$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft File: 71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json) Hash identifier: nXVweI0fzMZedoAJ8MBznxT30HqDO1StnMdfG8anQRw= Subject key identifier: 63:4D:3A:6B:22:5B:C1:02:C0:2F:5B:F3:FD:5E:4D:58:3A:4C:47:FF Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 Certificate issuer: /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Certificate serial: 26DA128F8FA990A247FCE30B229E55E911C939C8 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft Manifest number: 0212 Signing time: Fri 24 Jul 2026 02:04:01 +0000 Manifest this update: Fri 24 Jul 2026 01:59:01 +0000 Manifest next update: Sat 25 Jul 2026 06:02:01 +0000 Files and hashes: 1: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=) 2: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=) 3: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=) 4: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: y9BzoqO/ueHWW6Y2ObIKcbXQelV5I0MpJHqeF9T36hY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:da:12:8f:8f:a9:90:a2:47:fc:e3:0b:22:9e:55:e9:11:c9:39:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Validity Not Before: Jul 24 01:59:01 2026 GMT Not After : Jul 25 06:02:01 2026 GMT Subject: CN=634D3A6B225BC102C02F5BF3FD5E4D583A4C47FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:87:5b:98:9e:d4:47:52:52:35:75:de:4d: 26:33:0f:fc:46:c5:55:fa:c2:ac:bd:9d:79:6d:54: ac:dd:67:cd:f5:35:21:ee:fd:46:4e:13:2e:2d:df: 22:ce:e3:ce:16:4d:a5:ea:fc:23:c4:95:6d:d8:6e: 42:c8:66:88:39:5d:e0:43:05:36:73:34:4b:e8:87: e0:31:0c:73:08:55:a3:13:c8:1c:1c:74:af:08:be: c4:d4:32:78:14:51:03:5d:51:18:0c:cd:21:e2:3b: 3a:fa:e2:77:ea:a0:ed:bc:f7:cd:99:3e:95:a9:1e: 73:12:64:e7:63:6d:2d:bf:73:59:99:b8:a1:9d:d5: bc:8b:87:d7:1a:64:7a:ae:79:b1:75:36:dc:99:91: 4b:8c:91:c9:8d:31:86:ad:8e:08:f7:5d:aa:cf:43: 38:9b:d5:ff:0a:31:dc:0b:95:a3:67:0e:8e:dc:94: 00:5c:1f:2d:68:f7:78:7d:62:4a:5a:8b:f2:1f:83: a8:1e:05:9e:9e:42:77:e1:48:06:f5:98:99:61:40: 63:5d:7a:fd:a0:9e:a3:74:96:9c:5e:4b:ed:14:ab: 49:6e:93:d0:1a:cc:43:57:0e:c2:c8:6b:69:9a:ad: 10:ad:95:57:c0:0e:19:b6:83:32:ab:29:58:f9:b1: 34:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4D:3A:6B:22:5B:C1:02:C0:2F:5B:F3:FD:5E:4D:58:3A:4C:47:FF X509v3 Authority Key Identifier: keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:28:ef:50:7a:62:24:9f:85:5b:00:76:f8:b8:e1:73:b5:fc: 95:e0:b2:dc:59:eb:4e:76:31:43:4c:e3:d9:4e:d9:52:0e:87: b3:38:62:bc:d4:a6:78:bf:bd:d4:c8:34:64:9a:45:6a:42:f4: 17:17:6c:a3:2e:0e:2e:06:fb:e5:27:c3:9b:35:43:31:ec:0c: 6f:d7:d6:9e:f8:18:83:cc:10:69:75:75:c0:76:65:de:69:0c: a4:56:ed:9a:4a:a4:4c:a7:d4:83:df:6b:7c:95:85:18:7d:47: 7c:7d:09:26:a1:99:2f:d6:65:85:66:d3:17:2e:49:75:27:65: 86:dc:e9:c9:cc:77:7e:5d:85:5a:ba:ee:57:1c:20:de:32:26: 3c:4f:85:15:24:79:29:38:5a:04:ad:87:0b:49:de:d1:7d:16: 56:6f:c8:39:a2:f9:0c:be:bd:f6:29:09:a5:be:cf:ef:97:c0: d2:de:be:0d:be:18:dd:bb:37:3a:3d:f2:81:75:62:c6:7d:6e: 64:e5:c0:15:1d:10:bf:44:2b:ec:23:91:21:81:01:1b:1d:1b: 46:b9:38:8d:7f:4a:96:a0:90:76:44:90:fc:7e:a3:fa:e2:1b: 90:4b:34:59:14:ca:ec:0c:93:c0:53:33:a3:83:02:dd:85:40: 5d:6a:06:73 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUJtoSj4+pkKJH/OMLIp5V6RHJOcgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyg3MTUyNTk3MkUz QzExNTNERTUzMDU0Nzk4RjUxQTVCRDU1Qzc1MDE5MB4XDTI2MDcyNDAxNTkwMVoX DTI2MDcyNTA2MDIwMVowMzExMC8GA1UEAxMoNjM0RDNBNkIyMjVCQzEwMkMwMkY1 QkYzRkQ1RTRENTgzQTRDNDdGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQdh1uYntRHUlI1dd5NJjMP/EbFVfrCrL2deW1UrN1nzfU1Ie79Rk4TLi3f Is7jzhZNper8I8SVbdhuQshmiDld4EMFNnM0S+iH4DEMcwhVoxPIHBx0rwi+xNQy eBRRA11RGAzNIeI7Ovrid+qg7bz3zZk+lakecxJk52NtLb9zWZm4oZ3VvIuH1xpk eq55sXU23JmRS4yRyY0xhq2OCPddqs9DOJvV/wox3AuVo2cOjtyUAFwfLWj3eH1i SlqL8h+DqB4Fnp5Cd+FIBvWYmWFAY116/aCeo3SWnF5L7RSrSW6T0BrMQ1cOwshr aZqtEK2VV8AOGbaDMqspWPmxNIECAwEAAaOCAf8wggH7MB0GA1UdDgQWBBRjTTpr IlvBAsAvW/P9Xk1YOkxH/zAfBgNVHSMEGDAWgBRxUlly48EVPeUwVHmPUaW9VcdQ GTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzIvNzE1MjU5NzJFM0MxMTUzREU1MzA1 NDc5OEY1MUE1QkQ1NUM3NTAxOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYx RDY2MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvY1ZKWmN1UEJGVDNsTUZSNWoxR2x2VlhI VUJrLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8yLzcxNTI1OTcyRTNDMTE1M0RFNTMw NTQ3OThGNTFBNUJENTVDNzUwMTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqKO9QemIkn4VbAHb4uOFz tfyV4LLcWetOdjFDTOPZTtlSDoezOGK81KZ4v73UyDRkmkVqQvQXF2yjLg4uBvvl J8ObNUMx7Axv19ae+BiDzBBpdXXAdmXeaQykVu2aSqRMp9SD32t8lYUYfUd8fQkm oZkv1mWFZtMXLkl1J2WG3OnJzHd+XYVauu5XHCDeMiY8T4UVJHkpOFoErYcLSd7R fRZWb8g5ovkMvr32KQmlvs/vl8DS3r4Nvhjduzc6PfKBdWLGfW5k5cAVHRC/RCvs I5EhgQEbHRtGuTiNf0qWoJB2RJD8fqP64huQSzRZFMrsDJPAUzOjgwLdhUBdagZz -----END CERTIFICATE-----Generated at Fri Jul 24 08:56:54 2026 by rpki-client