$ rpki-client -vvf rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft File: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft (raw, json) Hash identifier: D5AQw7VD/ILvy1AHfC8+a2GFeiouugIHvrFwiRr8YLI= Subject key identifier: 6F:48:3D:BA:FF:91:5A:6A:51:A0:8F:29:28:10:20:B5:F6:66:BC:14 Authority key identifier: 50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B Certificate issuer: /CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B Certificate serial: 5459973736F296F9717243A878DF10880FB5782C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft Manifest number: 64 Signing time: Fri 24 Jul 2026 00:37:08 +0000 Manifest this update: Fri 24 Jul 2026 00:32:08 +0000 Manifest next update: Sat 25 Jul 2026 01:36:08 +0000 Files and hashes: 1: 3136352e39392e3131322e302f32332d3234203d3e20313331363831.roa (hash: WrYPkf0InVKyICQINH//KXuGgao1vX5GBqZA6/+9gHc=) 2: 5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl (hash: lXzNycTK76lUYU+bxxDjKyR3AWtahvDxdUo77Ipkldg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:59:97:37:36:f2:96:f9:71:72:43:a8:78:df:10:88:0f:b5:78:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5031E65A98D8273F9579BFA5B8FE6CA52D01C41B Validity Not Before: Jul 24 00:32:08 2026 GMT Not After : Jul 25 01:36:08 2026 GMT Subject: CN=6F483DBAFF915A6A51A08F29281020B5F666BC14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:54:ff:59:ce:07:bb:c7:f5:4f:1a:d9:38:95: d9:12:05:12:a8:ef:82:20:3f:24:a6:d6:d9:5e:22: 6c:e8:46:f7:de:48:c1:4b:4a:f0:6a:7e:01:65:1f: 19:2c:80:83:dd:3a:e0:ea:e9:75:03:21:e5:f9:83: 35:62:86:31:d5:34:0a:64:2c:d8:67:f1:01:c1:70: fd:3b:69:36:bd:81:fe:13:8d:83:ff:5e:d5:1a:af: 34:54:8d:66:91:62:d4:df:d1:3e:fc:81:5a:ab:67: 15:1d:29:b7:fa:c9:ce:30:b4:cb:dd:f3:d4:33:3d: 6d:64:60:44:2d:ed:5f:57:e6:8d:5d:eb:f3:dd:0c: 43:62:0c:d6:90:79:1a:95:50:0e:53:a0:74:c9:ef: a8:d6:a1:ff:79:2b:bd:4a:0c:90:67:cb:d2:f5:39: 0a:41:c6:82:c2:c5:6f:10:c7:93:23:c4:55:24:0a: 8f:77:77:bf:7d:1a:e2:59:15:14:63:35:da:90:1a: a8:6b:f0:c3:8e:36:a3:c2:b9:07:65:d3:20:aa:08: ce:81:76:35:07:c2:3c:b6:78:8d:9e:e0:41:31:80: a1:b8:93:f8:0a:18:75:69:e0:51:34:f9:16:3e:d1: b7:8b:c5:12:c0:72:cb:ce:84:f0:5a:64:4a:6d:ea: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:48:3D:BA:FF:91:5A:6A:51:A0:8F:29:28:10:20:B5:F6:66:BC:14 X509v3 Authority Key Identifier: keyid:50:31:E6:5A:98:D8:27:3F:95:79:BF:A5:B8:FE:6C:A5:2D:01:C4:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/1/5031E65A98D8273F9579BFA5B8FE6CA52D01C41B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:10:63:0f:91:ce:7e:c3:1a:e7:2b:f3:02:28:1e:94:9c:1c: 8e:a4:d0:13:79:7f:dc:9f:35:48:c9:a8:87:4c:d9:d6:95:dc: 4e:04:90:86:d6:de:00:7a:06:75:c4:05:34:51:d0:e2:a0:56: 54:6f:c1:9a:ce:2d:96:9f:e8:cd:7f:a2:d4:98:ef:68:82:06: 09:74:41:45:6e:d8:26:62:be:c6:e6:9c:d7:0a:d8:6b:af:b4: e7:8e:8e:f7:eb:8b:b7:89:ec:b4:59:05:b9:97:6a:36:f7:b1: 40:9a:4a:ec:06:09:eb:67:c3:c0:ae:9e:54:ae:97:dd:11:25: c7:4a:af:4a:08:99:ca:b2:00:11:db:ae:60:98:16:a7:dc:5b: 03:40:b4:44:ca:9f:5b:de:5b:c1:05:6a:30:e1:8e:02:6f:82: 6f:02:2a:9c:56:91:47:59:5f:4d:46:c4:84:5b:c6:20:9f:71: 83:cf:fc:84:eb:74:fd:04:71:e0:ad:bd:22:76:d0:1a:e2:c2: 0d:25:4c:60:3c:e6:2b:fc:c1:2b:a6:f1:67:e2:b4:38:a2:68: c3:8a:5e:76:80:43:ce:53:3f:11:42:4b:ed:fd:b4:97:60:06: 99:2e:49:1c:50:a2:65:61:0e:91:b7:cf:0b:bf:32:72:1b:a4: ae:28:01:13 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUVFmXNzbylvlxckOoeN8QiA+1eCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAzMUU2NUE5OEQ4MjczRjk1NzlCRkE1QjhGRTZDQTUy RDAxQzQxQjAeFw0yNjA3MjQwMDMyMDhaFw0yNjA3MjUwMTM2MDhaMDMxMTAvBgNV BAMTKDZGNDgzREJBRkY5MTVBNkE1MUEwOEYyOTI4MTAyMEI1RjY2NkJDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOVP9Zzge7x/VPGtk4ldkSBRKo 74IgPySm1tleImzoRvfeSMFLSvBqfgFlHxksgIPdOuDq6XUDIeX5gzVihjHVNApk LNhn8QHBcP07aTa9gf4TjYP/XtUarzRUjWaRYtTf0T78gVqrZxUdKbf6yc4wtMvd 89QzPW1kYEQt7V9X5o1d6/PdDENiDNaQeRqVUA5ToHTJ76jWof95K71KDJBny9L1 OQpBxoLCxW8Qx5MjxFUkCo93d799GuJZFRRjNdqQGqhr8MOONqPCuQdl0yCqCM6B djUHwjy2eI2e4EExgKG4k/gKGHVp4FE0+RY+0beLxRLAcsvOhPBaZEpt6o2tAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUb0g9uv+RWmpRoI8pKBAgtfZmvBQwHwYDVR0j BBgwFoAUUDHmWpjYJz+Veb+luP5spS0BxBswDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUUlTREEv MS81MDMxRTY1QTk4RDgyNzNGOTU3OUJGQTVCOEZFNkNBNTJEMDFDNDFCLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzUwMzFFNjVBOThEODI3M0Y5NTc5QkZBNUI4RkU2 Q0E1MkQwMUM0MUIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9RSVNEQS8xLzUwMzFFNjVBOThEODI3 M0Y5NTc5QkZBNUI4RkU2Q0E1MkQwMUM0MUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgEGMPkc5+wxrn K/MCKB6UnByOpNATeX/cnzVIyaiHTNnWldxOBJCG1t4AegZ1xAU0UdDioFZUb8Ga zi2Wn+jNf6LUmO9oggYJdEFFbtgmYr7G5pzXCthrr7Tnjo7364u3iey0WQW5l2o2 97FAmkrsBgnrZ8PArp5UrpfdESXHSq9KCJnKsgAR265gmBan3FsDQLREyp9b3lvB BWow4Y4Cb4JvAiqcVpFHWV9NRsSEW8Ygn3GDz/yE63T9BHHgrb0idtAa4sINJUxg POYr/MErpvFn4rQ4omjDil52gEPOUz8RQkvt/bSXYAaZLkkcUKJlYQ6Rt88LvzJy G6SuKAET -----END CERTIFICATE-----Generated at Fri Jul 24 10:45:31 2026 by rpki-client