$ rpki-client -vvf rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft File: BD49467776DCA7472F88470782DAD5722E5AFE49.mft (raw, json) Hash identifier: mtpg78F96q3oA9/o+PRzA17y0pkzT+0Ihu8eL94x84E= Subject key identifier: 02:4F:1A:1E:E2:B2:8D:78:A4:D1:6D:86:D5:73:16:C8:D2:AB:08:DD Authority key identifier: BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49 Certificate issuer: /CN=BD49467776DCA7472F88470782DAD5722E5AFE49 Certificate serial: 43F400E8D60A4143EF4D384279E2C1F7F0CBB042 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft Manifest number: 68 Signing time: Fri 24 Jul 2026 04:12:32 +0000 Manifest this update: Fri 24 Jul 2026 04:07:32 +0000 Manifest next update: Sat 25 Jul 2026 05:05:32 +0000 Files and hashes: 1: 3230322e3132362e36342e302f32302d3234203d3e203233363735.roa (hash: xFZEcb1Fw2/MAZxDxH/3wq6F1a0AY71y22CkSbZ45UA=) 2: 3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa (hash: O4tFAGNoujrjTe1QFIiUNSL1btHs7X9nG4rNOC2WBrk=) 3: 3230322e3132362e36342e302f32302d3234203d3e2033343632.roa (hash: pv9lagNPR6ISK4mgr1r0U+d2oQ424uEiHyejWXcDKkg=) 4: BD49467776DCA7472F88470782DAD5722E5AFE49.crl (hash: e39eAbJEtsQXwLYowANzHIWBoyN1TxmP2Z0nuiE4y8w=) 5: 3130332e3133322e3135362e302f32322d3234203d3e2033343632.roa (hash: VPf6uIakoYZwsPqscjmnQeuLXrwksi5sXN8VBO8l4Lc=) 6: 3230322e3132362e36342e302f32322d3234203d3e2033343632.roa (hash: JSztXJfkuE++Rr44bJxraDVeK0vJ1Z2LCKTFE+mnoSo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f4:00:e8:d6:0a:41:43:ef:4d:38:42:79:e2:c1:f7:f0:cb:b0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD49467776DCA7472F88470782DAD5722E5AFE49 Validity Not Before: Jul 24 04:07:32 2026 GMT Not After : Jul 25 05:05:32 2026 GMT Subject: CN=024F1A1EE2B28D78A4D16D86D57316C8D2AB08DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c1:50:57:58:7c:04:0e:d5:a0:4e:6e:44:43: cc:56:08:44:f1:cf:78:62:52:d2:81:9c:91:30:c6: a1:b1:e5:0b:ed:88:45:28:10:af:0b:7d:55:be:ef: 6e:de:65:93:6f:f5:da:84:aa:0d:ef:51:c5:10:43: bd:6f:4b:b5:5d:5a:d1:99:8a:f5:11:16:b1:90:4a: 9f:2b:44:d4:cf:30:26:6c:56:00:c5:dc:31:99:2b: 37:53:ce:83:43:55:77:22:cd:d1:ef:c5:8d:eb:40: e3:4c:a4:0b:43:1e:39:80:91:52:57:88:44:48:3b: 18:8b:3a:1a:ba:af:c2:31:86:a3:ca:07:42:1d:b5: d5:2f:88:88:2a:00:e4:f9:7b:9b:07:b2:cc:18:16: 08:6f:e6:05:3c:4b:8e:8a:37:c0:e0:93:91:66:56: a6:e3:e4:71:63:85:27:c3:5e:c5:d8:3a:b6:0a:34: cb:90:93:ae:ed:21:e3:9e:8f:d3:06:54:a1:75:cd: e7:f4:d6:93:67:06:38:02:d9:75:74:ce:e6:a8:d1: ca:e1:cd:37:f1:82:7b:83:f6:31:4c:85:36:64:b3: 86:f3:64:dc:e9:48:a6:01:82:b9:ed:88:6c:99:b0: 34:ac:b0:0c:4e:81:ca:1e:c1:f4:f9:60:71:91:8b: ee:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4F:1A:1E:E2:B2:8D:78:A4:D1:6D:86:D5:73:16:C8:D2:AB:08:DD X509v3 Authority Key Identifier: keyid:BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5e:30:d8:ca:fd:9f:fe:56:72:ef:f4:05:47:f0:1b:0b:9e: 8c:19:3c:3e:83:25:14:ac:c1:50:bc:20:39:00:3f:2b:5b:60: ff:92:47:39:e1:06:6f:ca:99:3e:24:7e:15:c5:9a:91:b2:bb: 35:d8:ba:b5:64:9a:f1:9e:23:31:e2:fa:c0:eb:5c:6d:c2:06: ab:2b:2d:f6:e0:f8:13:24:f8:0b:4d:7a:00:a1:75:8d:86:de: 16:a6:e6:de:7e:94:42:b9:27:eb:88:b1:57:9e:64:52:01:10: 78:0d:f9:51:29:53:25:e5:65:3b:92:e6:c7:ab:05:6f:fa:ef: 3a:57:ae:97:67:e7:1e:f4:e6:db:48:d5:47:c6:79:74:14:d4: 50:77:c4:77:3e:27:5e:a1:39:4d:39:68:64:b8:09:44:10:5f: c7:e9:d9:b0:0f:7c:e0:77:fb:1e:53:dc:83:12:26:8c:8a:0e: 5b:8b:68:7a:55:02:ea:90:01:6e:3d:89:a9:6c:9f:74:5e:f3: c7:68:13:6e:2f:23:a0:dd:67:a7:e6:ae:f1:82:50:db:57:5b: 30:c2:c3:57:06:f1:b1:e1:2d:3b:ad:59:ee:88:40:ec:0d:29: 75:c0:78:4d:af:c4:a8:40:85:83:69:75:ca:3a:bf:10:a7:03: a5:50:d0:e2 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUQ/QA6NYKQUPvTThCeeLB9/DLsEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ0OTQ2Nzc3NkRDQTc0NzJGODg0NzA3ODJEQUQ1NzIy RTVBRkU0OTAeFw0yNjA3MjQwNDA3MzJaFw0yNjA3MjUwNTA1MzJaMDMxMTAvBgNV BAMTKDAyNEYxQTFFRTJCMjhENzhBNEQxNkQ4NkQ1NzMxNkM4RDJBQjA4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0wVBXWHwEDtWgTm5EQ8xWCETx z3hiUtKBnJEwxqGx5QvtiEUoEK8LfVW+727eZZNv9dqEqg3vUcUQQ71vS7VdWtGZ ivURFrGQSp8rRNTPMCZsVgDF3DGZKzdTzoNDVXcizdHvxY3rQONMpAtDHjmAkVJX iERIOxiLOhq6r8IxhqPKB0IdtdUviIgqAOT5e5sHsswYFghv5gU8S46KN8Dgk5Fm Vqbj5HFjhSfDXsXYOrYKNMuQk67tIeOej9MGVKF1zef01pNnBjgC2XV0zuao0crh zTfxgnuD9jFMhTZks4bzZNzpSKYBgrntiGyZsDSssAxOgcoewfT5YHGRi+5/AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUAk8aHuKyjXik0W2G1XMWyNKrCN0wHwYDVR0j BBgwFoAUvUlGd3bcp0cviEcHgtrVci5a/kkwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFNNQy8w L0JENDk0Njc3NzZEQ0E3NDcyRjg4NDcwNzgyREFENTcyMkU1QUZFNDkuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQkQ0OTQ2Nzc3NkRDQTc0NzJGODg0NzA3ODJEQUQ1 NzIyRTVBRkU0OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RTTUMvMC9CRDQ5NDY3Nzc2RENBNzQ3 MkY4ODQ3MDc4MkRBRDU3MjJFNUFGRTQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAml4w2Mr9n/5Wcu/0 BUfwGwuejBk8PoMlFKzBULwgOQA/K1tg/5JHOeEGb8qZPiR+FcWakbK7Ndi6tWSa 8Z4jMeL6wOtcbcIGqyst9uD4EyT4C016AKF1jYbeFqbm3n6UQrkn64ixV55kUgEQ eA35USlTJeVlO5Lmx6sFb/rvOleul2fnHvTm20jVR8Z5dBTUUHfEdz4nXqE5TTlo ZLgJRBBfx+nZsA984Hf7HlPcgxImjIoOW4toelUC6pABbj2JqWyfdF7zx2gTbi8j oN1np+au8YJQ21dbMMLDVwbxseEtO61Z7ohA7A0pdcB4Ta/EqECFg2l1yjq/EKcD pVDQ4g== -----END CERTIFICATE-----Generated at Fri Jul 24 09:27:12 2026 by rpki-client