$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft File: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft (raw, json) Hash identifier: K1InQhuk9ojuXIOxEx7E3Htu4FuNk47+XU5+IDavtTU= Subject key identifier: 19:A4:4F:39:38:6B:95:2B:55:AC:B6:AB:D8:7E:82:00:B9:C0:39:81 Authority key identifier: BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA Certificate issuer: /CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Certificate serial: 5E7ECFC088821935A8FD50E1C2FA9310510FE94C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 15:37:44 +0000 Manifest this update: Sat 14 Nov 2026 15:32:44 +0000 Manifest next update: Sun 15 Nov 2026 16:30:44 +0000 Files and hashes: 1: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl (hash: I6ox1y8ZhuDpikcYmTPd7GOfVqPo1eJK4jjXrYxFCI4=) 2: 323430323a346432303a313a3a2f34382d3438203d3e20313331363533.roa (hash: X9wIzhuw1c0lYPQ7mtcEb2gQt9tzHi6f24KHdsIqRUI=) 3: 323430323a346432303a3a2f34382d3438203d3e20323133343330.roa (hash: yXLG5aJYFzJQAOcQmz7saI6BueUDkIVJ2tp9ey7Y/oo=) 4: 323430323a346432303a3a2f34382d3438203d3e20313532363236.roa (hash: gWGrH7k/E1wfVhOhIGsZWVZwwwOvXG8dp1buitprMVE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:7e:cf:c0:88:82:19:35:a8:fd:50:e1:c2:fa:93:10:51:0f:e9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Validity Not Before: Nov 14 15:32:44 2026 GMT Not After : Nov 15 16:30:44 2026 GMT Subject: CN=19A44F39386B952B55ACB6ABD87E8200B9C03981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:fd:69:de:f0:c1:60:d3:4c:53:c4:3b:c6: 2d:00:f4:9a:8c:48:e1:cd:21:a0:73:04:6f:48:63: d4:7f:74:ac:04:57:17:51:cd:6e:e4:ee:7c:41:8c: 8b:43:07:c8:78:64:3e:cf:f0:80:6f:bb:12:55:d1: 84:50:97:91:75:2f:de:f1:4b:5e:3a:3c:70:6b:d6: 93:a8:f5:51:46:b3:5a:a4:e2:0e:81:1d:d5:42:6c: ec:89:91:f7:4e:e3:79:19:97:b8:cd:e5:c0:a3:99: d3:66:fc:61:6c:7d:1b:93:a2:21:e2:98:5f:82:c5: c0:37:57:a6:a5:ad:77:d0:6c:61:33:21:73:4d:49: ba:0d:c2:6c:b6:e1:07:7d:8f:f3:30:e7:69:69:3c: fa:5b:19:cf:8e:a1:52:2e:e1:53:e0:56:d5:0f:cb: 02:f6:af:1d:8a:15:15:ad:50:de:12:e5:9a:48:8e: 2c:9e:f1:4a:4c:67:18:25:ad:4f:93:39:88:b1:f5: f2:c5:1e:52:68:64:62:27:9f:de:b0:f9:ae:86:6c: ef:e0:fd:e4:4e:fc:e2:a8:d3:a8:d9:d0:b3:bd:e8: 5a:88:c0:74:75:e6:8f:ee:d9:aa:dc:aa:6e:23:6d: f8:20:4a:02:a1:50:25:49:77:5b:72:c5:10:ad:a8: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A4:4F:39:38:6B:95:2B:55:AC:B6:AB:D8:7E:82:00:B9:C0:39:81 X509v3 Authority Key Identifier: keyid:BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:fb:38:f9:b8:b1:d0:f5:ae:2d:f3:f0:cb:17:1c:43:9d:4c: 07:c7:f4:ee:3f:63:3e:f4:92:b3:77:4f:df:9e:6b:1b:d3:d6: 27:fb:72:4a:2f:83:b0:8a:47:8d:06:2d:1b:9d:35:11:d5:9d: 2d:b6:42:83:10:3c:4b:bb:e4:b0:e4:51:ab:84:85:0c:f4:ba: f7:e5:76:63:77:df:3d:60:5e:0c:5c:43:6c:2f:46:72:f2:00: 39:ae:2e:5f:13:e7:08:13:d1:38:cc:e3:9c:05:3a:04:09:8b: 7a:a6:ff:04:17:49:dc:cf:52:e6:3e:b7:ea:ca:bf:81:e9:c1: 1a:d4:8d:5d:ca:cb:03:0e:c7:77:12:a7:63:16:bb:6c:c7:aa: 87:a4:fe:11:76:41:73:10:86:bc:0e:db:35:19:81:8b:68:a3: 99:f5:22:0b:cc:f9:29:ae:89:2d:32:fa:2d:30:bc:b7:a8:5f: 26:60:81:78:d9:ab:92:b8:e2:66:2b:a0:72:08:f2:52:c5:d5: 8b:ba:ff:90:93:a1:51:6d:be:d4:e6:22:ed:53:43:7d:d0:09: 20:31:60:b2:eb:e3:b6:ad:1e:77:52:62:e2:6e:82:ab:63:e7: 35:35:25:c4:95:1c:ef:80:ee:4e:47:99:aa:16:b4:fa:6a:7d: 72:f0:e6:5c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUXn7PwIiCGTWo/VDhwvqTEFEP6UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3 QTlFMDVEQTAeFw0yNjExMTQxNTMyNDRaFw0yNjExMTUxNjMwNDRaMDMxMTAvBgNV BAMTKDE5QTQ0RjM5Mzg2Qjk1MkI1NUFDQjZBQkQ4N0U4MjAwQjlDMDM5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBv1p3vDBYNNMU8Q7xi0A9JqM SOHNIaBzBG9IY9R/dKwEVxdRzW7k7nxBjItDB8h4ZD7P8IBvuxJV0YRQl5F1L97x S146PHBr1pOo9VFGs1qk4g6BHdVCbOyJkfdO43kZl7jN5cCjmdNm/GFsfRuToiHi mF+CxcA3V6alrXfQbGEzIXNNSboNwmy24Qd9j/Mw52lpPPpbGc+OoVIu4VPgVtUP ywL2rx2KFRWtUN4S5ZpIjiye8UpMZxglrU+TOYix9fLFHlJoZGInn96w+a6GbO/g /eRO/OKo06jZ0LO96FqIwHR15o/u2arcqm4jbfggSgKhUCVJd1tyxRCtqLwLAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUGaRPOThrlStVrLar2H6CALnAOYEwHwYDVR0j BBgwFoAUvtclxBPHpDb1ogDyB/PLOnqeBdowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURC QVNFLzAvQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9CRUQ3MjVDNDEzQzdBNDM2RjVBMjAwRjIw N0YzQ0IzQTdBOUUwNURBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURCQVNFLzAvQkVENzI1 QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIj7 OPm4sdD1ri3z8MsXHEOdTAfH9O4/Yz70krN3T9+eaxvT1if7ckovg7CKR40GLRud NRHVnS22QoMQPEu75LDkUauEhQz0uvfldmN33z1gXgxcQ2wvRnLyADmuLl8T5wgT 0TjM45wFOgQJi3qm/wQXSdzPUuY+t+rKv4HpwRrUjV3KywMOx3cSp2MWu2zHqoek /hF2QXMQhrwO2zUZgYtoo5n1IgvM+SmuiS0y+i0wvLeoXyZggXjZq5K44mYroHII 8lLF1Yu6/5CToVFtvtTmIu1TQ33QCSAxYLLr47atHndSYuJugqtj5zU1JcSVHO+A 7k5HmaoWtPpqfXLw5lw= -----END CERTIFICATE-----Generated at Sun Nov 15 01:05:34 2026 by rpki-client