$ rpki-client -vvvf rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft File: 8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft (raw, json) Hash identifier: 5eetrgE86xwgKQHUZS78iB0L+BX1QATlUZOVqj6JGeo= Subject key identifier: 65:74:B3:FA:B1:7A:29:15:CA:FC:CD:C6:05:83:EC:AC:45:39:B5:74 Authority key identifier: 8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D Certificate issuer: /CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D Certificate serial: 1F506CA20E55112DAF8C3EDC90E425B240CDEA47 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft Manifest number: 01B9 Signing time: Sat 14 Nov 2026 19:44:46 +0000 Manifest this update: Sat 14 Nov 2026 19:39:46 +0000 Manifest next update: Sun 15 Nov 2026 20:49:46 +0000 Files and hashes: 1: 8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl (hash: cJj8GwcoW5y8MaSLB5vkyvxiSXfw7uXQiU3J9Fri/h8=) 2: 3136382e39352e3234362e302f32342d3234203d3e20313331363630.roa (hash: /rFAcJo7WRKr9Y04XWoxK2EUrySSmtYzHuftb6eEQmg=) 3: 3136382e39352e3234362e302f32342d3234203d3e2039363830.roa (hash: qY8G/piGZoFsrv4yVakDlSNULKnbFiE++pH3LF+STH8=) 4: 3136382e39352e302e302f31362d3234203d3e2033343632.roa (hash: cny9oftOlaQBIAKAW7fI9Ii4iukGeOomSH0pO2tpe4g=) 5: 3136382e39352e3234352e302f32342d3234203d3e2039363830.roa (hash: oRHHKePxUG1yomUaLROcDL8sz+AFa9+6Nv92YC2lcwk=) 6: 3136382e39352e3234352e302f32342d3234203d3e20313331363630.roa (hash: Kjhl9MPmHYnY/7lPcRnwvpNRHP/np0GYKwvgXIOkK14=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:50:6c:a2:0e:55:11:2d:af:8c:3e:dc:90:e4:25:b2:40:cd:ea:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D Validity Not Before: Nov 14 19:39:46 2026 GMT Not After : Nov 15 20:49:46 2026 GMT Subject: CN=6574B3FAB17A2915CAFCCDC60583ECAC4539B574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:49:ae:dd:55:fa:8f:cd:32:79:17:93:95: f1:8f:b2:9d:e4:df:19:75:9c:b8:57:0b:52:14:8e: a1:dc:0e:e3:a2:51:0e:45:79:5e:8c:51:ef:90:3f: bf:1c:b7:a0:e3:63:b0:a4:b7:8a:db:ef:6d:7d:58: 61:52:28:b6:43:92:98:7a:7b:53:06:91:0f:a1:4b: e4:10:12:d1:53:66:e5:42:72:5d:39:76:98:f3:9c: 5d:c5:44:f4:49:9d:b2:c2:6c:db:b5:91:dc:8d:e4: 03:d6:f2:be:8c:bd:52:90:ea:e1:b5:30:a6:d0:0d: 5f:34:98:9a:81:ae:33:28:4a:6c:bf:7d:ff:c7:33: 47:4a:9f:99:8c:2e:50:d4:4e:77:4f:39:68:07:45: d1:db:0c:83:e8:27:a8:c1:f8:bb:d0:23:18:6e:82: e3:58:bd:c8:1c:3e:02:cd:64:4a:17:c4:99:9b:99: 45:68:55:40:2f:e6:a3:01:fd:41:c9:82:6a:03:33: d4:67:e5:05:f5:de:e2:cc:01:38:72:a8:bc:be:c0: eb:72:c5:63:94:f0:58:5c:81:4f:21:6b:df:3e:2c: 9d:0b:a8:e3:dc:fc:62:d2:72:0d:fb:f0:3d:9c:c0: ba:bb:94:31:07:91:51:4d:ad:e4:8a:f5:4d:16:22: c0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:74:B3:FA:B1:7A:29:15:CA:FC:CD:C6:05:83:EC:AC:45:39:B5:74 X509v3 Authority Key Identifier: keyid:8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:aa:db:22:b4:34:24:07:fc:86:91:0f:33:10:ef:2b:c7:76: a2:f3:ad:c0:fa:ff:7e:ec:a3:c7:69:48:9d:eb:a8:ad:ba:22: f9:cb:29:77:12:1a:56:b3:a6:97:83:cb:85:6c:73:72:19:1c: 37:a4:4b:06:7e:89:2e:f6:bb:cd:12:dd:ee:b3:1e:c4:27:3c: 66:35:4c:86:93:b7:f0:87:2b:b3:73:27:e0:37:c7:1f:48:0e: 2c:c9:35:2a:8e:73:b8:fb:f9:ca:3c:d3:48:4c:db:38:2d:6a: 19:86:18:3e:e1:02:fd:45:57:32:e8:e3:6c:40:de:93:0a:81: a3:f2:48:2c:40:45:a4:76:b6:e7:64:2d:a2:1b:ed:a6:60:d5: a7:cc:e4:ac:a7:af:30:10:e0:bf:65:a5:b6:cf:72:a7:dc:db: 2b:35:a6:cf:93:da:0d:e0:af:be:9d:c1:a5:03:1f:26:7b:ef: fd:83:8e:d0:31:c7:40:a4:2e:60:9c:f1:e8:81:a2:c6:1f:f4: 71:2e:8c:43:52:ee:bb:43:ad:06:ec:6d:68:c9:24:dd:b0:0c: 5c:01:09:6a:cd:96:4c:e3:3b:2d:41:ea:88:63:b8:4f:cc:9b: d4:98:c3:66:c5:d7:d7:d7:d8:dc:8b:e4:e1:3e:a2:9c:e7:75: a9:fb:0f:43 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUH1Bsog5VES2vjD7ckOQlskDN6kcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwNTY1RDI1MjZENEY0MUQwN0U3M0IwQjVDQTY5QUY2 NUZGNkI3RDAeFw0yNjExMTQxOTM5NDZaFw0yNjExMTUyMDQ5NDZaMDMxMTAvBgNV BAMTKDY1NzRCM0ZBQjE3QTI5MTVDQUZDQ0RDNjA1ODNFQ0FDNDUzOUI1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj10mu3VX6j80yeReTlfGPsp3k 3xl1nLhXC1IUjqHcDuOiUQ5FeV6MUe+QP78ct6DjY7Ckt4rb7219WGFSKLZDkph6 e1MGkQ+hS+QQEtFTZuVCcl05dpjznF3FRPRJnbLCbNu1kdyN5APW8r6MvVKQ6uG1 MKbQDV80mJqBrjMoSmy/ff/HM0dKn5mMLlDUTndPOWgHRdHbDIPoJ6jB+LvQIxhu guNYvcgcPgLNZEoXxJmbmUVoVUAv5qMB/UHJgmoDM9Rn5QX13uLMAThyqLy+wOty xWOU8FhcgU8ha98+LJ0LqOPc/GLScg378D2cwLq7lDEHkVFNreSK9U0WIsBJAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUZXSz+rF6KRXK/M3GBYPsrEU5tXQwHwYDVR0j BBgwFoAUjgVl0lJtT0HQfnOwtcppr2X/a30wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv MS84RTA1NjVEMjUyNkQ0RjQxRDA3RTczQjBCNUNBNjlBRjY1RkY2QjdELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzhFMDU2NUQyNTI2RDRGNDFEMDdFNzNCMEI1Q0E2 OUFGNjVGRjZCN0QuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8xLzhFMDU2NUQyNTI2RDRG NDFEMDdFNzNCMEI1Q0E2OUFGNjVGRjZCN0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBqtsitDQkB/yG kQ8zEO8rx3ai863A+v9+7KPHaUid66ituiL5yyl3EhpWs6aXg8uFbHNyGRw3pEsG foku9rvNEt3usx7EJzxmNUyGk7fwhyuzcyfgN8cfSA4syTUqjnO4+/nKPNNITNs4 LWoZhhg+4QL9RVcy6ONsQN6TCoGj8kgsQEWkdrbnZC2iG+2mYNWnzOSsp68wEOC/ ZaW2z3Kn3NsrNabPk9oN4K++ncGlAx8me+/9g47QMcdApC5gnPHogaLGH/RxLoxD Uu67Q60G7G1oySTdsAxcAQlqzZZM4zstQeqIY7hPzJvUmMNmxdfX19jci+ThPqKc 53Wp+w9D -----END CERTIFICATE-----Generated at Sun Nov 15 00:23:54 2026 by rpki-client