$ rpki-client -vvf rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft File: 0291B733B1EED1AF7E817D958CE6F13A585F0695.mft (raw, json) Hash identifier: 9BQ1a0SPUK5G1PP+eBl3oACtllMVHWhLs0QsF8nEML8= Subject key identifier: 97:7C:59:9C:E7:95:D3:DE:DC:54:20:17:A2:10:FB:B2:0F:F0:40:EC Authority key identifier: 02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 Certificate issuer: /CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Certificate serial: 1341C86416D58E5836553AC135737CE0AEBF8A45 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft Manifest number: 65 Signing time: Fri 24 Jul 2026 00:42:08 +0000 Manifest this update: Fri 24 Jul 2026 00:37:08 +0000 Manifest next update: Sat 25 Jul 2026 03:06:08 +0000 Files and hashes: 1: 3231302e37392e3135302e302f32332d3234203d3e203138303431.roa (hash: XF9vSkheKC1NRFUS3alvj8iCKGl0+/ZaB+X31yisdf0=) 2: 0291B733B1EED1AF7E817D958CE6F13A585F0695.crl (hash: xCyjdkdCw62TPjWtA1Tf8N3EqJ+CixhLDS8dkpyU9EA=) 3: 3231302e37392e3135312e302f32342d3234203d3e20323031323137.roa (hash: WRpRpWc9nNYJzvwhsCMAvWKmyMgtn7Z1UBftNahQj4c=) 4: 323430313a353561303a3a2f33322d3332203d3e203138303431.roa (hash: CrzulhqYuNBjNzDQRC8BOsQxP+QuAw4ZbCFe65kH3fw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:41:c8:64:16:d5:8e:58:36:55:3a:c1:35:73:7c:e0:ae:bf:8a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Validity Not Before: Jul 24 00:37:08 2026 GMT Not After : Jul 25 03:06:08 2026 GMT Subject: CN=977C599CE795D3DEDC542017A210FBB20FF040EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:ee:c1:bc:45:fd:4f:e1:08:be:48:cf:59: b2:c2:f7:dc:29:50:01:0c:71:4a:e2:73:ce:0c:86: 04:4c:c1:7c:58:c5:cf:1a:bb:19:17:65:70:5d:29: 4d:8b:fa:ad:fa:6f:d4:fa:b9:52:52:c1:4f:df:f3: d1:78:8a:fd:2d:02:f8:26:36:66:a7:35:3e:35:ec: 27:b6:36:53:d3:2a:ef:b2:24:11:ac:23:54:d6:6b: 0e:d6:3e:a7:7d:7c:a0:04:dc:c9:d2:bd:9c:55:e3: 74:99:eb:47:17:50:d8:91:55:7a:62:1b:ce:02:8a: 29:a8:8f:d3:0a:a9:49:0c:47:83:3c:bb:76:db:2e: 1a:ee:9b:df:f3:8a:bb:0f:f1:84:3c:cf:09:af:2b: 3c:e2:55:01:3e:e3:15:ae:c4:37:ec:0d:4c:fd:53: 11:7c:45:e5:b5:40:5e:b4:bc:80:a5:a6:41:d1:d0: 2e:be:51:2c:5c:77:a0:b4:d1:4a:c6:44:c9:98:75: 6e:f2:f6:bb:ec:7c:9e:b8:79:bf:bd:ba:86:b4:70: 85:c3:18:1f:58:8d:b7:29:e5:8b:a5:63:82:0b:01: 42:35:87:ff:94:c5:5d:73:02:bd:43:8b:ef:df:9b: cd:1f:61:18:69:de:63:44:06:b2:93:a3:8e:2a:73: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7C:59:9C:E7:95:D3:DE:DC:54:20:17:A2:10:FB:B2:0F:F0:40:EC X509v3 Authority Key Identifier: keyid:02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a1:6a:7e:3e:73:14:d9:57:24:6e:2a:57:bf:7c:77:95:95: 9c:ed:fb:17:88:48:47:dd:2f:c4:3a:74:3c:b8:7b:05:78:d4: c9:f5:86:27:7e:e7:b7:74:d2:6d:cf:16:d2:ae:ca:2d:e7:6a: 7d:8c:a8:03:a7:29:b9:f0:0b:e3:db:1c:42:24:04:a2:8f:28: 13:2f:aa:3b:b3:6e:af:27:c0:22:ca:5e:e3:dd:f8:9c:d7:19: ee:39:d4:16:be:40:21:d9:ce:2c:50:7d:09:30:20:8c:a5:0f: 5c:3d:1b:71:ed:53:e4:dd:7e:f4:ea:91:55:d0:b1:54:67:6d: 67:a0:78:c1:ff:19:5b:83:78:aa:4c:31:2a:10:cb:13:ce:2e: be:c6:ce:5e:6e:97:2d:d8:1c:f0:fa:d2:2d:86:71:13:e8:a8: 67:15:4f:27:0a:1e:6f:f1:7d:fa:d5:cb:34:10:e0:38:96:b7: db:4f:e2:23:00:e8:0f:47:bf:0e:24:3c:ff:72:47:56:c8:da: 41:48:af:f6:a7:68:05:38:8b:2a:1e:85:18:5b:0a:af:bd:f1: e4:d0:6f:12:a6:78:6c:b4:0c:aa:b3:ca:0a:30:e7:4b:f8:de: bb:64:05:f4:d8:25:6b:ae:b5:93:3b:64:43:bc:03:3b:e5:7d: 7d:47:b0:68 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUE0HIZBbVjlg2VTrBNXN84K6/ikUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1 ODVGMDY5NTAeFw0yNjA3MjQwMDM3MDhaFw0yNjA3MjUwMzA2MDhaMDMxMTAvBgNV BAMTKDk3N0M1OTlDRTc5NUQzREVEQzU0MjAxN0EyMTBGQkIyMEZGMDQwRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqO7BvEX9T+EIvkjPWbLC99wp UAEMcUric84MhgRMwXxYxc8auxkXZXBdKU2L+q36b9T6uVJSwU/f89F4iv0tAvgm NmanNT417Ce2NlPTKu+yJBGsI1TWaw7WPqd9fKAE3MnSvZxV43SZ60cXUNiRVXpi G84Ciimoj9MKqUkMR4M8u3bbLhrum9/zirsP8YQ8zwmvKzziVQE+4xWuxDfsDUz9 UxF8ReW1QF60vIClpkHR0C6+USxcd6C00UrGRMmYdW7y9rvsfJ64eb+9uoa0cIXD GB9Yjbcp5YulY4ILAUI1h/+UxV1zAr1Di+/fm80fYRhp3mNEBrKTo44qc6WHAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUl3xZnOeV097cVCAXohD7sg/wQOwwHwYDVR0j BBgwFoAUApG3M7Hu0a9+gX2VjObxOlhfBpUwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAv MDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1ODVGMDY5NS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8wMjkxQjczM0IxRUVEMUFGN0U4MTdEOTU4Q0U2RjEz QTU4NUYwNjk1LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAvMDI5MUI3MzNCMUVFRDFBRjdF ODE3RDk1OENFNkYxM0E1ODVGMDY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHChan4+cxTZVyRuKle/ fHeVlZzt+xeISEfdL8Q6dDy4ewV41Mn1hid+57d00m3PFtKuyi3nan2MqAOnKbnw C+PbHEIkBKKPKBMvqjuzbq8nwCLKXuPd+JzXGe451Ba+QCHZzixQfQkwIIylD1w9 G3HtU+TdfvTqkVXQsVRnbWegeMH/GVuDeKpMMSoQyxPOLr7Gzl5uly3YHPD60i2G cRPoqGcVTycKHm/xffrVyzQQ4DiWt9tP4iMA6A9Hvw4kPP9yR1bI2kFIr/anaAU4 iyoehRhbCq+98eTQbxKmeGy0DKqzygow50v43rtkBfTYJWuutZM7ZEO8AzvlfX1H sGg= -----END CERTIFICATE-----Generated at Fri Jul 24 02:58:22 2026 by rpki-client