$ rpki-client -vvf rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft File: 9F397B838061280C2F2A887AC9D64012310492D8.mft (raw, json) Hash identifier: 5gy1S0Ihf7zzpl4P808NpMB04M+4JYzy4k6KMDD9opQ= Subject key identifier: 63:C2:83:E6:E9:17:88:81:F2:DF:EA:59:43:C3:CE:EE:8C:E2:A4:A0 Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8 Certificate serial: 61530B9FC291769EF83C735953A88E4FFE392B52 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft Manifest number: 68 Signing time: Thu 23 Jul 2026 17:46:22 +0000 Manifest this update: Thu 23 Jul 2026 17:41:22 +0000 Manifest next update: Fri 24 Jul 2026 17:52:22 +0000 Files and hashes: 1: 9F397B838061280C2F2A887AC9D64012310492D8.crl (hash: BkaatMGOZyih2ScWeU7RBf18H0mHxBsjBPxXMw0nVOQ=) 2: 3135312e3135382e362e302f32332d3234203d3e20313532363136.roa (hash: i1SCJ8GhyQLw1P2Ps8s9Plw8FCUopeJLu1mfg5xNyLQ=) 3: 3135312e3135382e362e302f32332d3234203d3e20323132393639.roa (hash: g66apYgbNhFQA/s/Xvj16zu4hXDJuL5Fa8ux6Zav1qQ=) 4: 3135312e3135382e372e302f32342d3234203d3e20333936393832.roa (hash: CiRNyIUTHDtjTklbG45WKUEv5VbhmGe28aKTdsZW1mc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:53:0b:9f:c2:91:76:9e:f8:3c:73:59:53:a8:8e:4f:fe:39:2b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8 Validity Not Before: Jul 23 17:41:22 2026 GMT Not After : Jul 24 17:52:22 2026 GMT Subject: CN=63C283E6E9178881F2DFEA5943C3CEEE8CE2A4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:47:9a:fa:66:26:65:b1:40:b4:c3:6d:0f:22: 03:47:c0:8d:e3:21:90:9c:11:3d:e8:19:27:66:8a: b0:c5:07:a3:43:f2:79:99:0e:23:29:c1:4c:b8:91: 3b:e2:8e:97:6d:23:ac:44:ef:dd:85:70:27:11:82: 42:cc:ed:56:c1:1b:ae:af:56:b1:86:b5:f1:fb:5e: 1e:5e:d2:ff:14:b8:af:e2:04:44:1d:04:f7:e7:c6: 6a:0d:7e:ca:13:9d:8a:40:df:6c:b7:94:f1:80:66: 60:07:b0:01:9d:31:82:8d:fb:a0:9e:b1:fc:f0:85: c2:39:d9:70:7e:64:d7:b1:b7:76:fe:d3:20:8a:b9: aa:6f:57:a0:da:8f:76:6a:dc:04:b1:63:ee:a5:a5: 2f:c9:79:56:36:bb:ec:96:55:b2:6a:bd:ed:b1:8e: 2f:b8:b7:d0:e5:82:f0:86:96:a7:b5:16:76:88:71: f4:51:1a:11:14:43:b2:e8:10:74:72:a2:49:ca:a1: a3:95:db:07:6c:c4:a2:45:c0:c8:a9:46:b6:6c:7c: 5b:48:f9:8d:df:a1:dc:69:f1:c8:60:8d:e6:95:4e: a3:10:b8:b0:8c:be:b9:0a:1a:68:c1:a8:8c:63:48: f2:c1:26:4f:e7:a5:f5:09:3b:53:00:5d:e3:f3:6b: 50:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C2:83:E6:E9:17:88:81:F2:DF:EA:59:43:C3:CE:EE:8C:E2:A4:A0 X509v3 Authority Key Identifier: keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:de:c3:39:50:c7:30:b0:bc:9c:1d:54:6f:57:e3:a0:56:29: 13:6c:38:a1:5b:fb:ce:f9:f7:85:78:b8:c8:c7:a2:81:d0:3e: d1:45:c2:7e:70:f4:ca:59:b3:40:ff:4f:a4:d8:9f:40:9a:e3: be:9f:cb:61:47:19:34:02:da:d2:9f:79:30:f1:ee:f7:1a:9e: d2:ba:74:bb:4e:05:ad:6a:be:52:93:2a:e0:6d:65:6e:27:94: 4b:47:46:53:74:7a:87:c0:54:de:56:f3:fd:2a:ae:87:ce:0f: a2:74:16:c2:ad:2f:ea:f0:6a:17:f2:2c:c8:c3:4d:76:b4:36: 07:e6:64:1e:cf:66:27:e5:75:a1:57:94:be:00:0b:ed:7c:c8: e2:91:18:9c:f4:b9:8a:14:1b:cb:3f:01:c9:ee:d5:bc:db:86: 79:27:a9:c9:b7:c3:11:9b:1d:f6:b9:ca:b1:fb:38:23:91:33: f4:4e:d5:3f:79:36:17:e3:ca:a9:8e:51:a4:f8:da:0c:cc:25: dc:17:dd:7a:af:a3:49:97:3e:90:ce:f7:9b:f4:c9:17:30:b5: a6:c0:7e:7a:f2:2d:3d:df:af:82:4b:17:76:bd:aa:e8:47:08: c7:81:96:12:f6:fa:69:2c:e7:03:df:ca:e5:f1:9f:c2:96:26: b5:40:c5:40 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUYVMLn8KRdp74PHNZU6iOT/45K1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQwMTIz MTA0OTJEODAeFw0yNjA3MjMxNzQxMjJaFw0yNjA3MjQxNzUyMjJaMDMxMTAvBgNV BAMTKDYzQzI4M0U2RTkxNzg4ODFGMkRGRUE1OTQzQzNDRUVFOENFMkE0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3R5r6ZiZlsUC0w20PIgNHwI3j IZCcET3oGSdmirDFB6ND8nmZDiMpwUy4kTvijpdtI6xE792FcCcRgkLM7VbBG66v VrGGtfH7Xh5e0v8UuK/iBEQdBPfnxmoNfsoTnYpA32y3lPGAZmAHsAGdMYKN+6Ce sfzwhcI52XB+ZNext3b+0yCKuapvV6Daj3Zq3ASxY+6lpS/JeVY2u+yWVbJqve2x ji+4t9DlgvCGlqe1FnaIcfRRGhEUQ7LoEHRyoknKoaOV2wdsxKJFwMipRrZsfFtI +Y3fodxp8chgjeaVTqMQuLCMvrkKGmjBqIxjSPLBJk/npfUJO1MAXePza1CtAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUY8KD5ukXiIHy3+pZQ8PO7ozipKAwHwYDVR0j BBgwFoAUnzl7g4BhKAwvKoh6ydZAEjEEktgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8x LzlGMzk3QjgzODA2MTI4MEMyRjJBODg3QUM5RDY0MDEyMzEwNDkyRDguY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzMvOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQw MTIzMTA0OTJEOC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS85RjM5N0I4MzgwNjEyODBD MkYyQTg4N0FDOUQ2NDAxMjMxMDQ5MkQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASt7DOVDHMLC8nB1U b1fjoFYpE2w4oVv7zvn3hXi4yMeigdA+0UXCfnD0ylmzQP9PpNifQJrjvp/LYUcZ NALa0p95MPHu9xqe0rp0u04FrWq+UpMq4G1lbieUS0dGU3R6h8BU3lbz/Squh84P onQWwq0v6vBqF/IsyMNNdrQ2B+ZkHs9mJ+V1oVeUvgAL7XzI4pEYnPS5ihQbyz8B ye7VvNuGeSepybfDEZsd9rnKsfs4I5Ez9E7VP3k2F+PKqY5RpPjaDMwl3Bfdeq+j SZc+kM73m/TJFzC1psB+evItPd+vgksXdr2q6EcIx4GWEvb6aSznA9/K5fGfwpYm tUDFQA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:36:02 2026 by rpki-client