$ rpki-client -vvvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft File: BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json) Hash identifier: z9sJjpbi88CXt3k6EERdz2J2iRsRNb66r5cqmnalORc= Subject key identifier: 39:82:77:41:3F:D3:5C:16:D7:74:AE:B1:6A:09:72:F9:5F:CD:68:C1 Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D Certificate issuer: /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Certificate serial: 4BEB1BADD9BC62F12A4BD3DDD4B9FDCF60D3FA5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft Manifest number: D3 Signing time: Fri 25 Sep 2026 14:38:23 +0000 Manifest this update: Fri 25 Sep 2026 14:33:23 +0000 Manifest next update: Sat 26 Sep 2026 16:12:23 +0000 Files and hashes: 1: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: wrzyk35RsAX7WjFwKRL11++EELG54221NWmV6e9yu8g=) 2: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=) 3: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=) 4: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=) 5: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:eb:1b:ad:d9:bc:62:f1:2a:4b:d3:dd:d4:b9:fd:cf:60:d3:fa:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Validity Not Before: Sep 25 14:33:23 2026 GMT Not After : Sep 26 16:12:23 2026 GMT Subject: CN=398277413FD35C16D774AEB16A0972F95FCD68C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:ac:c6:fb:4a:f8:df:90:40:8c:4c:bf:4f: 01:a3:e7:1d:7a:0f:35:59:0f:aa:42:ac:b1:61:72: 66:bd:43:7f:31:1e:e1:e6:c1:ad:e4:de:7d:6b:dc: d2:d6:e1:82:16:35:ae:e7:c3:02:73:e0:c8:b4:c7: a9:d1:fa:7a:ac:1a:c4:ef:cb:3b:41:58:ec:39:9f: 4a:ac:da:9b:78:0a:02:f2:70:0b:36:de:df:9e:1a: 8b:e5:0d:4c:e7:bf:07:98:a5:05:58:16:59:6e:40: 2a:90:4c:eb:e0:25:1d:e0:27:d0:ba:f9:15:71:28: ad:7c:49:bd:05:11:7f:0e:db:ed:f8:33:cb:5e:b7: 82:b7:f2:ae:88:4d:d6:d3:29:fe:2b:ed:b0:86:22: 24:2c:d6:25:78:44:82:c6:2b:16:a3:12:b5:c4:83: 0a:c4:47:ee:dc:cc:f4:5c:b4:2b:52:8d:9c:9e:b3: d4:09:04:6d:14:df:86:1d:05:39:b9:82:5c:cc:3b: 69:cf:f1:60:8a:9e:08:94:f1:00:e4:4a:84:8c:60: bd:8e:23:2e:d3:8c:23:33:75:23:f5:d6:bd:d2:22: aa:11:91:df:f6:58:75:5c:de:c2:ea:ca:10:99:7d: 4d:0b:5a:06:68:51:31:72:58:bb:f0:2e:ec:96:be: 80:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:82:77:41:3F:D3:5C:16:D7:74:AE:B1:6A:09:72:F9:5F:CD:68:C1 X509v3 Authority Key Identifier: keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6c:31:07:76:16:9d:a6:ec:ef:51:66:0d:1c:b2:93:df:33: f5:16:88:46:de:c2:3d:7a:36:ed:ef:12:44:fa:2d:17:54:43: d6:14:37:8b:cf:fd:da:48:05:bd:80:fc:5f:db:95:74:50:40: c8:e0:28:ee:1e:62:0d:b2:a0:04:71:0b:1b:20:ae:ef:67:a8: 6e:2a:85:d7:c8:8b:86:09:e0:50:fd:17:df:47:8c:6f:f1:da: 25:00:81:aa:33:0e:d4:b4:e2:b6:cd:82:3c:73:19:64:4d:cf: 92:53:32:5f:9f:7d:53:5f:20:d8:44:e1:b8:e4:e0:47:c6:5f: 0c:b3:13:05:7c:90:33:a3:bd:be:08:82:d5:44:a9:bc:8b:09: 70:20:9f:c6:bf:60:43:2e:f6:88:68:3c:c4:8a:0d:5f:92:79: d7:78:b1:ed:64:72:e2:ff:c9:61:6e:80:e4:8b:3a:c2:7e:10: d6:d7:db:fe:83:60:70:a9:83:31:6d:d5:98:30:ee:c1:4f:53: 01:c2:bf:0d:8d:30:64:6f:4e:a8:91:8c:be:93:14:ab:71:49: ff:26:c0:be:c1:05:53:d7:a5:fd:bb:77:ae:ed:07:a1:af:a9: 3e:82:e2:6e:2a:c2:d7:d0:60:ee:2b:23:ba:d5:70:d2:0e:83: cd:c1:2e:49 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUS+sbrdm8YvEqS9Pd1Ln9z2DT+lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5 RjY0OEY2RDAeFw0yNjA5MjUxNDMzMjNaFw0yNjA5MjYxNjEyMjNaMDMxMTAvBgNV BAMTKDM5ODI3NzQxM0ZEMzVDMTZENzc0QUVCMTZBMDk3MkY5NUZDRDY4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8KzG+0r435BAjEy/TwGj5x16 DzVZD6pCrLFhcma9Q38xHuHmwa3k3n1r3NLW4YIWNa7nwwJz4Mi0x6nR+nqsGsTv yztBWOw5n0qs2pt4CgLycAs23t+eGovlDUznvweYpQVYFlluQCqQTOvgJR3gJ9C6 +RVxKK18Sb0FEX8O2+34M8tet4K38q6ITdbTKf4r7bCGIiQs1iV4RILGKxajErXE gwrER+7czPRctCtSjZyes9QJBG0U34YdBTm5glzMO2nP8WCKngiU8QDkSoSMYL2O Iy7TjCMzdSP11r3SIqoRkd/2WHVc3sLqyhCZfU0LWgZoUTFyWLvwLuyWvoAPAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUOYJ3QT/TXBbXdK6xagly+V/NaMEwHwYDVR0j BBgwFoAUvcdxXSn05DGY1ZMVtxZ07p9kj20wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO LzEvQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMy9CREM3NzE1RDI5RjRFNDMxOThENTkzMTVCNzE2 NzRFRTlGNjQ4RjZELmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElOLzEvQkRDNzcxNUQyOUY0 RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIZsMQd2Fp2m 7O9RZg0cspPfM/UWiEbewj16Nu3vEkT6LRdUQ9YUN4vP/dpIBb2A/F/blXRQQMjg KO4eYg2yoARxCxsgru9nqG4qhdfIi4YJ4FD9F99HjG/x2iUAgaozDtS04rbNgjxz GWRNz5JTMl+ffVNfINhE4bjk4EfGXwyzEwV8kDOjvb4IgtVEqbyLCXAgn8a/YEMu 9ohoPMSKDV+Sedd4se1kcuL/yWFugOSLOsJ+ENbX2/6DYHCpgzFt1Zgw7sFPUwHC vw2NMGRvTqiRjL6TFKtxSf8mwL7BBVPXpf27d67tB6GvqT6C4m4qwtfQYO4rI7rV cNIOg83BLkk= -----END CERTIFICATE-----Generated at Sat Sep 26 04:14:49 2026 by rpki-client