$ rpki-client -vvf rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft File: BD49467776DCA7472F88470782DAD5722E5AFE49.mft (raw, json) Hash identifier: oCY+2hahi0WeAgCczh7FyCSA2NJsbqlM2j4YNqQEC1s= Subject key identifier: DA:2E:D2:CD:AF:25:EB:51:9E:E5:63:2C:CA:7D:B7:C5:BD:C2:57:60 Authority key identifier: BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49 Certificate issuer: /CN=BD49467776DCA7472F88470782DAD5722E5AFE49 Certificate serial: 0565A813E8C80F58D7B97514198DA50810F23C1D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft Manifest number: 07 Signing time: Tue 12 May 2026 11:30:36 +0000 Manifest this update: Tue 12 May 2026 11:25:36 +0000 Manifest next update: Wed 13 May 2026 15:24:36 +0000 Files and hashes: 1: 3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa (hash: O4tFAGNoujrjTe1QFIiUNSL1btHs7X9nG4rNOC2WBrk=) 2: 3230322e3132362e36342e302f32302d3234203d3e203233363735.roa (hash: xFZEcb1Fw2/MAZxDxH/3wq6F1a0AY71y22CkSbZ45UA=) 3: BD49467776DCA7472F88470782DAD5722E5AFE49.crl (hash: Dc9swtF69Y3pes7EqxsTl6SYAgGO7+iSwppkrB7UMsc=) 4: 3130332e3133322e3135362e302f32322d3234203d3e2033343632.roa (hash: VPf6uIakoYZwsPqscjmnQeuLXrwksi5sXN8VBO8l4Lc=) 5: 3230322e3132362e36342e302f32302d3234203d3e2033343632.roa (hash: pv9lagNPR6ISK4mgr1r0U+d2oQ424uEiHyejWXcDKkg=) 6: 3230322e3132362e36342e302f32322d3234203d3e2033343632.roa (hash: JSztXJfkuE++Rr44bJxraDVeK0vJ1Z2LCKTFE+mnoSo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:65:a8:13:e8:c8:0f:58:d7:b9:75:14:19:8d:a5:08:10:f2:3c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD49467776DCA7472F88470782DAD5722E5AFE49 Validity Not Before: May 12 11:25:36 2026 GMT Not After : May 13 15:24:36 2026 GMT Subject: CN=DA2ED2CDAF25EB519EE5632CCA7DB7C5BDC25760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:07:73:76:4a:9b:24:a1:2d:fa:39:07:4a: 67:7a:8d:2a:16:9d:bb:d6:89:26:e9:d1:e2:58:7b: 3c:f9:cd:9a:d5:7a:da:b1:4c:ba:71:a5:76:55:3d: 9a:0b:2a:f7:d0:3e:fd:3e:d9:f3:96:e8:b7:65:9a: 5c:2a:23:c7:62:a6:81:0d:25:60:ff:07:87:a3:12: b8:79:6a:1c:3e:27:f7:57:5a:7e:3d:07:6e:7b:72: 17:39:75:e6:fa:9c:39:91:f1:86:d9:84:4b:ce:87: f2:a3:fc:7e:b0:4b:c2:4c:8b:dc:ca:fe:28:a2:1e: 40:7c:59:7f:35:0e:2b:c0:ac:aa:1f:4e:50:79:6f: 37:37:d0:e1:95:3a:25:3d:9a:73:43:b1:f0:1e:a7: aa:b8:0e:6c:3c:5d:82:57:dc:71:4d:3c:7a:b4:53: bc:b1:3d:9c:28:1d:c4:14:70:d2:5e:6e:cf:8d:b9: 25:6f:db:a8:85:e3:5c:e4:38:1b:fe:f4:34:0b:09: 26:b1:fc:05:08:f7:9d:ca:47:c4:81:c2:47:41:b4: 4d:61:6f:15:b3:e2:24:7f:30:ce:0a:a9:ae:97:f1: bd:d5:2e:3b:6b:05:40:24:1c:77:bb:de:c3:29:23: 6a:16:ce:bf:8c:de:a7:44:1f:7c:4a:a2:23:de:cf: 8e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2E:D2:CD:AF:25:EB:51:9E:E5:63:2C:CA:7D:B7:C5:BD:C2:57:60 X509v3 Authority Key Identifier: keyid:BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:07:5b:37:f2:36:94:22:af:3b:c5:95:bf:9b:99:d4:cb:77: 4d:8a:e2:02:0d:8b:d3:06:7a:df:92:4d:0a:be:91:e7:8b:b6: 4d:e2:33:b6:46:4e:4e:41:4d:e5:10:df:84:01:4f:96:9a:b8: bb:3e:e6:92:15:7d:9b:d7:e0:71:d1:f9:1b:20:b6:99:61:43: 40:ab:8c:e8:08:09:06:e2:ac:f0:bf:74:28:3b:a0:00:ec:35: 46:bd:4e:d8:99:77:8e:8c:d6:de:46:fe:11:cf:3b:60:a8:0e: 2a:25:2e:3e:d6:0b:78:77:3a:de:d3:ae:11:07:f1:f3:c0:44: 9d:dd:d6:73:ed:da:04:5b:35:0d:c7:c8:69:8c:6c:d8:a8:33: 19:86:8b:b0:f6:1e:db:37:1f:25:c4:d3:99:5e:6b:63:68:c2: a9:ee:61:3b:4b:58:4f:44:68:4b:23:03:dd:8f:9a:fe:aa:bd: 8d:82:90:ed:2d:dc:e0:49:81:67:5d:18:0b:e1:1c:66:65:a0: db:13:81:f9:3e:5b:d6:05:e1:64:9d:4f:49:e2:3c:86:37:b6: 6a:1a:87:eb:7e:a7:98:21:57:02:f8:d5:6c:8a:8c:d0:03:7c: ae:32:f3:72:d4:d7:16:e2:67:27:3d:92:20:f0:7e:99:87:4b: 23:6b:3d:e0 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUBWWoE+jID1jXuXUUGY2lCBDyPB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ0OTQ2Nzc3NkRDQTc0NzJGODg0NzA3ODJEQUQ1NzIy RTVBRkU0OTAeFw0yNjA1MTIxMTI1MzZaFw0yNjA1MTMxNTI0MzZaMDMxMTAvBgNV BAMTKERBMkVEMkNEQUYyNUVCNTE5RUU1NjMyQ0NBN0RCN0M1QkRDMjU3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/HQdzdkqbJKEt+jkHSmd6jSoW nbvWiSbp0eJYezz5zZrVetqxTLpxpXZVPZoLKvfQPv0+2fOW6LdlmlwqI8dipoEN JWD/B4ejErh5ahw+J/dXWn49B257chc5deb6nDmR8YbZhEvOh/Kj/H6wS8JMi9zK /iiiHkB8WX81DivArKofTlB5bzc30OGVOiU9mnNDsfAep6q4Dmw8XYJX3HFNPHq0 U7yxPZwoHcQUcNJebs+NuSVv26iF41zkOBv+9DQLCSax/AUI953KR8SBwkdBtE1h bxWz4iR/MM4Kqa6X8b3VLjtrBUAkHHe73sMpI2oWzr+M3qdEH3xKoiPez45nAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU2i7Sza8l61Ge5WMsyn23xb3CV2AwHwYDVR0j BBgwFoAUvUlGd3bcp0cviEcHgtrVci5a/kkwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFNNQy8w L0JENDk0Njc3NzZEQ0E3NDcyRjg4NDcwNzgyREFENTcyMkU1QUZFNDkuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQkQ0OTQ2Nzc3NkRDQTc0NzJGODg0NzA3ODJEQUQ1 NzIyRTVBRkU0OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RTTUMvMC9CRDQ5NDY3Nzc2RENBNzQ3 MkY4ODQ3MDc4MkRBRDU3MjJFNUFGRTQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgdbN/I2lCKvO8WV v5uZ1Mt3TYriAg2L0wZ635JNCr6R54u2TeIztkZOTkFN5RDfhAFPlpq4uz7mkhV9 m9fgcdH5GyC2mWFDQKuM6AgJBuKs8L90KDugAOw1Rr1O2Jl3jozW3kb+Ec87YKgO KiUuPtYLeHc63tOuEQfx88BEnd3Wc+3aBFs1DcfIaYxs2KgzGYaLsPYe2zcfJcTT mV5rY2jCqe5hO0tYT0RoSyMD3Y+a/qq9jYKQ7S3c4EmBZ10YC+EcZmWg2xOB+T5b 1gXhZJ1PSeI8hje2ahqH636nmCFXAvjVbIqM0AN8rjLzctTXFuJnJz2SIPB+mYdL I2s94A== -----END CERTIFICATE-----Generated at Wed May 13 04:17:21 2026 by rpki-client