$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft File: D31DE8192962A403BB6809455D9C0776F79CC527.mft (raw, json) Hash identifier: 2fbJ8wEG9AG7JsoCeBof33r1V7Sr1lyUqkLBIkRjN1Q= Subject key identifier: 66:10:43:9A:AD:B8:36:E7:2D:41:B6:92:9F:86:9F:53:DE:F1:04:62 Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527 Certificate serial: 1A0944B13E750476150C7687AF16C94C55E08B8C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft Manifest number: 0A Signing time: Tue 12 May 2026 11:55:48 +0000 Manifest this update: Tue 12 May 2026 11:50:48 +0000 Manifest next update: Wed 13 May 2026 14:37:48 +0000 Files and hashes: 1: 3131392e33302e31362e302f32302d3230203d3e203138343131.roa (hash: VDIgNrS0Bj4C/eZLO2BtqOoH9/X324CutCA0RmZUaVs=) 2: 36312e35362e31362e302f32302d3230203d3e203138343131.roa (hash: cpOU01Iw58/YmjLPrJqeRjungi3bbe0B4tFLVOzxjxc=) 3: 36312e35362e32342e302f32342d3234203d3e203138343131.roa (hash: 4W+qJBNLOJOWIRvtB6qDddjGArtbipAJUnwCauAbtiw=) 4: 36312e35362e31362e302f32302d3234203d3e203138343131.roa (hash: OaBE8mWI96DAhvnsCUNb1Lo3ZA5eC1WiiVCLBOSaZW4=) 5: 36312e35362e32362e302f32342d3234203d3e203138343131.roa (hash: nzkDFeWq9DKB8SnYVh/zKHjUR7e4Y9fE95qdnDZlMiI=) 6: 36312e35362e31382e302f32342d3234203d3e203138343131.roa (hash: gjwd7BV9O1873cFPhEXU/7D/wbFE9dSEUv4zzhFHYw8=) 7: 3131392e33302e31362e302f32302d3234203d3e203138343131.roa (hash: b/aL5o5ZJ2+jJ6WA1q4dCKtGxzeUgsNC1ybEW3+mJZY=) 8: 36312e35362e32352e302f32342d3234203d3e203138343131.roa (hash: qLfcOZVogzNc0fPW8DS0BFg+aXm72rn141irJHfF/2A=) 9: D31DE8192962A403BB6809455D9C0776F79CC527.crl (hash: OX4q7AszM0gAMWaQOg69feLWF7XCQm+BymidcLGt9GI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:09:44:b1:3e:75:04:76:15:0c:76:87:af:16:c9:4c:55:e0:8b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527 Validity Not Before: May 12 11:50:48 2026 GMT Not After : May 13 14:37:48 2026 GMT Subject: CN=6610439AADB836E72D41B6929F869F53DEF10462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:a0:10:eb:1f:7f:9b:a0:5a:fb:21:c8:f6: 36:56:54:35:21:da:a6:f3:f7:22:89:0d:e2:be:72: 74:ec:b4:5a:54:e6:7c:8d:c3:cd:ce:c1:a5:a2:69: 1e:b9:83:1e:2d:40:5d:7f:8b:87:14:a7:a7:64:97: e0:c6:4d:77:3a:bf:b9:cb:15:99:44:96:e0:d1:b9: 96:fa:7f:8a:42:25:a0:9a:80:f7:6d:b8:75:c5:f3: bd:1a:94:45:2d:0f:36:fe:8a:bd:f9:6a:79:e9:77: 81:f3:5e:12:56:9e:ff:7b:d2:d9:88:cf:f8:4d:68: d1:54:ea:eb:64:13:48:40:da:7c:f3:b1:5a:d8:9c: b8:04:84:56:2b:2b:cc:4e:2f:a2:89:c4:88:53:cb: e6:83:96:b5:7c:32:2b:94:8e:10:f1:b0:61:15:57: 8c:3f:47:66:3e:07:1c:29:9f:4a:7c:28:58:52:68: 53:d3:b0:cc:e6:c1:bc:92:9c:fe:d9:ff:5b:d1:5d: f3:c1:2b:7a:75:13:a6:a9:eb:8d:bc:a1:4b:81:42: c8:5d:f3:f3:ea:1f:36:d3:ae:ad:05:dd:1f:9b:7e: b1:ed:07:1c:22:a9:0b:0e:f2:8e:29:df:9e:41:e1: fa:b7:8e:5d:7c:cb:67:f2:bd:f4:9c:70:90:d9:d0: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:10:43:9A:AD:B8:36:E7:2D:41:B6:92:9F:86:9F:53:DE:F1:04:62 X509v3 Authority Key Identifier: keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:74:ec:85:94:03:4e:9b:e8:46:27:f1:b9:2f:a8:44:5c:d8: 6b:dd:85:58:2d:a0:87:7c:ed:e0:12:df:66:a2:4c:f7:03:6b: 5f:b9:08:b9:6c:13:da:1b:e3:fd:d0:28:3c:3c:cb:2e:64:8e: b7:22:9c:0a:c1:e1:be:94:58:18:36:5a:06:31:26:c5:8d:10: 21:08:5f:80:9a:02:86:6c:6f:6f:c6:68:12:d0:6a:73:6b:5f: d3:bc:8b:e3:32:bb:c9:98:a0:3d:f5:92:2a:4b:74:75:c7:00: 3c:e2:2b:9e:26:6e:8d:f2:18:43:57:58:bc:74:aa:f6:23:9d: 27:80:3f:90:ea:69:fa:0e:1f:ca:85:f3:b1:b9:9a:0d:63:21: f4:da:cb:15:6f:03:a6:83:e5:86:7f:b2:1e:fb:38:ec:ab:86: 35:9f:f9:f6:37:b3:0e:8e:44:2a:da:15:a8:db:83:58:2f:8b: a6:38:87:58:bf:15:2f:a3:ab:59:c2:e0:95:68:cd:2e:2b:44: ee:5c:6c:bf:f7:3e:07:fa:df:bf:0a:36:d6:59:4e:78:11:bf: 3e:a2:cb:1d:11:b1:b1:08:b5:34:78:79:49:d7:36:52:0c:a0: 7b:b2:e6:1d:fc:5f:97:ab:6d:6b:e0:69:68:89:82:e7:29:4a: 80:46:26:54 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUGglEsT51BHYVDHaHrxbJTFXgi4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxREU4MTkyOTYyQTQwM0JCNjgwOTQ1NUQ5QzA3NzZG NzlDQzUyNzAeFw0yNjA1MTIxMTUwNDhaFw0yNjA1MTMxNDM3NDhaMDMxMTAvBgNV BAMTKDY2MTA0MzlBQURCODM2RTcyRDQxQjY5MjlGODY5RjUzREVGMTA0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFV6AQ6x9/m6Ba+yHI9jZWVDUh 2qbz9yKJDeK+cnTstFpU5nyNw83OwaWiaR65gx4tQF1/i4cUp6dkl+DGTXc6v7nL FZlEluDRuZb6f4pCJaCagPdtuHXF870alEUtDzb+ir35annpd4HzXhJWnv970tmI z/hNaNFU6utkE0hA2nzzsVrYnLgEhFYrK8xOL6KJxIhTy+aDlrV8MiuUjhDxsGEV V4w/R2Y+Bxwpn0p8KFhSaFPTsMzmwbySnP7Z/1vRXfPBK3p1E6ap6428oUuBQshd 8/PqHzbTrq0F3R+bfrHtBxwiqQsO8o4p355B4fq3jl18y2fyvfSccJDZ0D0DAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUZhBDmq24NuctQbaSn4afU97xBGIwHwYDVR0j BBgwFoAU0x3oGSlipAO7aAlFXZwHdvecxScwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRURUTlMv MC9EMzFERTgxOTI5NjJBNDAzQkI2ODA5NDU1RDlDMDc3NkY3OUNDNTI3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0QzMURFODE5Mjk2MkE0MDNCQjY4MDk0NTVEOUMw Nzc2Rjc5Q0M1MjcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FRFROUy8wL0QzMURFODE5Mjk2MkE0 MDNCQjY4MDk0NTVEOUMwNzc2Rjc5Q0M1MjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkdOyFlANOm+hG J/G5L6hEXNhr3YVYLaCHfO3gEt9mokz3A2tfuQi5bBPaG+P90Cg8PMsuZI63IpwK weG+lFgYNloGMSbFjRAhCF+AmgKGbG9vxmgS0Gpza1/TvIvjMrvJmKA99ZIqS3R1 xwA84iueJm6N8hhDV1i8dKr2I50ngD+Q6mn6Dh/KhfOxuZoNYyH02ssVbwOmg+WG f7Ie+zjsq4Y1n/n2N7MOjkQq2hWo24NYL4umOIdYvxUvo6tZwuCVaM0uK0TuXGy/ 9z4H+t+/CjbWWU54Eb8+ossdEbGxCLU0eHlJ1zZSDKB7suYd/F+Xq21r4GloiYLn KUqARiZU -----END CERTIFICATE-----Generated at Wed May 13 04:17:19 2026 by rpki-client