$ rpki-client -vvvf rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft File: 20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft (raw, json) Hash identifier: 5rRjXbJ0VIdzz7PHPZSEoizBe8mGjTNlSLl2Au20zkw= Subject key identifier: A3:7C:09:06:B6:78:91:9B:6E:AB:6C:7E:C3:7C:0B:3A:7C:80:B7:D5 Authority key identifier: 20:E6:A3:BA:2C:4D:A1:64:07:FE:46:FD:4F:DF:6D:BD:BA:41:97:DC Certificate issuer: /CN=20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC Certificate serial: 181E78EE8B43A64A2A1FB1B541207D1C811F43AB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft Manifest number: BD Signing time: Thu 24 Sep 2026 07:14:00 +0000 Manifest this update: Thu 24 Sep 2026 07:09:00 +0000 Manifest next update: Fri 25 Sep 2026 07:43:00 +0000 Files and hashes: 1: 20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl (hash: OeH9cZopvHDbpg9KnOgaYt7XgLpCm3B6zkRN1OMOnRM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1e:78:ee:8b:43:a6:4a:2a:1f:b1:b5:41:20:7d:1c:81:1f:43:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC Validity Not Before: Sep 24 07:09:00 2026 GMT Not After : Sep 25 07:43:00 2026 GMT Subject: CN=A37C0906B678919B6EAB6C7EC37C0B3A7C80B7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:61:dd:cb:97:f9:2d:bf:92:ba:72:9c:fe: 2a:41:a2:c7:5b:c8:ce:b9:ab:84:62:17:4c:a8:58: 4b:84:54:07:8a:1c:32:eb:c8:49:0f:03:97:fc:91: f9:38:00:25:c6:a9:3c:02:9d:79:3c:bd:b5:b5:be: 77:92:bd:f7:c3:e4:7b:1a:4c:a4:a4:c3:1a:0b:65: 17:32:c7:60:f8:81:e3:a0:20:18:dd:a3:27:9c:e0: 80:bd:7b:e7:a3:56:4d:84:44:fc:5b:ff:55:df:29: 08:ab:9f:bb:63:fa:e4:15:6e:d4:41:d7:b0:52:09: bb:b9:0f:e2:38:cb:4d:38:b8:5d:67:af:10:42:de: 6c:2b:c3:0b:15:05:11:1f:f1:bb:0a:07:18:16:f1: 70:db:57:4c:fa:09:36:df:4a:86:34:81:c1:12:fd: 85:26:77:c5:bd:18:34:71:d2:01:3d:9f:bc:98:91: 83:b9:db:b0:93:41:2b:bd:6f:72:31:70:ee:98:a5: 12:f0:cc:f9:0a:64:21:70:85:1a:ca:29:26:e0:6c: 35:61:60:ba:69:59:86:02:d6:38:80:08:92:e7:fa: 8e:84:c2:58:57:d9:0c:ba:cd:a7:af:47:55:47:c1: 8f:b1:1e:47:cd:3d:fe:e5:5d:f7:da:60:f1:78:e3: d0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7C:09:06:B6:78:91:9B:6E:AB:6C:7E:C3:7C:0B:3A:7C:80:B7:D5 X509v3 Authority Key Identifier: keyid:20:E6:A3:BA:2C:4D:A1:64:07:FE:46:FD:4F:DF:6D:BD:BA:41:97:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:90:7f:c4:bb:e7:0a:2c:e9:d5:a9:f6:a1:2b:8b:27:5b:a1: 4e:f5:75:7b:d5:45:2d:d5:2a:e1:cb:14:64:c4:5e:ce:f0:9c: f4:80:28:fe:7d:44:1e:c0:aa:94:ac:36:11:8d:08:2b:63:2c: 08:b4:32:31:0b:43:88:18:5b:cd:76:94:63:ec:c6:d0:74:08: 5c:e7:5f:d7:38:e7:99:6b:3f:9a:91:cb:e5:fd:65:70:7f:d0: c0:3f:80:9f:ff:d7:00:c8:0e:3a:dd:e5:b1:53:8c:4f:98:a0: ac:37:2c:04:87:77:f6:70:38:50:62:21:a3:42:d9:27:8b:b6: 69:06:9a:98:d5:ac:7f:d7:99:c5:f3:da:a5:f3:7d:70:f1:e1: 46:2f:86:a6:7f:8f:8e:26:56:4b:01:dc:71:6d:53:34:29:1e: 4c:0c:67:07:ea:00:08:8c:65:d2:93:ef:22:85:4f:6f:dc:d2: a0:97:88:2b:eb:d4:14:54:c1:30:a6:fc:f0:85:1a:b0:0d:59: 46:92:04:62:35:79:bb:e0:ba:ba:87:13:8a:37:03:7e:38:d5: 3c:0a:69:24:11:a6:21:0a:64:30:e1:54:3d:ed:f9:8b:a4:69: 3e:f5:f7:0e:a1:77:e3:f8:25:7e:26:44:9f:5a:b9:91:a7:89: b3:36:28:af -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUGB547otDpkoqH7G1QSB9HIEfQ6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFNkEzQkEyQzREQTE2NDA3RkU0NkZENEZERjZEQkRC QTQxOTdEQzAeFw0yNjA5MjQwNzA5MDBaFw0yNjA5MjUwNzQzMDBaMDMxMTAvBgNV BAMTKEEzN0MwOTA2QjY3ODkxOUI2RUFCNkM3RUMzN0MwQjNBN0M4MEI3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cGHdy5f5Lb+SunKc/ipBosdb yM65q4RiF0yoWEuEVAeKHDLryEkPA5f8kfk4ACXGqTwCnXk8vbW1vneSvffD5Hsa TKSkwxoLZRcyx2D4geOgIBjdoyec4IC9e+ejVk2ERPxb/1XfKQirn7tj+uQVbtRB 17BSCbu5D+I4y004uF1nrxBC3mwrwwsVBREf8bsKBxgW8XDbV0z6CTbfSoY0gcES /YUmd8W9GDRx0gE9n7yYkYO527CTQSu9b3IxcO6YpRLwzPkKZCFwhRrKKSbgbDVh YLppWYYC1jiACJLn+o6EwlhX2Qy6zaevR1VHwY+xHkfNPf7lXffaYPF449CJAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUo3wJBrZ4kZtuq2x+w3wLOnyAt9UwHwYDVR0j BBgwFoAUIOajuixNoWQH/kb9T99tvbpBl9wwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVJRE9V LzAvMjBFNkEzQkEyQzREQTE2NDA3RkU0NkZENEZERjZEQkRCQTQxOTdEQy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMEU2QTNCQTJDNERBMTY0MDdGRTQ2RkQ0RkRG NkRCREJBNDE5N0RDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVJRE9VLzAvMjBFNkEzQkEyQzRE QTE2NDA3RkU0NkZENEZERjZEQkRCQTQxOTdEQy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA2Qf8S75wos 6dWp9qEriydboU71dXvVRS3VKuHLFGTEXs7wnPSAKP59RB7AqpSsNhGNCCtjLAi0 MjELQ4gYW812lGPsxtB0CFznX9c455lrP5qRy+X9ZXB/0MA/gJ//1wDIDjrd5bFT jE+YoKw3LASHd/ZwOFBiIaNC2SeLtmkGmpjVrH/XmcXz2qXzfXDx4UYvhqZ/j44m VksB3HFtUzQpHkwMZwfqAAiMZdKT7yKFT2/c0qCXiCvr1BRUwTCm/PCFGrANWUaS BGI1ebvgurqHE4o3A3441TwKaSQRpiEKZDDhVD3t+YukaT719w6hd+P4JX4mRJ9a uZGnibM2KK8= -----END CERTIFICATE-----Generated at Fri Sep 25 00:11:14 2026 by rpki-client