$ rpki-client -vvf rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft File: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft (raw, json) Hash identifier: KOCpnPCCAl47q0+9VWRJWBOTNaNe3D2QjoeNy7UQk0s= Subject key identifier: 83:B8:CE:F6:FF:F3:C3:AC:F0:05:43:9E:30:89:B2:AA:75:D0:CD:B1 Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0 Certificate issuer: /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0 Certificate serial: 15F77A550666328B2EA50DA0BFB8D95A2C969639 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft Manifest number: 65 Signing time: Thu 23 Jul 2026 22:31:51 +0000 Manifest this update: Thu 23 Jul 2026 22:26:51 +0000 Manifest next update: Sat 25 Jul 2026 01:23:51 +0000 Files and hashes: 1: 323430313a6136303a3a2f33322d3332203d3e203138303431.roa (hash: W1whgs9nNrUE4RVKtECQcAsJLL/TFHZVPsexycz3Kms=) 2: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (hash: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=) 3: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl (hash: UnsKwZou/TkjjtC8u76Hc2vVJ5OkqzMBzEphmO8Pb2Y=) 4: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (hash: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f7:7a:55:06:66:32:8b:2e:a5:0d:a0:bf:b8:d9:5a:2c:96:96:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0 Validity Not Before: Jul 23 22:26:51 2026 GMT Not After : Jul 25 01:23:51 2026 GMT Subject: CN=83B8CEF6FFF3C3ACF005439E3089B2AA75D0CDB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:74:d9:c9:90:d2:3f:e8:9c:44:2a:e3:07:bc: 76:22:4a:95:81:6a:a3:60:91:fe:d3:73:4c:eb:9c: 65:5e:82:a3:38:57:39:3a:c8:0c:e4:63:f6:ab:5c: cb:f8:7d:fa:2c:d4:63:cd:f7:59:b0:95:a1:01:ca: 8f:a6:ef:e6:72:e9:c1:95:b5:b1:0c:b0:6f:77:7a: 2a:ac:eb:6b:0b:59:0f:57:6d:6c:42:ce:e2:20:8e: 04:8c:ac:01:fc:8e:d9:db:82:b4:9a:5a:6a:ac:1e: 4d:a2:95:80:11:67:b4:e8:52:ff:fa:7f:cd:e0:88: 42:08:34:8b:45:3a:25:8b:50:07:98:73:14:26:46: ab:5d:17:a8:3f:b6:2d:3f:e0:62:2a:9e:41:24:1a: 6c:c1:7e:73:3b:dc:ac:98:08:24:0b:99:46:ee:63: 76:c6:8f:d4:81:0e:ae:83:05:40:f2:88:96:07:f7: 69:22:ba:d6:49:33:3a:bc:6e:ce:5e:22:f7:fa:a7: 50:85:fb:cd:01:43:e5:70:88:be:07:46:cb:9c:67: 15:d2:99:01:64:e4:73:91:a4:81:2c:8a:b6:53:e3: bf:ba:c8:51:d2:0f:7b:64:bb:22:29:6e:71:e3:1e: 0c:4b:5f:b3:18:f0:57:cc:6a:0e:ae:2f:da:e1:b9: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B8:CE:F6:FF:F3:C3:AC:F0:05:43:9E:30:89:B2:AA:75:D0:CD:B1 X509v3 Authority Key Identifier: keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0e:fe:02:ed:93:66:a4:b3:db:98:be:48:0b:df:02:e6:a3: 32:e6:4c:c3:7e:f9:7a:5b:28:85:0b:94:4e:b4:2d:5e:65:e8: 41:1f:7c:0c:14:c7:d7:46:5d:67:db:17:50:51:2d:26:6c:f5: 7a:a4:ee:d5:df:5a:27:b7:6c:4f:9c:68:66:1c:cc:1a:77:c8: e1:78:6d:7c:23:a4:74:99:b6:4f:18:35:e6:2a:78:d3:37:08: 12:74:05:f0:f9:cc:95:a9:0c:2c:68:47:f9:23:15:e1:6f:de: ec:5a:86:9f:2b:1f:e1:48:3d:74:15:2c:e2:fc:a5:da:ea:0c: e4:95:de:04:04:8c:4e:2b:19:db:31:97:43:5c:c0:31:b7:ca: 33:c4:44:53:5d:b7:68:ab:30:fe:6c:ff:5e:79:f7:8f:5f:bc: 91:48:55:fa:93:5b:58:17:06:89:1c:7b:c1:24:58:f1:34:c9: cb:ef:44:57:1e:e1:ff:f4:3f:4b:19:14:10:c6:66:e4:16:4b: f7:a0:5e:12:01:70:c1:87:ff:78:c7:6d:10:f1:70:50:f6:84: 70:8d:77:d2:ec:99:d6:d0:56:ce:1b:3f:db:0c:43:38:d0:4a: 15:ef:2d:47:98:65:c2:45:94:5c:b1:8e:26:d9:68:fa:1f:4b: 2e:87:82:36 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUFfd6VQZmMosupQ2gv7jZWiyWljkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg1ODRDRDFDN0VCMDgwOEUxQUUyREU0QzE5NUNDRTEz MjU3MDVGMDAeFw0yNjA3MjMyMjI2NTFaFw0yNjA3MjUwMTIzNTFaMDMxMTAvBgNV BAMTKDgzQjhDRUY2RkZGM0MzQUNGMDA1NDM5RTMwODlCMkFBNzVEMENEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDdNnJkNI/6JxEKuMHvHYiSpWB aqNgkf7Tc0zrnGVegqM4Vzk6yAzkY/arXMv4ffos1GPN91mwlaEByo+m7+Zy6cGV tbEMsG93eiqs62sLWQ9XbWxCzuIgjgSMrAH8jtnbgrSaWmqsHk2ilYARZ7ToUv/6 f83giEIINItFOiWLUAeYcxQmRqtdF6g/ti0/4GIqnkEkGmzBfnM73KyYCCQLmUbu Y3bGj9SBDq6DBUDyiJYH92kiutZJMzq8bs5eIvf6p1CF+80BQ+VwiL4HRsucZxXS mQFk5HORpIEsirZT47+6yFHSD3tkuyIpbnHjHgxLX7MY8FfMag6uL9rhuUcZAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUg7jO9v/zw6zwBUOeMImyqnXQzbEwHwYDVR0j BBgwFoAUaFhM0cfrCAjhri3kwZXM4TJXBfAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVERDLzAv Njg1ODRDRDFDN0VCMDgwOEUxQUUyREU0QzE5NUNDRTEzMjU3MDVGMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS82ODU4NENEMUM3RUIwODA4RTFBRTJERTRDMTk1Q0NF MTMyNTcwNUYwLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVERDLzAvNjg1ODRDRDFDN0VCMDgwOEUx QUUyREU0QzE5NUNDRTEzMjU3MDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEwO/gLtk2aks9uYvkgL 3wLmozLmTMN++XpbKIULlE60LV5l6EEffAwUx9dGXWfbF1BRLSZs9Xqk7tXfWie3 bE+caGYczBp3yOF4bXwjpHSZtk8YNeYqeNM3CBJ0BfD5zJWpDCxoR/kjFeFv3uxa hp8rH+FIPXQVLOL8pdrqDOSV3gQEjE4rGdsxl0NcwDG3yjPERFNdt2irMP5s/155 949fvJFIVfqTW1gXBokce8EkWPE0ycvvRFce4f/0P0sZFBDGZuQWS/egXhIBcMGH /3jHbRDxcFD2hHCNd9LsmdbQVs4bP9sMQzjQShXvLUeYZcJFlFyxjibZaPofSy6H gjY= -----END CERTIFICATE-----Generated at Fri Jul 24 15:37:45 2026 by rpki-client