$ rpki-client -vvvf rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft File: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft (raw, json) Hash identifier: 1OEGr6oboKyqbOooyCd4eMmk+itZL2YDLm6kNWQG9h0= Subject key identifier: C5:75:F4:77:86:1E:5D:3D:32:41:5D:BA:3E:12:2F:D9:87:35:2E:7B Authority key identifier: E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5 Certificate issuer: /CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5 Certificate serial: 0C2169D21C2398C519C079F5F27D14F22903B738 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft Manifest number: BA Signing time: Thu 24 Sep 2026 08:59:17 +0000 Manifest this update: Thu 24 Sep 2026 08:54:17 +0000 Manifest next update: Fri 25 Sep 2026 12:14:17 +0000 Files and hashes: 1: 3130332e3136302e3138302e302f32332d3234203d3e20393833.roa (hash: bSmO+jTWr7YOoJ4NGhuYgKT8sLNYWbbxkJfWN+8zotE=) 2: 3130332e3136302e3138302e302f32332d3234203d3e203536383530.roa (hash: RzAPn5btTcxQ4JmMexqs2Z3tgOn6EwRXUMKi5on2EDg=) 3: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl (hash: iHQCw8xSCa/Vun2X+8Qrb2z2lgdqYPeI9Dvkfn3WzQg=) 4: 3130332e3136302e3138302e302f32332d3234203d3e203138303431.roa (hash: 18NWi1veGokF/mTHx158Mqd+r/PzLz4vX21G5OQonx8=) 5: 3130332e3136302e3138302e302f32332d3234203d3e203338313336.roa (hash: vXSGvfe4/SHzbgc1FGIm8W7fF4FtlTo17+zWJlbEFVI=) 6: 323430363a656534303a3a2f33322d3438203d3e203138303431.roa (hash: ENdF+FZ/wshSwMngi/LeNYAxqnXtTR+JIbUWvzMtjvg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 12:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:21:69:d2:1c:23:98:c5:19:c0:79:f5:f2:7d:14:f2:29:03:b7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5 Validity Not Before: Sep 24 08:54:17 2026 GMT Not After : Sep 25 12:14:17 2026 GMT Subject: CN=C575F477861E5D3D32415DBA3E122FD987352E7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:08:6a:35:50:12:54:c3:9e:37:5b:09:6e: 0e:04:cc:25:f8:ea:0f:f3:87:e7:83:c8:5c:ed:bf: 3a:0f:0e:da:4b:59:7e:99:a7:37:11:fa:09:64:51: c0:43:c4:0e:c2:0c:96:9f:2d:89:11:1b:50:42:07: 20:30:01:75:70:b4:c9:2c:18:39:e2:35:1d:9b:25: e1:2b:03:23:b3:86:03:03:eb:8d:ca:0d:3d:69:73: 6a:35:a4:36:ea:70:c0:db:5d:0a:e0:53:d2:b8:65: 8f:ab:95:13:27:e6:38:38:74:d0:7e:fd:df:ee:19: 68:11:f1:92:a1:09:12:01:97:9b:bd:cb:92:46:ab: 4e:fc:e2:c4:9a:d9:0c:26:09:34:9e:5d:08:84:7e: a6:06:36:a5:49:eb:74:45:e1:eb:ee:a5:ca:33:4f: dc:f6:6e:ba:ef:56:0b:78:56:4a:56:9e:ec:3b:f2: ca:5f:0f:ba:9d:61:c4:a2:fa:3f:89:30:a8:07:9a: 9e:21:7d:42:8b:81:46:e2:4c:25:80:26:7d:ca:1c: 75:b4:d5:b8:31:4b:94:3c:f3:eb:b5:90:ad:d3:6d: 7f:8e:34:7b:ea:9f:56:29:1c:9f:dc:d5:42:b1:b9: a7:07:11:9d:c8:37:10:6e:68:03:fd:d9:18:8b:26: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:75:F4:77:86:1E:5D:3D:32:41:5D:BA:3E:12:2F:D9:87:35:2E:7B X509v3 Authority Key Identifier: keyid:E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:90:b7:d0:1f:43:fe:46:50:3b:a1:53:9b:eb:bc:bf:d9:0f: 1a:82:fb:d5:45:c6:67:0a:bd:dc:ad:97:79:d9:4e:e8:af:1d: e0:46:9c:11:d9:24:91:d7:2f:20:fd:38:cd:23:ea:df:a7:25: 74:b3:92:e0:78:a5:5c:d6:13:1d:53:d1:21:ac:f3:39:17:c6: 8d:d3:a7:4e:ed:a0:5f:f8:2d:d3:1a:41:d3:33:9a:24:9c:c9: 02:60:ab:af:1e:33:60:89:5d:64:c4:15:6f:07:05:56:b5:03: 09:23:79:5b:64:de:8e:c4:0c:b7:04:d1:ce:52:74:8e:c3:33: 8e:cb:57:d8:a5:14:bf:d4:4d:f4:47:60:57:ad:d4:e0:a0:f2: 05:76:4b:c8:1e:cb:53:48:97:26:e9:3e:57:5f:b3:e8:10:25: 50:4f:09:5c:9c:dc:68:35:e1:fe:7e:40:8f:af:21:1f:7d:5e: 40:58:1b:e6:15:7b:82:61:12:29:d6:eb:96:10:d0:31:86:c0: 4e:4c:82:f1:d7:2c:a2:a8:56:69:65:a7:d3:aa:86:f5:fc:ed: 42:53:0c:52:d3:69:e1:bb:c0:dc:9e:57:01:86:c2:74:54:8d: d0:8e:e5:28:8e:d0:74:b6:42:e8:63:13:38:bd:fa:51:fc:8b: 35:54:45:16 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUDCFp0hwjmMUZwHn18n0U8ikDtzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY1Rjg3QzM0MTVCNzRERkJCQ0JFMDkwOUEzMjA4MzVF RTg4RTZFNTAeFw0yNjA5MjQwODU0MTdaFw0yNjA5MjUxMjE0MTdaMDMxMTAvBgNV BAMTKEM1NzVGNDc3ODYxRTVEM0QzMjQxNURCQTNFMTIyRkQ5ODczNTJFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6ghqNVASVMOeN1sJbg4EzCX4 6g/zh+eDyFztvzoPDtpLWX6ZpzcR+glkUcBDxA7CDJafLYkRG1BCByAwAXVwtMks GDniNR2bJeErAyOzhgMD643KDT1pc2o1pDbqcMDbXQrgU9K4ZY+rlRMn5jg4dNB+ /d/uGWgR8ZKhCRIBl5u9y5JGq0784sSa2QwmCTSeXQiEfqYGNqVJ63RF4evupcoz T9z2brrvVgt4VkpWnuw78spfD7qdYcSi+j+JMKgHmp4hfUKLgUbiTCWAJn3KHHW0 1bgxS5Q88+u1kK3TbX+ONHvqn1YpHJ/c1UKxuacHEZ3INxBuaAP92RiLJiCpAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUxXX0d4YeXT0yQV26PhIv2Yc1LnswHwYDVR0j BBgwFoAU5l+Hw0FbdN+7y+CQmjIINe6I5uUwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRVJBWUlO Rk8vMC9FNjVGODdDMzQxNUI3NERGQkJDQkUwOTA5QTMyMDgzNUVFODhFNkU1LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0U2NUY4N0MzNDE1Qjc0REZCQkNCRTA5MDlB MzIwODM1RUU4OEU2RTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FUkFZSU5GTy8wL0U2NUY4N0Mz NDE1Qjc0REZCQkNCRTA5MDlBMzIwODM1RUU4OEU2RTUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHkLfQ H0P+RlA7oVOb67y/2Q8agvvVRcZnCr3crZd52U7orx3gRpwR2SSR1y8g/TjNI+rf pyV0s5LgeKVc1hMdU9EhrPM5F8aN06dO7aBf+C3TGkHTM5oknMkCYKuvHjNgiV1k xBVvBwVWtQMJI3lbZN6OxAy3BNHOUnSOwzOOy1fYpRS/1E30R2BXrdTgoPIFdkvI HstTSJcm6T5XX7PoECVQTwlcnNxoNeH+fkCPryEffV5AWBvmFXuCYRIp1uuWENAx hsBOTILx1yyiqFZpZafTqob1/O1CUwxS02nhu8DcnlcBhsJ0VI3QjuUojtB0tkLo YxM4vfpR/Is1VEUW -----END CERTIFICATE-----Generated at Thu Sep 24 20:57:21 2026 by rpki-client