$ rpki-client -vvvf rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft File: 28E8C034945DF0971A657E251911BBA0B2819562.mft (raw, json) Hash identifier: jUIibrjj4Oce3xaAcK52AfOKXV3qaOem7pErs2yJRak= Subject key identifier: 57:07:4D:50:21:6B:94:AA:E0:00:21:73:37:A1:0E:EB:0A:44:35:24 Authority key identifier: 28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62 Certificate issuer: /CN=28E8C034945DF0971A657E251911BBA0B2819562 Certificate serial: 619F461BE19A6E3ECD31FD261C19B29BBA4F5A02 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft Manifest number: BC Signing time: Fri 25 Sep 2026 06:02:05 +0000 Manifest this update: Fri 25 Sep 2026 05:57:05 +0000 Manifest next update: Sat 26 Sep 2026 08:40:05 +0000 Files and hashes: 1: 3130332e3134362e3231322e302f32332d3234203d3e20313331363731.roa (hash: pMS5Ph8mPGJU3UpJ7IjmKfi+Ix8We0Zd68WwZnbms2Y=) 2: 28E8C034945DF0971A657E251911BBA0B2819562.crl (hash: CgA8waH0aie9m6gymwpuQSXXWnTpWeQqabz4wV8QMHg=) 3: 323430353a613063303a3a2f33322d3438203d3e20313331363731.roa (hash: 6HrkEzQ2Yg1WTlAGALA+Lw5WYBWkKQgOUE2P3VYv1e4=) 4: 3130332e3134362e3231322e302f32342d3234203d3e20313331363731.roa (hash: v0VyC7X7thLb1BBUBYlXdyclFoTUZxEmzXZ1GE31WD8=) 5: 3130332e3134362e3231332e302f32342d3234203d3e20313331363731.roa (hash: LYwHjGxEzckNqePKzYBLQw/Fecl7B+Zct0xOoyvOLzg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9f:46:1b:e1:9a:6e:3e:cd:31:fd:26:1c:19:b2:9b:ba:4f:5a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E8C034945DF0971A657E251911BBA0B2819562 Validity Not Before: Sep 25 05:57:05 2026 GMT Not After : Sep 26 08:40:05 2026 GMT Subject: CN=57074D50216B94AAE000217337A10EEB0A443524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:83:09:da:0a:cd:5d:16:f4:f6:67:d6:3a: fe:96:cc:2a:f7:7f:84:66:f6:5b:fe:05:43:67:fe: c8:9e:00:3a:64:f7:18:d5:ab:67:78:c3:ae:2d:c4: b6:3b:34:6a:f8:25:4d:ea:e2:76:6d:d2:b9:01:bb: 91:30:ee:59:81:ad:72:c9:3a:42:66:bb:ce:11:53: a0:19:50:fd:d5:83:e0:c9:49:2d:2b:40:1e:6c:58: e7:b8:98:c4:ac:70:00:77:b3:ef:6c:8b:9a:1f:db: 53:b2:d3:2d:35:4f:ee:66:2b:c6:5f:47:b8:02:1c: c8:de:3f:06:00:cd:41:fa:76:ab:da:17:05:2d:27: 00:1a:b0:dd:59:5a:cf:0b:16:3a:10:92:b5:63:4a: 5b:ec:b1:67:2b:b4:fd:7f:28:d7:ae:4a:47:c2:b1: 0f:c4:03:8b:3c:73:39:b2:31:11:53:15:82:b0:f9: 45:c8:2f:00:83:54:64:80:93:22:15:10:3f:c2:fa: d3:35:68:b3:93:f7:98:93:4e:28:0e:35:6a:41:14: ad:a9:c8:3b:37:73:75:e9:42:ad:e3:84:07:4c:70: 9a:a4:2b:bd:4b:05:08:85:93:77:ce:0e:73:ba:c3: 94:8e:ac:fe:d7:bb:fe:0f:5c:96:c2:f5:d3:78:31: b2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:07:4D:50:21:6B:94:AA:E0:00:21:73:37:A1:0E:EB:0A:44:35:24 X509v3 Authority Key Identifier: keyid:28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:04:9a:b9:70:10:67:d7:47:6e:e5:fa:a9:28:fb:64:0f:59: 42:32:ab:ad:c6:ca:32:a4:a9:12:f5:cb:e2:dc:7a:be:6d:19: ed:ab:91:b8:12:ad:cd:67:05:cc:ab:4a:dd:3d:47:ec:b6:4b: 5c:2f:d9:51:7f:32:cd:3e:a8:39:d4:65:ae:69:78:11:45:af: a6:e5:dc:bf:b0:49:2c:68:cf:1f:39:be:be:08:a7:aa:03:45: 95:ab:e0:64:7f:c4:cc:11:21:f4:ec:65:ed:49:4e:63:8c:d6: b1:e1:93:4a:40:2a:86:c0:de:0b:90:4b:74:6b:31:78:37:09: fa:8e:f8:cf:8a:9d:df:ac:f9:90:b0:68:15:fb:11:7c:bd:ed: cd:d1:94:4c:ef:06:fb:32:e8:c6:75:f0:ae:2d:6d:88:51:89: 12:6d:bb:b7:c1:29:e9:b2:0d:86:cb:b1:59:9f:ea:fb:8b:05: c1:84:f7:5b:75:dd:47:13:f2:77:e7:12:47:1c:8b:e6:d9:12: 2d:a5:5a:e6:8f:b1:23:c9:8f:b4:60:d8:c1:e5:b8:5a:11:b8: 4d:93:01:f4:d4:61:b2:83:68:05:39:dc:65:3d:9d:cf:f6:e7: 8f:4b:47:68:b4:8c:67:a9:fa:6a:66:16:4b:3c:04:04:40:64: e0:56:7d:b2 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUYZ9GG+Gabj7NMf0mHBmym7pPWgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkxMUJCQTBC MjgxOTU2MjAeFw0yNjA5MjUwNTU3MDVaFw0yNjA5MjYwODQwMDVaMDMxMTAvBgNV BAMTKDU3MDc0RDUwMjE2Qjk0QUFFMDAwMjE3MzM3QTEwRUVCMEE0NDM1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/yoMJ2grNXRb09mfWOv6WzCr3 f4Rm9lv+BUNn/sieADpk9xjVq2d4w64txLY7NGr4JU3q4nZt0rkBu5Ew7lmBrXLJ OkJmu84RU6AZUP3Vg+DJSS0rQB5sWOe4mMSscAB3s+9si5of21Oy0y01T+5mK8Zf R7gCHMjePwYAzUH6dqvaFwUtJwAasN1ZWs8LFjoQkrVjSlvssWcrtP1/KNeuSkfC sQ/EA4s8czmyMRFTFYKw+UXILwCDVGSAkyIVED/C+tM1aLOT95iTTigONWpBFK2p yDs3c3XpQq3jhAdMcJqkK71LBQiFk3fODnO6w5SOrP7Xu/4PXJbC9dN4MbKdAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUVwdNUCFrlKrgACFzN6EO6wpENSQwHwYDVR0j BBgwFoAUKOjANJRd8JcaZX4lGRG7oLKBlWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkFOVEFT WS8wLzI4RThDMDM0OTQ1REYwOTcxQTY1N0UyNTE5MTFCQkEwQjI4MTk1NjIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkx MUJCQTBCMjgxOTU2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0ZBTlRBU1kvMC8yOEU4QzAzNDk0 NURGMDk3MUE2NTdFMjUxOTExQkJBMEIyODE5NTYyLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQSauXAQ Z9dHbuX6qSj7ZA9ZQjKrrcbKMqSpEvXL4tx6vm0Z7auRuBKtzWcFzKtK3T1H7LZL XC/ZUX8yzT6oOdRlrml4EUWvpuXcv7BJLGjPHzm+vginqgNFlavgZH/EzBEh9Oxl 7UlOY4zWseGTSkAqhsDeC5BLdGsxeDcJ+o74z4qd36z5kLBoFfsRfL3tzdGUTO8G +zLoxnXwri1tiFGJEm27t8Ep6bINhsuxWZ/q+4sFwYT3W3XdRxPyd+cSRxyL5tkS LaVa5o+xI8mPtGDYweW4WhG4TZMB9NRhsoNoBTncZT2dz/bnj0tHaLSMZ6n6amYW SzwEBEBk4FZ9sg== -----END CERTIFICATE-----Generated at Fri Sep 25 19:33:08 2026 by rpki-client