$ rpki-client -vvvf rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft File: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft (raw, json) Hash identifier: b6jSHyvyPOn1fV8oLk6Q5XriFk4cDr0S6v4oOfeYcDA= Subject key identifier: 87:A5:B4:EE:65:7B:A9:3C:0D:D9:C3:F2:22:48:16:FD:38:2A:C5:1B Authority key identifier: 71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3 Certificate issuer: /CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3 Certificate serial: 37961FDE52A7D56B4EFD89FAC453286F9AEE4C04 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft Manifest number: 0175 Signing time: Thu 24 Sep 2026 08:29:14 +0000 Manifest this update: Thu 24 Sep 2026 08:24:14 +0000 Manifest next update: Fri 25 Sep 2026 08:48:14 +0000 Files and hashes: 1: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl (hash: 9G4GHQFYWV9pGvOOH2VpIfeNGmheOPfIa/qMx5fluyY=) 2: 323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa (hash: kPG07upBltBMpeU3lVOAGDxJPAnyCOXOCAXQZ9d58mQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:96:1f:de:52:a7:d5:6b:4e:fd:89:fa:c4:53:28:6f:9a:ee:4c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3 Validity Not Before: Sep 24 08:24:14 2026 GMT Not After : Sep 25 08:48:14 2026 GMT Subject: CN=87A5B4EE657BA93C0DD9C3F2224816FD382AC51B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:85:11:7c:5b:38:6e:a3:3f:af:a4:5c:a0: 9a:d9:b3:c5:cb:ab:a6:4a:a0:f4:f1:e7:da:fb:76: 48:ab:d8:3c:c3:c1:d6:c0:5f:4d:b1:9e:f8:41:fa: ae:3f:58:b5:af:4d:a2:6f:9f:5b:ba:97:80:a8:1d: 16:9a:c4:49:94:83:60:f2:8a:ff:76:74:60:66:d0: 94:44:05:94:43:bc:60:50:15:9b:a0:e4:94:8e:01: 8a:de:c3:7d:c0:2a:5d:f9:69:a8:64:45:57:91:bc: 6b:88:03:99:7b:c6:37:a3:7b:ce:2e:80:4d:5a:14: 05:64:07:0a:ae:25:0d:14:81:8b:a3:6b:c8:54:8e: e2:b3:d9:6c:2a:50:c6:fa:25:ed:2d:8b:f8:4b:5f: b6:2c:24:cb:a9:1d:61:e7:e3:33:cc:c3:db:22:7c: 1b:f1:c5:dd:24:28:20:3d:20:5b:45:89:f7:89:7d: 14:69:4d:b7:a0:d3:72:40:c0:30:4c:ad:e1:15:f2: d0:10:5a:44:f0:ef:c0:f4:fe:60:79:f7:53:35:5c: 9d:f2:44:b2:fe:dc:58:9f:92:89:47:cd:55:2c:f5: 31:01:83:05:9c:b9:76:dc:5c:3a:48:03:c8:5f:6f: 41:21:1e:c5:4b:57:04:bf:7d:98:aa:84:52:a8:7d: c1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A5:B4:EE:65:7B:A9:3C:0D:D9:C3:F2:22:48:16:FD:38:2A:C5:1B X509v3 Authority Key Identifier: keyid:71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:14:4f:ca:09:17:1d:76:95:a8:4c:bc:4b:3e:10:6e:19:73: ac:94:a7:b0:bb:fa:2e:a2:0b:06:4c:3d:63:c3:a0:94:fc:46: 70:e3:7f:be:7a:5f:55:f1:08:0e:8e:cc:34:38:bd:64:68:2e: 1a:75:de:75:cb:f7:c5:ac:c9:ad:58:06:5d:19:c5:a8:29:80: 29:57:da:44:b0:1f:1c:54:fb:26:2c:75:ad:38:0e:a1:18:e8: 72:de:e2:91:ed:e8:e5:85:2e:b7:d1:d7:e0:99:d9:52:3b:1e: ef:4c:a7:37:9f:11:f5:00:7d:23:9a:a2:93:38:f0:ea:8d:fc: e4:c8:a1:d1:b4:db:e9:f4:82:ab:b5:8e:0b:9c:14:25:f2:87: b0:11:a8:2d:1f:b9:db:3a:e7:1e:0a:af:3e:b5:a8:7b:6a:c7: ee:bc:e5:43:b3:f8:50:b6:74:b2:1b:19:4d:06:80:3f:fc:97: 97:79:b2:db:f3:81:55:8d:c1:3d:d8:cf:30:ba:34:93:a5:15: 51:67:0a:10:cc:84:13:ef:ee:cb:13:df:e0:d3:0d:94:41:4a: 51:84:69:09:5a:d0:53:87:23:9e:d4:ca:ec:6c:18:92:a8:b3: 00:77:ba:d8:be:3b:0e:cd:e5:40:d3:8a:95:b9:63:0d:82:a6: 4d:b5:a8:51 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUN5Yf3lKn1WtO/Yn6xFMob5ruTAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTM0MDE4NTQ3RDc3QjY1RUJDRDBGQzQ5NDFEQzgx MTNGQUVFMzAeFw0yNjA5MjQwODI0MTRaFw0yNjA5MjUwODQ4MTRaMDMxMTAvBgNV BAMTKDg3QTVCNEVFNjU3QkE5M0MwREQ5QzNGMjIyNDgxNkZEMzgyQUM1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tYURfFs4bqM/r6RcoJrZs8XL q6ZKoPTx59r7dkir2DzDwdbAX02xnvhB+q4/WLWvTaJvn1u6l4CoHRaaxEmUg2Dy iv92dGBm0JREBZRDvGBQFZug5JSOAYrew33AKl35aahkRVeRvGuIA5l7xjeje84u gE1aFAVkBwquJQ0UgYuja8hUjuKz2WwqUMb6Je0ti/hLX7YsJMupHWHn4zPMw9si fBvxxd0kKCA9IFtFifeJfRRpTbeg03JAwDBMreEV8tAQWkTw78D0/mB591M1XJ3y RLL+3FifkolHzVUs9TEBgwWcuXbcXDpIA8hfb0EhHsVLVwS/fZiqhFKofcFBAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUh6W07mV7qTwN2cPyIkgW/TgqxRswHwYDVR0j BBgwFoAUceU0AYVH13tl680PxJQdyBE/ruMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv Mi83MUU1MzQwMTg1NDdENzdCNjVFQkNEMEZDNDk0MURDODExM0ZBRUUzLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zLzcxRTUzNDAxODU0N0Q3N0I2NUVCQ0QwRkM0OTQx REM4MTEzRkFFRTMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8yLzcxRTUzNDAxODU0N0Q3 N0I2NUVCQ0QwRkM0OTQxREM4MTEzRkFFRTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTFE/KCRcddpWo TLxLPhBuGXOslKewu/ouogsGTD1jw6CU/EZw43++el9V8QgOjsw0OL1kaC4add51 y/fFrMmtWAZdGcWoKYApV9pEsB8cVPsmLHWtOA6hGOhy3uKR7ejlhS630dfgmdlS Ox7vTKc3nxH1AH0jmqKTOPDqjfzkyKHRtNvp9IKrtY4LnBQl8oewEagtH7nbOuce Cq8+tah7asfuvOVDs/hQtnSyGxlNBoA//JeXebLb84FVjcE92M8wujSTpRVRZwoQ zIQT7+7LE9/g0w2UQUpRhGkJWtBThyOe1MrsbBiSqLMAd7rYvjsOzeVA04qVuWMN gqZNtahR -----END CERTIFICATE-----Generated at Thu Sep 24 21:39:42 2026 by rpki-client