$ rpki-client -vvf rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft File: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft (raw, json) Hash identifier: Tq8qwvHw8HQi99vREK/ZgvBaHG9r1W9ntBt/aG/7BLQ= Subject key identifier: B8:0E:BB:26:F5:A9:5E:EC:26:7B:F4:B3:0A:10:54:82:D3:4E:CE:5C Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 Certificate issuer: /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Certificate serial: 604F75407D1BCA72E15824E832AAD2BC918E2040 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft Manifest number: 69 Signing time: Thu 23 Jul 2026 10:32:11 +0000 Manifest this update: Thu 23 Jul 2026 10:27:11 +0000 Manifest next update: Fri 24 Jul 2026 12:07:11 +0000 Files and hashes: 1: 3130332e3132392e3134372e302f32342d3234203d3e203230343733.roa (hash: jLHkK85y6D6I/P5jhpzcJkW6hQFZ18OruOJ4poV43Y8=) 2: 3130332e3132392e3134342e302f32342d3234203d3e2035303635.roa (hash: r6atDIqgperuF3RfaudvB73QXSoXlYlurO9YxRuzsEo=) 3: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl (hash: 7DBvP0O0l61r9hlN16F/S64K1xjdRS2wwn1zAfWoltY=) 4: 3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa (hash: CBt4aj49jAfK/FkdSCAEmu5FJcJ8ZBpytmS6xaMxItA=) 5: 323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa (hash: o6RGuHIfda02+Jk34ePKyhchsrC+xHDAy6BJ51uRReg=) 6: 323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa (hash: ZRXaYx+Nrn2iAFlJIwnl9HLp8Eud4rItrm9qIQL8K3o=) 7: 323430333a376634303a666630303a3a2f34382d3438203d3e203230343733.roa (hash: AfAX13SxCLnlMaK5dhRCuMKxU7A8dV/NgyypCpd1bdY=) 8: 3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa (hash: xP411/3P+QncE7UBCG9FjIpMvagWAoQKRii7/7dwrps=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4f:75:40:7d:1b:ca:72:e1:58:24:e8:32:aa:d2:bc:91:8e:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Validity Not Before: Jul 23 10:27:11 2026 GMT Not After : Jul 24 12:07:11 2026 GMT Subject: CN=B80EBB26F5A95EEC267BF4B30A105482D34ECE5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:65:9a:03:13:40:37:9b:54:45:fe:95:80: 67:e9:c6:63:ae:32:e5:45:05:a8:7a:94:30:21:fb: c2:d8:21:43:c7:a2:ea:0e:05:7b:5e:26:74:1f:e2: 5b:3f:f1:e9:a9:6f:c3:68:58:c6:88:7f:18:5b:bd: 41:ff:5c:51:8a:e0:f3:88:37:de:80:f4:b9:c7:71: 42:d8:9d:57:5b:68:58:97:d3:a3:ec:fa:ab:06:c7: 7e:50:7a:d9:ea:63:f2:58:7c:45:0d:48:4a:21:24: 05:14:b4:ef:c1:49:68:b8:7f:a2:77:29:68:30:82: dc:13:1d:92:aa:2c:ce:93:21:c0:e9:54:fa:4f:60: 91:98:6e:0c:f9:c1:4a:6a:30:64:ef:e7:ce:4c:29: e7:66:81:19:fe:c8:16:b3:3d:e9:2a:54:3a:40:8e: d9:cc:d3:53:23:a7:1d:12:f1:ce:53:d0:e9:ea:5c: fe:02:f1:8a:ae:1a:39:33:b5:a3:d4:2f:4b:18:64: 22:4d:0e:71:38:36:dd:d8:6c:83:f6:f1:0e:d1:a4: a6:af:2a:d5:36:a2:66:5a:12:e9:1f:9f:0f:e7:cb: 8c:06:be:85:10:80:e1:94:f5:10:c7:64:dd:bc:6c: 26:95:69:37:f1:d4:4e:59:8a:20:46:c5:6d:61:87: 37:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0E:BB:26:F5:A9:5E:EC:26:7B:F4:B3:0A:10:54:82:D3:4E:CE:5C X509v3 Authority Key Identifier: keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:02:eb:c0:40:47:62:01:43:30:b0:01:89:dd:37:b5:b7:94: 80:8d:8f:b0:6a:6f:77:12:cf:5d:96:f3:4f:22:0b:0c:a0:d3: ac:c0:2c:ee:c5:7c:76:f1:66:8c:ce:c9:5b:df:be:16:19:bb: c8:88:ba:8a:91:a5:6a:a5:c3:73:21:6b:db:83:51:b5:bf:13: e5:17:ec:39:45:82:a1:dd:e1:96:7e:9a:15:92:8b:93:f3:9e: 5a:9e:09:4c:1e:39:a0:6c:fa:5a:e0:d7:7b:be:43:96:8c:d1: 27:cc:01:46:d5:e5:a1:96:a7:17:24:d1:df:70:d6:bc:5a:84: 56:4d:aa:08:16:64:4e:6d:3f:3a:73:84:4d:74:fb:3f:0e:2c: 0f:3b:d3:a7:0f:65:bb:2e:35:7c:28:d7:e6:ea:2f:43:02:0c: e7:68:5b:04:62:0d:36:29:6c:d1:ac:be:95:1b:6f:e4:2f:a9: 7f:79:39:09:80:14:60:1d:3b:df:54:40:6d:38:34:4d:5f:05: ef:45:f6:ec:11:3b:d5:26:c5:02:1d:8f:ec:0b:7e:ea:77:3a: c8:0b:11:f7:af:54:3b:0f:bf:47:56:25:f9:84:22:b2:e7:74: 61:30:84:5e:70:6c:b9:7f:88:6a:d7:85:7f:d1:4f:6d:39:c7: 2c:4c:22:3e -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUYE91QH0bynLhWCToMqrSvJGOIEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlD Q0Y1MEVBMzAeFw0yNjA3MjMxMDI3MTFaFw0yNjA3MjQxMjA3MTFaMDMxMTAvBgNV BAMTKEI4MEVCQjI2RjVBOTVFRUMyNjdCRjRCMzBBMTA1NDgyRDM0RUNFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzb2WaAxNAN5tURf6VgGfpxmOu MuVFBah6lDAh+8LYIUPHouoOBXteJnQf4ls/8empb8NoWMaIfxhbvUH/XFGK4POI N96A9LnHcULYnVdbaFiX06Ps+qsGx35QetnqY/JYfEUNSEohJAUUtO/BSWi4f6J3 KWgwgtwTHZKqLM6TIcDpVPpPYJGYbgz5wUpqMGTv585MKedmgRn+yBazPekqVDpA jtnM01Mjpx0S8c5T0OnqXP4C8YquGjkztaPUL0sYZCJNDnE4Nt3YbIP28Q7RpKav KtU2omZaEukfnw/ny4wGvoUQgOGU9RDHZN28bCaVaTfx1E5ZiiBGxW1hhzdfAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUuA67JvWpXuwme/SzChBUgtNOzlwwHwYDVR0j BBgwFoAUVtLiXkCf6VahSo9aXA7qacz1DqMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAv NTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS81NkQyRTI1RTQwOUZFOTU2QTE0QThGNUE1QzBFRUE2 OUNDRjUwRUEzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAvNTZEMkUyNUU0MDlGRTk1NkEx NEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFoC68BAR2IBQzCwAYnd N7W3lICNj7Bqb3cSz12W808iCwyg06zALO7FfHbxZozOyVvfvhYZu8iIuoqRpWql w3Mha9uDUbW/E+UX7DlFgqHd4ZZ+mhWSi5PznlqeCUweOaBs+lrg13u+Q5aM0SfM AUbV5aGWpxck0d9w1rxahFZNqggWZE5tPzpzhE10+z8OLA8706cPZbsuNXwo1+bq L0MCDOdoWwRiDTYpbNGsvpUbb+QvqX95OQmAFGAdO99UQG04NE1fBe9F9uwRO9Um xQIdj+wLfup3OsgLEfevVDsPv0dWJfmEIrLndGEwhF5wbLl/iGrXhX/RT205xyxM Ij4= -----END CERTIFICATE-----Generated at Fri Jul 24 04:14:59 2026 by rpki-client