$ rpki-client -vvf rpkica.twnic.tw/rpki/SYMPHOX/0/B64BDE0841E1E027F1A23036D9C779A108C22EE1.mft File: B64BDE0841E1E027F1A23036D9C779A108C22EE1.mft (raw, json) Hash identifier: Pr4IMDRjkuwEfeoBXGBpmb5J9fTzYAH9LuTZYS6KAvE= Subject key identifier: 16:C9:33:46:BA:40:39:F8:1A:2E:AD:36:1D:8B:23:BC:96:0F:DE:0A Authority key identifier: B6:4B:DE:08:41:E1:E0:27:F1:A2:30:36:D9:C7:79:A1:08:C2:2E:E1 Certificate issuer: /CN=B64BDE0841E1E027F1A23036D9C779A108C22EE1 Certificate serial: 489A885A9385C9424E4ABABA51FCADB71B7B6804 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B64BDE0841E1E027F1A23036D9C779A108C22EE1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SYMPHOX/0/B64BDE0841E1E027F1A23036D9C779A108C22EE1.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 17:46:21 +0000 Manifest this update: Thu 23 Jul 2026 17:41:21 +0000 Manifest next update: Fri 24 Jul 2026 18:55:21 +0000 Files and hashes: 1: B64BDE0841E1E027F1A23036D9C779A108C22EE1.crl (hash: frdxaMttRgYtUKGocSTBTMVoXAAQS4V1gnY5Jnlx3Tw=) 2: 3231312e37362e3132382e302f32302d3234203d3e203536313739.roa (hash: lXdw4/lA7p0B+u17xRun5vfo7vWAF9rUjcOVqwT8L6A=) 3: 3231312e37362e3132382e302f32302d3234203d3e2039323136.roa (hash: qP4Uel7t0Zn5tKHqbi9V7FUrZ6MHFXEUK/naBwtrnS4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SYMPHOX/0/B64BDE0841E1E027F1A23036D9C779A108C22EE1.crl rsync://rpkica.twnic.tw/rpki/SYMPHOX/0/B64BDE0841E1E027F1A23036D9C779A108C22EE1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B64BDE0841E1E027F1A23036D9C779A108C22EE1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9a:88:5a:93:85:c9:42:4e:4a:ba:ba:51:fc:ad:b7:1b:7b:68:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B64BDE0841E1E027F1A23036D9C779A108C22EE1 Validity Not Before: Jul 23 17:41:21 2026 GMT Not After : Jul 24 18:55:21 2026 GMT Subject: CN=16C93346BA4039F81A2EAD361D8B23BC960FDE0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:e3:bc:a9:8d:ba:00:48:f0:d2:87:54:61: fa:98:4c:b9:37:5f:f9:50:00:ae:66:c8:80:86:d0: 38:1c:a4:8d:39:41:77:6b:e1:75:b3:1f:41:11:c9: 69:31:42:3b:2e:36:cf:d1:3b:df:55:15:ef:12:a2: c9:d3:15:e3:44:b7:7c:6e:5c:e6:b4:9a:b2:a9:c5: a3:a8:f2:73:08:3a:7c:2f:e8:09:33:92:1a:36:ea: 66:7f:fd:b0:e1:5a:88:bf:2e:93:64:ef:33:5f:32: bb:ab:85:77:22:05:67:a0:b8:27:d7:32:ea:ad:e0: bb:66:3c:8b:5c:b7:51:66:32:c5:c5:26:ee:0a:af: 95:93:54:91:49:c1:92:2c:9b:f9:da:ed:c6:52:da: 78:3e:2e:b6:02:80:b4:b3:ef:de:ff:6b:f6:a6:dd: 4b:7f:ae:72:e6:ef:bb:00:63:65:88:81:2a:34:a5: 15:ae:de:e5:3d:d8:7f:b7:7c:04:5b:12:bd:4e:1b: 2f:66:4a:54:bf:33:e4:2f:2b:72:cc:a7:5d:b9:ee: 35:58:c0:2c:06:ac:a4:01:27:4e:2a:c4:b1:e9:33: 74:4c:17:73:a3:1f:a2:17:28:ed:35:08:a6:e6:8e: ce:78:8b:ab:3a:85:91:20:bb:55:d1:ee:ff:87:b4: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C9:33:46:BA:40:39:F8:1A:2E:AD:36:1D:8B:23:BC:96:0F:DE:0A X509v3 Authority Key Identifier: keyid:B6:4B:DE:08:41:E1:E0:27:F1:A2:30:36:D9:C7:79:A1:08:C2:2E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SYMPHOX/0/B64BDE0841E1E027F1A23036D9C779A108C22EE1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B64BDE0841E1E027F1A23036D9C779A108C22EE1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYMPHOX/0/B64BDE0841E1E027F1A23036D9C779A108C22EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f8:29:f2:a8:43:62:31:87:43:65:3d:e1:fa:05:57:54:40: 0f:ab:dc:d5:3b:22:54:d1:99:15:83:be:fe:f1:8b:82:51:57: 99:b1:06:53:c8:42:a9:1a:f6:a0:44:4f:c3:7b:96:41:55:5f: c6:8e:db:76:d0:0e:d3:0a:32:33:55:d3:fd:66:28:cd:52:fe: c2:5a:69:da:c5:ac:5f:59:ee:f8:0d:a1:e5:95:0f:e2:d9:0f: 23:63:85:f6:cf:8b:e2:38:8e:db:ea:7d:60:98:0b:15:0f:6e: 3b:7c:27:4a:61:1b:ca:ef:48:0c:f1:34:03:fb:f2:7f:ec:49: 67:79:9f:a5:44:e5:3f:6a:ae:ee:b4:68:ae:06:49:9f:de:53: 90:53:81:29:76:cc:5a:52:fa:72:94:fb:b3:e6:5a:c6:1a:b0: 5a:00:9b:0d:4d:4d:06:d0:98:12:9d:3a:1b:15:95:bd:e5:6a: 67:a1:46:23:37:46:8a:6f:c9:b8:e3:2f:11:4d:13:38:a0:bd: 9f:e2:90:3f:31:a1:4a:c0:f5:b2:28:65:2a:4e:42:bb:40:d1: b9:3c:61:59:6d:d0:54:87:83:c6:ea:42:ca:56:60:ab:b1:30: 30:4f:92:11:3e:43:a2:3f:74:b5:6e:3e:3e:17:6b:16:c1:8e: 7c:11:25:aa -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUSJqIWpOFyUJOSrq6Ufyttxt7aAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0QkRFMDg0MUUxRTAyN0YxQTIzMDM2RDlDNzc5QTEw OEMyMkVFMTAeFw0yNjA3MjMxNzQxMjFaFw0yNjA3MjQxODU1MjFaMDMxMTAvBgNV BAMTKDE2QzkzMzQ2QkE0MDM5RjgxQTJFQUQzNjFEOEIyM0JDOTYwRkRFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4OO8qY26AEjw0odUYfqYTLk3 X/lQAK5myICG0DgcpI05QXdr4XWzH0ERyWkxQjsuNs/RO99VFe8SosnTFeNEt3xu XOa0mrKpxaOo8nMIOnwv6Akzkho26mZ//bDhWoi/LpNk7zNfMrurhXciBWeguCfX Muqt4LtmPItct1FmMsXFJu4Kr5WTVJFJwZIsm/na7cZS2ng+LrYCgLSz797/a/am 3Ut/rnLm77sAY2WIgSo0pRWu3uU92H+3fARbEr1OGy9mSlS/M+QvK3LMp1257jVY wCwGrKQBJ04qxLHpM3RMF3OjH6IXKO01CKbmjs54i6s6hZEgu1XR7v+HtNcNAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUFskzRrpAOfgaLq02HYsjvJYP3gowHwYDVR0j BBgwFoAUtkveCEHh4CfxojA22cd5oQjCLuEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1lNUEhP WC8wL0I2NEJERTA4NDFFMUUwMjdGMUEyMzAzNkQ5Qzc3OUExMDhDMjJFRTEuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQjY0QkRFMDg0MUUxRTAyN0YxQTIzMDM2RDlD Nzc5QTEwOEMyMkVFMS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NZTVBIT1gvMC9CNjRCREUwODQx RTFFMDI3RjFBMjMwMzZEOUM3NzlBMTA4QzIyRUUxLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvgp8qhD YjGHQ2U94foFV1RAD6vc1TsiVNGZFYO+/vGLglFXmbEGU8hCqRr2oERPw3uWQVVf xo7bdtAO0woyM1XT/WYozVL+wlpp2sWsX1nu+A2h5ZUP4tkPI2OF9s+L4jiO2+p9 YJgLFQ9uO3wnSmEbyu9IDPE0A/vyf+xJZ3mfpUTlP2qu7rRorgZJn95TkFOBKXbM WlL6cpT7s+ZaxhqwWgCbDU1NBtCYEp06GxWVveVqZ6FGIzdGim/JuOMvEU0TOKC9 n+KQPzGhSsD1sihlKk5Cu0DRuTxhWW3QVIeDxupCylZgq7EwME+SET5Doj90tW4+ PhdrFsGOfBElqg== -----END CERTIFICATE-----Generated at Fri Jul 24 10:05:41 2026 by rpki-client