$ rpki-client -vvvf rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft File: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft (raw, json) Hash identifier: JXOhwPGxok4DS6CalZoTo1fiD83/Jf8Xg6LT7LVslto= Subject key identifier: 28:9A:D1:95:27:C3:8D:F0:3A:16:50:87:34:94:E7:0B:75:00:4E:D2 Authority key identifier: 71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3 Certificate issuer: /CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3 Certificate serial: 2B7949BE3CB9DF9551D4A39411C84DA50A7C3479 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft Manifest number: 01B9 Signing time: Sat 14 Nov 2026 11:42:10 +0000 Manifest this update: Sat 14 Nov 2026 11:37:10 +0000 Manifest next update: Sun 15 Nov 2026 14:13:10 +0000 Files and hashes: 1: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl (hash: zqFvXC/E/dWHnXn6Nf3CuxUu4NTiHCUYNyZzrOwei1A=) 2: 323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa (hash: kPG07upBltBMpeU3lVOAGDxJPAnyCOXOCAXQZ9d58mQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 14:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:79:49:be:3c:b9:df:95:51:d4:a3:94:11:c8:4d:a5:0a:7c:34:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3 Validity Not Before: Nov 14 11:37:10 2026 GMT Not After : Nov 15 14:13:10 2026 GMT Subject: CN=289AD19527C38DF03A1650873494E70B75004ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:0d:73:8a:85:db:14:56:82:43:5a:55:06: 85:81:a1:84:75:f0:69:e6:47:57:c1:9c:02:72:cc: b8:12:c1:8d:c1:d9:db:71:e6:a0:14:3a:e4:a1:61: 15:20:78:d9:3a:da:2b:ec:fd:25:24:04:30:ae:dc: 4a:be:98:99:71:52:f3:82:14:37:ad:25:b0:d1:c4: be:26:4a:f7:a1:12:35:01:60:33:2c:5b:29:de:ec: 5f:74:e4:40:b4:12:98:c1:1b:dc:91:88:b4:a7:cf: 4e:e3:06:94:70:9f:40:c1:c5:3a:bc:0a:09:7f:53: 15:91:f9:ad:37:f3:40:87:11:39:f7:0d:7e:37:3a: f1:93:ff:94:1a:81:ae:b5:d1:8d:1c:28:46:92:42: 26:52:02:ec:b3:9b:c9:b8:da:6b:fc:91:89:bd:7d: 1d:b2:ad:e3:9e:9f:53:ec:3d:78:a6:12:6b:3e:22: 58:9c:4e:c5:69:15:7f:8a:80:40:15:82:68:04:94: f1:a0:20:57:92:51:59:33:92:78:14:4e:9d:4c:72: ba:c9:cf:60:16:2c:1f:55:a4:24:36:6a:5c:4b:44: 24:46:be:28:5a:a9:63:6f:d0:36:2a:9f:83:d4:aa: 80:39:af:78:c6:3a:08:0e:14:d6:26:e3:f2:e5:da: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9A:D1:95:27:C3:8D:F0:3A:16:50:87:34:94:E7:0B:75:00:4E:D2 X509v3 Authority Key Identifier: keyid:71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:8e:0b:f1:14:6a:0d:a4:12:8c:eb:be:18:97:63:4a:78:7d: 1b:2a:a1:4f:a5:2c:29:1e:4d:6a:6f:88:d0:f7:64:29:b1:05: b9:48:72:96:f3:fe:08:99:84:1f:da:a1:49:75:33:8a:a6:bc: d5:7a:f2:d3:4d:7b:5f:51:32:9b:73:0c:8a:b0:1a:2f:57:9e: e3:47:dc:90:aa:50:45:24:e7:27:b5:44:7a:7f:6f:21:97:05: 8c:a3:66:1e:f9:ef:69:fc:59:11:19:ae:9a:ee:46:ad:9e:5d: 35:d9:f9:07:ad:69:65:e6:16:46:fb:52:64:63:7e:c1:67:89: a0:61:1d:02:7f:5e:8b:75:4f:26:45:78:bc:7d:a5:d2:ed:87: c7:70:2c:fe:b3:66:71:84:fa:d1:8f:eb:3d:84:3a:88:b3:9f: e4:c5:b1:05:92:f0:58:4f:6b:41:a9:39:85:a9:e5:db:b6:75: 50:0e:6d:cb:5d:80:bc:4d:30:5d:b5:da:e5:70:78:0b:84:d8: 75:6a:22:de:34:9c:68:9e:26:2f:ea:23:2f:08:fe:e8:23:24: 77:28:72:03:c1:04:66:40:b8:99:95:52:97:6a:77:ba:b8:0c: 87:10:17:63:21:e2:1a:51:6f:d6:53:f4:37:d8:57:a2:3e:e9: 36:34:d5:2e -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUK3lJvjy535VR1KOUEchNpQp8NHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTM0MDE4NTQ3RDc3QjY1RUJDRDBGQzQ5NDFEQzgx MTNGQUVFMzAeFw0yNjExMTQxMTM3MTBaFw0yNjExMTUxNDEzMTBaMDMxMTAvBgNV BAMTKDI4OUFEMTk1MjdDMzhERjAzQTE2NTA4NzM0OTRFNzBCNzUwMDRFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILw1zioXbFFaCQ1pVBoWBoYR1 8GnmR1fBnAJyzLgSwY3B2dtx5qAUOuShYRUgeNk62ivs/SUkBDCu3Eq+mJlxUvOC FDetJbDRxL4mSvehEjUBYDMsWyne7F905EC0EpjBG9yRiLSnz07jBpRwn0DBxTq8 Cgl/UxWR+a0380CHETn3DX43OvGT/5Qaga610Y0cKEaSQiZSAuyzm8m42mv8kYm9 fR2yreOen1PsPXimEms+IlicTsVpFX+KgEAVgmgElPGgIFeSUVkzkngUTp1McrrJ z2AWLB9VpCQ2alxLRCRGvihaqWNv0DYqn4PUqoA5r3jGOggOFNYm4/Ll2ndJAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUKJrRlSfDjfA6FlCHNJTnC3UATtIwHwYDVR0j BBgwFoAUceU0AYVH13tl680PxJQdyBE/ruMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv Mi83MUU1MzQwMTg1NDdENzdCNjVFQkNEMEZDNDk0MURDODExM0ZBRUUzLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zLzcxRTUzNDAxODU0N0Q3N0I2NUVCQ0QwRkM0OTQx REM4MTEzRkFFRTMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8yLzcxRTUzNDAxODU0N0Q3 N0I2NUVCQ0QwRkM0OTQxREM4MTEzRkFFRTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBijgvxFGoNpBKM 674Yl2NKeH0bKqFPpSwpHk1qb4jQ92QpsQW5SHKW8/4ImYQf2qFJdTOKprzVevLT TXtfUTKbcwyKsBovV57jR9yQqlBFJOcntUR6f28hlwWMo2Ye+e9p/FkRGa6a7kat nl012fkHrWll5hZG+1JkY37BZ4mgYR0Cf16LdU8mRXi8faXS7YfHcCz+s2ZxhPrR j+s9hDqIs5/kxbEFkvBYT2tBqTmFqeXbtnVQDm3LXYC8TTBdtdrlcHgLhNh1aiLe NJxoniYv6iMvCP7oIyR3KHIDwQRmQLiZlVKXane6uAyHEBdjIeIaUW/WU/Q32Fei Puk2NNUu -----END CERTIFICATE-----Generated at Sat Nov 14 22:45:14 2026 by rpki-client