$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft File: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft (raw, json) Hash identifier: Tq0Xx65t1o4q/t9r+0DaLn4aNm1u343lG7iRS6/t0/0= Subject key identifier: 47:F8:0E:59:A9:98:E1:B9:13:53:93:A1:08:53:21:F4:7A:32:7C:C8 Authority key identifier: E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB Certificate issuer: /CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB Certificate serial: 5C719C5224EA6E02F3886E4757B10CD8220D55E4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft Manifest number: B9 Signing time: Wed 23 Sep 2026 18:07:00 +0000 Manifest this update: Wed 23 Sep 2026 18:02:00 +0000 Manifest next update: Thu 24 Sep 2026 20:06:00 +0000 Files and hashes: 1: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl (hash: e8B0ImabSQ9+ZJMqe3buJG6lTK5B6eg0p46wOIttsio=) 2: 3232332e32362e31302e302f32332d3234203d3e2037343833.roa (hash: KY91dZeL6/YwGvfBK0FnKFAVL/6EOM1qXx3UNjlNsSo=) 3: 3232332e32362e31302e302f32332d3234203d3e203231383539.roa (hash: KeYIdvmIdFmXoaD7PfpE0neyX1HamQXTrD45lQIfHyQ=) 4: 3130332e3137352e3136362e302f32332d3234203d3e2037343833.roa (hash: M1t938UdIZV1R1GsREb23xynohkO0qzg0e3CIh+SGGk=) 5: 3232332e32362e31302e302f32332d3234203d3e2037353338.roa (hash: WltkBuqhKCJsRwS/4iiBwpBsyVQ3CFzN130wVvwvOIg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:71:9c:52:24:ea:6e:02:f3:88:6e:47:57:b1:0c:d8:22:0d:55:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB Validity Not Before: Sep 23 18:02:00 2026 GMT Not After : Sep 24 20:06:00 2026 GMT Subject: CN=47F80E59A998E1B9135393A1085321F47A327CC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:a7:0c:37:b4:c6:ff:29:ec:d1:7f:ba:08: e2:6d:31:0d:eb:2e:a3:5e:57:70:ef:82:44:f2:26: 0e:f8:c3:c2:3b:39:18:af:c6:b4:ad:96:1b:45:22: af:c6:40:32:e4:8e:56:ab:c0:be:49:c5:8e:ca:31: 7b:31:8e:72:e4:c1:7d:3c:fb:29:e2:eb:47:57:36: 80:fb:c3:02:f2:09:f3:e9:72:87:04:68:ea:39:5e: 51:9e:70:00:79:0d:59:65:2c:69:63:a9:99:f8:99: 91:2a:c2:c0:cc:c0:bf:43:b6:6f:40:43:b1:0f:bc: d4:cc:8e:d2:26:02:c9:ed:e4:8c:3b:6c:3b:6c:6c: 42:29:19:88:d6:90:0c:3b:38:a0:4a:36:e2:f1:8d: 36:4b:0c:60:53:2c:d1:7c:e7:e5:32:f5:9a:6a:9f: 94:c3:63:26:83:70:8b:36:e2:48:e4:e0:b5:32:66: 2c:56:d3:73:82:06:8b:b2:30:c9:84:52:99:a1:b6: 1b:0c:18:2e:92:4d:46:52:77:74:6f:ce:2f:e9:19: 68:42:60:d7:18:0b:b2:6f:b9:31:40:74:00:af:aa: 5a:5d:bd:c2:dd:0e:65:16:36:ed:81:3c:a5:cf:bb: 0b:ec:8f:d8:08:2a:3a:c6:6f:d6:b0:67:a1:33:82: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F8:0E:59:A9:98:E1:B9:13:53:93:A1:08:53:21:F4:7A:32:7C:C8 X509v3 Authority Key Identifier: keyid:E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a7:85:b0:6a:cb:87:33:d8:96:a4:9f:48:ab:37:32:72:a6: 65:ed:bc:86:e2:ca:ed:96:35:33:96:70:21:0e:80:15:00:23: 18:e4:c4:dc:0f:27:63:c7:5c:b7:e0:ef:c3:4a:c8:3d:50:41: ad:b6:c6:49:4f:a2:e7:c0:45:fc:90:8b:ac:f4:6b:99:4a:a6: 2a:a6:f6:b6:33:14:05:7f:b5:eb:4d:a5:7f:bc:d8:12:e6:e6: 88:c5:d6:74:e1:69:71:e8:a7:77:fd:18:58:22:09:11:95:ab: 49:23:e5:84:bb:cc:93:f6:55:5e:8f:28:c4:ca:06:33:19:9c: 44:8c:45:33:0f:bc:a8:fd:3c:27:63:57:c2:18:89:bd:1c:b2: db:84:97:66:95:e6:11:70:1d:6e:78:46:eb:ee:10:12:d9:da: 1f:c8:3a:d6:6b:f0:83:78:77:70:ea:47:43:14:51:ea:24:e1: fe:f6:92:59:76:76:94:6d:21:50:c6:15:54:77:e0:70:90:1b: 34:c3:c3:9d:fb:cd:ba:a8:1d:0c:3b:bf:d0:f0:b3:54:bf:38: c9:1b:f5:04:9b:5e:a9:55:f7:02:81:16:16:82:c2:3b:01:7a: b6:ab:0a:21:a7:3e:af:0a:0c:43:1f:46:c4:28:ed:62:6f:fd: 39:b7:92:7a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUXHGcUiTqbgLziG5HV7EM2CINVeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MjNERkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMx RTM4N0VDQjAeFw0yNjA5MjMxODAyMDBaFw0yNjA5MjQyMDA2MDBaMDMxMTAvBgNV BAMTKDQ3RjgwRTU5QTk5OEUxQjkxMzUzOTNBMTA4NTMyMUY0N0EzMjdDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJKcMN7TG/yns0X+6COJtMQ3r LqNeV3DvgkTyJg74w8I7ORivxrStlhtFIq/GQDLkjlarwL5JxY7KMXsxjnLkwX08 +yni60dXNoD7wwLyCfPpcocEaOo5XlGecAB5DVllLGljqZn4mZEqwsDMwL9Dtm9A Q7EPvNTMjtImAsnt5Iw7bDtsbEIpGYjWkAw7OKBKNuLxjTZLDGBTLNF85+Uy9Zpq n5TDYyaDcIs24kjk4LUyZixW03OCBouyMMmEUpmhthsMGC6STUZSd3Rvzi/pGWhC YNcYC7JvuTFAdACvqlpdvcLdDmUWNu2BPKXPuwvsj9gIKjrGb9awZ6EzgvR/AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUR/gOWamY4bkTU5OhCFMh9HoyfMgwHwYDVR0j BBgwFoAU44I9/qIf7wTjJp65rMO9rB44fsswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURO T0RFLzAvRTM4MjNERkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMxRTM4N0VDQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FMzgyM0RGRUEyMUZFRjA0RTMyNjlFQjlB Q0MzQkRBQzFFMzg3RUNCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVUROT0RFLzAvRTM4MjNE RkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMxRTM4N0VDQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIen hbBqy4cz2Jakn0irNzJypmXtvIbiyu2WNTOWcCEOgBUAIxjkxNwPJ2PHXLfg78NK yD1QQa22xklPoufARfyQi6z0a5lKpiqm9rYzFAV/tetNpX+82BLm5ojF1nThaXHo p3f9GFgiCRGVq0kj5YS7zJP2VV6PKMTKBjMZnESMRTMPvKj9PCdjV8IYib0cstuE l2aV5hFwHW54RuvuEBLZ2h/IOtZr8IN4d3DqR0MUUeok4f72kll2dpRtIVDGFVR3 4HCQGzTDw537zbqoHQw7v9Dws1S/OMkb9QSbXqlV9wKBFhaCwjsBerarCiGnPq8K DEMfRsQo7WJv/Tm3kno= -----END CERTIFICATE-----Generated at Thu Sep 24 05:49:06 2026 by rpki-client