$ rpki-client -vvvf rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.mft File: 985AF7058B94D432A9181F30B0AE306C97BD4F3B.mft (raw, json) Hash identifier: 6kgLbzxa++PGcoGFXlJqgKPONquCW4UVc72yVtPjJ+0= Subject key identifier: 5D:43:85:B3:2D:CB:26:38:42:02:55:A9:38:4A:BE:91:01:8C:5D:01 Authority key identifier: 98:5A:F7:05:8B:94:D4:32:A9:18:1F:30:B0:AE:30:6C:97:BD:4F:3B Certificate issuer: /CN=985AF7058B94D432A9181F30B0AE306C97BD4F3B Certificate serial: 3F5662FCB78D1BC87590E4EA8CA4E091935CE498 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/985AF7058B94D432A9181F30B0AE306C97BD4F3B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.mft Manifest number: 0102 Signing time: Sun 15 Nov 2026 03:59:45 +0000 Manifest this update: Sun 15 Nov 2026 03:54:45 +0000 Manifest next update: Mon 16 Nov 2026 06:17:45 +0000 Files and hashes: 1: 3136302e33302e3231312e302f32342d3234203d3e20333936393832.roa (hash: J8m05DGYS3tyQ4bsSSQjjKphRPcMWgg0kZ9JSdNSHmY=) 2: 3136302e33302e3231302e302f32342d3234203d3e20313532363133.roa (hash: 3V+eLijCrneWsUaRvj4OtnRRirUVmLqCfv2HSVSfeog=) 3: 985AF7058B94D432A9181F30B0AE306C97BD4F3B.crl (hash: zkT2YfaY5VkO/iSOqwo0TtvaULvPpUes2FXKgu1kwq4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.crl rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/985AF7058B94D432A9181F30B0AE306C97BD4F3B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:56:62:fc:b7:8d:1b:c8:75:90:e4:ea:8c:a4:e0:91:93:5c:e4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985AF7058B94D432A9181F30B0AE306C97BD4F3B Validity Not Before: Nov 15 03:54:45 2026 GMT Not After : Nov 16 06:17:45 2026 GMT Subject: CN=5D4385B32DCB2638420255A9384ABE91018C5D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:38:b3:c9:21:50:8d:4e:9d:3c:56:25:45:77: d7:eb:9d:f9:57:00:0e:06:53:27:6e:33:29:4c:44: 67:dc:bb:8a:12:c2:8d:6d:49:9b:22:b1:c8:de:3c: 98:ee:33:27:68:27:04:9e:3f:25:c8:20:fa:f4:c0: f7:63:ec:b8:54:89:58:8a:10:2b:4a:16:d3:8f:5e: 58:32:b2:62:13:45:8a:56:35:ce:91:fa:5b:87:5e: a6:85:01:10:1b:10:ab:4d:d2:c6:55:79:cc:d1:77: f9:52:59:35:9a:f7:82:43:f6:07:39:92:95:56:f2: 90:7b:cf:55:dd:d8:d9:3d:d1:41:f1:ee:63:57:d9: 08:4f:32:94:1c:d2:2b:d0:22:c9:28:a1:7d:51:7a: 7b:5c:8f:5b:8e:ae:78:fc:08:ea:a5:5d:52:c1:f9: ff:32:01:b4:56:6f:f8:5f:ea:1e:48:db:ef:66:eb: 8e:80:7e:56:bd:39:58:d3:cf:3c:3a:14:8d:78:6a: 4b:33:c5:0a:89:cf:e7:27:09:37:47:43:61:47:64: de:f8:87:3a:db:6e:73:cb:b9:c5:35:7b:4f:c5:3c: 9b:4c:b6:77:75:2d:82:d9:b9:4f:38:8e:e9:22:a3: 7b:b8:b4:f9:86:5e:bd:f7:a4:91:f5:d0:e9:87:57: 68:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:43:85:B3:2D:CB:26:38:42:02:55:A9:38:4A:BE:91:01:8C:5D:01 X509v3 Authority Key Identifier: keyid:98:5A:F7:05:8B:94:D4:32:A9:18:1F:30:B0:AE:30:6C:97:BD:4F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/985AF7058B94D432A9181F30B0AE306C97BD4F3B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:bf:18:ed:1c:88:f5:95:a8:4a:71:b8:99:46:32:3d:ba:9b: ad:12:ff:0a:7d:dd:ff:3c:91:f9:7e:97:8a:b5:04:ed:b8:b8: ed:63:5d:18:a3:7d:69:ab:d5:6a:b6:c1:9a:29:7b:61:31:e0: ea:dc:3d:3f:e4:a2:e0:24:a0:ac:ba:28:5a:80:cc:17:86:53: ee:7c:a3:a9:29:9a:71:e3:d1:74:77:56:43:3e:59:3c:b0:ba: 18:bd:5a:48:f1:bc:cf:64:b2:cb:cc:b9:6d:f2:f1:b6:bf:d7: 68:7d:03:e7:45:d2:b7:a6:7a:6d:ab:69:e5:aa:9b:fc:1e:fe: d8:0f:ff:c8:31:87:dd:0c:11:99:ff:e1:08:0e:86:c3:ec:8e: f2:aa:e0:80:bd:24:55:29:5b:97:f5:bf:56:e6:30:25:d3:90: 90:5d:dc:f3:08:45:4d:cf:6f:66:88:02:41:7b:3f:7d:fd:8f: b0:eb:2f:65:ce:ca:9f:b5:0c:05:62:11:b1:e5:0b:0e:ee:91: a3:b4:22:7e:db:9d:fe:fd:e3:41:4b:bc:a7:80:99:72:49:d6: fc:4f:9d:1b:13:5b:8a:cc:6c:a8:d4:1b:13:62:8e:f0:03:14: 59:bf:fe:ab:4b:f9:b8:eb:ec:7a:03:ac:39:70:03:40:cb:9f: 7b:19:af:28 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUP1Zi/LeNG8h1kOTqjKTgkZNc5JgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1QUY3MDU4Qjk0RDQzMkE5MTgxRjMwQjBBRTMwNkM5 N0JENEYzQjAeFw0yNjExMTUwMzU0NDVaFw0yNjExMTYwNjE3NDVaMDMxMTAvBgNV BAMTKDVENDM4NUIzMkRDQjI2Mzg0MjAyNTVBOTM4NEFCRTkxMDE4QzVEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsOLPJIVCNTp08ViVFd9frnflX AA4GUyduMylMRGfcu4oSwo1tSZsiscjePJjuMydoJwSePyXIIPr0wPdj7LhUiViK ECtKFtOPXlgysmITRYpWNc6R+luHXqaFARAbEKtN0sZVeczRd/lSWTWa94JD9gc5 kpVW8pB7z1Xd2Nk90UHx7mNX2QhPMpQc0ivQIskooX1Rentcj1uOrnj8COqlXVLB +f8yAbRWb/hf6h5I2+9m646Afla9OVjTzzw6FI14akszxQqJz+cnCTdHQ2FHZN74 hzrbbnPLucU1e0/FPJtMtnd1LYLZuU84jukio3u4tPmGXr33pJH10OmHV2jZAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUXUOFsy3LJjhCAlWpOEq+kQGMXQEwHwYDVR0j BBgwFoAUmFr3BYuU1DKpGB8wsK4wbJe9TzswDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09ERVVQ VEVDSC8xLzk4NUFGNzA1OEI5NEQ0MzJBOTE4MUYzMEIwQUUzMDZDOTdCRDRGM0Iu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzAvOTg1QUY3MDU4Qjk0RDQzMkE5MTgxRjMw QjBBRTMwNkM5N0JENEYzQi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NPREVVUFRFQ0gvMS85ODVB RjcwNThCOTRENDMyQTkxODFGMzBCMEFFMzA2Qzk3QkQ0RjNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA cL8Y7RyI9ZWoSnG4mUYyPbqbrRL/Cn3d/zyR+X6XirUE7bi47WNdGKN9aavVarbB mil7YTHg6tw9P+Si4CSgrLooWoDMF4ZT7nyjqSmacePRdHdWQz5ZPLC6GL1aSPG8 z2Syy8y5bfLxtr/XaH0D50XSt6Z6batp5aqb/B7+2A//yDGH3QwRmf/hCA6Gw+yO 8qrggL0kVSlbl/W/VuYwJdOQkF3c8whFTc9vZogCQXs/ff2PsOsvZc7Kn7UMBWIR seULDu6Ro7Qiftud/v3jQUu8p4CZcknW/E+dGxNbisxsqNQbE2KO8AMUWb/+q0v5 uOvsegOsOXADQMufexmvKA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:41:00 2026 by rpki-client