$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft File: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft (raw, json) Hash identifier: kKC7KUCHb3M+5jgYaBpXEeNkO/Y6MZgfRy+qRZDRA7M= Subject key identifier: 92:B1:C7:7E:A1:3B:E9:C2:1F:5F:D1:AB:42:0F:D1:16:D2:2F:C1:B5 Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50 Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50 Certificate serial: 1F7E551EDEC9D06A942C07C014CAB423146BA39A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft Manifest number: 18 Signing time: Tue 12 May 2026 09:51:23 +0000 Manifest this update: Tue 12 May 2026 09:46:23 +0000 Manifest next update: Wed 13 May 2026 11:40:23 +0000 Files and hashes: 1: 3138372e37392e3139322e302f31392d3234203d3e20313331313531.roa (hash: 05w0uJce6h2DLQWt4ZdfTjMtpIegQ9tImqKoarYiRe8=) 2: 3138372e37392e3234382e302f32312d3234203d3e20313334383233.roa (hash: Zz9CvLm2AJx5rpKaFfW4V3557O2rIHrGg/E64B0gDkE=) 3: 3138372e37392e3234382e302f32312d3234203d3e20313331313531.roa (hash: 3vADVgqIF+DMqXN/Slxe4U6QenJyre1e9qbCennjH4s=) 4: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl (hash: SqvYJ+ZYfxm4Xn8FfUBWug8cbAT5X3OCvyS7RGVb93g=) 5: 3138372e37392e3234382e302f32312d3234203d3e203338303432.roa (hash: /1olUNUta2jWsipkUXWKP+uzfj0Zi5YxacKqhx693kk=) 6: 3138372e37392e3139322e302f31392d3234203d3e20313334383233.roa (hash: a8CleYW3Fkq8o8fjYWlYdkD+yxdQ7vmQublJvofR+u0=) 7: 3138372e37392e3139322e302f31392d3234203d3e203338303432.roa (hash: L/E0Yfp/GwgZgFh8cWkW12iwkjBxZmoDDFi3H0v3pY8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7e:55:1e:de:c9:d0:6a:94:2c:07:c0:14:ca:b4:23:14:6b:a3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50 Validity Not Before: May 12 09:46:23 2026 GMT Not After : May 13 11:40:23 2026 GMT Subject: CN=92B1C77EA13BE9C21F5FD1AB420FD116D22FC1B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:b6:a9:da:31:d3:88:7c:20:96:2f:92:5f: eb:ab:2d:79:44:10:e7:6b:ca:35:8c:6c:59:e6:33: 30:91:4d:9c:9b:fc:11:99:f9:da:23:ad:0b:00:6a: 6b:c7:7c:b3:ed:8e:b3:cf:51:31:ff:f5:1b:ac:41: ec:52:ea:b4:29:83:93:a6:9c:33:af:ab:38:73:2d: 7a:f4:36:69:d5:1c:97:1c:42:08:5f:ab:e2:59:8a: 31:93:ab:9b:15:2a:2b:41:e6:53:f1:a7:a7:98:bf: e3:a3:55:eb:e5:80:78:da:e6:57:2b:2b:17:2b:33: bd:dd:82:6c:6b:8b:86:e9:d1:67:1c:93:18:29:e6: cf:57:8f:55:54:07:74:5f:d1:cf:fc:dc:bb:cb:ee: 00:cf:6a:68:4b:96:ed:e5:ae:c4:77:8f:b5:5d:af: 23:ce:15:22:c8:94:29:49:71:96:f6:89:df:04:e6: bd:f5:be:32:cc:28:6c:c2:21:d7:91:a1:5a:58:8d: 78:5e:56:6d:78:05:a6:5e:0e:af:5d:2e:27:6c:ac: 46:38:32:a4:40:16:38:1b:af:24:65:19:2e:c7:6c: 76:38:5a:9a:74:34:88:6e:17:12:b7:0b:8e:b3:c7: 06:74:ff:d5:6a:8e:b2:b0:e8:0b:e3:88:28:6f:e5: 4e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B1:C7:7E:A1:3B:E9:C2:1F:5F:D1:AB:42:0F:D1:16:D2:2F:C1:B5 X509v3 Authority Key Identifier: keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:4d:d2:bf:85:89:48:a0:c4:cd:6a:7a:c5:68:98:c9:4e:8c: fa:a8:29:17:99:6f:31:d2:24:fe:6b:61:ff:0d:99:33:0f:03: 1d:96:8c:72:95:a0:07:42:a3:da:a5:38:7f:dd:5a:69:40:3e: 48:3d:95:25:51:76:27:99:50:5e:3f:7a:3a:be:14:da:3e:94: a4:cd:e9:18:f0:15:d6:54:95:fb:9e:e4:d1:de:53:dd:a7:e9: d8:72:53:51:40:c7:52:44:b0:06:9f:a7:8b:8b:f4:45:9a:9c: 34:97:50:c2:b5:91:c7:b5:d3:16:1a:7a:41:99:8d:91:8e:93: cb:80:60:a1:da:1e:8d:d1:06:94:f2:88:24:f1:64:ba:dd:d3: 95:4a:19:89:4b:82:93:8f:da:2a:23:94:34:c7:31:1b:db:14: 9c:03:03:e8:5c:5f:36:ae:c5:0e:ae:cf:cd:5f:83:38:a4:ab: 89:54:a6:23:36:17:d6:7d:d1:79:8d:fa:29:8d:a6:ff:da:71: 26:af:26:88:22:16:75:91:d7:3b:91:6b:e8:7d:df:8f:96:30: 9c:9f:0d:57:95:59:e0:c0:64:18:ba:6f:f2:50:23:71:f7:ee: 55:38:99:49:7e:4b:ce:29:83:48:a8:cb:90:0a:e8:dc:03:15: 29:df:91:d1 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUH35VHt7J0GqULAfAFMq0IxRro5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBRDg3NzM1Qjk2RTM4QzVCMTY0NTBEMDZGMUUzRjA1 RDFDMEI1MDAeFw0yNjA1MTIwOTQ2MjNaFw0yNjA1MTMxMTQwMjNaMDMxMTAvBgNV BAMTKDkyQjFDNzdFQTEzQkU5QzIxRjVGRDFBQjQyMEZEMTE2RDIyRkMxQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0DLap2jHTiHwgli+SX+urLXlE EOdryjWMbFnmMzCRTZyb/BGZ+dojrQsAamvHfLPtjrPPUTH/9RusQexS6rQpg5Om nDOvqzhzLXr0NmnVHJccQghfq+JZijGTq5sVKitB5lPxp6eYv+OjVevlgHja5lcr KxcrM73dgmxri4bp0Wcckxgp5s9Xj1VUB3Rf0c/83LvL7gDPamhLlu3lrsR3j7Vd ryPOFSLIlClJcZb2id8E5r31vjLMKGzCIdeRoVpYjXheVm14BaZeDq9dLidsrEY4 MqRAFjgbryRlGS7HbHY4Wpp0NIhuFxK3C46zxwZ0/9VqjrKw6AvjiChv5U4tAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUkrHHfqE76cIfX9GrQg/RFtIvwbUwHwYDVR0j BBgwFoAU362Hc1uW44xbFkUNBvHj8F0cC1AwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U Vy8xL0RGQUQ4NzczNUI5NkUzOEM1QjE2NDUwRDA2RjFFM0YwNUQxQzBCNTAuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzIvREZBRDg3NzM1Qjk2RTM4QzVCMTY0NTBEMDZG MUUzRjA1RDFDMEI1MC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMS9ERkFEODc3MzVC OTZFMzhDNUIxNjQ1MEQwNkYxRTNGMDVEMUMwQjUwLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmU3Sv4WJ SKDEzWp6xWiYyU6M+qgpF5lvMdIk/mth/w2ZMw8DHZaMcpWgB0Kj2qU4f91aaUA+ SD2VJVF2J5lQXj96Or4U2j6UpM3pGPAV1lSV+57k0d5T3afp2HJTUUDHUkSwBp+n i4v0RZqcNJdQwrWRx7XTFhp6QZmNkY6Ty4BgodoejdEGlPKIJPFkut3TlUoZiUuC k4/aKiOUNMcxG9sUnAMD6FxfNq7FDq7PzV+DOKSriVSmIzYX1n3ReY36KY2m/9px Jq8miCIWdZHXO5Fr6H3fj5YwnJ8NV5VZ4MBkGLpv8lAjcffuVTiZSX5LzimDSKjL kAro3AMVKd+R0Q== -----END CERTIFICATE-----Generated at Wed May 13 05:26:18 2026 by rpki-client