$ rpki-client -vvvf rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft File: D31DE8192962A403BB6809455D9C0776F79CC527.mft (raw, json) Hash identifier: vX5LA0RS/qhjkFXkAmw3wUN3FskrM8eH4KaTxgm+Mh4= Subject key identifier: 08:BC:96:BC:75:42:93:74:92:AB:0D:C0:93:08:FF:47:3B:F0:7C:00 Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527 Certificate serial: 6058FB6359F678E11F1B95DD4D5936837A1548D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft Manifest number: C7 Signing time: Thu 01 Oct 2026 04:21:51 +0000 Manifest this update: Thu 01 Oct 2026 04:16:51 +0000 Manifest next update: Fri 02 Oct 2026 07:51:51 +0000 Files and hashes: 1: 3131392e33302e31362e302f32302d3230203d3e203138343131.roa (hash: VDIgNrS0Bj4C/eZLO2BtqOoH9/X324CutCA0RmZUaVs=) 2: D31DE8192962A403BB6809455D9C0776F79CC527.crl (hash: 4AqUGYEQgBYXiqCdUE9VGmoYIJKhojl2Z4aWFCrSgow=) 3: 36312e35362e32352e302f32342d3234203d3e203138343131.roa (hash: qLfcOZVogzNc0fPW8DS0BFg+aXm72rn141irJHfF/2A=) 4: 36312e35362e32342e302f32342d3234203d3e203138343131.roa (hash: 4W+qJBNLOJOWIRvtB6qDddjGArtbipAJUnwCauAbtiw=) 5: 36312e35362e32362e302f32342d3234203d3e203138343131.roa (hash: nzkDFeWq9DKB8SnYVh/zKHjUR7e4Y9fE95qdnDZlMiI=) 6: 36312e35362e31362e302f32302d3234203d3e203138343131.roa (hash: OaBE8mWI96DAhvnsCUNb1Lo3ZA5eC1WiiVCLBOSaZW4=) 7: 36312e35362e31382e302f32342d3234203d3e203138343131.roa (hash: gjwd7BV9O1873cFPhEXU/7D/wbFE9dSEUv4zzhFHYw8=) 8: 36312e35362e31362e302f32302d3230203d3e203138343131.roa (hash: cpOU01Iw58/YmjLPrJqeRjungi3bbe0B4tFLVOzxjxc=) 9: 3131392e33302e31362e302f32302d3234203d3e203138343131.roa (hash: b/aL5o5ZJ2+jJ6WA1q4dCKtGxzeUgsNC1ybEW3+mJZY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:58:fb:63:59:f6:78:e1:1f:1b:95:dd:4d:59:36:83:7a:15:48:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527 Validity Not Before: Oct 1 04:16:51 2026 GMT Not After : Oct 2 07:51:51 2026 GMT Subject: CN=08BC96BC7542937492AB0DC09308FF473BF07C00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:eb:2b:44:66:33:68:ef:14:e8:14:df:2a: e4:23:b9:8c:02:21:d4:2f:44:6c:3c:a4:d7:9c:fa: d8:f1:8d:b5:a3:6d:ed:ad:16:b5:d2:a0:1f:4b:8c: 86:20:27:32:e7:39:8e:36:74:4e:ee:09:33:08:48: dc:2f:21:5d:99:ba:45:cb:ad:52:93:c5:08:66:66: fa:f4:1c:e9:e2:95:96:b4:9a:77:8f:ba:bb:19:62: 6e:71:f6:2c:1c:ec:37:f1:f9:8c:10:b7:e4:5b:32: 53:84:34:02:fb:81:75:d7:28:d9:69:f0:45:56:77: b9:70:ac:de:b7:98:95:b3:ec:4a:f2:a7:9a:c0:04: d0:31:ea:ed:83:3a:1f:37:29:e6:03:9e:02:b4:e2: cc:bb:26:66:9d:f8:28:41:fa:ab:2d:a5:3a:57:ef: 10:98:7a:09:a1:6a:06:2d:2b:81:03:da:41:10:6f: bf:f5:2c:b0:e2:4f:a7:a8:e5:fc:45:34:21:e4:d3: 6c:8c:1a:7a:30:95:b5:58:0c:6f:41:c1:73:87:69: 9e:fe:75:f0:68:bd:75:93:19:39:74:42:22:03:15: bc:3f:d2:43:58:ca:6f:f7:50:78:8b:f5:26:05:aa: 52:ed:de:35:b6:3e:f4:24:8a:5f:69:5a:c0:86:a9: 19:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BC:96:BC:75:42:93:74:92:AB:0D:C0:93:08:FF:47:3B:F0:7C:00 X509v3 Authority Key Identifier: keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:86:ec:fa:fa:ad:53:fd:9e:1f:72:a9:06:9a:34:a0:15:0c: 9f:bd:41:7f:8f:cb:1b:54:38:1b:43:8e:d2:32:22:53:cb:66: 15:9c:b6:66:a1:0a:b9:20:b5:de:73:8e:a4:32:c1:e1:29:72: f0:75:08:92:36:55:e6:54:f7:c9:60:8e:1d:32:97:b8:58:78: 34:e5:7a:b9:7a:4e:91:00:9e:b2:70:43:bc:43:b0:51:2e:80: af:96:ff:24:aa:9f:0c:98:15:b9:ca:d7:98:3c:6e:32:ee:8d: c2:26:e4:62:69:03:70:48:63:63:31:81:0e:95:bc:93:f3:4b: 52:59:ba:9b:95:d6:40:4d:59:31:fb:4c:13:68:28:3f:b7:22: a3:8f:69:c2:b3:87:be:fb:30:3d:90:98:c9:b0:c7:6a:1a:3d: 59:fe:ad:64:b6:6a:b4:cc:83:bd:57:7a:4a:50:6e:0e:89:07: da:94:cf:dc:03:98:71:2d:8d:23:4e:06:21:d6:21:5d:73:5d: 85:f4:bb:73:50:d5:8f:7b:ba:b9:cd:ca:3d:b9:80:a2:74:3f: f4:14:15:28:51:c2:36:3d:7b:8b:3d:d3:55:1e:f0:35:b6:90: 55:98:07:53:08:e0:bc:dc:fa:55:e5:07:67:79:f1:04:27:9c: cf:56:d4:7b -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUYFj7Y1n2eOEfG5XdTVk2g3oVSNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxREU4MTkyOTYyQTQwM0JCNjgwOTQ1NUQ5QzA3NzZG NzlDQzUyNzAeFw0yNjEwMDEwNDE2NTFaFw0yNjEwMDIwNzUxNTFaMDMxMTAvBgNV BAMTKDA4QkM5NkJDNzU0MjkzNzQ5MkFCMERDMDkzMDhGRjQ3M0JGMDdDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYesrRGYzaO8U6BTfKuQjuYwC IdQvRGw8pNec+tjxjbWjbe2tFrXSoB9LjIYgJzLnOY42dE7uCTMISNwvIV2ZukXL rVKTxQhmZvr0HOnilZa0mnePursZYm5x9iwc7Dfx+YwQt+RbMlOENAL7gXXXKNlp 8EVWd7lwrN63mJWz7Eryp5rABNAx6u2DOh83KeYDngK04sy7Jmad+ChB+qstpTpX 7xCYegmhagYtK4ED2kEQb7/1LLDiT6eo5fxFNCHk02yMGnowlbVYDG9BwXOHaZ7+ dfBovXWTGTl0QiIDFbw/0kNYym/3UHiL9SYFqlLt3jW2PvQkil9pWsCGqRmBAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUCLyWvHVCk3SSqw3Akwj/RzvwfAAwHwYDVR0j BBgwFoAU0x3oGSlipAO7aAlFXZwHdvecxScwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRURUTlMv MC9EMzFERTgxOTI5NjJBNDAzQkI2ODA5NDU1RDlDMDc3NkY3OUNDNTI3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0QzMURFODE5Mjk2MkE0MDNCQjY4MDk0NTVEOUMw Nzc2Rjc5Q0M1MjcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FRFROUy8wL0QzMURFODE5Mjk2MkE0 MDNCQjY4MDk0NTVEOUMwNzc2Rjc5Q0M1MjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRhuz6+q1T/Z4f cqkGmjSgFQyfvUF/j8sbVDgbQ47SMiJTy2YVnLZmoQq5ILXec46kMsHhKXLwdQiS NlXmVPfJYI4dMpe4WHg05Xq5ek6RAJ6ycEO8Q7BRLoCvlv8kqp8MmBW5yteYPG4y 7o3CJuRiaQNwSGNjMYEOlbyT80tSWbqbldZATVkx+0wTaCg/tyKjj2nCs4e++zA9 kJjJsMdqGj1Z/q1ktmq0zIO9V3pKUG4OiQfalM/cA5hxLY0jTgYh1iFdc12F9Ltz UNWPe7q5zco9uYCidD/0FBUoUcI2PXuLPdNVHvA1tpBVmAdTCOC83PpV5QdnefEE J5zPVtR7 -----END CERTIFICATE-----Generated at Thu Oct 1 11:23:41 2026 by rpki-client