$ rpki-client -vvvf rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft File: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft (raw, json) Hash identifier: LwZFI25QZoMmXTQCs4zlPymRGh2mJklU6mXkR3URGUk= Subject key identifier: 65:6C:57:07:62:9D:8A:BB:44:F7:AF:90:79:A3:D4:72:E6:E4:49:4C Authority key identifier: 82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8 Certificate issuer: /CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8 Certificate serial: 732D4CBDC9DFB5581B0E80E054DCDF6104F029BD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft Manifest number: FF Signing time: Sat 14 Nov 2026 10:22:04 +0000 Manifest this update: Sat 14 Nov 2026 10:17:04 +0000 Manifest next update: Sun 15 Nov 2026 12:09:04 +0000 Files and hashes: 1: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl (hash: xZDzER3W8IFXrV3iZb+hsuM7BK9Cji2DuK+i1FLy7NA=) 2: 3136302e3139312e392e302f32342d3332203d3e20313530373636.roa (hash: iobSCigwHPXsmKPAiv0Cm9wPrYmBsLfhPZWAEKgfxoc=) 3: 3136302e3139312e382e302f32332d3234203d3e20313530373636.roa (hash: BxOTrJ4kAeU/jIshca7/vnqFH5T34oiHpb989w5ilgs=) 4: 3136302e3139312e392e302f32342d3234203d3e20313530373636.roa (hash: Fdjjfm1fJnNWkVxu2u3fwQcxaiitdeQENtBg51jTLAs=) 5: 3136302e3139312e382e302f32342d3332203d3e20313530373636.roa (hash: rnSZ0yRJQ87LO3K66pUprLSWzMYNldm6q1qbJoiJRVA=) 6: 3136302e3139312e382e302f32342d3234203d3e20313530373636.roa (hash: 23kEX/05VYapgUwuItpshBmqk2zUM39bNJvI89JH27Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 12:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2d:4c:bd:c9:df:b5:58:1b:0e:80:e0:54:dc:df:61:04:f0:29:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8 Validity Not Before: Nov 14 10:17:04 2026 GMT Not After : Nov 15 12:09:04 2026 GMT Subject: CN=656C5707629D8ABB44F7AF9079A3D472E6E4494C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:02:ff:89:b9:59:6b:88:2f:df:04:20:30: b9:15:05:f7:0d:7c:b0:80:10:07:39:01:f1:5e:98: c2:9c:92:3d:19:ea:ad:4e:10:e2:ee:5e:90:c6:68: 7c:f0:47:da:e5:7a:88:60:73:a8:18:c6:6d:a4:9f: cb:57:17:12:7f:b2:ed:ac:66:37:90:f7:f7:20:17: 5d:4a:7c:f1:36:fe:5f:76:7f:2e:33:36:ce:50:5a: e3:1d:e5:5e:4f:4c:f1:ec:84:26:cc:9c:8f:ff:25: da:b5:13:f4:6a:2e:12:cc:45:b2:04:f5:31:6a:43: 47:49:fd:bd:10:1a:d2:f4:d5:3f:83:a3:95:1a:a1: 41:1a:a5:58:f2:eb:15:eb:e2:5d:ce:00:e9:95:98: 7e:11:88:7a:15:f7:af:2c:09:ae:f5:ee:2e:a9:e2: e3:f4:11:a3:5f:90:17:fc:ac:d4:2f:76:49:7b:05: ac:05:a9:1e:2f:83:85:d2:f6:7d:e9:f2:42:25:b8: 2a:83:c2:19:75:55:b0:f8:fa:e0:cb:d1:8c:be:fa: 96:7c:09:49:c7:a5:5f:1f:57:d0:2a:48:a8:60:77: 11:90:e2:e3:ff:55:a2:aa:69:c9:95:3b:d9:ed:13: 08:9f:8c:1e:93:f9:7b:2d:4b:6d:ea:af:9a:79:91: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6C:57:07:62:9D:8A:BB:44:F7:AF:90:79:A3:D4:72:E6:E4:49:4C X509v3 Authority Key Identifier: keyid:82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:95:d0:b2:1f:92:4f:cd:92:1c:b5:c8:21:47:47:48:d4:75: 49:38:28:30:fb:97:79:00:a3:3d:b4:5a:44:ca:ef:91:80:d9: 52:9d:de:0c:98:b8:63:e7:28:7a:e3:d0:3b:2c:46:07:7e:45: 55:b1:c1:c9:8d:08:e5:cb:e6:02:d7:36:4c:7d:ef:fc:51:14: 18:34:17:ef:64:45:9a:ed:e6:a1:e0:53:c9:58:3d:46:d4:f1: a1:77:82:7a:34:7e:37:6d:d8:cc:96:fc:04:b8:b3:2f:c0:58: 2e:60:d2:ac:2b:51:99:51:e3:cc:e7:dd:33:9b:15:7c:f8:a8: a2:4a:41:bf:98:75:b4:9a:fc:15:e2:e2:be:e0:45:48:d2:cf: 62:98:d8:f6:b9:da:94:59:b3:54:59:34:14:a0:ba:51:7e:26: a8:68:6e:03:2e:34:48:49:f3:14:e1:40:0a:f9:b5:34:21:02: d7:ba:51:a4:b4:67:27:ca:09:07:9e:01:3a:01:ac:cf:89:a2: 3d:02:38:62:54:04:e7:8a:54:c3:15:48:95:91:cf:bd:49:1a: 64:0f:ad:61:fc:18:ce:dd:1f:e6:19:d3:eb:1c:ab:5a:ad:6d: 89:36:37:64:f5:14:d7:65:23:21:43:9d:48:de:d1:e3:32:60: 31:5d:90:a2 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUcy1MvcnftVgbDoDgVNzfYQTwKb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI0MkEzOUUwNTc3RThFODJCRjg2M0QwMTI0RkY1QUYy RjUzQzlDODAeFw0yNjExMTQxMDE3MDRaFw0yNjExMTUxMjA5MDRaMDMxMTAvBgNV BAMTKDY1NkM1NzA3NjI5RDhBQkI0NEY3QUY5MDc5QTNENDcyRTZFNDQ5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaQL/iblZa4gv3wQgMLkVBfcN fLCAEAc5AfFemMKckj0Z6q1OEOLuXpDGaHzwR9rleohgc6gYxm2kn8tXFxJ/su2s ZjeQ9/cgF11KfPE2/l92fy4zNs5QWuMd5V5PTPHshCbMnI//Jdq1E/RqLhLMRbIE 9TFqQ0dJ/b0QGtL01T+Do5UaoUEapVjy6xXr4l3OAOmVmH4RiHoV968sCa717i6p 4uP0EaNfkBf8rNQvdkl7BawFqR4vg4XS9n3p8kIluCqDwhl1VbD4+uDL0Yy++pZ8 CUnHpV8fV9AqSKhgdxGQ4uP/VaKqacmVO9ntEwifjB6T+XstS23qr5p5keHDAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUZWxXB2KdirtE96+QeaPUcubkSUwwHwYDVR0j BBgwFoAUgkKjngV36Ogr+GPQEk/1ry9TycgwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE LzEvODI0MkEzOUUwNTc3RThFODJCRjg2M0QwMTI0RkY1QUYyRjUzQzlDOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC84MjQyQTM5RTA1NzdFOEU4MkJGODYzRDAxMjRG RjVBRjJGNTNDOUM4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzEvODI0MkEzOUUwNTc3 RThFODJCRjg2M0QwMTI0RkY1QUYyRjUzQzlDOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG2V0LIfkk/N khy1yCFHR0jUdUk4KDD7l3kAoz20WkTK75GA2VKd3gyYuGPnKHrj0DssRgd+RVWx wcmNCOXL5gLXNkx97/xRFBg0F+9kRZrt5qHgU8lYPUbU8aF3gno0fjdt2MyW/AS4 sy/AWC5g0qwrUZlR48zn3TObFXz4qKJKQb+YdbSa/BXi4r7gRUjSz2KY2Pa52pRZ s1RZNBSgulF+JqhobgMuNEhJ8xThQAr5tTQhAte6UaS0ZyfKCQeeAToBrM+Joj0C OGJUBOeKVMMVSJWRz71JGmQPrWH8GM7dH+YZ0+scq1qtbYk2N2T1FNdlIyFDnUje 0eMyYDFdkKI= -----END CERTIFICATE-----Generated at Sun Nov 15 00:29:17 2026 by rpki-client