$ rpki-client -vvf rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft File: 8DFE241B6B56425D05308D6CF84E530F0AD99312.mft (raw, json) Hash identifier: B4o+n4erzX3PY5cJ7SHNmeFumznzPCRsBBkwjhC55qw= Subject key identifier: 0A:8B:41:CB:8E:CC:7A:16:3B:FD:D0:94:8B:B5:E8:49:7D:25:9B:69 Authority key identifier: 8D:FE:24:1B:6B:56:42:5D:05:30:8D:6C:F8:4E:53:0F:0A:D9:93:12 Certificate issuer: /CN=8DFE241B6B56425D05308D6CF84E530F0AD99312 Certificate serial: 225802057AFB54591434B5B02CA465E03A08B24F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 12:32:26 +0000 Manifest this update: Thu 23 Jul 2026 12:27:26 +0000 Manifest next update: Fri 24 Jul 2026 15:44:26 +0000 Files and hashes: 1: 8DFE241B6B56425D05308D6CF84E530F0AD99312.crl (hash: ZERZ/YsOE9VINwXcNb80UfTmjmQVqktXp9gQrmew8AE=) 2: 3130332e3135392e3230362e302f32332d3234203d3e203331393732.roa (hash: eK6+/TDh22lTbQdbALPHM65FmvpRbot7SqYBFf/0Vc0=) 3: 3130332e3135392e3230362e302f32332d3234203d3e20313332333639.roa (hash: Njq8PYL4sI6Vl6OpGpULpdTiodD6fNVPkIMKZbxgiBg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.crl rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:58:02:05:7a:fb:54:59:14:34:b5:b0:2c:a4:65:e0:3a:08:b2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DFE241B6B56425D05308D6CF84E530F0AD99312 Validity Not Before: Jul 23 12:27:26 2026 GMT Not After : Jul 24 15:44:26 2026 GMT Subject: CN=0A8B41CB8ECC7A163BFDD0948BB5E8497D259B69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:c9:0b:e6:0a:37:9a:72:7a:93:ca:d8:f5: 31:34:5e:18:f0:63:50:84:0d:59:99:79:f5:34:91: 67:ae:37:73:6e:57:b5:68:52:ec:50:83:bb:5a:18: fd:b4:ff:5d:30:64:77:04:01:33:33:eb:95:3f:60: 58:12:7b:ed:73:9c:c8:4b:fc:c1:0d:c1:1e:87:0a: 61:d6:11:0b:a6:83:20:39:2a:5f:93:dd:eb:5e:41: 18:08:cb:a1:fe:02:81:77:c2:be:f2:ea:f2:80:05: a5:5a:63:5f:b4:e7:54:4b:ca:07:80:bf:80:08:4e: d3:e4:ff:1e:79:35:9e:f2:40:88:28:dc:b0:f0:bc: 71:c8:94:69:40:6d:82:34:b3:fb:8a:9f:77:2a:01: d3:3d:24:2b:a0:55:6a:98:ac:11:7b:e2:6c:83:a2: e9:b7:48:4d:0f:0b:af:a5:86:f3:c5:23:b5:f5:15: 73:0c:ad:d3:27:8e:f0:20:11:fc:0d:da:ff:e3:33: 86:6f:9d:af:20:de:8a:78:11:10:94:e1:b3:17:7a: 78:f1:6a:21:a5:1d:c4:88:3e:6b:96:45:6d:d8:be: 70:fa:ba:6b:15:d4:59:b8:30:66:66:bf:f2:b2:10: eb:d3:4f:1f:db:fe:f1:d0:25:e1:cb:5c:3d:64:9c: 5d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8B:41:CB:8E:CC:7A:16:3B:FD:D0:94:8B:B5:E8:49:7D:25:9B:69 X509v3 Authority Key Identifier: keyid:8D:FE:24:1B:6B:56:42:5D:05:30:8D:6C:F8:4E:53:0F:0A:D9:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:60:82:bd:32:d8:3b:3e:70:83:ab:0f:24:83:2c:80:94:11: c8:6e:79:46:47:17:de:59:89:a3:91:6c:2b:74:7e:56:3c:45: 2f:44:d0:6e:f5:bc:16:4b:7c:90:35:00:db:69:8e:6b:4a:30: 16:36:bd:f9:8f:d7:70:2b:15:52:cd:4a:d1:70:3e:2c:d9:ed: 80:b1:f6:6b:a8:bd:0a:ab:63:ec:54:d3:0f:b8:d7:25:0a:09: 49:2f:ef:b7:2d:be:d5:4a:03:88:fd:5c:ae:28:e7:a2:c3:8a: d5:d6:78:d3:21:55:6f:34:95:d4:c8:de:bd:2b:d9:c3:ef:c6: a6:86:36:38:3d:72:5a:4b:50:da:47:3e:e6:45:2d:1a:de:67: 11:88:55:d2:db:06:d8:7c:b6:23:59:6e:3a:76:44:59:cd:23: 91:ff:7a:87:9b:88:7a:a2:06:24:ac:b3:dd:37:f5:88:1f:fb: 88:61:40:4e:77:51:0e:5f:cb:2f:1c:db:b7:02:3f:d1:0d:32: e7:10:75:b1:ef:af:bc:63:61:81:4a:e3:28:a3:b7:7f:6b:d3: 9d:9d:68:9d:4b:97:64:c5:99:4a:3f:b0:ee:61:29:bf:03:c2: d2:00:6c:fa:34:e1:86:f8:28:bf:f1:db:8f:bd:85:6e:bf:c5: cd:c1:de:18 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUIlgCBXr7VFkUNLWwLKRl4DoIsk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERGRTI0MUI2QjU2NDI1RDA1MzA4RDZDRjg0RTUzMEYw QUQ5OTMxMjAeFw0yNjA3MjMxMjI3MjZaFw0yNjA3MjQxNTQ0MjZaMDMxMTAvBgNV BAMTKDBBOEI0MUNCOEVDQzdBMTYzQkZERDA5NDhCQjVFODQ5N0QyNTlCNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6skL5go3mnJ6k8rY9TE0Xhjw Y1CEDVmZefU0kWeuN3NuV7VoUuxQg7taGP20/10wZHcEATMz65U/YFgSe+1znMhL /MENwR6HCmHWEQumgyA5Kl+T3eteQRgIy6H+AoF3wr7y6vKABaVaY1+051RLygeA v4AITtPk/x55NZ7yQIgo3LDwvHHIlGlAbYI0s/uKn3cqAdM9JCugVWqYrBF74myD oum3SE0PC6+lhvPFI7X1FXMMrdMnjvAgEfwN2v/jM4Zvna8g3op4ERCU4bMXenjx aiGlHcSIPmuWRW3YvnD6umsV1Fm4MGZmv/KyEOvTTx/b/vHQJeHLXD1knF3NAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUCotBy47MehY7/dCUi7XoSX0lm2kwHwYDVR0j BBgwFoAUjf4kG2tWQl0FMI1s+E5TDwrZkxIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFROUy8w LzhERkUyNDFCNkI1NjQyNUQwNTMwOEQ2Q0Y4NEU1MzBGMEFEOTkzMTIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOERGRTI0MUI2QjU2NDI1RDA1MzA4RDZDRjg0RTUz MEYwQUQ5OTMxMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RUTlMvMC84REZFMjQxQjZCNTY0MjVE MDUzMDhENkNGODRFNTMwRjBBRDk5MzEyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWCCvTLYOz5wg6sP JIMsgJQRyG55RkcX3lmJo5FsK3R+VjxFL0TQbvW8Fkt8kDUA22mOa0owFja9+Y/X cCsVUs1K0XA+LNntgLH2a6i9Cqtj7FTTD7jXJQoJSS/vty2+1UoDiP1crijnosOK 1dZ40yFVbzSV1MjevSvZw+/GpoY2OD1yWktQ2kc+5kUtGt5nEYhV0tsG2Hy2I1lu OnZEWc0jkf96h5uIeqIGJKyz3Tf1iB/7iGFATndRDl/LLxzbtwI/0Q0y5xB1se+v vGNhgUrjKKO3f2vTnZ1onUuXZMWZSj+w7mEpvwPC0gBs+jThhvgov/Hbj72Fbr/F zcHeGA== -----END CERTIFICATE-----Generated at Fri Jul 24 07:05:13 2026 by rpki-client