$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft File: 8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft (raw, json) Hash identifier: xZwQ/79z0UQ+SPAPPFo9tL4F++49YwQ88uoB4eeGTiI= Subject key identifier: 6E:06:B2:5D:8E:41:20:0F:F1:91:C7:CA:2A:94:57:84:5F:D7:29:ED Authority key identifier: 8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D Certificate issuer: /CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D Certificate serial: 04D29CFB0017B8C63B01E10E5570A1543B68EC68 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft Manifest number: 0122 Signing time: Thu 23 Jul 2026 21:56:48 +0000 Manifest this update: Thu 23 Jul 2026 21:51:48 +0000 Manifest next update: Fri 24 Jul 2026 22:58:48 +0000 Files and hashes: 1: 3136382e39352e3234362e302f32342d3234203d3e2039363830.roa (hash: qY8G/piGZoFsrv4yVakDlSNULKnbFiE++pH3LF+STH8=) 2: 3136382e39352e3234352e302f32342d3234203d3e2039363830.roa (hash: oRHHKePxUG1yomUaLROcDL8sz+AFa9+6Nv92YC2lcwk=) 3: 3136382e39352e302e302f31362d3234203d3e2033343632.roa (hash: cny9oftOlaQBIAKAW7fI9Ii4iukGeOomSH0pO2tpe4g=) 4: 3136382e39352e3234352e302f32342d3234203d3e20313331363630.roa (hash: Kjhl9MPmHYnY/7lPcRnwvpNRHP/np0GYKwvgXIOkK14=) 5: 8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl (hash: zxVec4CHliMWE3eypnmyDScO9Vp5eEt8AGnv91NLWC8=) 6: 3136382e39352e3234362e302f32342d3234203d3e20313331363630.roa (hash: /rFAcJo7WRKr9Y04XWoxK2EUrySSmtYzHuftb6eEQmg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d2:9c:fb:00:17:b8:c6:3b:01:e1:0e:55:70:a1:54:3b:68:ec:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D Validity Not Before: Jul 23 21:51:48 2026 GMT Not After : Jul 24 22:58:48 2026 GMT Subject: CN=6E06B25D8E41200FF191C7CA2A9457845FD729ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a5:05:ed:af:54:c3:f7:0c:d5:13:56:d6:ff: d5:22:0c:18:c8:6f:95:43:2f:67:9c:80:af:f6:0b: 65:4a:6d:a7:34:77:ce:a6:22:b1:e3:76:c1:96:ba: ce:cc:e9:f7:7c:d0:97:de:d4:2f:08:7e:cc:16:74: 48:d9:37:b4:d2:44:2e:4d:f9:e7:1e:5b:c7:74:8f: 52:0c:65:02:09:1f:65:18:fa:46:b1:e0:d4:f9:d5: 44:b1:a4:11:a3:cb:15:b3:65:c9:84:fe:81:6b:75: fc:22:ec:19:91:11:c5:93:1f:b5:d9:39:77:ad:b1: 1c:ba:32:c0:c1:a6:68:6f:05:dc:8d:dc:12:aa:cc: d6:2b:a0:d4:9e:42:9c:31:cb:bd:19:cc:22:be:1c: 8f:d1:fd:52:ed:86:a5:d4:b7:fb:19:c9:0b:51:cf: 4f:cd:4a:8b:0f:53:08:b5:c8:2b:60:43:58:3d:c5: 32:e5:79:1c:75:13:e7:bd:2b:02:a5:89:1d:3b:1a: 05:7d:6c:d4:58:22:9b:dd:1b:1b:a5:51:d8:6c:77: 98:65:01:12:8e:27:2a:a2:f3:33:16:1a:3e:28:ef: d3:6c:48:19:29:e6:bd:9e:07:b1:f5:26:e6:ed:7b: 75:13:29:76:f0:d3:b6:08:49:ad:00:bc:82:f2:c6: c2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:06:B2:5D:8E:41:20:0F:F1:91:C7:CA:2A:94:57:84:5F:D7:29:ED X509v3 Authority Key Identifier: keyid:8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:81:7b:fa:1e:e9:09:07:42:2b:53:26:58:91:72:34:e9:aa: 49:18:a5:26:78:31:1f:78:25:43:37:95:e1:8b:a8:ab:8d:87: 67:99:b3:59:40:7a:64:28:2d:7e:a4:6c:35:cb:86:d4:59:83: 5e:5b:4b:4c:ac:7e:d0:cb:80:9b:75:fc:77:88:62:8e:93:91: cf:cf:1f:19:f3:b7:ca:3e:b5:82:ec:4d:97:e6:83:2c:1e:d4: ab:b2:f6:4d:a1:be:63:84:1f:c8:2c:df:0f:f9:aa:b9:bf:5a: f8:e2:22:a7:21:a9:e5:39:85:c4:9b:d4:a9:1e:59:19:1a:dc: 1e:b7:ff:64:2c:d8:4d:fb:80:8b:eb:4a:87:50:85:fe:d5:1f: b6:2b:66:c6:05:53:23:1a:f4:4c:3b:9c:15:d3:b1:cb:a7:eb: 0b:39:0a:ff:1a:3d:86:b4:8e:d8:f4:8d:81:2f:6f:8f:78:28: 2f:f5:14:c4:e5:c6:cb:09:12:cc:0f:c1:20:e2:7c:fd:35:20: 5d:d2:5d:00:6a:93:52:9b:8c:67:f7:88:14:bc:f7:d4:60:56: ce:74:56:9f:1a:af:ea:cb:5d:ce:49:9a:bc:32:e5:28:e7:1d: f0:0a:bb:56:70:8f:76:77:45:9d:73:66:3f:7b:54:70:94:cb: c9:49:8f:86 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUBNKc+wAXuMY7AeEOVXChVDto7GgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwNTY1RDI1MjZENEY0MUQwN0U3M0IwQjVDQTY5QUY2 NUZGNkI3RDAeFw0yNjA3MjMyMTUxNDhaFw0yNjA3MjQyMjU4NDhaMDMxMTAvBgNV BAMTKDZFMDZCMjVEOEU0MTIwMEZGMTkxQzdDQTJBOTQ1Nzg0NUZENzI5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCppQXtr1TD9wzVE1bW/9UiDBjI b5VDL2ecgK/2C2VKbac0d86mIrHjdsGWus7M6fd80Jfe1C8IfswWdEjZN7TSRC5N +eceW8d0j1IMZQIJH2UY+kax4NT51USxpBGjyxWzZcmE/oFrdfwi7BmREcWTH7XZ OXetsRy6MsDBpmhvBdyN3BKqzNYroNSeQpwxy70ZzCK+HI/R/VLthqXUt/sZyQtR z0/NSosPUwi1yCtgQ1g9xTLleRx1E+e9KwKliR07GgV9bNRYIpvdGxulUdhsd5hl ARKOJyqi8zMWGj4o79NsSBkp5r2eB7H1Jubte3UTKXbw07YISa0AvILyxsJBAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUbgayXY5BIA/xkcfKKpRXhF/XKe0wHwYDVR0j BBgwFoAUjgVl0lJtT0HQfnOwtcppr2X/a30wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv MS84RTA1NjVEMjUyNkQ0RjQxRDA3RTczQjBCNUNBNjlBRjY1RkY2QjdELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzhFMDU2NUQyNTI2RDRGNDFEMDdFNzNCMEI1Q0E2 OUFGNjVGRjZCN0QuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8xLzhFMDU2NUQyNTI2RDRG NDFEMDdFNzNCMEI1Q0E2OUFGNjVGRjZCN0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAIgXv6HukJB0Ir UyZYkXI06apJGKUmeDEfeCVDN5Xhi6irjYdnmbNZQHpkKC1+pGw1y4bUWYNeW0tM rH7Qy4Cbdfx3iGKOk5HPzx8Z87fKPrWC7E2X5oMsHtSrsvZNob5jhB/ILN8P+aq5 v1r44iKnIanlOYXEm9SpHlkZGtwet/9kLNhN+4CL60qHUIX+1R+2K2bGBVMjGvRM O5wV07HLp+sLOQr/Gj2GtI7Y9I2BL2+PeCgv9RTE5cbLCRLMD8Eg4nz9NSBd0l0A apNSm4xn94gUvPfUYFbOdFafGq/qy13OSZq8MuUo5x3wCrtWcI92d0Wdc2Y/e1Rw lMvJSY+G -----END CERTIFICATE-----Generated at Fri Jul 24 08:17:55 2026 by rpki-client