$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft File: 385249635956536ABAE4461A37AC4824F9DC8FD6.mft (raw, json) Hash identifier: Yl8Rfa+NnSfBN0DsqkNe3oB7x6NSY71kzn+0d9Qwf2A= Subject key identifier: 85:09:42:EC:36:C2:A2:31:5B:C6:19:C9:ED:4B:16:E1:36:C9:B0:5F Authority key identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6 Certificate issuer: /CN=385249635956536ABAE4461A37AC4824F9DC8FD6 Certificate serial: 44C7C6B0821FC59D2B912472DFF1795592B145 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft Manifest number: 0102 Signing time: Sat 14 Nov 2026 08:10:50 +0000 Manifest this update: Sat 14 Nov 2026 08:05:50 +0000 Manifest next update: Sun 15 Nov 2026 08:31:50 +0000 Files and hashes: 1: 3136352e3130312e32382e302f32332d3234203d3e2037353336.roa (hash: MDQ0MQpqvOnP3tGAXbdXYndg5XorOFrBiv2BjsmWQz0=) 2: 3136352e3130312e32382e302f32332d3234203d3e203136353039.roa (hash: I9pglQOMH4ub5GmJQynwwln40ZQJu3vyeI2yVEXDiCY=) 3: 3136352e3130312e32382e302f32332d3234203d3e20313331363533.roa (hash: f8Wm++qXpNxVHGZKo201vAM9Z2Uy7/WdNvruK2l9Afw=) 4: 3136352e3130312e32382e302f32332d3234203d3e203231383539.roa (hash: R74xcd60wZBSfoy4K8X12x3wQEVRWzhx68AMGErwhDI=) 5: 3136352e3130312e32392e302f32342d3234203d3e203136353039.roa (hash: yjG8MYF6nfrkwkNu+HFEW+1IrLrwkYkIiZ19QyWO3Dk=) 6: 385249635956536ABAE4461A37AC4824F9DC8FD6.crl (hash: xOp3IqmJgoH1g+CI6J11MqEOQzVuf3kwwriCfakE4g0=) 7: 3136352e3130312e32382e302f32332d3234203d3e20313532363236.roa (hash: btNO8YG7Xa0kAdLaiC/xjh2pArbM9BSYgMB1cmgXBcM=) 8: 3136352e3130312e32382e302f32332d3234203d3e20323133343330.roa (hash: 35okLdMHqqFwUJOW9E0osinYU4tPIsxaiWo2zlSSj84=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 08:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c7:c6:b0:82:1f:c5:9d:2b:91:24:72:df:f1:79:55:92:b1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385249635956536ABAE4461A37AC4824F9DC8FD6 Validity Not Before: Nov 14 08:05:50 2026 GMT Not After : Nov 15 08:31:50 2026 GMT Subject: CN=850942EC36C2A2315BC619C9ED4B16E136C9B05F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:60:2a:a8:88:ea:0e:cd:b9:ad:f5:29:2d: 4b:a7:51:22:59:36:71:3c:dc:46:90:57:56:ab:ee: b6:fb:a9:a3:24:63:4a:bb:51:6d:53:0c:eb:51:79: 8c:57:c0:26:b4:6c:8f:47:d9:0a:fe:f2:56:bb:73: 9d:a1:49:31:42:3d:a7:b2:d8:3a:13:c2:7c:c9:40: b5:d2:a7:6b:3a:b1:e4:13:5b:45:c9:8a:ce:4e:80: 7b:75:b9:da:88:0a:43:2c:ff:b6:0a:b2:6f:f9:28: f4:20:7f:2d:d3:49:bd:7a:4c:be:bd:a0:a3:ba:04: 82:29:b6:91:fb:30:0a:85:04:4f:cb:8c:50:b5:21: f4:5d:72:bd:2a:d5:e3:9f:ef:29:7c:de:00:ac:4d: d1:f3:bc:96:3b:5e:9b:ca:ce:4c:6f:b4:fb:a6:b6: 16:f3:6c:19:95:2b:f2:e2:d7:28:df:0e:00:a3:85: 10:6e:e5:37:32:66:0a:e0:d7:35:54:5c:0d:47:07: 40:75:17:f1:8f:db:36:7a:af:ea:ab:f8:b9:00:3a: 9f:47:f2:99:fc:80:ee:0a:f2:80:f9:9d:8f:18:5f: a7:19:0a:ae:f7:a7:8b:81:34:31:34:ac:bd:50:a9: 06:74:d1:08:93:a6:ba:c2:17:39:09:1c:11:f7:b0: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:09:42:EC:36:C2:A2:31:5B:C6:19:C9:ED:4B:16:E1:36:C9:B0:5F X509v3 Authority Key Identifier: keyid:38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ca:20:cc:47:b5:98:a6:04:d4:23:b1:6e:e6:69:09:7f:eb: cd:03:6c:4a:78:2c:ea:3f:92:60:17:f6:73:c0:8b:a2:6f:27: e9:aa:41:f7:04:2a:d1:1b:a9:48:6a:5f:96:52:3d:13:f5:33: 20:5c:f3:3e:e4:05:80:62:9d:b1:df:d8:c9:35:d4:5c:9c:30: f2:5c:8a:85:52:42:0c:18:28:88:63:8d:a8:6c:e4:7d:34:a0: 2a:8b:e7:d8:7a:4f:0f:d5:33:a2:02:02:eb:8d:ad:aa:14:01: c1:4f:cd:f5:f1:5e:76:68:11:72:fe:c8:02:6b:90:ed:21:ba: 45:84:fd:88:6e:c4:57:88:d5:f0:9c:ca:d8:72:ff:0c:3a:40: 86:c8:78:74:24:e9:6a:d8:1a:3b:05:ca:22:86:56:f3:15:39: 90:69:8e:06:47:d1:cf:4e:8f:03:94:54:ab:60:39:af:58:38: 16:b0:eb:23:e5:4e:00:d6:3f:9a:8c:d1:6d:3d:50:85:cf:40: 18:71:89:5c:9a:e5:fd:f8:10:6e:39:54:96:6e:64:4f:9f:16: 16:c8:00:54:03:ca:ae:0d:c4:a5:77:e2:4e:25:58:16:b0:a8: c9:3b:ae:26:db:75:7e:c9:66:8f:25:68:ce:03:67:96:d7:4f: 61:3d:6e:1a -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgITRMfGsIIfxZ0rkSRy3/F5VZKxRTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzODUyNDk2MzU5NTY1MzZBQkFFNDQ2MUEzN0FDNDgyNEY5 REM4RkQ2MB4XDTI2MTExNDA4MDU1MFoXDTI2MTExNTA4MzE1MFowMzExMC8GA1UE AxMoODUwOTQyRUMzNkMyQTIzMTVCQzYxOUM5RUQ0QjE2RTEzNkM5QjA1RjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMu7YCqoiOoOzbmt9SktS6dRIlk2 cTzcRpBXVqvutvupoyRjSrtRbVMM61F5jFfAJrRsj0fZCv7yVrtznaFJMUI9p7LY OhPCfMlAtdKnazqx5BNbRcmKzk6Ae3W52ogKQyz/tgqyb/ko9CB/LdNJvXpMvr2g o7oEgim2kfswCoUET8uMULUh9F1yvSrV45/vKXzeAKxN0fO8ljtem8rOTG+0+6a2 FvNsGZUr8uLXKN8OAKOFEG7lNzJmCuDXNVRcDUcHQHUX8Y/bNnqv6qv4uQA6n0fy mfyA7grygPmdjxhfpxkKrveni4E0MTSsvVCpBnTRCJOmusIXOQkcEfewe2kCAwEA AaOCAfQwggHwMB0GA1UdDgQWBBSFCULsNsKiMVvGGcntSxbhNsmwXzAfBgNVHSME GDAWgBQ4UkljWVZTarrkRho3rEgk+dyP1jAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0f BF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DTE9VREJB U0UvMS8zODUyNDk2MzU5NTY1MzZBQkFFNDQ2MUEzN0FDNDgyNEY5REM4RkQ2LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzM4NTI0OTYzNTk1NjUzNkFCQUU0NDYxQTM3 QUM0ODI0RjlEQzhGRDYuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZV cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DTE9VREJBU0UvMS8zODUyNDk2 MzU5NTY1MzZBQkFFNDQ2MUEzN0FDNDgyNEY5REM4RkQ2Lm1mdDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs8og zEe1mKYE1COxbuZpCX/rzQNsSngs6j+SYBf2c8CLom8n6apB9wQq0RupSGpfllI9 E/UzIFzzPuQFgGKdsd/YyTXUXJww8lyKhVJCDBgoiGONqGzkfTSgKovn2HpPD9Uz ogIC642tqhQBwU/N9fFedmgRcv7IAmuQ7SG6RYT9iG7EV4jV8JzK2HL/DDpAhsh4 dCTpatgaOwXKIoZW8xU5kGmOBkfRz06PA5RUq2A5r1g4FrDrI+VOANY/mozRbT1Q hc9AGHGJXJrl/fgQbjlUlm5kT58WFsgAVAPKrg3EpXfiTiVYFrCoyTuuJtt1fslm jyVozgNnltdPYT1uGg== -----END CERTIFICATE-----Generated at Sun Nov 15 00:19:50 2026 by rpki-client