$ rpki-client -vvvf rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft File: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft (raw, json) Hash identifier: f7yv0YDy2UUEFV91YBaftakhhIEQ/r7HlmqmTwpeG3E= Subject key identifier: 53:13:0A:93:97:0F:96:BF:82:D4:EB:24:E1:4A:A0:13:85:8C:EC:40 Authority key identifier: C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E Certificate issuer: /CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Certificate serial: 2B24C19E3E243B4D3C80078B03219F4C50C84855 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft Manifest number: AD Signing time: Fri 25 Sep 2026 19:08:52 +0000 Manifest this update: Fri 25 Sep 2026 19:03:52 +0000 Manifest next update: Sat 26 Sep 2026 19:57:52 +0000 Files and hashes: 1: 3136322e342e3132302e302f32342d3234203d3e2037353338.roa (hash: +oL4eb5beCTbwHQv05IGNdDaYgTzY6FmysDdzyN7dbc=) 2: C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl (hash: Q5551p/m/1iiVYq59n2vQWYBTdkI6u22sfZ2CEmzdYM=) 3: 3136322e342e3132302e302f32332d3234203d3e2037353338.roa (hash: Mi+0JEPMuVlJEXsdnA5LTDCvWWBkvP7mWCGahHVlu/o=) 4: 3136322e342e3132312e302f32342d3234203d3e2037353338.roa (hash: JjMarjg2Zc6hqoQZgUCo2VMeha5Gj5iiZIx9vvG1h9o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 19:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:24:c1:9e:3e:24:3b:4d:3c:80:07:8b:03:21:9f:4c:50:c8:48:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Validity Not Before: Sep 25 19:03:52 2026 GMT Not After : Sep 26 19:57:52 2026 GMT Subject: CN=53130A93970F96BF82D4EB24E14AA013858CEC40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:07:91:5e:be:9d:0d:93:2b:c2:53:c8:e2:06: 88:a6:e2:dd:e9:96:58:e6:9f:b8:08:bd:fe:4a:7a: 97:a2:16:3d:30:a5:6b:f4:14:a5:a5:31:2c:89:e3: 6c:e8:2f:d8:d2:7e:d7:e5:4c:11:2b:02:2b:54:20: c5:0f:90:1c:3d:b0:bb:33:d0:d9:4b:39:d1:1c:6f: f0:a5:e4:95:f0:ff:48:d8:ff:6e:64:be:b4:0e:00: a1:60:aa:c9:d4:5e:1f:83:a8:a2:af:71:31:31:2b: 23:24:e4:d5:59:9e:fe:15:03:d3:19:3e:0f:b5:30: 4a:f7:1b:42:f2:ce:1e:3e:79:2c:56:34:9e:1e:c1: fb:4d:2f:5c:5a:1a:ac:be:0a:5d:e5:27:9c:a8:8e: b3:7f:1d:c6:be:75:4a:ae:a9:54:9b:73:b9:9f:be: e0:fc:1e:47:f5:57:98:c8:d3:8f:c5:2e:ca:66:1e: 24:28:d2:95:15:52:f6:34:b4:ae:36:8f:58:16:f8: 82:f5:c7:1b:9d:39:b9:19:6a:d8:6a:37:e2:d8:72: 50:6f:17:cf:d0:cb:8b:7b:43:87:80:77:42:65:08: ba:76:f6:e5:42:ca:f0:8f:86:2e:93:97:53:72:a7: e5:fb:35:b7:e3:89:63:b3:a9:e4:c9:7f:44:06:77: 88:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:13:0A:93:97:0F:96:BF:82:D4:EB:24:E1:4A:A0:13:85:8C:EC:40 X509v3 Authority Key Identifier: keyid:C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:10:ca:90:59:50:32:0f:4b:8c:e5:0d:50:6e:bf:1f:de:bc: a5:03:3c:75:32:52:d0:4d:8a:2f:9b:d9:f9:b0:70:9e:a7:ed: f3:1b:7c:f4:53:9d:09:57:25:6b:40:10:91:db:04:7e:f4:7c: 1e:4b:8b:54:c5:0d:d1:85:6d:33:09:0d:ac:63:c3:a5:76:63: 04:c0:fd:ae:81:36:87:c6:4c:76:3a:2e:4b:76:e4:cf:05:60: bd:52:96:7c:62:21:0f:b5:4c:2b:dd:0d:de:b2:d8:b6:2e:24: 67:33:85:76:52:86:6f:bb:6a:31:43:e6:42:e7:f8:1e:bd:63: 56:c6:ca:85:41:d4:cb:34:4c:1c:b1:ca:2d:bd:c8:4b:7d:51: 09:9d:12:55:9d:33:e9:02:e6:57:a4:d9:ba:fd:47:c5:00:71: a5:56:02:24:1c:a1:77:b7:0e:b5:43:5d:94:d6:6b:1a:c9:0a: 12:c0:10:f5:06:24:d1:8c:99:92:d2:dc:8d:6f:38:50:3a:fe: c7:b7:2a:71:cb:47:fa:73:68:22:d6:43:01:c0:2b:00:92:ef: 1b:0e:d0:4e:eb:04:6d:42:91:0d:9d:23:db:f1:14:b7:af:b3: 90:a8:22:7f:3f:26:3d:ae:cc:39:f8:8d:af:be:b1:64:2c:5c: 41:01:99:bc -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUKyTBnj4kO008gAeLAyGfTFDISFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4OUNDMEQyQ0YwRDYzNENCNEU5MDA2RUE3QTU1REQ3 N0UyQ0I5RTAeFw0yNjA5MjUxOTAzNTJaFw0yNjA5MjYxOTU3NTJaMDMxMTAvBgNV BAMTKDUzMTMwQTkzOTcwRjk2QkY4MkQ0RUIyNEUxNEFBMDEzODU4Q0VDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrB5Fevp0NkyvCU8jiBoim4t3p lljmn7gIvf5KepeiFj0wpWv0FKWlMSyJ42zoL9jSftflTBErAitUIMUPkBw9sLsz 0NlLOdEcb/Cl5JXw/0jY/25kvrQOAKFgqsnUXh+DqKKvcTExKyMk5NVZnv4VA9MZ Pg+1MEr3G0Lyzh4+eSxWNJ4ewftNL1xaGqy+Cl3lJ5yojrN/Hca+dUquqVSbc7mf vuD8Hkf1V5jI04/FLspmHiQo0pUVUvY0tK42j1gW+IL1xxudObkZathqN+LYclBv F8/Qy4t7Q4eAd0JlCLp29uVCyvCPhi6Tl1Nyp+X7NbfjiWOzqeTJf0QGd4jTAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUUxMKk5cPlr+C1Osk4UqgE4WM7EAwHwYDVR0j BBgwFoAUxYnMDSzw1jTLTpAG6npV3Xfiy54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBXT04v MC9DNTg5Q0MwRDJDRjBENjM0Q0I0RTkwMDZFQTdBNTVERDc3RTJDQjlFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0M1ODlDQzBEMkNGMEQ2MzRDQjRFOTAwNkVBN0E1 NURENzdFMkNCOUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUFdPTi8wL0M1ODlDQzBEMkNGMEQ2 MzRDQjRFOTAwNkVBN0E1NURENzdFMkNCOUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmEMqQWVAyD0uM 5Q1Qbr8f3rylAzx1MlLQTYovm9n5sHCep+3zG3z0U50JVyVrQBCR2wR+9HweS4tU xQ3RhW0zCQ2sY8OldmMEwP2ugTaHxkx2Oi5LduTPBWC9UpZ8YiEPtUwr3Q3esti2 LiRnM4V2UoZvu2oxQ+ZC5/gevWNWxsqFQdTLNEwcscotvchLfVEJnRJVnTPpAuZX pNm6/UfFAHGlVgIkHKF3tw61Q12U1msayQoSwBD1BiTRjJmS0tyNbzhQOv7Htypx y0f6c2gi1kMBwCsAku8bDtBO6wRtQpENnSPb8RS3r7OQqCJ/PyY9rsw5+I2vvrFk LFxBAZm8 -----END CERTIFICATE-----Generated at Sat Sep 26 14:20:56 2026 by rpki-client