$ rpki-client -vvf rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft File: 8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft (raw, json) Hash identifier: IJpO84ERpprOk+V+Cn35HLbuAlJ7+vMl7+vcClx5Q3U= Subject key identifier: 1C:D9:6C:84:A3:84:CF:E0:B7:D3:1C:7F:BE:5F:C6:A4:E8:C2:82:E3 Authority key identifier: 86:81:A4:AE:9D:1E:38:75:36:C2:E0:B9:1C:79:A8:76:CF:7D:E4:E4 Certificate issuer: /CN=8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4 Certificate serial: 3B8148A113464ED2C19C64B18A934476C9D8AB74 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft Manifest number: 63 Signing time: Thu 23 Jul 2026 16:56:11 +0000 Manifest this update: Thu 23 Jul 2026 16:51:11 +0000 Manifest next update: Fri 24 Jul 2026 18:58:11 +0000 Files and hashes: 1: 8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl (hash: 0zXW706+uawi3YnUr/b8YjCeFGvp3GWgLk97TT403gQ=) 2: 323430323a6361303a3a2f33322d3438203d3e20313331363831.roa (hash: S/vvxrC76LtkDDAr3Lwj+sG9Po2jPNI3vSVyXNzI5B0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:81:48:a1:13:46:4e:d2:c1:9c:64:b1:8a:93:44:76:c9:d8:ab:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4 Validity Not Before: Jul 23 16:51:11 2026 GMT Not After : Jul 24 18:58:11 2026 GMT Subject: CN=1CD96C84A384CFE0B7D31C7FBE5FC6A4E8C282E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:a4:fc:00:89:29:51:a3:aa:c2:77:bc:aa: ac:9f:10:1e:e1:97:8a:3f:5e:0b:1b:88:f8:eb:0d: d3:1d:57:23:64:47:47:43:1b:cf:05:25:4c:0a:28: 2d:69:9e:fc:5d:91:a0:c9:39:c2:5f:36:f3:83:d8: d6:dd:68:21:e5:5a:4a:1e:aa:ac:3f:e4:10:e0:74: e1:02:89:27:88:4d:84:8c:42:e7:b3:2c:05:e0:0c: ac:db:98:ce:28:11:b5:e6:38:60:84:09:5d:4f:1e: 54:43:71:05:17:b5:ff:32:ec:35:09:bb:92:e7:0e: 0c:d8:f4:88:ee:c2:bb:41:67:25:82:ce:7d:08:c3: 8a:ce:31:83:e3:f3:cc:ac:ed:b3:02:cf:fb:74:70: 61:4c:03:e9:b7:9d:bf:59:87:d6:f1:7f:91:c7:7b: ac:03:07:99:de:e1:af:2e:e9:da:a3:3f:a1:39:70: 75:0b:6e:06:73:d4:45:05:48:b8:4b:07:0d:b5:3d: 1c:26:57:e9:72:1a:c6:76:46:a7:90:a6:02:92:bd: 25:df:c4:2e:e7:55:06:28:c5:81:1a:c0:60:37:84: 1d:98:be:cd:7b:cd:97:d5:64:cf:e0:18:4b:71:37: 2b:8b:ed:31:1b:29:f2:b4:0d:2c:23:34:99:76:b6: 55:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D9:6C:84:A3:84:CF:E0:B7:D3:1C:7F:BE:5F:C6:A4:E8:C2:82:E3 X509v3 Authority Key Identifier: keyid:86:81:A4:AE:9D:1E:38:75:36:C2:E0:B9:1C:79:A8:76:CF:7D:E4:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:d5:f8:96:18:89:36:36:1b:84:e1:13:bc:58:c5:f3:71:b8: 9a:c2:d1:a6:a5:10:fa:14:dd:b1:8e:26:43:da:26:d8:3c:54: 59:91:7a:d3:78:1a:52:d8:71:70:be:fb:04:82:5e:33:85:5c: 36:46:ae:6e:4d:e3:7d:8f:18:bd:0a:b1:fa:e7:e2:51:85:30: eb:30:56:b4:70:e3:be:b9:59:5d:88:a5:0c:35:73:2d:e3:19: dd:49:3f:be:19:f9:7f:f5:39:c5:f6:71:81:72:06:18:f4:c1: d0:a9:de:e2:ad:e8:fd:99:2e:c2:1c:36:d3:10:d6:14:8e:7a: ba:46:70:8c:58:75:7c:d5:f1:65:8c:74:45:bf:c3:7b:91:e5: 7e:62:18:61:b0:2e:9d:fc:f6:79:a0:1e:40:e8:8c:f6:87:bf: 15:94:36:81:90:94:51:f6:68:fe:d7:65:28:66:ca:ed:6b:cb: e9:62:eb:a5:db:c7:76:1a:89:22:96:8e:4f:20:72:02:94:9e: 4f:e9:4a:bd:9b:74:3f:3c:1f:40:a3:fd:71:7e:c3:56:2a:d2: 7b:f8:53:07:1d:88:7a:8d:3e:02:48:68:16:72:4d:43:19:42: d5:19:a6:16:cb:fc:8b:f9:f3:8c:02:45:5e:71:38:21:cc:8e: 1b:5f:ce:88 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUO4FIoRNGTtLBnGSxipNEdsnYq3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY4MUE0QUU5RDFFMzg3NTM2QzJFMEI5MUM3OUE4NzZD RjdERTRFNDAeFw0yNjA3MjMxNjUxMTFaFw0yNjA3MjQxODU4MTFaMDMxMTAvBgNV BAMTKDFDRDk2Qzg0QTM4NENGRTBCN0QzMUM3RkJFNUZDNkE0RThDMjgyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVe6T8AIkpUaOqwne8qqyfEB7h l4o/XgsbiPjrDdMdVyNkR0dDG88FJUwKKC1pnvxdkaDJOcJfNvOD2NbdaCHlWkoe qqw/5BDgdOECiSeITYSMQuezLAXgDKzbmM4oEbXmOGCECV1PHlRDcQUXtf8y7DUJ u5LnDgzY9IjuwrtBZyWCzn0Iw4rOMYPj88ys7bMCz/t0cGFMA+m3nb9Zh9bxf5HH e6wDB5ne4a8u6dqjP6E5cHULbgZz1EUFSLhLBw21PRwmV+lyGsZ2RqeQpgKSvSXf xC7nVQYoxYEawGA3hB2Yvs17zZfVZM/gGEtxNyuL7TEbKfK0DSwjNJl2tlXTAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUHNlshKOEz+C30xx/vl/GpOjCguMwHwYDVR0j BBgwFoAUhoGkrp0eOHU2wuC5HHmods995OQwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUUlTREEv MC84NjgxQTRBRTlEMUUzODc1MzZDMkUwQjkxQzc5QTg3NkNGN0RFNEU0LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzg2ODFBNEFFOUQxRTM4NzUzNkMyRTBCOTFDNzlB ODc2Q0Y3REU0RTQuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9RSVNEQS8wLzg2ODFBNEFFOUQxRTM4 NzUzNkMyRTBCOTFDNzlBODc2Q0Y3REU0RTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAD1fiWGIk2NhuE 4RO8WMXzcbiawtGmpRD6FN2xjiZD2ibYPFRZkXrTeBpS2HFwvvsEgl4zhVw2Rq5u TeN9jxi9CrH65+JRhTDrMFa0cOO+uVldiKUMNXMt4xndST++Gfl/9TnF9nGBcgYY 9MHQqd7irej9mS7CHDbTENYUjnq6RnCMWHV81fFljHRFv8N7keV+YhhhsC6d/PZ5 oB5A6Iz2h78VlDaBkJRR9mj+12UoZsrta8vpYuul28d2Gokilo5PIHIClJ5P6Uq9 m3Q/PB9Ao/1xfsNWKtJ7+FMHHYh6jT4CSGgWck1DGULVGaYWy/yL+fOMAkVecTgh zI4bX86I -----END CERTIFICATE-----Generated at Fri Jul 24 04:17:11 2026 by rpki-client