$ rpki-client -vvvf rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft File: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft (raw, json) Hash identifier: eUhs5VREIOv5BsnO/bdbEHTcQmIJey2Je0GpjWqMOWo= Subject key identifier: B7:69:3B:A3:B8:D6:3D:41:3B:FB:52:6D:9B:55:C2:1F:DC:CE:71:C6 Authority key identifier: 82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8 Certificate issuer: /CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8 Certificate serial: 3C985DC8674E1906EF4BD6F77FDA537E398C5380 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft Manifest number: BB Signing time: Thu 24 Sep 2026 07:24:07 +0000 Manifest this update: Thu 24 Sep 2026 07:19:07 +0000 Manifest next update: Fri 25 Sep 2026 09:59:07 +0000 Files and hashes: 1: 3136302e3139312e382e302f32342d3234203d3e20313530373636.roa (hash: 23kEX/05VYapgUwuItpshBmqk2zUM39bNJvI89JH27Y=) 2: 3136302e3139312e392e302f32342d3332203d3e20313530373636.roa (hash: iobSCigwHPXsmKPAiv0Cm9wPrYmBsLfhPZWAEKgfxoc=) 3: 3136302e3139312e392e302f32342d3234203d3e20313530373636.roa (hash: Fdjjfm1fJnNWkVxu2u3fwQcxaiitdeQENtBg51jTLAs=) 4: 3136302e3139312e382e302f32332d3234203d3e20313530373636.roa (hash: BxOTrJ4kAeU/jIshca7/vnqFH5T34oiHpb989w5ilgs=) 5: 3136302e3139312e382e302f32342d3332203d3e20313530373636.roa (hash: rnSZ0yRJQ87LO3K66pUprLSWzMYNldm6q1qbJoiJRVA=) 6: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl (hash: nbgOH0f2M/8yi2Lp3lD4Xse4oDbDawyFDtQ0wAAUYro=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:98:5d:c8:67:4e:19:06:ef:4b:d6:f7:7f:da:53:7e:39:8c:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8 Validity Not Before: Sep 24 07:19:07 2026 GMT Not After : Sep 25 09:59:07 2026 GMT Subject: CN=B7693BA3B8D63D413BFB526D9B55C21FDCCE71C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ad:7d:62:4f:bc:3d:97:aa:fb:a2:c9:30:cd: cd:6b:f4:92:53:91:13:76:6c:c2:9a:b7:40:5f:50: 5d:ed:2d:f5:1b:9c:13:66:c4:f3:d0:e7:ff:6c:f6: cf:5d:71:59:c7:02:a2:8f:35:70:83:2f:06:5e:e4: 2a:e5:eb:75:6f:3c:f8:29:ec:ca:ea:70:af:7f:12: 6a:24:f9:3a:62:c3:13:9b:64:4a:87:41:38:f6:21: 64:07:92:ac:c9:b2:67:c5:6c:f0:4d:2c:6f:3b:ff: 87:ba:39:89:32:4c:7a:7d:9f:93:27:de:d6:94:31: 1f:01:35:7d:42:7f:f3:46:46:8a:12:a5:15:8c:50: 5a:03:18:5a:b9:31:f9:73:67:18:3f:86:59:ce:c0: 73:79:4b:eb:2c:a2:22:c7:db:9f:62:68:e8:7a:aa: 1d:12:0d:a9:26:46:6b:02:46:0d:1d:e8:21:75:81: 0b:2b:34:03:a7:84:86:42:0b:b3:4d:9c:16:b6:b0: bc:16:98:64:25:ae:0f:dc:9e:a5:5d:ed:3a:aa:48: ea:e3:22:4c:7d:12:5f:7c:55:d7:f1:52:61:9d:32: 32:03:19:ba:2a:db:9f:10:6b:c4:cf:38:6b:eb:d8: 0f:2b:a6:81:c9:d4:46:8c:7e:f0:64:70:15:08:14: df:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:69:3B:A3:B8:D6:3D:41:3B:FB:52:6D:9B:55:C2:1F:DC:CE:71:C6 X509v3 Authority Key Identifier: keyid:82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0a:9f:e1:71:d9:b0:51:df:1d:91:5d:3a:63:96:b0:a4:cf: e9:66:b0:f1:79:d2:e5:b5:1e:e1:2f:15:a2:a2:5c:73:a2:68: 95:6d:26:e8:fb:c3:c0:52:6c:c1:f6:13:a2:71:92:2e:4d:5a: e2:1b:f1:e5:77:4c:7d:dc:54:92:fc:a4:85:2b:5f:47:fd:51: 54:3d:bd:d6:b3:da:a0:f1:ee:5c:0f:51:d2:9c:b8:df:2e:8b: b8:7f:02:db:32:11:8b:f2:13:fe:55:d9:fb:3f:91:57:a7:2b: cb:af:dd:5f:3a:48:3b:dd:3c:da:89:27:b0:24:63:14:f3:49: c0:64:f7:c9:8e:b6:27:e4:86:ac:23:3c:67:4f:18:0f:01:97: 87:41:30:21:a8:4c:05:23:02:27:9b:64:6f:34:1a:04:ec:6e: b6:99:08:e6:23:45:fd:4a:20:9b:2d:02:44:d6:0e:83:04:9d: b3:17:6b:3c:e9:2c:ea:d6:95:a5:4b:1f:ec:b0:62:b5:51:e1: a1:28:99:79:81:06:2c:df:f5:d6:62:fc:b6:33:e5:f6:5b:a4: 87:c7:08:62:03:91:28:9d:ef:bd:6f:99:00:4f:78:58:9c:c7: 01:04:35:bf:c0:4d:15:0d:57:a9:a1:91:6b:08:22:2d:ee:28: 67:42:9d:a0 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUPJhdyGdOGQbvS9b3f9pTfjmMU4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI0MkEzOUUwNTc3RThFODJCRjg2M0QwMTI0RkY1QUYy RjUzQzlDODAeFw0yNjA5MjQwNzE5MDdaFw0yNjA5MjUwOTU5MDdaMDMxMTAvBgNV BAMTKEI3NjkzQkEzQjhENjNENDEzQkZCNTI2RDlCNTVDMjFGRENDRTcxQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrX1iT7w9l6r7oskwzc1r9JJT kRN2bMKat0BfUF3tLfUbnBNmxPPQ5/9s9s9dcVnHAqKPNXCDLwZe5Crl63VvPPgp 7MrqcK9/Emok+TpiwxObZEqHQTj2IWQHkqzJsmfFbPBNLG87/4e6OYkyTHp9n5Mn 3taUMR8BNX1Cf/NGRooSpRWMUFoDGFq5MflzZxg/hlnOwHN5S+ssoiLH259iaOh6 qh0SDakmRmsCRg0d6CF1gQsrNAOnhIZCC7NNnBa2sLwWmGQlrg/cnqVd7TqqSOrj Ikx9El98VdfxUmGdMjIDGboq258Qa8TPOGvr2A8rpoHJ1EaMfvBkcBUIFN+pAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUt2k7o7jWPUE7+1Jtm1XCH9zOccYwHwYDVR0j BBgwFoAUgkKjngV36Ogr+GPQEk/1ry9TycgwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE LzEvODI0MkEzOUUwNTc3RThFODJCRjg2M0QwMTI0RkY1QUYyRjUzQzlDOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC84MjQyQTM5RTA1NzdFOEU4MkJGODYzRDAxMjRG RjVBRjJGNTNDOUM4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzEvODI0MkEzOUUwNTc3 RThFODJCRjg2M0QwMTI0RkY1QUYyRjUzQzlDOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHUKn+Fx2bBR 3x2RXTpjlrCkz+lmsPF50uW1HuEvFaKiXHOiaJVtJuj7w8BSbMH2E6Jxki5NWuIb 8eV3TH3cVJL8pIUrX0f9UVQ9vdaz2qDx7lwPUdKcuN8ui7h/AtsyEYvyE/5V2fs/ kVenK8uv3V86SDvdPNqJJ7AkYxTzScBk98mOtifkhqwjPGdPGA8Bl4dBMCGoTAUj AiebZG80GgTsbraZCOYjRf1KIJstAkTWDoMEnbMXazzpLOrWlaVLH+ywYrVR4aEo mXmBBizf9dZi/LYz5fZbpIfHCGIDkSid771vmQBPeFicxwEENb/ATRUNV6mhkWsI Ii3uKGdCnaA= -----END CERTIFICATE-----Generated at Thu Sep 24 15:54:44 2026 by rpki-client