$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft File: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json) Hash identifier: 5fjJDfWHmzoY0mbcLp8YU62VCtCQe8Yx9fuCPDimAdE= Subject key identifier: 21:FE:BB:B2:99:99:35:9B:EA:4C:72:21:C4:4C:20:55:D9:C0:8F:8C Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05 Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005 Certificate serial: 22EF8CBD531EE2FBC31F6A2C167660037D934B41 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft Manifest number: 0210 Signing time: Thu 23 Jul 2026 08:27:00 +0000 Manifest this update: Thu 23 Jul 2026 08:22:00 +0000 Manifest next update: Fri 24 Jul 2026 09:47:00 +0000 Files and hashes: 1: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=) 2: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=) 3: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=) 4: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=) 5: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=) 6: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: vUPHiM4QCFIWVz6tq8tBYF0LKFn/suYCyKmaCLlp1Cw=) 7: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=) 8: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=) 9: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ef:8c:bd:53:1e:e2:fb:c3:1f:6a:2c:16:76:60:03:7d:93:4b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005 Validity Not Before: Jul 23 08:22:00 2026 GMT Not After : Jul 24 09:47:00 2026 GMT Subject: CN=21FEBBB29999359BEA4C7221C44C2055D9C08F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:df:43:73:e0:26:9c:22:c3:1e:e0:b2:db:f5: 1f:5c:8c:aa:5a:e5:e7:ec:bd:b6:19:82:f3:c0:c1: 71:5a:cf:7d:f4:84:55:76:30:38:68:d1:90:42:97: 79:79:fc:0b:93:59:78:6b:52:ce:db:61:d1:13:ae: ec:92:af:e4:14:4a:44:22:49:55:03:bc:94:92:54: af:d4:a0:ff:b9:2f:f5:89:9d:9b:19:41:ea:79:20: 3f:45:97:49:b6:20:80:73:2e:cf:4a:7e:c9:8f:fd: b4:57:6b:a9:5c:df:01:0d:d2:43:f5:36:93:65:0c: c0:ab:98:00:b5:8b:97:02:e0:0f:d2:e2:8c:86:35: cd:4d:51:14:f6:10:6a:62:6f:b2:7a:9b:3a:58:81: 59:6b:73:a7:29:00:e0:51:e1:66:53:99:b6:b7:50: 45:f1:4d:bf:8b:ba:57:ef:2e:69:de:10:18:97:64: 12:d8:3c:ae:b4:dc:1e:b6:35:f9:e8:d3:1e:7b:24: b5:3b:26:88:52:8e:20:0b:50:59:e3:a2:70:ef:47: 69:c1:7f:95:d6:a1:cc:33:f9:df:0c:fe:4e:3a:93: c8:64:51:4c:76:e7:5c:83:4c:ba:9f:c3:0f:ed:ef: c9:e9:ab:73:2c:21:5f:fc:a6:4f:98:b9:c5:1b:27: 30:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FE:BB:B2:99:99:35:9B:EA:4C:72:21:C4:4C:20:55:D9:C0:8F:8C X509v3 Authority Key Identifier: keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ca:b9:6f:72:d2:84:2a:d7:b7:87:c7:a3:90:6f:0e:f7:0b: ad:e5:fa:0d:f1:9e:ca:cf:0d:56:9a:a6:f2:b3:be:3d:4d:01: 7d:e7:17:1f:05:a1:f5:fa:28:c4:cb:c8:1d:ba:69:49:69:40: 34:83:f9:94:2e:0c:c0:10:f0:34:8c:5e:b5:85:93:ca:7c:de: 80:a9:0c:bb:05:da:c3:2b:ac:35:7e:44:e2:66:d0:7e:b2:e8: 40:cc:3e:b5:0d:98:9e:e0:82:96:d3:dc:0b:01:53:1a:27:9b: 25:2c:fc:a5:53:e8:7f:b8:15:98:7d:d4:61:bb:64:bc:4a:c3: f9:b7:68:18:16:ff:31:2d:d5:9c:21:73:16:5f:99:cb:e1:df: 3c:e1:df:87:81:8f:4d:82:d5:51:22:17:fe:27:25:18:57:19: 5c:ef:e3:22:6a:c8:8c:5f:1b:62:c3:0c:94:4e:27:96:5e:ad: 0a:d6:d3:5f:a2:c1:50:4f:d9:d6:3a:de:12:88:5c:0c:c2:99: 3a:04:2e:a2:65:35:2e:9b:3b:3b:39:17:b2:42:24:53:06:e7: 30:d5:54:4d:d3:f0:0b:86:cf:55:39:42:89:67:97:0c:f1:70: 19:d5:88:ac:8a:2f:c9:77:81:e9:1d:05:36:e2:ad:a4:3d:46: d9:e5:29:71 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUIu+MvVMe4vvDH2osFnZgA32TS0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDNDlCQUUyNDMw QkVFQzM1NEMxQjE0RjIyNkU3NjFGQzlCRENGMDA1MB4XDTI2MDcyMzA4MjIwMFoX DTI2MDcyNDA5NDcwMFowMzExMC8GA1UEAxMoMjFGRUJCQjI5OTk5MzU5QkVBNEM3 MjIxQzQ0QzIwNTVEOUMwOEY4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI3fQ3PgJpwiwx7gstv1H1yMqlrl5+y9thmC88DBcVrPffSEVXYwOGjRkEKX eXn8C5NZeGtSztth0ROu7JKv5BRKRCJJVQO8lJJUr9Sg/7kv9YmdmxlB6nkgP0WX SbYggHMuz0p+yY/9tFdrqVzfAQ3SQ/U2k2UMwKuYALWLlwLgD9LijIY1zU1RFPYQ amJvsnqbOliBWWtzpykA4FHhZlOZtrdQRfFNv4u6V+8uad4QGJdkEtg8rrTcHrY1 +ejTHnsktTsmiFKOIAtQWeOicO9HacF/ldahzDP53wz+TjqTyGRRTHbnXINMup/D D+3vyemrcywhX/ymT5i5xRsnMHsCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBQh/ruy mZk1m+pMciHETCBV2cCPjDAfBgNVHSMEGDAWgBTEm64kML7sNUwbFPIm52H8m9zw BTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzMvQzQ5QkFFMjQzMEJFRUMzNTRDMUIx NEYyMjZFNzYxRkM5QkRDRjAwNS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveEp1dUpEQy03RFZNR3hUeUp1ZGhfSnZj OEFVLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8zL0M0OUJBRTI0MzBCRUVDMzU0QzFC MTRGMjI2RTc2MUZDOUJEQ0YwMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0yrlvctKEKte3h8ejkG8O 9wut5foN8Z7Kzw1Wmqbys749TQF95xcfBaH1+ijEy8gdumlJaUA0g/mULgzAEPA0 jF61hZPKfN6AqQy7BdrDK6w1fkTiZtB+suhAzD61DZie4IKW09wLAVMaJ5slLPyl U+h/uBWYfdRhu2S8SsP5t2gYFv8xLdWcIXMWX5nL4d884d+HgY9NgtVRIhf+JyUY Vxlc7+MiasiMXxtiwwyUTieWXq0K1tNfosFQT9nWOt4SiFwMwpk6BC6iZTUumzs7 OReyQiRTBucw1VRN0/ALhs9VOUKJZ5cM8XAZ1Yisii/Jd4HpHQU24q2kPUbZ5Slx -----END CERTIFICATE-----Generated at Fri Jul 24 00:01:59 2026 by rpki-client