$ rpki-client -vvvf rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft File: 86E5C9C6D878819F10BEC976A116DB8148A15794.mft (raw, json) Hash identifier: R22WcqDtwNb1AhE5yVid6XCHOC8iOqnVzKbECCyuNOE= Subject key identifier: BD:07:6F:B1:8F:86:84:97:70:DB:B6:AD:19:EC:4F:B9:46:B7:1C:65 Authority key identifier: 86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94 Certificate issuer: /CN=86E5C9C6D878819F10BEC976A116DB8148A15794 Certificate serial: 2E206FB3884EDC03D02BF72852793DAAE283E651 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer Subject info access: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft Manifest number: B9 Signing time: Fri 25 Sep 2026 04:56:40 +0000 Manifest this update: Fri 25 Sep 2026 04:51:40 +0000 Manifest next update: Sat 26 Sep 2026 06:26:40 +0000 Files and hashes: 1: 3134302e39322e302e302f31362d3234203d3e2031363539.roa (hash: rvl3iJZidfPVj8QIpPoFpRfFHf2uQD3RRvMQXspZm6A=) 2: 86E5C9C6D878819F10BEC976A116DB8148A15794.crl (hash: 6xfSd1zjJX714xL3sOQRjPTRR1K4njwMgyULEs0fK90=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:20:6f:b3:88:4e:dc:03:d0:2b:f7:28:52:79:3d:aa:e2:83:e6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E5C9C6D878819F10BEC976A116DB8148A15794 Validity Not Before: Sep 25 04:51:40 2026 GMT Not After : Sep 26 06:26:40 2026 GMT Subject: CN=BD076FB18F86849770DBB6AD19EC4FB946B71C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:7a:68:d6:31:2c:33:c1:67:1d:ef:1b:45: ed:ad:1d:33:bc:98:04:47:57:32:da:78:ef:4a:ee: 72:16:b3:b4:98:3c:d3:f3:8e:65:49:3b:fc:81:1f: d5:6c:46:e8:55:af:8d:ae:d4:f6:9f:43:ad:ed:66: be:80:40:40:a4:38:a7:b1:b6:50:84:ac:4b:27:82: ae:45:c4:22:23:85:70:46:a0:6c:e3:4a:08:58:1b: 0b:30:26:41:de:4b:83:70:59:7a:c7:52:e4:b9:16: c5:94:c6:3c:a3:ea:bd:aa:21:3d:1b:02:7e:77:e3: fc:25:19:6c:6c:5f:28:78:f4:c4:f1:79:b9:76:96: f9:c2:37:60:c7:bd:91:b4:dd:cb:96:d3:86:49:81: da:c9:f1:11:f9:8e:26:8e:77:84:a1:22:1f:ed:88: 68:b5:a1:cc:d7:b9:99:c6:e8:71:a4:05:fa:51:fc: fb:2d:7d:31:b2:94:52:3a:89:30:9c:7c:b5:1a:97: bb:c4:03:06:59:7d:45:62:d0:dc:f9:77:28:07:07: f1:18:0c:d5:2a:d8:63:d3:09:b2:54:8e:27:25:8c: 6e:fa:e0:51:49:a2:7c:24:01:fb:70:95:43:c9:81: b5:87:f5:fc:af:28:9f:94:27:f2:f5:3b:b1:53:3d: 36:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:07:6F:B1:8F:86:84:97:70:DB:B6:AD:19:EC:4F:B9:46:B7:1C:65 X509v3 Authority Key Identifier: keyid:86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:22:25:65:36:ea:c2:ed:07:b5:8a:29:14:94:e6:01:a9:bb: 46:3b:27:83:8c:cc:49:6a:61:90:97:94:cc:e5:99:53:05:d3: 14:96:e4:b2:09:ff:10:bf:aa:e0:d3:9e:d3:fe:10:f9:a8:01: 66:74:0b:b8:e6:f3:ee:80:81:5a:82:b5:1f:4c:3e:a9:fa:6e: be:c8:98:33:59:be:62:0b:e6:9c:bd:66:07:1d:fb:1c:23:67: b5:9c:17:df:50:8a:5b:57:1f:42:ff:40:f9:f8:18:62:10:cb: f4:bf:12:54:8b:6b:96:dc:ba:f3:05:8e:d2:c0:fa:dc:0f:85: 7c:5e:08:17:d3:4e:cf:28:62:dc:75:9b:c0:7c:8e:95:46:b5: 36:6a:65:74:4a:d7:1b:b2:5b:71:f6:d7:3a:17:42:c3:02:b1: 50:a7:5d:8b:b5:25:15:28:bc:f4:8a:4e:14:13:4a:a9:e2:f0: e1:f7:d6:ab:27:ee:2a:af:2b:44:a3:77:80:ce:b9:b4:ba:1e: 43:cf:2f:44:1f:93:3f:82:4a:3c:fe:54:91:ae:f5:75:e6:ee: d9:91:ab:97:3c:85:f6:56:a3:a4:fc:91:36:8d:c8:4b:1f:17: 22:33:19:f5:4a:2b:11:1d:81:a3:65:60:36:03:7a:fb:49:64: 93:a0:d9:0f -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIULiBvs4hO3APQK/coUnk9quKD5lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNUM5QzZEODc4ODE5RjEwQkVDOTc2QTExNkRCODE0 OEExNTc5NDAeFw0yNjA5MjUwNDUxNDBaFw0yNjA5MjYwNjI2NDBaMDMxMTAvBgNV BAMTKEJEMDc2RkIxOEY4Njg0OTc3MERCQjZBRDE5RUM0RkI5NDZCNzFDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRnpo1jEsM8FnHe8bRe2tHTO8 mARHVzLaeO9K7nIWs7SYPNPzjmVJO/yBH9VsRuhVr42u1PafQ63tZr6AQECkOKex tlCErEsngq5FxCIjhXBGoGzjSghYGwswJkHeS4NwWXrHUuS5FsWUxjyj6r2qIT0b An534/wlGWxsXyh49MTxebl2lvnCN2DHvZG03cuW04ZJgdrJ8RH5jiaOd4ShIh/t iGi1oczXuZnG6HGkBfpR/PstfTGylFI6iTCcfLUal7vEAwZZfUVi0Nz5dygHB/EY DNUq2GPTCbJUjicljG764FFJonwkAftwlUPJgbWH9fyvKJ+UJ/L1O7FTPTZZAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUvQdvsY+GhJdw27atGexPuUa3HGUwHwYDVR0j BBgwFoAUhuXJxth4gZ8Qvsl2oRbbgUihV5QwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSUlJLzAv ODZFNUM5QzZEODc4ODE5RjEwQkVDOTc2QTExNkRCODE0OEExNTc5NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMC84NkU1QzlDNkQ4Nzg4MTlGMTBCRUM5NzZBMTE2REI4 MTQ4QTE1Nzk0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSUlJLzAvODZFNUM5QzZEODc4ODE5RjEw QkVDOTc2QTExNkRCODE0OEExNTc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIQiJWU26sLtB7WKKRSU 5gGpu0Y7J4OMzElqYZCXlMzlmVMF0xSW5LIJ/xC/quDTntP+EPmoAWZ0C7jm8+6A gVqCtR9MPqn6br7ImDNZvmIL5py9Zgcd+xwjZ7WcF99QiltXH0L/QPn4GGIQy/S/ ElSLa5bcuvMFjtLA+twPhXxeCBfTTs8oYtx1m8B8jpVGtTZqZXRK1xuyW3H21zoX QsMCsVCnXYu1JRUovPSKThQTSqni8OH31qsn7iqvK0Sjd4DOubS6HkPPL0Qfkz+C Sjz+VJGu9XXm7tmRq5c8hfZWo6T8kTaNyEsfFyIzGfVKKxEdgaNlYDYDevtJZJOg 2Q8= -----END CERTIFICATE-----Generated at Fri Sep 25 08:36:32 2026 by rpki-client