$ rpki-client -vvvf rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft File: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft (raw, json) Hash identifier: 73U18m0EQH7rtDvMalZwZxMchgA4nxgdeAdfu87fPu8= Subject key identifier: 0D:21:B3:EE:79:A2:FC:48:E7:E8:09:A6:66:31:C3:4D:FA:C7:5E:21 Authority key identifier: 21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF Certificate issuer: /CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF Certificate serial: 59E4DD0274D1A25149C8812EAD09EEF3C84BD0EC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft Manifest number: BB Signing time: Thu 24 Sep 2026 12:49:48 +0000 Manifest this update: Thu 24 Sep 2026 12:44:48 +0000 Manifest next update: Fri 25 Sep 2026 16:31:48 +0000 Files and hashes: 1: 323430313a636436303a3a2f34302d3430203d3e20323134303330.roa (hash: 780V3DLt+Fe7Fs8V4ULwUWJozzo56xPXySO9+JGJ2W8=) 2: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl (hash: OCjj/0k786gXveLpXB+MPTPR0d5vHmHJ3hrz6cu8TXI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 16:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e4:dd:02:74:d1:a2:51:49:c8:81:2e:ad:09:ee:f3:c8:4b:d0:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF Validity Not Before: Sep 24 12:44:48 2026 GMT Not After : Sep 25 16:31:48 2026 GMT Subject: CN=0D21B3EE79A2FC48E7E809A66631C34DFAC75E21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:ec:86:6a:a3:9e:47:48:9c:03:15:57:f3: d6:dc:f9:8c:52:3e:64:2a:21:16:b3:20:d4:a7:37: df:e8:5d:4e:92:2b:ad:d1:ba:c2:a8:2b:52:b6:b5: 21:8c:48:45:c6:fb:85:2c:6a:3a:3b:cd:4a:64:7b: f5:4a:70:43:70:8b:4b:2c:66:d0:93:b7:dd:88:cd: 01:6d:36:80:88:84:95:b1:0d:43:34:6b:d2:26:01: a5:dd:bb:a9:9d:2c:5f:4f:af:ef:6a:1d:0c:4c:c8: e1:ee:ff:17:ef:c0:e8:db:70:b4:47:02:e5:7b:2a: 3d:c6:28:94:53:f3:ba:f4:2d:2a:67:03:c1:a2:d2: 3e:ec:e3:22:dd:73:ca:56:ac:79:73:d9:f2:fb:e1: f5:74:5b:f2:0b:e6:0d:86:8a:7e:de:d7:4e:5e:35: 70:c1:4d:71:58:6a:f9:a3:2c:9d:1f:c0:dd:26:75: 14:39:bf:bd:29:ef:7a:8c:c2:25:6a:ca:3e:db:c8: c3:9e:39:20:f9:e6:32:91:3d:b4:54:fa:f4:da:07: a1:d9:cc:0c:57:90:9e:da:54:97:18:4c:45:85:bd: fb:e3:d6:ef:51:59:57:da:7c:88:dc:4f:19:bc:cb: 68:63:ed:be:f4:f3:7e:d3:fe:14:6a:ac:b6:6d:06: 6a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:21:B3:EE:79:A2:FC:48:E7:E8:09:A6:66:31:C3:4D:FA:C7:5E:21 X509v3 Authority Key Identifier: keyid:21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:95:7e:94:c0:7e:fb:47:9d:98:02:90:c4:65:7e:58:06:06: f6:ec:ee:1e:02:a9:54:4c:6b:c2:92:07:c7:76:98:0f:81:86: 73:40:8c:87:34:82:69:75:f0:9e:74:43:32:b4:71:9c:a0:6c: 24:a6:f7:6b:fb:1c:91:82:93:95:5b:ec:6a:a6:12:68:9b:71: 08:8c:b4:e1:56:cb:dc:1e:b6:3e:39:46:51:2b:61:ed:48:73: c4:3c:65:b0:ca:42:c4:8f:8e:c7:57:26:19:83:fb:df:bf:0e: d2:cf:44:58:d2:fa:0c:21:6e:ce:58:b3:c0:6b:67:2d:2a:9b: 03:d8:9f:ef:cb:26:e7:97:37:02:e7:92:35:a4:3f:05:1d:40: 55:6b:dd:2c:d6:c5:45:48:5d:c1:1c:76:5e:b6:bd:7d:1a:9b: ed:23:d0:ec:35:bc:30:c2:5d:41:f2:d1:0d:94:ed:9c:bb:80: f1:d0:83:a1:2a:66:a7:c8:d0:3b:cf:06:0d:6f:9d:83:a7:85: cd:f8:dc:3b:82:ed:65:e1:5b:c0:94:18:08:db:c4:fb:1b:4f: b3:4d:76:ba:4d:fc:10:d2:1d:d5:cb:46:12:5d:df:81:33:e8: 24:9d:f7:39:3e:12:d8:f4:59:4d:06:c0:1f:fe:67:78:44:ae: 60:a0:c8:1d -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUWeTdAnTRolFJyIEurQnu88hL0OwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5 NDlDRDVBRjAeFw0yNjA5MjQxMjQ0NDhaFw0yNjA5MjUxNjMxNDhaMDMxMTAvBgNV BAMTKDBEMjFCM0VFNzlBMkZDNDhFN0U4MDlBNjY2MzFDMzRERkFDNzVFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCunOyGaqOeR0icAxVX89bc+YxS PmQqIRazINSnN9/oXU6SK63RusKoK1K2tSGMSEXG+4Usajo7zUpke/VKcENwi0ss ZtCTt92IzQFtNoCIhJWxDUM0a9ImAaXdu6mdLF9Pr+9qHQxMyOHu/xfvwOjbcLRH AuV7Kj3GKJRT87r0LSpnA8Gi0j7s4yLdc8pWrHlz2fL74fV0W/IL5g2Gin7e105e NXDBTXFYavmjLJ0fwN0mdRQ5v70p73qMwiVqyj7byMOeOSD55jKRPbRU+vTaB6HZ zAxXkJ7aVJcYTEWFvfvj1u9RWVfafIjcTxm8y2hj7b70837T/hRqrLZtBmoDAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUDSGz7nmi/Ejn6AmmZjHDTfrHXiEwHwYDVR0j BBgwFoAUIdv9GSESH3MMYUwN5iEs1pSc1a8wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE LzAvMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMURCRkQxOTIxMTIxRjczMEM2MTRDMERFNjIx MkNENjk0OUNENUFGLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzAvMjFEQkZEMTkyMTEy MUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEeVfpTAfvtH nZgCkMRlflgGBvbs7h4CqVRMa8KSB8d2mA+BhnNAjIc0gml18J50QzK0cZygbCSm 92v7HJGCk5Vb7GqmEmibcQiMtOFWy9wetj45RlErYe1Ic8Q8ZbDKQsSPjsdXJhmD +9+/DtLPRFjS+gwhbs5Ys8BrZy0qmwPYn+/LJueXNwLnkjWkPwUdQFVr3SzWxUVI XcEcdl62vX0am+0j0Ow1vDDCXUHy0Q2U7Zy7gPHQg6EqZqfI0DvPBg1vnYOnhc34 3DuC7WXhW8CUGAjbxPsbT7NNdrpN/BDSHdXLRhJd34Ez6CSd9zk+Etj0WU0GwB/+ Z3hErmCgyB0= -----END CERTIFICATE-----Generated at Fri Sep 25 00:15:20 2026 by rpki-client