$ rpki-client -vvvf rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft File: 86E5C9C6D878819F10BEC976A116DB8148A15794.mft (raw, json) Hash identifier: mfN8yrUA2GU9Xra01McHvwtl0ql0NwKXXrMJn5byrng= Subject key identifier: D2:EE:65:F6:3D:89:A0:69:57:65:1B:D1:23:7B:A4:6E:E2:C9:C4:BB Authority key identifier: 86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94 Certificate issuer: /CN=86E5C9C6D878819F10BEC976A116DB8148A15794 Certificate serial: 1C4DDE72F754CD237EC663CCB58E5DB8416CA49E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer Subject info access: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft Manifest number: FD Signing time: Sun 15 Nov 2026 02:04:09 +0000 Manifest this update: Sun 15 Nov 2026 01:59:09 +0000 Manifest next update: Mon 16 Nov 2026 04:22:09 +0000 Files and hashes: 1: 3134302e39322e302e302f31362d3234203d3e2031363539.roa (hash: rvl3iJZidfPVj8QIpPoFpRfFHf2uQD3RRvMQXspZm6A=) 2: 86E5C9C6D878819F10BEC976A116DB8148A15794.crl (hash: Q4OdaZyJDwZIwk5TVEreVjHnrK7gaVtYehMuE0yGBS0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4d:de:72:f7:54:cd:23:7e:c6:63:cc:b5:8e:5d:b8:41:6c:a4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E5C9C6D878819F10BEC976A116DB8148A15794 Validity Not Before: Nov 15 01:59:09 2026 GMT Not After : Nov 16 04:22:09 2026 GMT Subject: CN=D2EE65F63D89A06957651BD1237BA46EE2C9C4BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:62:fb:69:dc:d2:40:b2:8f:99:4c:ce:68: 49:2c:0b:66:0b:43:37:3d:5e:c2:3a:c2:71:fd:d0: ba:5d:c4:60:84:86:53:97:52:90:9a:0e:74:c4:e7: 07:9a:48:d5:d3:dd:b6:0d:bc:21:25:dc:45:a2:d8: 1e:75:cb:7a:d1:08:6d:56:d5:12:c2:28:ca:38:85: b2:3a:0f:27:fb:d5:be:fa:4d:99:61:11:b3:1a:d1: 98:ea:36:73:d9:5a:8f:6d:38:6f:3e:09:31:d3:8e: d3:7d:10:a7:80:47:d3:3c:67:fa:e3:09:59:4f:e7: c1:ed:b1:bc:22:9e:ef:61:89:8b:f8:04:0b:ac:f1: 4c:c6:66:3e:05:f7:59:4b:2c:28:67:ac:0a:e3:75: b3:43:f6:b3:04:44:9b:9b:47:03:39:0a:53:b9:16: 05:00:24:2f:58:17:9a:1e:89:99:a5:05:72:28:c2: e0:ed:0a:06:d8:56:a6:b3:73:f2:4d:94:89:1e:93: 84:6d:f3:d8:2a:8c:27:5a:2e:c2:18:10:4b:1b:72: b0:73:60:9d:ed:97:d2:ea:45:14:36:3c:13:d6:ec: b2:fd:c4:45:f1:ca:84:7f:fd:5a:18:ae:62:69:75: 54:49:0c:d8:e0:93:29:41:95:1f:ca:4c:48:22:a8: ce:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EE:65:F6:3D:89:A0:69:57:65:1B:D1:23:7B:A4:6E:E2:C9:C4:BB X509v3 Authority Key Identifier: keyid:86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5c:5c:56:de:03:cf:87:75:12:00:8d:3b:21:cf:04:04:b8: 31:d9:54:1e:a6:44:24:a7:ac:5a:be:7a:d9:f8:06:df:06:1c: 12:98:ef:cd:7b:47:3a:9e:c4:11:4d:de:b5:73:12:93:35:93: 10:d4:3e:c5:f1:f2:00:27:c9:66:37:83:08:a5:bd:6d:29:70: de:85:91:2d:cb:df:f9:b6:d1:a6:97:21:8e:bf:95:3c:69:97: 02:8b:d2:19:43:a2:11:24:f3:82:17:22:bf:2a:34:8b:39:e5: cf:43:0f:c2:cc:ba:17:d1:a3:28:2e:bc:94:4e:7b:d4:88:46: 25:59:9c:07:4a:7c:cc:4d:c2:02:06:bd:1f:8e:0c:9a:0e:dc: ba:2a:e2:20:60:86:dc:ed:20:d0:91:0d:4d:44:e4:f5:8a:d0: ac:95:22:da:cd:62:0e:25:08:7f:16:fd:0c:47:01:cd:0a:e0: 0b:c7:82:99:2a:98:2f:8b:eb:ac:68:7f:ec:1b:1e:94:94:4c: 40:29:6d:5d:d6:6f:f8:65:a7:74:15:ae:65:be:43:c7:de:bd: af:06:bd:59:e7:34:29:ce:78:79:ef:c9:35:d6:42:e2:e8:b6: 37:45:99:1a:37:59:54:77:7f:b0:f3:a1:22:1f:90:cd:44:6b: 7e:49:a2:72 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUHE3ecvdUzSN+xmPMtY5duEFspJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNUM5QzZEODc4ODE5RjEwQkVDOTc2QTExNkRCODE0 OEExNTc5NDAeFw0yNjExMTUwMTU5MDlaFw0yNjExMTYwNDIyMDlaMDMxMTAvBgNV BAMTKEQyRUU2NUY2M0Q4OUEwNjk1NzY1MUJEMTIzN0JBNDZFRTJDOUM0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmGL7adzSQLKPmUzOaEksC2YL Qzc9XsI6wnH90LpdxGCEhlOXUpCaDnTE5weaSNXT3bYNvCEl3EWi2B51y3rRCG1W 1RLCKMo4hbI6Dyf71b76TZlhEbMa0ZjqNnPZWo9tOG8+CTHTjtN9EKeAR9M8Z/rj CVlP58Htsbwinu9hiYv4BAus8UzGZj4F91lLLChnrArjdbND9rMERJubRwM5ClO5 FgUAJC9YF5oeiZmlBXIowuDtCgbYVqazc/JNlIkek4Rt89gqjCdaLsIYEEsbcrBz YJ3tl9LqRRQ2PBPW7LL9xEXxyoR//VoYrmJpdVRJDNjgkylBlR/KTEgiqM4HAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU0u5l9j2JoGlXZRvRI3ukbuLJxLswHwYDVR0j BBgwFoAUhuXJxth4gZ8Qvsl2oRbbgUihV5QwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSUlJLzAv ODZFNUM5QzZEODc4ODE5RjEwQkVDOTc2QTExNkRCODE0OEExNTc5NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMC84NkU1QzlDNkQ4Nzg4MTlGMTBCRUM5NzZBMTE2REI4 MTQ4QTE1Nzk0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSUlJLzAvODZFNUM5QzZEODc4ODE5RjEw QkVDOTc2QTExNkRCODE0OEExNTc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD1cXFbeA8+HdRIAjTsh zwQEuDHZVB6mRCSnrFq+etn4Bt8GHBKY7817RzqexBFN3rVzEpM1kxDUPsXx8gAn yWY3gwilvW0pcN6FkS3L3/m20aaXIY6/lTxplwKL0hlDohEk84IXIr8qNIs55c9D D8LMuhfRoyguvJROe9SIRiVZnAdKfMxNwgIGvR+ODJoO3Loq4iBghtztINCRDU1E 5PWK0KyVItrNYg4lCH8W/QxHAc0K4AvHgpkqmC+L66xof+wbHpSUTEApbV3Wb/hl p3QVrmW+Q8feva8GvVnnNCnOeHnvyTXWQuLotjdFmRo3WVR3f7DzoSIfkM1Ea35J onI= -----END CERTIFICATE-----Generated at Sun Nov 15 07:23:02 2026 by rpki-client