$ rpki-client -vvvf rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft File: 9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft (raw, json) Hash identifier: BcBvuVsRPc64wtPhVoCg+GFV8jb7jNH4DaU57T2ekAc= Subject key identifier: C0:04:2D:BA:27:AA:EC:6A:4D:36:24:F2:90:AD:1A:28:47:05:0E:2A Authority key identifier: 9D:00:7D:37:3F:38:1C:CA:59:6E:CE:20:FC:27:E8:D7:F7:2B:D5:C2 Certificate issuer: /CN=9D007D373F381CCA596ECE20FC27E8D7F72BD5C2 Certificate serial: 5D01418FFC89082B56578C68662295FE52CC7293 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 02:40:53 +0000 Manifest this update: Thu 24 Sep 2026 02:35:53 +0000 Manifest next update: Fri 25 Sep 2026 05:29:53 +0000 Files and hashes: 1: 3130332e3136302e3232362e302f32332d3234203d3e20313331363539.roa (hash: E3rZgHSz1Z/QlxuFQ/uZkBfovj2HHfCX638SO+t2sg0=) 2: 9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl (hash: YcXWzI1XmDzA2/S69xXkvLSNg0AFd6zFWapQvR0N+CY=) 3: 3130332e3136302e3232362e302f32332d3234203d3e203338383432.roa (hash: fXBUwxrpMNifp4MO+znwtVxrCjA2c4pDgmAW0x6+dMc=) 4: 323430363a663334303a3a2f33322d3634203d3e203338383432.roa (hash: dPU2RCL9922koNIK4EbftiZXNxbxs5ADbxLPZLggc34=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:01:41:8f:fc:89:08:2b:56:57:8c:68:66:22:95:fe:52:cc:72:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D007D373F381CCA596ECE20FC27E8D7F72BD5C2 Validity Not Before: Sep 24 02:35:53 2026 GMT Not After : Sep 25 05:29:53 2026 GMT Subject: CN=C0042DBA27AAEC6A4D3624F290AD1A2847050E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:1f:4c:bb:5e:e8:92:b4:50:a0:2f:ea:a5: 02:85:5b:30:a2:80:a6:81:1c:fb:7b:04:43:58:6f: 4e:4d:af:04:35:c2:36:e9:73:0c:9d:6f:fe:19:f0: 56:21:31:84:04:bc:6a:a7:39:8f:24:b6:9b:fd:90: 60:a0:6a:fb:13:fc:20:b4:11:07:a1:38:71:aa:ab: 14:9b:da:a9:73:01:d4:7e:03:b4:62:47:fa:2b:bb: 46:6b:4b:c3:e3:6f:d4:e7:b3:4d:1b:8d:23:49:2a: f4:9a:7d:17:27:02:ac:3e:ba:07:68:4f:fa:57:56: 58:71:e9:09:ba:64:6a:3b:32:04:96:bc:ee:51:06: b7:30:87:85:7a:7b:20:9a:6c:97:d5:96:6f:ad:21: a6:67:15:8f:1f:48:42:35:7f:bd:6b:d1:30:b4:6a: 04:4d:3b:18:64:5b:9b:76:43:aa:7f:7e:2f:fb:c1: 2d:2b:3a:bb:0f:48:ab:1f:a5:59:13:f2:8a:ef:e8: 1a:1a:9d:c5:9f:6a:c1:31:aa:d3:56:4d:86:2e:be: 1b:28:e7:ef:5b:3f:b3:0a:2a:7e:60:14:94:90:eb: a3:b2:c2:24:d6:9b:74:3d:de:d9:08:a5:38:8f:7c: af:d4:bf:39:72:72:d2:48:8e:c7:07:a6:a2:1d:20: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:04:2D:BA:27:AA:EC:6A:4D:36:24:F2:90:AD:1A:28:47:05:0E:2A X509v3 Authority Key Identifier: keyid:9D:00:7D:37:3F:38:1C:CA:59:6E:CE:20:FC:27:E8:D7:F7:2B:D5:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3e:8b:0a:cc:86:56:b6:4a:b9:18:70:f4:d7:0e:c3:cc:56: 34:51:0d:35:5d:48:d2:9b:fc:41:69:f2:de:b2:b3:a9:79:14: be:f6:8d:76:57:9b:29:96:27:ac:53:3a:b7:6e:77:bf:a9:c1: 4f:be:b7:58:2b:b1:41:ee:da:56:78:b4:a1:3d:2b:63:ee:71: d4:0d:26:45:6f:3b:b2:d8:1a:cf:56:6d:e9:d7:ee:ce:52:a9: e5:35:d7:5d:62:ba:97:40:98:f2:07:08:bd:61:22:d3:9d:94: ab:ae:c9:ae:17:e1:62:74:6b:5a:0f:91:aa:b5:eb:2c:7e:9e: 76:f1:ab:e5:88:c2:c9:24:2e:ce:8d:9d:c1:5f:a1:2c:f4:f9: 99:63:a5:a8:d6:01:d3:c9:40:ab:fe:be:bc:05:c2:60:00:27: 78:d1:ba:cc:12:00:5f:e0:1c:6e:cc:a2:af:4a:d8:b8:e3:73: 9d:3d:34:a7:33:db:7e:39:53:41:50:90:a2:89:73:a6:b5:77: 24:88:36:2a:70:38:ba:65:75:8d:6b:92:2d:76:01:f5:52:7a: 92:30:9b:1f:12:e7:94:03:0c:73:d8:cf:b1:91:3b:66:f4:7d: 4f:7a:17:89:05:3b:9d:ee:c7:b5:b7:a8:a5:83:2d:82:88:a9: dc:17:a1:fc -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUXQFBj/yJCCtWV4xoZiKV/lLMcpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMDdEMzczRjM4MUNDQTU5NkVDRTIwRkMyN0U4RDdG NzJCRDVDMjAeFw0yNjA5MjQwMjM1NTNaFw0yNjA5MjUwNTI5NTNaMDMxMTAvBgNV BAMTKEMwMDQyREJBMjdBQUVDNkE0RDM2MjRGMjkwQUQxQTI4NDcwNTBFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnR9Mu17okrRQoC/qpQKFWzCi gKaBHPt7BENYb05NrwQ1wjbpcwydb/4Z8FYhMYQEvGqnOY8ktpv9kGCgavsT/CC0 EQehOHGqqxSb2qlzAdR+A7RiR/oru0ZrS8Pjb9Tns00bjSNJKvSafRcnAqw+ugdo T/pXVlhx6Qm6ZGo7MgSWvO5RBrcwh4V6eyCabJfVlm+tIaZnFY8fSEI1f71r0TC0 agRNOxhkW5t2Q6p/fi/7wS0rOrsPSKsfpVkT8orv6BoancWfasExqtNWTYYuvhso 5+9bP7MKKn5gFJSQ66OywiTWm3Q93tkIpTiPfK/UvzlyctJIjscHpqIdIEE5AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUwAQtuieq7GpNNiTykK0aKEcFDiowHwYDVR0j BBgwFoAUnQB9Nz84HMpZbs4g/Cfo1/cr1cIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE5TTkVU LzAvOUQwMDdEMzczRjM4MUNDQTU5NkVDRTIwRkMyN0U4RDdGNzJCRDVDMi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS85RDAwN0QzNzNGMzgxQ0NBNTk2RUNFMjBGQzI3 RThEN0Y3MkJENUMyLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE5TTkVULzAvOUQwMDdEMzczRjM4 MUNDQTU5NkVDRTIwRkMyN0U4RDdGNzJCRDVDMi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABY+iwrMhla2 SrkYcPTXDsPMVjRRDTVdSNKb/EFp8t6ys6l5FL72jXZXmymWJ6xTOrdud7+pwU++ t1grsUHu2lZ4tKE9K2PucdQNJkVvO7LYGs9WbenX7s5SqeU1111iupdAmPIHCL1h ItOdlKuuya4X4WJ0a1oPkaq16yx+nnbxq+WIwskkLs6NncFfoSz0+ZljpajWAdPJ QKv+vrwFwmAAJ3jRuswSAF/gHG7Moq9K2Ljjc509NKcz2345U0FQkKKJc6a1dySI NipwOLpldY1rki12AfVSepIwmx8S55QDDHPYz7GRO2b0fU96F4kFO53ux7W3qKWD LYKIqdwXofw= -----END CERTIFICATE-----Generated at Thu Sep 24 16:57:46 2026 by rpki-client