$ rpki-client -vvvf rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft File: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft (raw, json) Hash identifier: UkEE0k74y68S82zW3rz0MBjky0oOsqujkcIoCKizvzM= Subject key identifier: 24:E7:70:30:CF:87:0D:45:25:7D:63:6D:FD:26:BE:1C:1B:42:17:05 Authority key identifier: 72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A Certificate issuer: /CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Certificate serial: 6E00DC0435D809232B0A200A5F6479BFFA886D0E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft Manifest number: 0101 Signing time: Sun 15 Nov 2026 04:30:14 +0000 Manifest this update: Sun 15 Nov 2026 04:25:14 +0000 Manifest next update: Mon 16 Nov 2026 05:10:14 +0000 Files and hashes: 1: 3130332e3235322e3132382e302f32322d3234203d3e20313331363032.roa (hash: nVHgvAQGfCe5GeqBJlvDWrqjtd8OwRSNjhUeOydBwUA=) 2: 3130332e3235322e3132382e302f32322d3234203d3e2034373830.roa (hash: aU5nH7E+iqqE72JCSOf/syfpmIQ4Ugwf1G4zZbGiNhs=) 3: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl (hash: n2ZJjDUNhilZ1s9D8Le9zpLplBesYENhhwgcYXtd3j0=) 4: 3130332e3235322e3132382e302f32322d3232203d3e203130303835.roa (hash: z0gKkFBHhI3K6nHdzx65beXtOEgH8B0I5cTB2wTLt8g=) 5: 3131342e32392e3234302e302f32322d3234203d3e20313331363032.roa (hash: 4cmNPnys0d/FtI5okidfoOFAlkFUnmuDLC94ZHnaWrA=) 6: 3131342e32392e3234302e302f32322d3232203d3e203130303835.roa (hash: Iu3XM7OWOu4YExXTvgO6ZRczd2wJf5M+hq5Ui0NVDWs=) 7: 3131342e32392e3234302e302f32322d3234203d3e2034373830.roa (hash: KC1g1qM879l4ds0q/ydW26xvU61SJGGDoYP8GsPifjc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:00:dc:04:35:d8:09:23:2b:0a:20:0a:5f:64:79:bf:fa:88:6d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Validity Not Before: Nov 15 04:25:14 2026 GMT Not After : Nov 16 05:10:14 2026 GMT Subject: CN=24E77030CF870D45257D636DFD26BE1C1B421705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:bb:81:75:c7:e3:dc:26:61:80:3f:fe:82: 7a:31:1f:5c:1c:a7:2d:e3:7e:76:0a:8d:ef:42:72: 4f:71:e3:72:91:3a:e0:46:8a:7b:2b:77:ab:e9:d6: 5b:1a:c7:51:74:dd:46:8c:ae:3a:ab:b0:7d:60:e6: 3b:78:3b:1d:18:e2:e2:02:a8:95:d4:d5:6c:1e:48: fe:c1:c3:c0:03:fb:6e:5f:1c:5d:b6:71:23:b2:36: ce:17:64:04:42:1f:1e:9b:06:99:06:73:bb:08:2b: d5:8b:be:1f:1b:f7:a4:fd:0e:f7:54:ef:45:9b:2b: 53:d9:e9:a7:f7:79:df:ac:a0:7c:df:48:dd:b5:69: 23:ab:75:0c:e7:01:5b:56:32:c3:9a:b7:ba:2b:2b: d9:00:f1:82:f6:66:5a:05:d3:d5:7d:99:5b:95:d4: 55:e7:db:10:b7:6c:12:50:80:c3:25:aa:71:28:ad: e9:cc:ce:4d:71:a3:5b:9b:e7:d5:c4:7e:64:87:e1: d3:a0:4f:c2:03:ca:73:e7:04:d0:85:85:05:20:77: f4:10:20:3b:a7:08:9c:5a:5d:a7:07:3a:fa:10:6e: 90:67:b5:d9:1c:75:cd:b2:53:ff:0e:3b:c4:48:10: e5:29:44:79:34:c8:39:51:ee:36:55:a2:d5:dd:2e: 29:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E7:70:30:CF:87:0D:45:25:7D:63:6D:FD:26:BE:1C:1B:42:17:05 X509v3 Authority Key Identifier: keyid:72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ef:d8:d1:69:15:95:96:cd:6f:cc:32:b0:7d:aa:f4:eb:a8: 6a:4f:19:4d:f2:5e:e1:d3:bb:32:03:0f:f2:f0:81:06:31:06: ee:2a:18:75:9c:3d:41:48:50:99:c7:e1:5a:68:43:fa:ec:3e: 00:2e:71:a8:96:57:f9:08:57:70:04:87:b5:4f:cf:bb:95:8f: 12:b0:fd:51:e1:27:06:04:ed:43:a7:b1:65:73:65:7e:c8:a2: fe:fc:38:97:36:d8:b6:50:52:0f:f4:ac:7c:1a:86:dc:50:6a: ff:0d:40:1b:6a:00:9c:fd:31:68:a6:70:c0:17:6d:14:ba:75: 55:21:08:19:5d:4b:2a:1f:26:a6:41:02:d1:0f:ca:93:76:61: 3c:a6:8f:62:ee:fa:6c:7a:33:16:57:77:55:89:a6:00:ab:f9: de:73:2c:ae:dd:ab:f4:8a:f2:9f:3c:c8:18:bb:14:8f:6b:cc: d3:f0:71:21:47:f0:61:ad:34:75:16:85:1c:1c:3d:b7:49:2a: a6:41:32:46:66:65:c1:29:9a:e7:f0:93:b4:86:0f:d5:b4:9c: 3e:8a:9d:9c:49:36:38:1e:e2:22:fd:6d:fe:54:db:68:62:72: ca:1e:3f:d4:97:c3:8a:b5:f8:f4:2b:ea:3b:32:5a:32:0b:4f: b1:f0:39:db -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUbgDcBDXYCSMrCiAKX2R5v/qIbQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4 REQzMDk5QTAeFw0yNjExMTUwNDI1MTRaFw0yNjExMTYwNTEwMTRaMDMxMTAvBgNV BAMTKDI0RTc3MDMwQ0Y4NzBENDUyNTdENjM2REZEMjZCRTFDMUI0MjE3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp0ruBdcfj3CZhgD/+gnoxH1wc py3jfnYKje9Cck9x43KROuBGinsrd6vp1lsax1F03UaMrjqrsH1g5jt4Ox0Y4uIC qJXU1WweSP7Bw8AD+25fHF22cSOyNs4XZARCHx6bBpkGc7sIK9WLvh8b96T9DvdU 70WbK1PZ6af3ed+soHzfSN21aSOrdQznAVtWMsOat7orK9kA8YL2ZloF09V9mVuV 1FXn2xC3bBJQgMMlqnEorenMzk1xo1ub59XEfmSH4dOgT8IDynPnBNCFhQUgd/QQ IDunCJxaXacHOvoQbpBntdkcdc2yU/8OO8RIEOUpRHk0yDlR7jZVotXdLim5AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUJOdwMM+HDUUlfWNt/Sa+HBtCFwUwHwYDVR0j BBgwFoAUckh+F8JA1VwW6P5bC3HUSY3TCZowDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAv NzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MjQ4N0UxN0MyNDBENTVDMTZFOEZFNUIwQjcxRDQ0 OThERDMwOTlBLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAvNzI0ODdFMTdDMjQwRDU1QzE2 RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ7v2NFpFZWWzW/MMrB9 qvTrqGpPGU3yXuHTuzIDD/LwgQYxBu4qGHWcPUFIUJnH4VpoQ/rsPgAucaiWV/kI V3AEh7VPz7uVjxKw/VHhJwYE7UOnsWVzZX7Iov78OJc22LZQUg/0rHwahtxQav8N QBtqAJz9MWimcMAXbRS6dVUhCBldSyofJqZBAtEPypN2YTymj2Lu+mx6MxZXd1WJ pgCr+d5zLK7dq/SK8p88yBi7FI9rzNPwcSFH8GGtNHUWhRwcPbdJKqZBMkZmZcEp mufwk7SGD9W0nD6KnZxJNjge4iL9bf5U22hicsoeP9SXw4q1+PQr6jsyWjILT7Hw Ods= -----END CERTIFICATE-----Generated at Sun Nov 15 15:35:48 2026 by rpki-client