$ rpki-client -vvf rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft File: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft (raw, json) Hash identifier: Ebn7e7KXDzwtforz32eQ6hPu3w3Kw8wB/TXKYLjEd9U= Subject key identifier: 66:70:F4:20:03:CE:B3:7A:3B:6A:76:16:7C:1A:5A:3B:5A:7B:83:6A Authority key identifier: 9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 Certificate issuer: /CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Certificate serial: 7B38D29FA37A339FB292CBDA3E4A98888A6EC917 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft Manifest number: 67 Signing time: Thu 23 Jul 2026 22:36:52 +0000 Manifest this update: Thu 23 Jul 2026 22:31:52 +0000 Manifest next update: Sat 25 Jul 2026 02:33:52 +0000 Files and hashes: 1: 3133382e3235322e31322e302f32332d3234203d3e203633393030.roa (hash: T1G4LI5dLLgbVaIvhEyF4d3yTLg74BSvJymMPoiXRRs=) 2: 3133382e3235322e31332e302f32342d3234203d3e20313331363338.roa (hash: ZxFVwcoOUjiuOptQUvoMY0HJlqBq+tEMKJCTrxaADFk=) 3: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl (hash: FOv2aBp+kVnj4kw3QBo5j0kbwz+pmi9khRJICiH126o=) 4: 3133382e3235322e31322e302f32342d3234203d3e203633393030.roa (hash: M8obdGIsjRO1zF80aPiV/zHcUxXnNPdWJ9IvgOv18N0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:38:d2:9f:a3:7a:33:9f:b2:92:cb:da:3e:4a:98:88:8a:6e:c9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Validity Not Before: Jul 23 22:31:52 2026 GMT Not After : Jul 25 02:33:52 2026 GMT Subject: CN=6670F42003CEB37A3B6A76167C1A5A3B5A7B836A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:9a:b1:59:47:a8:66:7e:b0:0f:47:e4:1a: d5:0d:fa:3d:1f:43:9f:ec:ec:7e:1c:7f:66:f2:a1: 23:12:88:b0:b2:10:7a:28:91:8a:cc:ec:49:f3:d3: e7:9f:63:4b:6b:df:37:26:aa:2a:e9:55:61:5a:43: 33:65:10:d0:e6:69:5d:9d:47:df:da:cc:88:25:2d: 9f:a7:53:61:c8:0b:f6:38:f8:07:ea:25:7b:40:30: 43:50:3f:93:a0:00:05:31:8f:b4:97:72:ce:13:9c: 82:fe:2a:66:41:e6:aa:8a:d7:af:a2:b6:9e:0d:7c: 90:31:63:3b:c5:d5:f1:46:95:1d:cc:72:78:9f:65: 0d:a9:e7:6f:73:1c:65:15:fc:e9:fc:8c:91:db:df: 44:cc:ed:af:63:e0:50:66:17:92:fd:0f:ce:31:b8: 79:e7:c2:70:1e:fe:cd:ae:3a:c5:f0:ea:2d:c2:fe: d7:c8:6e:be:dc:90:d7:97:8d:57:ba:1a:20:7e:34: 57:43:20:35:c7:71:d3:48:3a:6a:8c:85:60:81:7e: e0:7b:0f:28:5c:ea:c3:e7:b0:a2:e9:84:f5:82:4f: bd:51:58:b6:24:8e:47:f1:a8:97:75:19:c1:cc:0f: 0a:8f:51:39:95:44:71:13:33:d2:fc:36:df:b3:f4: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:70:F4:20:03:CE:B3:7A:3B:6A:76:16:7C:1A:5A:3B:5A:7B:83:6A X509v3 Authority Key Identifier: keyid:9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:67:2a:ea:5b:16:ed:d6:81:56:d5:aa:92:67:dc:a4:c7:9b: de:9d:47:bf:73:82:c3:ab:c7:85:7b:df:f3:ab:27:23:fe:3f: 72:de:b5:18:f7:2c:ad:3d:75:93:36:bb:e3:61:dd:b2:ef:f9: 57:c7:bd:be:d4:38:03:06:da:70:0c:7b:5d:e4:f5:e4:b5:99: 2d:4e:f4:1e:1f:b3:33:f8:11:64:3c:c4:ad:b2:6c:af:f4:f8: 44:99:a4:08:de:60:54:3d:8d:83:ab:cf:91:b5:6b:c7:4d:53: eb:55:34:86:52:cb:9c:bc:9d:18:e0:e4:ed:94:05:72:6f:2a: d9:c1:6d:4f:00:82:8a:41:9d:b8:bb:30:41:db:b6:01:ef:49: 89:64:9f:a2:1d:8b:f8:0d:82:0c:31:e8:80:3e:4d:c2:c1:1c: b1:b9:cb:3e:ed:93:94:6b:35:b6:8c:b2:e0:3e:2d:75:ce:99: fc:46:56:db:76:09:30:fc:c5:5f:79:70:20:97:7c:80:5b:5b: cd:b0:ed:de:35:52:f3:24:8b:64:4f:e1:47:9c:ef:d5:20:91: 37:b7:c7:47:32:c5:ff:ce:4c:e3:8a:dd:7d:9b:cc:0d:74:a6: a5:8d:b8:09:56:89:20:88:b0:e4:89:fb:77:97:5b:d6:76:91: 19:9f:32:fb -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUezjSn6N6M5+yksvaPkqYiIpuyRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFBNDc3 MjdDQzFDMzAeFw0yNjA3MjMyMjMxNTJaFw0yNjA3MjUwMjMzNTJaMDMxMTAvBgNV BAMTKDY2NzBGNDIwMDNDRUIzN0EzQjZBNzYxNjdDMUE1QTNCNUE3QjgzNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4k5qxWUeoZn6wD0fkGtUN+j0f Q5/s7H4cf2byoSMSiLCyEHookYrM7Enz0+efY0tr3zcmqirpVWFaQzNlENDmaV2d R9/azIglLZ+nU2HIC/Y4+AfqJXtAMENQP5OgAAUxj7SXcs4TnIL+KmZB5qqK16+i tp4NfJAxYzvF1fFGlR3McnifZQ2p529zHGUV/On8jJHb30TM7a9j4FBmF5L9D84x uHnnwnAe/s2uOsXw6i3C/tfIbr7ckNeXjVe6GiB+NFdDIDXHcdNIOmqMhWCBfuB7 Dyhc6sPnsKLphPWCT71RWLYkjkfxqJd1GcHMDwqPUTmVRHETM9L8Nt+z9Kg5AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUZnD0IAPOs3o7anYWfBpaO1p7g2owHwYDVR0j BBgwFoAUnN5QPM43CjnhV/hRms8aR3J8wcMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWlVTTy8x LzlDREU1MDNDQ0UzNzBBMzlFMTU3Rjg1MTlBQ0YxQTQ3NzI3Q0MxQzMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFB NDc3MjdDQzFDMy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1pVU08vMS85Q0RFNTAzQ0NFMzcwQTM5 RTE1N0Y4NTE5QUNGMUE0NzcyN0NDMUMzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmcq6lsW7daBVtWq kmfcpMeb3p1Hv3OCw6vHhXvf86snI/4/ct61GPcsrT11kza742Hdsu/5V8e9vtQ4 AwbacAx7XeT15LWZLU70Hh+zM/gRZDzErbJsr/T4RJmkCN5gVD2Ng6vPkbVrx01T 61U0hlLLnLydGODk7ZQFcm8q2cFtTwCCikGduLswQdu2Ae9JiWSfoh2L+A2CDDHo gD5NwsEcsbnLPu2TlGs1toyy4D4tdc6Z/EZW23YJMPzFX3lwIJd8gFtbzbDt3jVS 8ySLZE/hR5zv1SCRN7fHRzLF/85M44rdfZvMDXSmpY24CVaJIIiw5In7d5db1naR GZ8y+w== -----END CERTIFICATE-----Generated at Fri Jul 24 13:52:55 2026 by rpki-client