$ rpki-client -vvvf rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft File: CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft (raw, json) Hash identifier: hUNjnkauGix+PreghqJzr9+p28oi94ycAGVrxulwZtU= Subject key identifier: 27:41:71:A7:A5:FC:A5:4D:9D:43:B1:0E:17:5C:6A:7C:1C:A2:90:FE Authority key identifier: CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F Certificate issuer: /CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F Certificate serial: 7329DEA49671E399AF6FD340BAC9138B12CCC8B0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft Manifest number: B7 Signing time: Thu 24 Sep 2026 11:49:39 +0000 Manifest this update: Thu 24 Sep 2026 11:44:39 +0000 Manifest next update: Fri 25 Sep 2026 14:38:39 +0000 Files and hashes: 1: 3130332e3133302e38342e302f32322d3234203d3e20313331363037.roa (hash: kLXIxum1hjICq0/XMBssYAH4VJErk8HWH+ctM17UVM0=) 2: CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl (hash: Ru+Dhe8uove1az7yRr0pJHspgvW2j2cS+F7fV16cHhk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 14:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:29:de:a4:96:71:e3:99:af:6f:d3:40:ba:c9:13:8b:12:cc:c8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F Validity Not Before: Sep 24 11:44:39 2026 GMT Not After : Sep 25 14:38:39 2026 GMT Subject: CN=274171A7A5FCA54D9D43B10E175C6A7C1CA290FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:f1:e1:25:69:f7:f7:50:2b:77:3b:9b:af: b7:6a:34:8b:75:de:98:54:41:13:9f:ca:3c:40:37: a5:3c:95:4b:58:5e:84:93:a4:a8:ad:22:47:c2:33: 43:2c:99:f9:e8:9e:9c:b3:c6:78:3a:61:6c:c5:6a: 59:08:33:1a:ff:1e:e5:e8:31:3f:3f:7d:60:0c:1f: ac:72:24:c5:a0:0e:0f:82:90:0c:df:f0:3d:aa:ce: ab:7d:a1:28:6c:04:99:ca:9a:0b:84:b8:93:98:39: 97:5b:d1:9f:28:ac:b3:b8:72:19:5a:97:0a:7f:c1: 79:12:19:99:cf:d4:7c:a3:c4:e6:f2:4e:48:4d:be: 2b:99:f8:8e:c6:e8:e4:14:4a:9d:a4:ac:55:91:79: 68:d9:bd:b7:82:bb:5c:cc:a8:64:78:be:06:97:e7: 0d:32:44:57:24:89:89:a2:e9:aa:93:f7:2d:e8:8c: e4:14:ac:0a:c0:10:55:c8:23:7f:7f:0d:e2:70:71: c3:24:fe:15:7c:75:b8:d2:d2:31:98:40:2c:4e:44: 2d:fb:76:b1:73:80:34:e3:1b:19:2e:58:4b:11:64: 33:e2:bb:b0:65:44:08:7f:18:e0:4e:66:fb:c8:16: 24:ac:f6:49:10:75:87:a0:e7:ea:26:2d:af:25:30: 95:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:41:71:A7:A5:FC:A5:4D:9D:43:B1:0E:17:5C:6A:7C:1C:A2:90:FE X509v3 Authority Key Identifier: keyid:CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:eb:c0:75:4c:c3:8b:b4:84:e8:b4:91:e1:c7:3f:a4:e3:3a: 26:3b:0a:1f:c4:aa:28:ca:97:bd:57:06:e0:52:de:e8:99:ee: 55:71:07:2e:75:58:f9:63:d3:3b:df:ab:99:8d:c8:da:1b:5e: 64:27:f1:fb:c3:de:0d:4f:20:38:45:06:ae:d7:55:f4:ae:71: 20:66:94:5a:c2:4d:10:d9:13:31:16:42:b1:f2:f2:35:29:f4: 55:86:b7:3f:b2:8f:33:4d:73:33:c1:6d:db:84:49:50:f4:96: a6:5c:9f:52:79:df:a0:77:29:94:36:9a:d1:79:ee:83:cf:53: d9:96:3a:76:be:cf:1b:b3:04:09:cc:63:89:25:5e:d8:4c:16: fc:f9:8c:0f:39:b8:34:5c:d7:64:52:ea:00:d9:57:7c:68:d1: 4f:47:62:4c:e1:db:f1:d6:05:0e:32:d0:0e:4a:ec:fc:27:2e: da:54:46:9b:da:04:fd:e8:8a:75:7e:f0:ed:35:61:ec:b1:ac: 75:1b:36:45:c6:8e:25:84:71:26:9d:e8:f2:8d:b7:5a:89:b6: 5a:6c:33:81:45:b1:fd:56:ca:c7:cf:0c:db:08:31:d7:8b:8f: 81:83:f7:fd:64:f6:cf:5d:92:d1:46:45:59:5c:53:ad:ba:4a: 70:0b:2f:99 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUcynepJZx45mvb9NAuskTixLMyLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U5ODVDNzhDNkI1Nzg1MDc3MDJERURCMUMzOTlCMkY5 OUNCM0I0RjAeFw0yNjA5MjQxMTQ0MzlaFw0yNjA5MjUxNDM4MzlaMDMxMTAvBgNV BAMTKDI3NDE3MUE3QTVGQ0E1NEQ5RDQzQjEwRTE3NUM2QTdDMUNBMjkwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjXfHhJWn391Ardzubr7dqNIt1 3phUQROfyjxAN6U8lUtYXoSTpKitIkfCM0Msmfnonpyzxng6YWzFalkIMxr/HuXo MT8/fWAMH6xyJMWgDg+CkAzf8D2qzqt9oShsBJnKmguEuJOYOZdb0Z8orLO4chla lwp/wXkSGZnP1HyjxObyTkhNviuZ+I7G6OQUSp2krFWReWjZvbeCu1zMqGR4vgaX 5w0yRFckiYmi6aqT9y3ojOQUrArAEFXII39/DeJwccMk/hV8dbjS0jGYQCxORC37 drFzgDTjGxkuWEsRZDPiu7BlRAh/GOBOZvvIFiSs9kkQdYeg5+omLa8lMJXpAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUJ0Fxp6X8pU2dQ7EOF1xqfByikP4wHwYDVR0j BBgwFoAUzphceMa1eFB3At7bHDmbL5nLO08wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRUhIS1kv MC9DRTk4NUM3OEM2QjU3ODUwNzcwMkRFREIxQzM5OUIyRjk5Q0IzQjRGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0NFOTg1Qzc4QzZCNTc4NTA3NzAyREVEQjFDMzk5 QjJGOTlDQjNCNEYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FSEhLWS8wL0NFOTg1Qzc4QzZCNTc4 NTA3NzAyREVEQjFDMzk5QjJGOTlDQjNCNEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAl68B1TMOLtITo tJHhxz+k4zomOwofxKooype9VwbgUt7ome5VcQcudVj5Y9M736uZjcjaG15kJ/H7 w94NTyA4RQau11X0rnEgZpRawk0Q2RMxFkKx8vI1KfRVhrc/so8zTXMzwW3bhElQ 9JamXJ9Sed+gdymUNprRee6Dz1PZljp2vs8bswQJzGOJJV7YTBb8+YwPObg0XNdk UuoA2Vd8aNFPR2JM4dvx1gUOMtAOSuz8Jy7aVEab2gT96Ip1fvDtNWHssax1GzZF xo4lhHEmnejyjbdaibZabDOBRbH9VsrHzwzbCDHXi4+Bg/f9ZPbPXZLRRkVZXFOt ukpwCy+Z -----END CERTIFICATE-----Generated at Thu Sep 24 23:29:43 2026 by rpki-client