjZtyjLAsX6TiftCZbn6x6t7DW5AtsYwrivB5e4Z32F+1bkvIZYWia/2y RFAMYM/obkxHL6fspedtrEm8TKMfFozLRtVIY0sSvlsqKfdGDmKXZJc2HZvQe+aV +KoC5t0+Gq1DvLWG6K+tsW121YVvsrEM4Vhn1RbUeB9Ud80tmFVdI5opqt9vL3fN 2d+mqp/IAgJ8vxSY7cy6MqGxvzGF73hY2xkl81DjWp2zyMOxvupi9+ls2ZDQmcR9 0+z87hLj2v8kQoxxROlObdIo2iVpWXw66b1Ryc6VsRmdoR7WIgDtCv96IZMoyNJh v2c= -----END CERTIFICATE-----Generated at Fri Jul 24 14:23:03 2026 by rpki-client