$ rpki-client -vvvf rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft File: 8B6578CFFA2564370C947633B4222B38FBE04787.mft (raw, json) Hash identifier: FWaSEmcSBLgb70H39dsunuIXolrb1INMNn8eqzK1LVQ= Subject key identifier: 9D:3E:62:5A:C0:4E:58:38:F7:51:88:25:A1:A9:AD:E9:D9:07:2F:FC Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87 Certificate issuer: /CN=8B6578CFFA2564370C947633B4222B38FBE04787 Certificate serial: 351B91AC262069FF2CDD6B49619C48FA683A2AB5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft Manifest number: BE Signing time: Thu 24 Sep 2026 23:29:46 +0000 Manifest this update: Thu 24 Sep 2026 23:24:46 +0000 Manifest next update: Sat 26 Sep 2026 00:01:46 +0000 Files and hashes: 1: 8B6578CFFA2564370C947633B4222B38FBE04787.crl (hash: ea/N79Un8BwQl8yKP3zXxnQNaSOu4ATG/QT5PxmK1YI=) 2: 3130332e3130342e3135302e302f32342d3234203d3e20313335323933.roa (hash: h1zDSRZ3TRJlhR+U4wVbJzjHTzTePNMp3oBDSC21x4k=) 3: 3130332e3130342e3135312e302f32342d3234203d3e20313331363138.roa (hash: XPIZKI0b+STshE1jyzyv6vzwTCkp1FigGgVTYDae6lY=) 4: 3130332e3130342e3135312e302f32342d3234203d3e20313530323838.roa (hash: OVmj6wqpCDoCVGv/wnIQ7J+KG2IP7XidmU+Gbdn+nyQ=) 5: 3130332e3130342e3134382e302f32332d3332203d3e20313338343135.roa (hash: iG/RKgeK0WnHEYeyY7HDeBCF1wwyNY/516KS8KYs4xI=) 6: 3130332e3130342e3134382e302f32342d3332203d3e20313331363137.roa (hash: 3HCjGtrVeXk0xOR0uuHBiqXc7pJZ9osCCcWRgAc2u0I=) 7: 3130332e3130342e3134392e302f32342d3332203d3e20313331363137.roa (hash: OZwQnvVk4yetwjei/3UcgDl7U/wG9KFLqEYavrhzVlI=) 8: 3130332e3130342e3134382e302f32332d3332203d3e20313331363137.roa (hash: ptYVo8fcmKCNY0SB5M4EFl0tfitQ5lFpdJDuUwWLs1E=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1b:91:ac:26:20:69:ff:2c:dd:6b:49:61:9c:48:fa:68:3a:2a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787 Validity Not Before: Sep 24 23:24:46 2026 GMT Not After : Sep 26 00:01:46 2026 GMT Subject: CN=9D3E625AC04E5838F7518825A1A9ADE9D9072FFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:28:0c:98:db:d1:66:59:b9:34:c2:13:73:42: 0c:97:06:45:38:ab:e6:6e:b5:c0:82:ff:38:70:6a: c8:7f:57:bc:a0:aa:5e:a2:ab:a4:84:40:5a:cf:1d: b9:61:e5:da:79:ae:30:e1:e0:6f:c6:43:60:7a:69: e6:08:49:38:b6:bc:a0:7f:8c:75:ef:26:9d:40:01: 47:2a:a6:64:9a:ac:26:e4:87:16:52:00:e6:43:8f: e4:da:92:02:59:d2:51:31:64:6d:55:e9:75:59:48: 72:fe:db:6f:7b:fd:c4:41:d1:ee:80:7d:1e:de:a8: fd:d3:d0:1d:f8:95:63:53:64:68:66:31:b2:2b:53: fb:7b:e7:89:e4:b7:cb:ba:f1:7a:b6:2f:4c:dc:3b: da:fb:d3:66:13:16:97:a9:3d:e3:ca:ce:7e:88:a5: 6f:1f:98:ba:4c:0f:bd:e4:2f:5b:b3:e0:74:83:ec: 6d:a1:7f:06:69:0a:aa:7a:4f:cc:95:41:dc:cd:7f: 2c:37:83:d5:c7:f9:65:ce:b4:fc:78:6d:61:e3:0c: 17:be:39:52:ad:8f:32:3c:ad:07:63:89:e0:14:4a: 1b:24:cf:26:45:07:f9:ea:f4:ba:d3:c8:4a:0e:5c: 57:b3:a1:73:85:cd:e5:4e:d1:03:31:0b:dc:43:15: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3E:62:5A:C0:4E:58:38:F7:51:88:25:A1:A9:AD:E9:D9:07:2F:FC X509v3 Authority Key Identifier: keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:62:90:90:46:04:e4:ce:81:28:61:d8:ae:34:f2:2b:d8:7b: d6:d0:7b:db:c2:5c:8b:23:bf:e4:a3:1c:b0:db:6b:ae:4d:18: d2:31:70:bc:2c:f1:2c:25:1f:15:80:da:48:fa:c3:58:19:3f: d1:4a:30:36:6e:45:d4:2d:e4:c1:96:fa:5e:bd:fa:31:ff:ea: 50:9e:d1:73:cb:c7:36:e8:a7:7f:11:7f:dd:3b:ca:ca:9b:ec: 9c:e0:a3:59:fd:eb:eb:e8:80:25:11:f6:82:19:b9:80:52:c0: 01:fd:6b:9b:92:9a:89:84:8f:65:2f:e2:ad:40:f7:79:ef:e6: 81:3c:7f:f8:d0:7a:5d:36:7e:2e:79:19:d7:06:13:1a:73:90: ca:98:6d:3f:43:a1:53:14:45:7c:5f:5c:06:ca:20:28:2c:c0: b5:77:a1:5f:ac:23:fe:10:ca:5b:e8:fb:80:df:81:93:1d:ad: a0:e4:8c:6e:10:3a:4e:00:96:ea:f3:5b:d8:52:55:f8:03:9c: 6a:58:83:e8:f9:c3:4f:27:c0:ba:1c:af:5a:1b:60:d4:43:42: 49:ef:ae:e1:f0:ed:d8:2f:68:d4:83:83:56:61:fa:0c:09:b7: 40:3c:12:1b:e0:88:19:31:90:12:eb:15:72:54:24:59:b4:ff: dd:e8:5e:d3 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUNRuRrCYgaf8s3WtJYZxI+mg6KrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI2NTc4Q0ZGQTI1NjQzNzBDOTQ3NjMzQjQyMjJCMzhG QkUwNDc4NzAeFw0yNjA5MjQyMzI0NDZaFw0yNjA5MjYwMDAxNDZaMDMxMTAvBgNV BAMTKDlEM0U2MjVBQzA0RTU4MzhGNzUxODgyNUExQTlBREU5RDkwNzJGRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYKAyY29FmWbk0whNzQgyXBkU4 q+ZutcCC/zhwash/V7ygql6iq6SEQFrPHblh5dp5rjDh4G/GQ2B6aeYISTi2vKB/ jHXvJp1AAUcqpmSarCbkhxZSAOZDj+TakgJZ0lExZG1V6XVZSHL+2297/cRB0e6A fR7eqP3T0B34lWNTZGhmMbIrU/t754nkt8u68Xq2L0zcO9r702YTFpepPePKzn6I pW8fmLpMD73kL1uz4HSD7G2hfwZpCqp6T8yVQdzNfyw3g9XH+WXOtPx4bWHjDBe+ OVKtjzI8rQdjieAUShskzyZFB/nq9LrTyEoOXFezoXOFzeVO0QMxC9xDFTpvAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUnT5iWsBOWDj3UYgloamt6dkHL/wwHwYDVR0j BBgwFoAUi2V4z/olZDcMlHYztCIrOPvgR4cwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0VOVFJP SUQvMC84QjY1NzhDRkZBMjU2NDM3MEM5NDc2MzNCNDIyMkIzOEZCRTA0Nzg3LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzhCNjU3OENGRkEyNTY0MzcwQzk0NzYzM0I0 MjIyQjM4RkJFMDQ3ODcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DRU5UUk9JRC8wLzhCNjU3OENG RkEyNTY0MzcwQzk0NzYzM0I0MjIyQjM4RkJFMDQ3ODcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLYpCQ RgTkzoEoYdiuNPIr2HvW0HvbwlyLI7/koxyw22uuTRjSMXC8LPEsJR8VgNpI+sNY GT/RSjA2bkXULeTBlvpevfox/+pQntFzy8c26Kd/EX/dO8rKm+yc4KNZ/evr6IAl EfaCGbmAUsAB/WubkpqJhI9lL+KtQPd57+aBPH/40HpdNn4ueRnXBhMac5DKmG0/ Q6FTFEV8X1wGyiAoLMC1d6FfrCP+EMpb6PuA34GTHa2g5IxuEDpOAJbq81vYUlX4 A5xqWIPo+cNPJ8C6HK9aG2DUQ0JJ767h8O3YL2jUg4NWYfoMCbdAPBIb4IgZMZAS 6xVyVCRZtP/d6F7T -----END CERTIFICATE-----Generated at Fri Sep 25 02:41:45 2026 by rpki-client