$ rpki-client -vvvf rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft File: C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft (raw, json) Hash identifier: o5NQpC3wA1xPUQjKjqukLKXTPfZlD036f5EVqUo9c8A= Subject key identifier: 88:EE:31:43:B4:8E:CB:55:9F:87:10:2B:7A:2D:E2:1B:8B:C9:6D:2D Authority key identifier: C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93 Certificate issuer: /CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93 Certificate serial: 3B1BAEFF0C6CCC6225FB7770774F6B3561C28AC2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 09:21:57 +0000 Manifest this update: Sat 14 Nov 2026 09:16:57 +0000 Manifest next update: Sun 15 Nov 2026 11:54:57 +0000 Files and hashes: 1: C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl (hash: byz7qU3DFoSSNSy/Nz+DDsIUGiBUXselFJ9E6LRsm8k=) 2: 3131322e3231332e34382e302f32302d3234203d3e203137343136.roa (hash: IyZ2uNj2Ed2hbTcxfq9Hoz8oXlcjs1V2+SFVtmy0SAo=) 3: 3130332e34332e35302e302f32342d3234203d3e20313338393135.roa (hash: hTEAAzN0PA9rsWlL7Pu0rf3KFazJnBuaWNIwQ+dbKTo=) 4: 323430353a346430303a3a2f33322d3438203d3e203137343136.roa (hash: iWtECRpcS2tiVOqsLI6rlO0uvEa9pxsE3Sqh+gwayqA=) 5: 3231312e37382e38302e302f32302d3234203d3e203137343136.roa (hash: e5vDwym6b4PG9xQ/2ko8EBKkmz8V822CH9wDw3sAHbo=) 6: 3130332e34332e35312e302f32342d3234203d3e20313338393135.roa (hash: u+A6v4yEBS5cjQ/+f3BzaST8qU+ycUc8ZtzDC1IbS7s=) 7: 34332e3232342e32332e302f32342d3234203d3e20313331363436.roa (hash: 6SGE2td+SruVzE8RTP0oAaYfc3isBgmmTrc/lKGCQhk=) 8: 34332e3232342e32302e302f32342d3234203d3e20313338393135.roa (hash: qZ1Xl7P/oCReEcW84jHPinXVKHg48mLqWM57olzhxqo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 11:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1b:ae:ff:0c:6c:cc:62:25:fb:77:70:77:4f:6b:35:61:c2:8a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93 Validity Not Before: Nov 14 09:16:57 2026 GMT Not After : Nov 15 11:54:57 2026 GMT Subject: CN=88EE3143B48ECB559F87102B7A2DE21B8BC96D2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ce:6e:7f:60:5d:57:9a:1d:0d:bd:48:47:9f: d0:90:8f:9d:36:8f:f1:a1:78:25:ae:d2:59:b8:ce: 3b:f2:56:18:97:9a:a7:45:b7:1b:22:b3:9b:26:10: 55:cc:30:6e:18:bf:48:93:51:5b:bc:bb:e8:fe:09: 6e:73:e5:f6:80:47:d4:33:a8:c9:44:23:c2:f8:c3: 93:a1:9e:94:de:b3:d8:e8:3c:29:51:71:f8:8f:ef: a7:e0:39:73:92:30:90:e0:4f:73:91:ef:26:1e:14: 71:f2:ba:36:e4:71:ce:c6:fd:ce:91:1e:00:2c:63: f3:2b:43:6d:e2:00:7f:8d:e6:24:78:03:4a:41:bb: 63:bb:2f:f6:2e:fb:9a:60:83:c7:a1:3f:4b:d5:69: b2:3b:70:48:f7:55:38:05:88:49:06:a5:db:69:94: 8e:67:6f:df:10:d6:dd:e5:fc:85:71:68:08:30:36: 0e:00:22:97:a8:55:af:a3:d7:6b:bb:28:c4:73:e0: b7:dd:36:a5:db:72:b2:49:fc:48:ef:fb:58:9a:d6: 6a:be:6d:54:ab:0f:3b:4e:fd:35:4c:b2:b1:e0:bf: 4d:76:68:fd:8c:26:b0:96:b7:e3:77:a5:25:02:0d: 3a:bc:3c:37:61:43:82:f6:01:aa:65:46:53:06:08: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EE:31:43:B4:8E:CB:55:9F:87:10:2B:7A:2D:E2:1B:8B:C9:6D:2D X509v3 Authority Key Identifier: keyid:C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:39:fd:d9:42:77:96:8f:c5:1f:54:4d:f8:cd:f1:b5:a6:17: 27:e2:61:92:23:57:da:59:01:0b:4a:ba:a7:3a:ec:d6:7c:57: 00:6c:5f:ed:c3:eb:cc:4b:67:1f:b1:8a:76:ac:c3:28:7f:8d: cb:13:42:94:9d:66:4e:e9:08:a3:05:19:1e:65:b8:fd:3f:24: 21:a4:b6:5d:44:9b:57:a5:ba:43:3c:f9:63:cd:81:26:18:62: 0b:1a:8c:9e:80:e3:5d:81:dc:68:d8:3d:c0:05:cd:3e:08:0c: 94:c9:91:80:d4:0b:6e:b3:9e:de:bd:0a:9b:3c:b9:22:17:65: fb:10:b8:3c:db:0f:66:35:c0:44:24:e9:41:74:57:a5:a7:d5: 0f:ef:ea:73:05:61:ea:99:f5:fd:bc:ba:43:19:00:77:46:a1: f1:cb:02:f5:bc:fb:39:fd:bf:10:8c:bb:1e:cc:01:fa:2c:76: a1:99:13:98:a1:5d:d4:aa:77:3a:c1:63:07:ec:ff:2e:48:80: f5:53:20:86:82:60:f7:75:b2:b7:be:a1:f8:7b:87:2d:84:0a: cf:eb:7b:a5:a0:2c:9e:29:57:7b:39:ed:ef:ab:4b:7f:a8:e6: 45:0b:e0:34:c3:7c:26:c8:6c:60:67:c7:62:35:4f:a3:31:7c: 74:55:37:d3 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUOxuu/wxszGIl+3dwd09rNWHCisIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVERjMxRDlFRUI1REE3MjY2OEQ1OEZCOERCMEU3NUUz QUQ3QkY5MzAeFw0yNjExMTQwOTE2NTdaFw0yNjExMTUxMTU0NTdaMDMxMTAvBgNV BAMTKDg4RUUzMTQzQjQ4RUNCNTU5Rjg3MTAyQjdBMkRFMjFCOEJDOTZEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgzm5/YF1Xmh0NvUhHn9CQj502 j/GheCWu0lm4zjvyVhiXmqdFtxsis5smEFXMMG4Yv0iTUVu8u+j+CW5z5faAR9Qz qMlEI8L4w5OhnpTes9joPClRcfiP76fgOXOSMJDgT3OR7yYeFHHyujbkcc7G/c6R HgAsY/MrQ23iAH+N5iR4A0pBu2O7L/Yu+5pgg8ehP0vVabI7cEj3VTgFiEkGpdtp lI5nb98Q1t3l/IVxaAgwNg4AIpeoVa+j12u7KMRz4LfdNqXbcrJJ/Ejv+1ia1mq+ bVSrDztO/TVMsrHgv012aP2MJrCWt+N3pSUCDTq8PDdhQ4L2AaplRlMGCImBAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUiO4xQ7SOy1WfhxArei3iG4vJbS0wHwYDVR0j BBgwFoAUxd8x2e612nJmjVj7jbDnXjrXv5MwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFdJTlMv MC9DNURGMzFEOUVFQjVEQTcyNjY4RDU4RkI4REIwRTc1RTNBRDdCRjkzLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0M1REYzMUQ5RUVCNURBNzI2NjhENThGQjhEQjBF NzVFM0FEN0JGOTMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9EV0lOUy8wL0M1REYzMUQ5RUVCNURB NzI2NjhENThGQjhEQjBFNzVFM0FEN0JGOTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcOf3ZQneWj8Uf VE34zfG1phcn4mGSI1faWQELSrqnOuzWfFcAbF/tw+vMS2cfsYp2rMMof43LE0KU nWZO6QijBRkeZbj9PyQhpLZdRJtXpbpDPPljzYEmGGILGoyegONdgdxo2D3ABc0+ CAyUyZGA1Atus57evQqbPLkiF2X7ELg82w9mNcBEJOlBdFelp9UP7+pzBWHqmfX9 vLpDGQB3RqHxywL1vPs5/b8QjLsezAH6LHahmROYoV3Uqnc6wWMH7P8uSID1UyCG gmD3dbK3vqH4e4cthArP63uloCyeKVd7Oe3vq0t/qOZFC+A0w3wmyGxgZ8diNU+j MXx0VTfT -----END CERTIFICATE-----Generated at Sun Nov 15 00:10:16 2026 by rpki-client