$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft File: 8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft (raw, json) Hash identifier: 974+1nIk4AMpxs0tGtHuFE/i2aF/G7evKS6qeDzDVSY= Subject key identifier: 0C:DB:CA:33:63:81:B3:57:58:C6:6D:58:58:6D:D0:53:A6:14:5A:2A Authority key identifier: 8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D Certificate issuer: /CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D Certificate serial: 2E177CB617C8F5EA7E9CE980F69037FD005A12BA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft Manifest number: C1 Signing time: Tue 12 May 2026 01:28:56 +0000 Manifest this update: Tue 12 May 2026 01:23:56 +0000 Manifest next update: Wed 13 May 2026 02:30:56 +0000 Files and hashes: 1: 3136382e39352e3234352e302f32342d3234203d3e2039363830.roa (hash: oRHHKePxUG1yomUaLROcDL8sz+AFa9+6Nv92YC2lcwk=) 2: 8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl (hash: 2d8J986nTq9aKigXnunXckVQsr/NKv1o6Fpy8iTsJY4=) 3: 3136382e39352e3234362e302f32342d3234203d3e2039363830.roa (hash: qY8G/piGZoFsrv4yVakDlSNULKnbFiE++pH3LF+STH8=) 4: 3136382e39352e302e302f31362d3234203d3e2033343632.roa (hash: cny9oftOlaQBIAKAW7fI9Ii4iukGeOomSH0pO2tpe4g=) 5: 3136382e39352e3234362e302f32342d3234203d3e20313331363630.roa (hash: /rFAcJo7WRKr9Y04XWoxK2EUrySSmtYzHuftb6eEQmg=) 6: 3136382e39352e3234352e302f32342d3234203d3e20313331363630.roa (hash: Kjhl9MPmHYnY/7lPcRnwvpNRHP/np0GYKwvgXIOkK14=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:17:7c:b6:17:c8:f5:ea:7e:9c:e9:80:f6:90:37:fd:00:5a:12:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D Validity Not Before: May 12 01:23:56 2026 GMT Not After : May 13 02:30:56 2026 GMT Subject: CN=0CDBCA336381B35758C66D58586DD053A6145A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2c:4d:58:2b:1e:3e:fc:3a:48:a5:d2:dc:3b: 14:b9:57:1f:a0:b0:d4:0f:54:10:58:6d:ca:01:54: 93:7c:d6:62:5a:e9:63:73:3d:1e:52:ac:4d:b1:fe: 1c:79:7d:7a:29:a4:a5:b2:3a:09:e3:9d:3c:7a:01: 0b:9a:b6:aa:9b:88:c0:cf:d5:4e:f8:97:9e:b7:fe: de:d0:39:e0:04:75:8a:46:db:8b:55:d5:08:fe:9f: ee:e1:f4:7a:25:ba:6d:a7:ce:0c:0e:f3:65:f0:1b: 09:2c:54:f8:cf:9e:eb:5c:4e:b7:c4:22:48:62:81: 54:83:9a:3b:8a:3b:d3:35:51:55:4f:35:74:24:e3: 59:52:ff:d8:07:b4:93:08:cc:0e:62:1e:d5:66:75: c9:20:d8:d3:d0:e3:a8:93:3b:59:b0:25:c3:e8:ae: a1:95:9e:55:1c:19:33:bf:ae:c5:bf:c8:70:42:6a: 73:7a:6a:4a:58:36:b5:03:cb:0d:65:d8:94:2f:37: 57:86:ee:78:56:91:66:71:4e:3c:95:01:96:eb:fe: 66:72:e1:b0:29:6f:75:91:fa:e8:70:87:bd:be:ae: 9c:13:0d:0c:fa:fd:c5:e4:c9:f9:64:80:dd:4e:7b: 7c:8b:9f:60:ce:89:4c:d1:32:88:7a:ed:fb:14:3b: 4a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DB:CA:33:63:81:B3:57:58:C6:6D:58:58:6D:D0:53:A6:14:5A:2A X509v3 Authority Key Identifier: keyid:8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ba:87:69:90:66:84:a1:ac:57:d2:75:e5:94:08:81:d9:c5: 94:5b:ea:9f:9f:11:10:f8:c1:00:17:09:a7:5c:16:8a:93:a8: b5:3d:41:55:e6:b3:b0:32:89:ea:72:3e:4e:c9:43:c7:a6:32: c5:64:46:2f:55:5b:cc:75:3d:4e:9a:a2:11:52:dd:d4:1f:5b: 8a:db:36:a8:4b:44:15:92:9d:e6:5f:83:8b:14:4c:20:2c:9a: 77:9d:bf:b2:22:63:e9:3f:02:03:d0:fd:87:50:3a:6f:5d:e4: 16:6c:af:b5:78:f4:fc:01:ce:20:7b:d5:d3:e4:ba:73:30:d0: 7a:22:29:7b:f1:db:31:32:41:7d:81:48:18:c1:81:46:a9:dc: 1b:f7:dc:75:20:e2:3c:40:d0:9e:45:fd:47:2a:3f:eb:c6:56: 16:b0:a0:6a:2a:d4:83:62:57:15:03:54:d9:0d:bc:db:83:91: 75:64:b3:9c:07:4e:02:04:de:9a:a4:8b:bb:8a:ac:ac:5a:e8: a0:1b:33:76:a6:45:d6:4e:94:06:54:d9:a5:bc:41:21:1e:b2: ad:75:e8:39:b3:26:fa:33:1b:30:5a:d4:23:50:33:f8:17:af: 28:c8:f2:41:1a:d9:5f:ba:22:8b:f3:71:f7:cf:92:f9:9c:2e: 35:0f:c1:a9 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIULhd8thfI9ep+nOmA9pA3/QBaErowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwNTY1RDI1MjZENEY0MUQwN0U3M0IwQjVDQTY5QUY2 NUZGNkI3RDAeFw0yNjA1MTIwMTIzNTZaFw0yNjA1MTMwMjMwNTZaMDMxMTAvBgNV BAMTKDBDREJDQTMzNjM4MUIzNTc1OEM2NkQ1ODU4NkREMDUzQTYxNDVBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqLE1YKx4+/DpIpdLcOxS5Vx+g sNQPVBBYbcoBVJN81mJa6WNzPR5SrE2x/hx5fXoppKWyOgnjnTx6AQuatqqbiMDP 1U74l563/t7QOeAEdYpG24tV1Qj+n+7h9Holum2nzgwO82XwGwksVPjPnutcTrfE IkhigVSDmjuKO9M1UVVPNXQk41lS/9gHtJMIzA5iHtVmdckg2NPQ46iTO1mwJcPo rqGVnlUcGTO/rsW/yHBCanN6akpYNrUDyw1l2JQvN1eG7nhWkWZxTjyVAZbr/mZy 4bApb3WR+uhwh72+rpwTDQz6/cXkyflkgN1Oe3yLn2DOiUzRMoh67fsUO0qTAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUDNvKM2OBs1dYxm1YWG3QU6YUWiowHwYDVR0j BBgwFoAUjgVl0lJtT0HQfnOwtcppr2X/a30wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv MS84RTA1NjVEMjUyNkQ0RjQxRDA3RTczQjBCNUNBNjlBRjY1RkY2QjdELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzhFMDU2NUQyNTI2RDRGNDFEMDdFNzNCMEI1Q0E2 OUFGNjVGRjZCN0QuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8xLzhFMDU2NUQyNTI2RDRG NDFEMDdFNzNCMEI1Q0E2OUFGNjVGRjZCN0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcuodpkGaEoaxX 0nXllAiB2cWUW+qfnxEQ+MEAFwmnXBaKk6i1PUFV5rOwMonqcj5OyUPHpjLFZEYv VVvMdT1OmqIRUt3UH1uK2zaoS0QVkp3mX4OLFEwgLJp3nb+yImPpPwID0P2HUDpv XeQWbK+1ePT8Ac4ge9XT5LpzMNB6Iil78dsxMkF9gUgYwYFGqdwb99x1IOI8QNCe Rf1HKj/rxlYWsKBqKtSDYlcVA1TZDbzbg5F1ZLOcB04CBN6apIu7iqysWuigGzN2 pkXWTpQGVNmlvEEhHrKtdeg5syb6MxswWtQjUDP4F68oyPJBGtlfuiKL83H3z5L5 nC41D8Gp -----END CERTIFICATE-----Generated at Wed May 13 01:14:35 2026 by rpki-client