$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft File: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft (raw, json) Hash identifier: t5jHnp0hPVllB818/6Zk8X9XT64DOb3NiCmQ5t6msIY= Subject key identifier: 8F:AD:4B:61:0D:1F:B2:04:68:00:E8:01:42:99:F3:EB:BF:A4:70:4E Authority key identifier: BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA Certificate issuer: /CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Certificate serial: 10CAFE2F700764770092F516EBE4EB6F6FE6DE5A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft Manifest number: BF Signing time: Wed 23 Sep 2026 07:16:55 +0000 Manifest this update: Wed 23 Sep 2026 07:11:55 +0000 Manifest next update: Thu 24 Sep 2026 09:59:55 +0000 Files and hashes: 1: 323430323a346432303a3a2f34382d3438203d3e20323133343330.roa (hash: yXLG5aJYFzJQAOcQmz7saI6BueUDkIVJ2tp9ey7Y/oo=) 2: 323430323a346432303a313a3a2f34382d3438203d3e20313331363533.roa (hash: X9wIzhuw1c0lYPQ7mtcEb2gQt9tzHi6f24KHdsIqRUI=) 3: 323430323a346432303a3a2f34382d3438203d3e20313532363236.roa (hash: gWGrH7k/E1wfVhOhIGsZWVZwwwOvXG8dp1buitprMVE=) 4: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl (hash: Jz2Ybb04LIcjf1BxV2XJvyQ2fVFm8+BZHpndYeDv3QY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ca:fe:2f:70:07:64:77:00:92:f5:16:eb:e4:eb:6f:6f:e6:de:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Validity Not Before: Sep 23 07:11:55 2026 GMT Not After : Sep 24 09:59:55 2026 GMT Subject: CN=8FAD4B610D1FB2046800E8014299F3EBBFA4704E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:97:23:ef:9a:46:e3:d6:7e:e3:a5:cc:8d: 5e:8c:f0:14:ad:4d:7b:8a:76:6a:26:8e:ad:67:bd: 54:fa:d1:28:3b:0f:33:18:c4:50:68:17:98:98:95: 52:10:2c:15:e3:8c:75:14:b9:6b:4c:76:65:89:c7: b3:e5:63:4c:78:71:4a:f9:14:2a:76:af:97:19:66: cf:8b:25:5f:e4:27:2c:04:d4:99:6c:17:bd:1c:1c: 84:66:c3:7b:c3:e1:d6:d9:e5:c0:22:1c:3d:e9:d4: de:63:14:8b:ec:2b:83:ec:ed:03:93:20:bf:6a:5d: 7c:0f:12:2e:38:1b:87:09:dd:af:86:30:bc:a4:01: a4:9a:6a:fb:1a:e2:f4:2a:87:30:af:d9:0e:df:0c: d5:63:61:98:94:72:49:38:2d:b1:18:61:c2:84:0d: 04:60:60:9e:29:1c:72:f2:86:6f:3b:79:ff:dd:3a: dd:e9:1f:c8:4a:32:13:58:b7:38:0b:44:9f:88:06: 3a:52:10:2c:4b:04:fd:3a:af:a0:ac:c9:c7:1e:7f: 66:d4:80:4f:42:c6:ba:d3:da:8f:62:84:2d:2a:5f: 3e:94:d8:40:2a:d7:58:14:af:35:b2:aa:61:29:14: 0f:ba:c5:cc:67:69:ee:72:f3:7b:ee:dc:69:cc:79: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AD:4B:61:0D:1F:B2:04:68:00:E8:01:42:99:F3:EB:BF:A4:70:4E X509v3 Authority Key Identifier: keyid:BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:72:45:25:a1:8f:4e:95:ac:62:02:62:78:d4:57:27:a5:b4: b7:b1:96:e9:3b:de:4c:fa:77:c3:f8:fb:a4:19:15:4d:e5:6b: 7c:c1:6c:fa:62:52:c6:7a:d8:3a:80:67:b1:9c:12:cf:74:0c: 60:ab:c4:d6:b5:70:ab:99:70:64:37:4a:31:7d:1c:6f:44:a5: 3a:c4:2f:55:bb:09:e1:be:88:05:ab:7a:bb:99:55:f9:f1:33: 99:7a:c0:65:9d:f2:ec:2f:0f:77:05:57:e0:ec:68:cb:80:d7: 75:65:e2:80:d4:57:8a:db:a7:54:33:4c:d0:6a:3e:c7:2e:c6: 6e:96:cb:84:b3:d7:0a:a5:de:67:15:d4:e2:8d:fc:ab:01:a0: 9c:d8:a6:a3:ba:c8:0a:8d:55:02:23:e1:60:1c:69:02:bb:18: c9:56:1a:b7:75:e7:f1:d7:f6:1f:73:3a:97:33:1c:16:a5:8c: 1f:fb:c0:58:55:83:01:e9:12:16:1b:d0:26:26:03:c9:14:ec: 6e:51:98:55:5c:57:bc:bd:b2:39:43:28:b2:81:9b:3a:ae:83: ae:86:01:23:97:13:1d:8a:8d:90:05:f1:40:d1:d6:e2:f5:99: 77:5a:8a:f5:f5:b3:45:96:63:32:f2:12:bd:d3:24:6d:cd:25: 75:a0:6b:67 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUEMr+L3AHZHcAkvUW6+Trb2/m3lowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3 QTlFMDVEQTAeFw0yNjA5MjMwNzExNTVaFw0yNjA5MjQwOTU5NTVaMDMxMTAvBgNV BAMTKDhGQUQ0QjYxMEQxRkIyMDQ2ODAwRTgwMTQyOTlGM0VCQkZBNDcwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy95cj75pG49Z+46XMjV6M8BSt TXuKdmomjq1nvVT60Sg7DzMYxFBoF5iYlVIQLBXjjHUUuWtMdmWJx7PlY0x4cUr5 FCp2r5cZZs+LJV/kJywE1JlsF70cHIRmw3vD4dbZ5cAiHD3p1N5jFIvsK4Ps7QOT IL9qXXwPEi44G4cJ3a+GMLykAaSaavsa4vQqhzCv2Q7fDNVjYZiUckk4LbEYYcKE DQRgYJ4pHHLyhm87ef/dOt3pH8hKMhNYtzgLRJ+IBjpSECxLBP06r6Csyccef2bU gE9CxrrT2o9ihC0qXz6U2EAq11gUrzWyqmEpFA+6xcxnae5y83vu3GnMeZt9AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUj61LYQ0fsgRoAOgBQpnz67+kcE4wHwYDVR0j BBgwFoAUvtclxBPHpDb1ogDyB/PLOnqeBdowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURC QVNFLzAvQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9CRUQ3MjVDNDEzQzdBNDM2RjVBMjAwRjIw N0YzQ0IzQTdBOUUwNURBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURCQVNFLzAvQkVENzI1 QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFxy RSWhj06VrGICYnjUVyeltLexluk73kz6d8P4+6QZFU3la3zBbPpiUsZ62DqAZ7Gc Es90DGCrxNa1cKuZcGQ3SjF9HG9EpTrEL1W7CeG+iAWreruZVfnxM5l6wGWd8uwv D3cFV+DsaMuA13Vl4oDUV4rbp1QzTNBqPscuxm6Wy4Sz1wql3mcV1OKN/KsBoJzY pqO6yAqNVQIj4WAcaQK7GMlWGrd15/HX9h9zOpczHBaljB/7wFhVgwHpEhYb0CYm A8kU7G5RmFVcV7y9sjlDKLKBmzqug66GASOXEx2KjZAF8UDR1uL1mXdaivX1s0WW YzLyEr3TJG3NJXWga2c= -----END CERTIFICATE-----Generated at Wed Sep 23 21:17:32 2026 by rpki-client