$ rpki-client -vvvf rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft File: 2D50476E80CFF23F1675B2EF9B63BB103C893243.mft (raw, json) Hash identifier: IEDhiB0zCSg0LcUWyiv4Ekw9+ZdmsJoFCFr6ZBKL3mg= Subject key identifier: 67:AC:AB:9B:AD:12:5A:C9:D5:B9:62:60:7A:82:09:83:07:59:72:A4 Authority key identifier: 2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43 Certificate issuer: /CN=2D50476E80CFF23F1675B2EF9B63BB103C893243 Certificate serial: 445244C2BF947104E40CC9846AF39C62A41FC0D0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft Manifest number: B7 Signing time: Thu 24 Sep 2026 09:59:24 +0000 Manifest this update: Thu 24 Sep 2026 09:54:24 +0000 Manifest next update: Fri 25 Sep 2026 10:12:24 +0000 Files and hashes: 1: 2D50476E80CFF23F1675B2EF9B63BB103C893243.crl (hash: Ex5nFKyYKacEIS5Jb97UOt4AhDBz1dRla6awphK8RwY=) 2: 3130332e3138332e3135342e302f32332d3234203d3e2037343833.roa (hash: nxCey52fLbG4LlN5x0FYINGVY7pYCO3Y1zJpZMqwSeA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:52:44:c2:bf:94:71:04:e4:0c:c9:84:6a:f3:9c:62:a4:1f:c0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D50476E80CFF23F1675B2EF9B63BB103C893243 Validity Not Before: Sep 24 09:54:24 2026 GMT Not After : Sep 25 10:12:24 2026 GMT Subject: CN=67ACAB9BAD125AC9D5B962607A820983075972A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:34:bd:d4:ef:da:79:85:58:cd:e3:c5:21: 76:a2:41:e4:72:17:c1:13:e2:78:a4:fc:54:8c:4f: f4:10:d0:aa:6c:fa:87:84:6d:91:61:66:cd:39:aa: 2e:0b:62:e4:e4:4b:0f:ac:b6:02:12:7d:be:9b:fb: a4:77:e1:9c:b0:8a:9b:69:81:78:b1:d7:56:02:a6: f1:f7:b9:1c:dd:3b:59:d9:70:ee:60:c6:49:4e:7d: 67:13:91:18:5b:a2:a1:7a:e5:38:1a:32:46:fd:11: 20:4e:1e:9c:b8:36:8c:ff:74:1c:02:4f:78:93:b6: 70:8c:95:36:54:54:87:e2:23:53:eb:e4:fe:56:b6: 0a:35:d3:14:50:49:83:15:9b:dc:ec:f5:dd:76:b9: 08:5e:5c:7b:05:e7:4c:2f:64:fb:0d:a0:f4:ee:ed: df:d9:79:2a:12:98:6d:5d:da:2c:3e:76:c8:ac:e5: 42:ed:47:0a:b2:67:e3:47:57:64:b4:9c:c6:ac:5c: 71:b0:0e:ae:b3:66:c2:4c:a9:ed:49:93:11:b3:2b: 22:e5:d9:79:55:6b:fe:31:25:ec:94:22:3d:f0:ba: 46:7a:f5:87:ad:c1:e4:21:d0:bb:ea:22:14:ff:bc: 7c:84:d2:26:ed:40:c9:2f:c7:36:ce:92:80:53:fc: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AC:AB:9B:AD:12:5A:C9:D5:B9:62:60:7A:82:09:83:07:59:72:A4 X509v3 Authority Key Identifier: keyid:2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5a:82:ee:81:30:55:17:0a:3c:0a:cc:36:50:92:2a:9a:63: f6:9d:60:2a:2c:af:c2:e3:2c:43:da:65:86:8a:d5:c0:95:01: f7:40:a1:01:e2:bb:9c:ea:7b:9f:e3:28:be:02:ed:c5:d7:4f: 6d:0a:23:e5:f9:8c:48:58:d0:a1:78:ab:c8:45:61:b0:15:d0: 00:31:8c:49:ba:f1:9b:39:29:97:1f:26:d8:ab:67:1a:1b:b7: fe:41:7b:9d:cf:bc:bf:91:e2:f6:ac:9a:0b:0f:00:5f:62:17: 63:f7:42:53:f4:ba:83:cb:70:1f:74:5d:e9:c3:f1:64:57:11: 14:40:70:3d:48:92:4f:ee:d3:d8:aa:51:79:a5:29:7b:1a:05: 28:29:5f:c0:fa:c7:42:84:fd:be:57:88:a3:fa:6c:d5:4f:c0: 2b:b3:4f:60:93:48:93:39:95:83:a0:40:77:08:63:95:da:7e: 9f:25:42:dd:52:d1:26:8a:b1:7a:99:ea:1f:1d:95:bb:29:a5: 38:3b:7d:fd:43:ee:d2:d2:ce:ba:34:6e:0c:b4:a8:ce:90:93: 0b:80:80:53:eb:6a:df:8b:6d:c0:36:cb:e9:be:73:11:bc:12: 20:11:ab:81:4a:7f:f5:c8:f9:5f:35:ed:63:3e:b2:6e:77:2e: ff:e0:55:d6 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIURFJEwr+UcQTkDMmEavOcYqQfwNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MDQ3NkU4MENGRjIzRjE2NzVCMkVGOUI2M0JCMTAz Qzg5MzI0MzAeFw0yNjA5MjQwOTU0MjRaFw0yNjA5MjUxMDEyMjRaMDMxMTAvBgNV BAMTKDY3QUNBQjlCQUQxMjVBQzlENUI5NjI2MDdBODIwOTgzMDc1OTcyQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wjS91O/aeYVYzePFIXaiQeRy F8ET4nik/FSMT/QQ0Kps+oeEbZFhZs05qi4LYuTkSw+stgISfb6b+6R34Zywiptp gXix11YCpvH3uRzdO1nZcO5gxklOfWcTkRhboqF65TgaMkb9ESBOHpy4Noz/dBwC T3iTtnCMlTZUVIfiI1Pr5P5Wtgo10xRQSYMVm9zs9d12uQheXHsF50wvZPsNoPTu 7d/ZeSoSmG1d2iw+dsis5ULtRwqyZ+NHV2S0nMasXHGwDq6zZsJMqe1JkxGzKyLl 2XlVa/4xJeyUIj3wukZ69YetweQh0LvqIhT/vHyE0ibtQMkvxzbOkoBT/MZnAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUZ6yrm60SWsnVuWJgeoIJgwdZcqQwHwYDVR0j BBgwFoAULVBHboDP8j8WdbLvm2O7EDyJMkMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1lWQy8w LzJENTA0NzZFODBDRkYyM0YxNjc1QjJFRjlCNjNCQjEwM0M4OTMyNDMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMkQ1MDQ3NkU4MENGRjIzRjE2NzVCMkVGOUI2M0JC MTAzQzg5MzI0My5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NZVkMvMC8yRDUwNDc2RTgwQ0ZGMjNG MTY3NUIyRUY5QjYzQkIxMDNDODkzMjQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFqC7oEwVRcKPArM NlCSKppj9p1gKiyvwuMsQ9plhorVwJUB90ChAeK7nOp7n+MovgLtxddPbQoj5fmM SFjQoXiryEVhsBXQADGMSbrxmzkplx8m2KtnGhu3/kF7nc+8v5Hi9qyaCw8AX2IX Y/dCU/S6g8twH3Rd6cPxZFcRFEBwPUiST+7T2KpReaUpexoFKClfwPrHQoT9vleI o/ps1U/AK7NPYJNIkzmVg6BAdwhjldp+nyVC3VLRJoqxepnqHx2VuymlODt9/UPu 0tLOujRuDLSozpCTC4CAU+tq34ttwDbL6b5zEbwSIBGrgUp/9cj5XzXtYz6ybncu /+BV1g== -----END CERTIFICATE-----Generated at Thu Sep 24 22:45:09 2026 by rpki-client