$ rpki-client -vvvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft File: BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json) Hash identifier: /FheSFLL9GK2GYDXcDSlCDiYtON4yoPGyUqDb9NtlcA= Subject key identifier: 37:5C:5E:4E:57:C2:1E:7B:89:CF:BE:39:C9:61:4C:35:43:FD:1F:3B Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D Certificate issuer: /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Certificate serial: 579A759FCEC8C9E20629ED047E9C9B569E07E5FE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft Manifest number: D5 Signing time: Sun 27 Sep 2026 02:07:44 +0000 Manifest this update: Sun 27 Sep 2026 02:02:44 +0000 Manifest next update: Mon 28 Sep 2026 05:13:44 +0000 Files and hashes: 1: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=) 2: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=) 3: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: TUdX5Z8kA314t/JMP1VYgidWmzo3toNrOYq13rgUyq0=) 4: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=) 5: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9a:75:9f:ce:c8:c9:e2:06:29:ed:04:7e:9c:9b:56:9e:07:e5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Validity Not Before: Sep 27 02:02:44 2026 GMT Not After : Sep 28 05:13:44 2026 GMT Subject: CN=375C5E4E57C21E7B89CFBE39C9614C3543FD1F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:73:e9:62:39:2d:bf:95:b8:3c:c0:c5:d7: 70:57:2f:2d:01:d2:35:91:26:7b:d8:8a:b4:1c:f4: 49:bc:c3:d8:41:3c:23:bf:cc:40:2e:b3:20:54:5a: 21:55:44:c6:fb:24:f9:e0:da:7a:03:6b:a0:8c:35: b2:cf:07:cf:ea:b6:59:45:6b:d6:76:7b:3b:19:7a: 70:99:bc:70:40:be:20:95:e4:a1:32:a0:f0:ac:23: 8f:f7:d6:0e:53:6a:7a:5b:1e:e0:26:43:96:d9:1e: 41:c4:14:f0:37:69:2d:61:e4:a0:fb:d8:61:16:0f: c8:6b:3a:f9:88:7a:b1:d4:91:68:14:e8:03:20:7d: 8e:90:5b:ec:1a:27:96:6c:5d:9b:0b:71:c1:6b:ce: fb:96:13:62:70:09:18:14:a6:ef:d1:d8:3e:75:52: 56:cf:b7:ef:74:09:ac:77:f7:39:de:1c:f4:7c:b1: f5:13:d7:b3:e3:65:25:81:df:00:64:fd:46:52:9e: 6f:d8:fa:dc:0d:8f:a5:58:a1:e7:c9:c9:35:0c:05: 92:3a:5e:e4:66:66:a1:2c:cc:90:27:ac:e7:d2:b8: 5b:de:24:a7:09:53:48:14:27:30:40:2a:40:88:d5: 63:ce:d7:d4:00:1b:78:73:8a:69:8e:da:b6:92:e7: 6a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5C:5E:4E:57:C2:1E:7B:89:CF:BE:39:C9:61:4C:35:43:FD:1F:3B X509v3 Authority Key Identifier: keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5c:3a:36:3d:67:18:46:d0:0f:b8:bd:4e:e3:9b:19:f0:16: d7:51:7e:59:a3:c1:77:ad:a0:38:8b:92:a4:fa:60:0f:a1:95: db:65:38:5d:1b:72:4e:d2:ba:be:17:51:80:ed:64:f4:ba:8b: b5:15:3a:7e:12:e3:1a:4b:d5:91:85:8e:86:7e:8a:eb:bb:68: 0b:64:10:5b:7f:ca:8f:2a:eb:bd:61:48:01:c9:41:33:d6:27: a9:2b:8b:4b:55:51:d4:1c:ab:f7:21:8a:93:14:74:07:7c:2e: 1e:b7:2f:ad:b8:96:3b:a9:12:c7:0c:94:05:db:45:06:e4:de: 05:9c:18:cb:24:59:66:55:00:94:0d:6d:69:75:e5:9c:10:41: 03:8d:3d:b7:8a:ed:02:f3:74:60:50:26:aa:53:fa:28:d3:e3: 2f:b6:92:4e:5f:46:61:99:01:3c:78:72:94:79:da:1e:d1:e6: fa:1b:cd:68:bd:f0:23:08:b3:fa:4b:f3:67:d4:55:79:1e:5c: 70:fc:62:f6:85:ed:c1:a9:ef:3d:6f:b4:00:54:d2:e6:a3:aa: 6b:86:8f:88:c9:3b:5f:c0:98:11:fa:4d:50:47:91:5a:09:33: 32:1e:c6:fd:0d:58:26:e1:80:27:8a:54:58:ef:8b:28:f7:b1: ba:5e:8c:cb -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUV5p1n87IyeIGKe0EfpybVp4H5f4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5 RjY0OEY2RDAeFw0yNjA5MjcwMjAyNDRaFw0yNjA5MjgwNTEzNDRaMDMxMTAvBgNV BAMTKDM3NUM1RTRFNTdDMjFFN0I4OUNGQkUzOUM5NjE0QzM1NDNGRDFGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4nPpYjktv5W4PMDF13BXLy0B 0jWRJnvYirQc9Em8w9hBPCO/zEAusyBUWiFVRMb7JPng2noDa6CMNbLPB8/qtllF a9Z2ezsZenCZvHBAviCV5KEyoPCsI4/31g5TanpbHuAmQ5bZHkHEFPA3aS1h5KD7 2GEWD8hrOvmIerHUkWgU6AMgfY6QW+waJ5ZsXZsLccFrzvuWE2JwCRgUpu/R2D51 UlbPt+90Cax39zneHPR8sfUT17PjZSWB3wBk/UZSnm/Y+twNj6VYoefJyTUMBZI6 XuRmZqEszJAnrOfSuFveJKcJU0gUJzBAKkCI1WPO19QAG3hzimmO2raS52rVAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUN1xeTlfCHnuJz745yWFMNUP9HzswHwYDVR0j BBgwFoAUvcdxXSn05DGY1ZMVtxZ07p9kj20wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO LzEvQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMy9CREM3NzE1RDI5RjRFNDMxOThENTkzMTVCNzE2 NzRFRTlGNjQ4RjZELmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElOLzEvQkRDNzcxNUQyOUY0 RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI9cOjY9ZxhG 0A+4vU7jmxnwFtdRflmjwXetoDiLkqT6YA+hldtlOF0bck7Sur4XUYDtZPS6i7UV On4S4xpL1ZGFjoZ+iuu7aAtkEFt/yo8q671hSAHJQTPWJ6kri0tVUdQcq/chipMU dAd8Lh63L624ljupEscMlAXbRQbk3gWcGMskWWZVAJQNbWl15ZwQQQONPbeK7QLz dGBQJqpT+ijT4y+2kk5fRmGZATx4cpR52h7R5vobzWi98CMIs/pL82fUVXkeXHD8 YvaF7cGp7z1vtABU0uajqmuGj4jJO1/AmBH6TVBHkVoJMzIexv0NWCbhgCeKVFjv iyj3sbpejMs= -----END CERTIFICATE-----Generated at Sun Sep 27 06:51:26 2026 by rpki-client