$ rpki-client -vvvf rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft File: 9F397B838061280C2F2A887AC9D64012310492D8.mft (raw, json) Hash identifier: bLwv/6uKpmjVzkSrEv0qBLi23V5Pf4fjLbH2H+DjRTE= Subject key identifier: 74:63:DB:5D:77:72:47:EB:EE:87:6F:82:23:AA:8C:08:AB:B8:E3:8C Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8 Certificate serial: 3C36DAC90F0C06F44536313415A82E3E545AC1FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft Manifest number: BC Signing time: Thu 24 Sep 2026 03:00:55 +0000 Manifest this update: Thu 24 Sep 2026 02:55:55 +0000 Manifest next update: Fri 25 Sep 2026 05:27:55 +0000 Files and hashes: 1: 3135312e3135382e362e302f32332d3234203d3e20313532363136.roa (hash: i1SCJ8GhyQLw1P2Ps8s9Plw8FCUopeJLu1mfg5xNyLQ=) 2: 3135312e3135382e362e302f32332d3234203d3e20323132393639.roa (hash: g66apYgbNhFQA/s/Xvj16zu4hXDJuL5Fa8ux6Zav1qQ=) 3: 3135312e3135382e372e302f32342d3234203d3e20333936393832.roa (hash: CiRNyIUTHDtjTklbG45WKUEv5VbhmGe28aKTdsZW1mc=) 4: 9F397B838061280C2F2A887AC9D64012310492D8.crl (hash: RgCJ3SQr9NAfhLLr1yyZjfleMs6KXprcqtVheE8bP94=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:36:da:c9:0f:0c:06:f4:45:36:31:34:15:a8:2e:3e:54:5a:c1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8 Validity Not Before: Sep 24 02:55:55 2026 GMT Not After : Sep 25 05:27:55 2026 GMT Subject: CN=7463DB5D777247EBEE876F8223AA8C08ABB8E38C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:c9:42:89:53:00:2c:ef:f8:c6:58:f6:44: 14:d4:bf:9c:1f:1f:83:39:36:8c:d7:4a:82:aa:8a: 08:f9:92:e4:1c:cc:c3:92:99:a5:1e:90:9f:a4:91: bd:60:04:49:cf:1b:95:b8:24:ad:72:1b:33:00:61: aa:34:07:8f:18:05:39:f7:71:ec:71:33:1f:db:59: f5:cf:de:6a:02:18:c7:b7:f4:6c:e4:dd:e1:dc:cd: 31:91:ff:93:12:6a:25:12:ff:19:14:e8:ab:5b:0b: 35:c0:4a:50:d1:7f:9d:9e:2e:a7:ed:ab:16:f7:18: 0b:d3:3e:ea:0c:97:47:e1:51:ee:ec:4d:fb:e2:72: d0:80:55:e7:ac:3a:05:ac:d0:88:e2:1e:2d:f0:18: 45:ec:9b:5f:9d:37:c8:f3:27:cf:2d:3e:ea:77:72: 29:fd:3c:c5:16:06:5d:fb:da:70:bd:cd:8a:a6:78: d9:53:51:15:7a:8d:7e:c3:37:e6:f1:7f:9a:f4:81: 33:b8:61:1d:88:84:8b:47:b6:e5:e6:e7:e2:9c:bb: 74:2d:19:f9:21:1d:9b:ea:8f:7e:8d:2d:9f:4d:f6: 6b:b4:59:71:36:72:e0:90:c9:c3:71:e1:e9:be:56: 95:08:7a:ae:25:52:1d:41:62:ef:4c:75:ec:2e:54: bb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:63:DB:5D:77:72:47:EB:EE:87:6F:82:23:AA:8C:08:AB:B8:E3:8C X509v3 Authority Key Identifier: keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7a:5d:db:26:2a:ed:69:20:da:42:5b:97:2b:5c:dc:41:a5: 73:bd:54:38:e5:55:41:61:58:9b:75:8c:1b:ee:8a:ca:33:10: 67:f2:58:93:0a:de:37:ff:b1:ca:92:24:12:a4:d2:57:87:bd: c1:5d:57:d5:bb:50:54:7b:80:34:9d:5a:2b:22:f3:27:da:67: 3c:78:af:30:00:ca:fa:22:fa:37:17:fd:31:91:bb:bd:32:b0: b0:54:ce:26:46:42:9a:4b:b9:e0:13:7e:37:f1:cf:e8:bf:1d: 95:d9:0e:a0:76:54:97:8c:04:dd:e8:c4:8e:34:b2:cb:f8:c4: 90:91:91:0f:a6:8c:72:da:f1:9c:cf:8d:51:8d:1e:bc:22:3f: 55:f6:81:ee:18:dd:e8:68:6e:32:e0:cc:91:a7:a2:a4:6d:df: 21:0b:ec:09:05:99:b5:00:ce:3b:0f:5a:e1:50:02:51:16:5c: 7c:fe:04:b7:b9:b9:f7:bd:d3:0f:f6:59:7e:87:be:98:05:0c: 25:36:13:62:97:62:9f:d6:27:8f:24:ac:c3:b8:0e:5b:47:84: 0a:41:e0:ad:43:39:d5:a8:62:8f:3a:bc:c2:ca:1f:ec:65:05: ca:99:3b:b3:02:b9:38:29:52:39:9a:bb:60:24:aa:2e:b4:c9: 04:d0:bc:5f -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUPDbayQ8MBvRFNjE0FaguPlRawfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQwMTIz MTA0OTJEODAeFw0yNjA5MjQwMjU1NTVaFw0yNjA5MjUwNTI3NTVaMDMxMTAvBgNV BAMTKDc0NjNEQjVENzc3MjQ3RUJFRTg3NkY4MjIzQUE4QzA4QUJCOEUzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyO8lCiVMALO/4xlj2RBTUv5wf H4M5NozXSoKqigj5kuQczMOSmaUekJ+kkb1gBEnPG5W4JK1yGzMAYao0B48YBTn3 cexxMx/bWfXP3moCGMe39Gzk3eHczTGR/5MSaiUS/xkU6KtbCzXASlDRf52eLqft qxb3GAvTPuoMl0fhUe7sTfvictCAVeesOgWs0IjiHi3wGEXsm1+dN8jzJ88tPup3 cin9PMUWBl372nC9zYqmeNlTURV6jX7DN+bxf5r0gTO4YR2IhItHtuXm5+Kcu3Qt GfkhHZvqj36NLZ9N9mu0WXE2cuCQycNx4em+VpUIeq4lUh1BYu9MdewuVLsXAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUdGPbXXdyR+vuh2+CI6qMCKu444wwHwYDVR0j BBgwFoAUnzl7g4BhKAwvKoh6ydZAEjEEktgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8x LzlGMzk3QjgzODA2MTI4MEMyRjJBODg3QUM5RDY0MDEyMzEwNDkyRDguY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzMvOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQw MTIzMTA0OTJEOC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS85RjM5N0I4MzgwNjEyODBD MkYyQTg4N0FDOUQ2NDAxMjMxMDQ5MkQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3pd2yYq7Wkg2kJb lytc3EGlc71UOOVVQWFYm3WMG+6KyjMQZ/JYkwreN/+xypIkEqTSV4e9wV1X1btQ VHuANJ1aKyLzJ9pnPHivMADK+iL6Nxf9MZG7vTKwsFTOJkZCmku54BN+N/HP6L8d ldkOoHZUl4wE3ejEjjSyy/jEkJGRD6aMctrxnM+NUY0evCI/VfaB7hjd6GhuMuDM kaeipG3fIQvsCQWZtQDOOw9a4VACURZcfP4Et7m5973TD/ZZfoe+mAUMJTYTYpdi n9YnjySsw7gOW0eECkHgrUM51ahijzq8wsof7GUFypk7swK5OClSOZq7YCSqLrTJ BNC8Xw== -----END CERTIFICATE-----Generated at Thu Sep 24 18:12:15 2026 by rpki-client