$ rpki-client -vvvf rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft File: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft (raw, json) Hash identifier: 0JMUWVCaP6Jm/3HU9NnP5PrebazhT7iuI6Dn8iyL37Q= Subject key identifier: 0E:99:F8:9B:FB:22:32:CC:BC:FA:23:B6:40:CE:57:31:2E:4F:B3:49 Authority key identifier: 72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A Certificate issuer: /CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Certificate serial: 6667C712A271C72E7B78F9B5E326CE2FF1E5CFF3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft Manifest number: BC Signing time: Thu 24 Sep 2026 23:19:44 +0000 Manifest this update: Thu 24 Sep 2026 23:14:44 +0000 Manifest next update: Sat 26 Sep 2026 00:40:44 +0000 Files and hashes: 1: 3130332e3235322e3132382e302f32322d3234203d3e20313331363032.roa (hash: nVHgvAQGfCe5GeqBJlvDWrqjtd8OwRSNjhUeOydBwUA=) 2: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl (hash: SNyIGTrcSVZVGmxMe/MpHffHC9E/xxLzzi1t//pwwI0=) 3: 3130332e3235322e3132382e302f32322d3232203d3e203130303835.roa (hash: z0gKkFBHhI3K6nHdzx65beXtOEgH8B0I5cTB2wTLt8g=) 4: 3131342e32392e3234302e302f32322d3232203d3e203130303835.roa (hash: Iu3XM7OWOu4YExXTvgO6ZRczd2wJf5M+hq5Ui0NVDWs=) 5: 3130332e3235322e3132382e302f32322d3234203d3e2034373830.roa (hash: aU5nH7E+iqqE72JCSOf/syfpmIQ4Ugwf1G4zZbGiNhs=) 6: 3131342e32392e3234302e302f32322d3234203d3e2034373830.roa (hash: KC1g1qM879l4ds0q/ydW26xvU61SJGGDoYP8GsPifjc=) 7: 3131342e32392e3234302e302f32322d3234203d3e20313331363032.roa (hash: 4cmNPnys0d/FtI5okidfoOFAlkFUnmuDLC94ZHnaWrA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:67:c7:12:a2:71:c7:2e:7b:78:f9:b5:e3:26:ce:2f:f1:e5:cf:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Validity Not Before: Sep 24 23:14:44 2026 GMT Not After : Sep 26 00:40:44 2026 GMT Subject: CN=0E99F89BFB2232CCBCFA23B640CE57312E4FB349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:f4:c8:e3:f4:dc:64:95:46:59:aa:99:b7: 78:34:5f:60:53:09:75:8f:54:46:5b:2c:34:7a:0a: e8:45:1b:ed:ed:02:95:7a:34:cf:b1:4a:b9:41:91: 97:e2:d5:7e:34:a4:d1:23:81:12:77:13:a9:b8:56: 51:7a:08:cc:d1:9d:ba:7c:0e:3f:aa:f3:86:ef:3f: 83:3f:c1:ca:45:7f:44:e9:6d:d6:e8:8d:cf:26:8e: 54:a6:94:42:42:eb:ef:42:21:9f:85:7f:a4:f0:c6: d3:df:7b:f2:cf:41:d8:08:3d:e5:b9:1d:13:a8:89: 11:8e:65:f8:3d:96:20:3b:46:63:fd:33:d4:19:80: e0:ca:d4:dc:fd:0b:55:25:5c:ec:06:72:76:26:c9: 00:81:55:ad:ab:4b:c6:88:cb:72:95:4c:7f:a6:c9: 57:f0:4d:60:40:ec:03:ec:c0:3e:53:50:b1:13:74: ec:ac:f5:c8:12:2a:58:07:29:41:15:77:35:3e:b2: 8b:19:fb:b8:61:dd:43:14:02:0a:ca:a8:31:a4:e8: 0d:c8:8a:6f:26:3b:10:83:40:87:4b:d6:bb:ae:f3: c5:a9:45:75:1e:57:1d:e0:b8:c9:0d:a7:dd:62:7c: 8e:df:59:28:6f:de:33:d7:4e:eb:ca:02:95:70:ca: 02:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:99:F8:9B:FB:22:32:CC:BC:FA:23:B6:40:CE:57:31:2E:4F:B3:49 X509v3 Authority Key Identifier: keyid:72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7b:2b:9b:7f:92:2f:c8:b1:68:7a:30:5e:3d:b7:16:10:5c: 03:ce:c6:15:f8:d1:2b:87:7b:e4:eb:d7:f3:79:12:99:0a:eb: 67:bc:ef:5e:b9:78:26:4e:98:5c:ac:78:fb:8c:44:e5:5e:2c: 46:aa:de:47:fb:46:d8:fc:43:4d:57:8e:67:71:59:bd:f4:64: 4d:21:02:20:e8:25:1c:35:0e:7b:87:e0:13:31:15:df:c3:f7: fa:58:ba:d9:56:f5:93:29:31:05:09:c1:71:94:15:06:01:2b: 09:fc:99:8f:27:5c:f0:ca:99:73:b4:44:1d:93:45:4d:b9:41: ab:c9:cd:4e:35:7b:b1:21:35:58:d9:ff:01:92:d5:10:47:cf: 9e:38:f6:6b:02:93:d7:31:de:dc:6e:6f:22:d3:d1:7c:73:d8: 30:6a:84:1b:1c:1f:f0:fb:b1:2d:4a:1f:47:5f:2a:fa:b3:07: 37:95:7b:11:dc:6a:0d:ff:65:7c:2f:08:4e:9b:ec:7d:4e:27: a6:90:fe:be:8a:a6:36:66:17:26:ac:e4:d3:41:9a:a2:3f:89: 4b:3c:a1:63:f9:dc:c9:66:5d:48:41:cc:19:ed:26:8b:c3:23: cd:b3:ba:74:11:6c:62:78:69:63:d0:ff:03:7c:ba:84:1a:9e: 8a:ab:7b:47 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUZmfHEqJxxy57ePm14ybOL/Hlz/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4 REQzMDk5QTAeFw0yNjA5MjQyMzE0NDRaFw0yNjA5MjYwMDQwNDRaMDMxMTAvBgNV BAMTKDBFOTlGODlCRkIyMjMyQ0NCQ0ZBMjNCNjQwQ0U1NzMxMkU0RkIzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZ/TI4/TcZJVGWaqZt3g0X2BT CXWPVEZbLDR6CuhFG+3tApV6NM+xSrlBkZfi1X40pNEjgRJ3E6m4VlF6CMzRnbp8 Dj+q84bvP4M/wcpFf0Tpbdbojc8mjlSmlEJC6+9CIZ+Ff6TwxtPfe/LPQdgIPeW5 HROoiRGOZfg9liA7RmP9M9QZgODK1Nz9C1UlXOwGcnYmyQCBVa2rS8aIy3KVTH+m yVfwTWBA7APswD5TULETdOys9cgSKlgHKUEVdzU+sosZ+7hh3UMUAgrKqDGk6A3I im8mOxCDQIdL1ruu88WpRXUeVx3guMkNp91ifI7fWShv3jPXTuvKApVwygKXAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUDpn4m/siMsy8+iO2QM5XMS5Ps0kwHwYDVR0j BBgwFoAUckh+F8JA1VwW6P5bC3HUSY3TCZowDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAv NzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MjQ4N0UxN0MyNDBENTVDMTZFOEZFNUIwQjcxRDQ0 OThERDMwOTlBLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAvNzI0ODdFMTdDMjQwRDU1QzE2 RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFR7K5t/ki/IsWh6MF49 txYQXAPOxhX40SuHe+Tr1/N5EpkK62e87165eCZOmFysePuMROVeLEaq3kf7Rtj8 Q01XjmdxWb30ZE0hAiDoJRw1DnuH4BMxFd/D9/pYutlW9ZMpMQUJwXGUFQYBKwn8 mY8nXPDKmXO0RB2TRU25QavJzU41e7EhNVjZ/wGS1RBHz5449msCk9cx3txubyLT 0Xxz2DBqhBscH/D7sS1KH0dfKvqzBzeVexHcag3/ZXwvCE6b7H1OJ6aQ/r6KpjZm Fyas5NNBmqI/iUs8oWP53MlmXUhBzBntJovDI82zunQRbGJ4aWPQ/wN8uoQanoqr e0c= -----END CERTIFICATE-----Generated at Fri Sep 25 14:00:09 2026 by rpki-client