$ rpki-client -vvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft File: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json) Hash identifier: gv0yNVLqhUBE1dZVGeXCTNve3QVI0cj5UUSMhs5+IIU= Subject key identifier: A5:21:E0:FE:20:B3:ED:17:58:A5:1E:71:E3:35:9A:C0:CD:06:68:3F Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Certificate serial: 56F1AE32805FCDAD8999CF30FA79933E7C84758A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft Manifest number: 66 Signing time: Thu 23 Jul 2026 13:17:31 +0000 Manifest this update: Thu 23 Jul 2026 13:12:31 +0000 Manifest next update: Fri 24 Jul 2026 13:34:31 +0000 Files and hashes: 1: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=) 2: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: AZuMvQDdcE7GIzN/hpG2hlpXd2CVpmWMTi9HPmg347g=) 3: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=) 4: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=) 5: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f1:ae:32:80:5f:cd:ad:89:99:cf:30:fa:79:93:3e:7c:84:75:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Validity Not Before: Jul 23 13:12:31 2026 GMT Not After : Jul 24 13:34:31 2026 GMT Subject: CN=A521E0FE20B3ED1758A51E71E3359AC0CD06683F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:9e:74:7c:29:c8:1e:e5:7c:51:9b:12:37: 98:6a:ff:aa:b7:7f:31:ce:a5:25:f9:f5:91:0e:9f: 93:b5:dc:2b:68:c9:80:dc:ef:3f:d5:e7:1b:43:b9: 35:ee:26:f2:4b:94:dd:d2:78:bf:8a:c3:f7:59:72: 9d:df:28:cc:94:98:6d:7a:71:72:81:51:16:72:9c: fc:22:dc:77:ae:0e:44:c6:f1:6c:80:35:7f:32:e7: 38:88:dd:d2:66:98:3d:d4:cf:de:22:dd:a0:c2:68: 01:93:d1:8b:9c:fc:79:7b:3b:84:ae:36:eb:d3:1a: 76:f3:99:53:7d:3e:d3:77:8d:5f:83:3b:70:86:db: 21:88:5b:ca:83:f3:0f:a1:59:ff:08:07:7c:fb:ed: 98:18:39:ff:5e:00:f7:9c:20:93:4f:7a:47:d6:c0: 58:e3:a2:87:af:2a:9a:53:f4:90:b6:f2:d5:8a:2d: 9e:9f:0b:01:b5:df:f4:a0:bc:75:07:02:9f:dc:96: 83:d9:20:f2:b8:02:7d:72:8c:bd:17:50:e7:a8:ab: df:a9:78:f3:4e:75:de:e2:05:94:a3:43:d7:42:b8: f9:b3:f7:69:0f:b5:1b:0c:c5:0d:7f:21:62:14:c7: 88:67:cb:23:bd:59:cc:c8:ca:79:69:92:03:f4:6b: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:21:E0:FE:20:B3:ED:17:58:A5:1E:71:E3:35:9A:C0:CD:06:68:3F X509v3 Authority Key Identifier: keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d2:fa:d9:ec:96:04:59:55:a0:80:75:52:47:d0:9d:65:81: f9:94:5b:06:3b:d9:f5:7f:6d:98:8d:7d:10:78:e3:ab:ad:15: 63:f6:71:4f:2b:0c:8d:9a:84:bb:73:ba:dd:94:4d:dc:1c:75: 90:7a:1a:0f:20:de:cb:57:e6:cc:0d:12:86:0c:e1:05:5d:f6: 70:7b:56:db:22:63:1d:92:aa:40:54:d1:51:0c:d1:cc:95:06: 5d:20:0b:34:a6:0c:82:36:ba:8b:db:df:cd:e7:3d:8e:16:78: d5:a8:38:79:f3:69:7a:41:7f:15:36:40:72:e3:52:76:66:52: 3d:d5:00:e8:80:69:cf:33:1b:a3:c7:92:8a:52:08:39:f2:62: 29:c5:c5:c8:b4:f5:10:5b:6d:66:b8:e3:28:2f:5a:32:7f:6f: 8c:82:f8:94:81:00:4b:7f:c5:b9:10:2e:70:dc:dc:d6:18:e4: 9b:51:c2:a6:c2:6e:84:06:7c:52:42:c9:bd:e3:3d:55:62:99: 49:65:0e:90:6a:69:8c:2f:1a:c5:ae:5b:fd:9b:f3:30:76:e4: 48:6d:5d:83:1c:dd:62:d4:0f:01:7d:09:17:c5:17:e3:96:66: 85:24:ee:26:12:73:65:bd:1f:ae:8d:88:8f:ea:0c:39:a7:9f: 13:85:4d:9d -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUVvGuMoBfza2Jmc8w+nmTPnyEdYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFDMjdENTI0 NjZBQzdFNjAeFw0yNjA3MjMxMzEyMzFaFw0yNjA3MjQxMzM0MzFaMDMxMTAvBgNV BAMTKEE1MjFFMEZFMjBCM0VEMTc1OEE1MUU3MUUzMzU5QUMwQ0QwNjY4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xp50fCnIHuV8UZsSN5hq/6q3 fzHOpSX59ZEOn5O13CtoyYDc7z/V5xtDuTXuJvJLlN3SeL+Kw/dZcp3fKMyUmG16 cXKBURZynPwi3HeuDkTG8WyANX8y5ziI3dJmmD3Uz94i3aDCaAGT0Yuc/Hl7O4Su NuvTGnbzmVN9PtN3jV+DO3CG2yGIW8qD8w+hWf8IB3z77ZgYOf9eAPecIJNPekfW wFjjooevKppT9JC28tWKLZ6fCwG13/SgvHUHAp/cloPZIPK4An1yjL0XUOeoq9+p ePNOdd7iBZSjQ9dCuPmz92kPtRsMxQ1/IWIUx4hnyyO9WczIynlpkgP0a93HAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUpSHg/iCz7RdYpR5x4zWawM0GaD8wHwYDVR0j BBgwFoAUTU29KLvriSCzeqYEisJ9UkZqx+YwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VDVU5F VC8wLzRENERCRDI4QkJFQjg5MjBCMzdBQTYwNDhBQzI3RDUyNDY2QUM3RTYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFD MjdENTI0NjZBQzdFNi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NFQ1VORVQvMC80RDREQkQyOEJC RUI4OTIwQjM3QUE2MDQ4QUMyN0Q1MjQ2NkFDN0U2Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNL62eyW BFlVoIB1UkfQnWWB+ZRbBjvZ9X9tmI19EHjjq60VY/ZxTysMjZqEu3O63ZRN3Bx1 kHoaDyDey1fmzA0ShgzhBV32cHtW2yJjHZKqQFTRUQzRzJUGXSALNKYMgja6i9vf zec9jhZ41ag4efNpekF/FTZAcuNSdmZSPdUA6IBpzzMbo8eSilIIOfJiKcXFyLT1 EFttZrjjKC9aMn9vjIL4lIEAS3/FuRAucNzc1hjkm1HCpsJuhAZ8UkLJveM9VWKZ SWUOkGppjC8axa5b/ZvzMHbkSG1dgxzdYtQPAX0JF8UX45ZmhSTuJhJzZb0fro2I j+oMOaefE4VNnQ== -----END CERTIFICATE-----Generated at Fri Jul 24 02:40:08 2026 by rpki-client