$ rpki-client -vvvf rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft File: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft (raw, json) Hash identifier: f5YYjCP2Re8EDH9n0Z2DHkEuXeMzHWrAE6+0ocDmJ6Y= Subject key identifier: 21:79:20:21:88:69:A8:45:F6:D5:A7:CF:74:81:82:79:90:A9:6A:CF Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Certificate serial: 1C5FFC53AB7A5A8F6D6E9AB70B2E96D5E790E6C5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft Manifest number: 0102 Signing time: Sun 15 Nov 2026 01:54:08 +0000 Manifest this update: Sun 15 Nov 2026 01:49:08 +0000 Manifest next update: Mon 16 Nov 2026 02:22:08 +0000 Files and hashes: 1: 3130332e3137372e33322e302f32342d3234203d3e20323134343332.roa (hash: 2YaoD0V9MTmYaytjBdN3g/2JltFPIOscJRsxuw7e/EQ=) 2: 3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa (hash: qkqrj9/N2V1M+ri4JRAjh2Xtl5l0eXftPC6OL0jPaCQ=) 3: 3130332e3137372e33322e302f32332d3234203d3e203338303432.roa (hash: xPDyINdFmufQbNbHGWy0zvLscglHenPHYxlwfT+v00s=) 4: 3130332e3232372e3232352e302f32342d3234203d3e20313438393936.roa (hash: 3Fs3YXCHVhPim686QjSLVypvleRfB5cNa4r0sVni22s=) 5: 3130332e3232372e3232342e302f32332d3234203d3e20313438393936.roa (hash: Pe+GfCAU9CJUhyX0GcmCiKMiXy/uVxymKcKinAclsuQ=) 6: 3130332e3232372e3232342e302f32332d3234203d3e20313334383233.roa (hash: GuzN1ophfvX5EgHLKpJRkwlqpD4JGNW35OZ+ZCoqD78=) 7: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl (hash: wrA1YFTRw9O7dYFIIChLQDUj5WfRjrxnmL371ll278U=) 8: 3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa (hash: cQkjcrDW6Cw958N6gtJjxyd/adphXQyJjpPcfgZ5xG4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:5f:fc:53:ab:7a:5a:8f:6d:6e:9a:b7:0b:2e:96:d5:e7:90:e6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Validity Not Before: Nov 15 01:49:08 2026 GMT Not After : Nov 16 02:22:08 2026 GMT Subject: CN=217920218869A845F6D5A7CF7481827990A96ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:21:76:63:b7:4f:db:76:ea:64:44:c6:ea: 07:4f:4b:19:a9:a4:72:36:aa:49:e2:67:c1:d2:f4: 95:9f:30:07:db:1c:39:68:e1:b8:2b:9a:05:4d:fd: 86:7f:c0:d6:c3:3f:4f:42:6e:5e:42:3e:cd:f1:e0: e6:23:45:31:ba:ae:c7:4b:0a:58:42:ce:17:88:ba: b5:71:90:d6:5a:52:3e:a6:fd:76:98:ba:6c:ae:58: 9b:11:1e:9d:ac:9e:c7:66:49:9f:b0:6f:63:1d:c4: 8e:33:2b:c3:e3:67:aa:78:f9:14:af:ad:4c:ee:90: 94:d6:cf:27:ba:0f:04:46:00:64:77:f2:7f:c0:52: a9:25:85:7a:fe:f2:0d:cf:aa:65:f2:ac:00:0e:b8: ed:b1:5c:aa:a7:99:79:1a:b3:bb:59:7b:bb:1c:91: 39:e1:e9:10:01:73:a1:3d:6d:cd:db:08:0b:dd:12: 6b:f9:71:08:5d:d0:88:b0:73:b7:18:46:49:7d:3e: 19:cf:b3:b3:e7:62:49:c2:3b:e6:18:fe:5b:68:4e: 6c:99:2b:da:e9:7e:d6:31:41:2e:7c:2f:0d:b6:46: 8f:a1:e1:d1:d4:aa:a7:68:d1:6f:60:85:c9:fa:73: d2:a8:eb:00:d2:ef:38:6e:11:a5:68:20:1b:8b:ae: 75:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:79:20:21:88:69:A8:45:F6:D5:A7:CF:74:81:82:79:90:A9:6A:CF X509v3 Authority Key Identifier: keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b2:cc:2d:e5:6f:a1:5a:89:ff:73:b3:2a:ed:ef:5f:9b:bb: 85:ec:bd:61:23:87:ff:45:5d:18:9f:ae:cd:37:4c:2d:da:80: f6:6f:1e:2d:68:af:7a:90:ee:46:e0:08:28:39:40:e3:ff:db: 90:1f:0a:64:a0:2f:8c:03:d8:42:d2:ac:31:da:c5:aa:46:24: ce:c6:54:42:3c:6c:96:a6:85:fd:d6:da:d6:c1:08:c3:34:99: 26:8c:19:9f:19:70:f9:55:d4:df:cb:1e:24:9b:24:b6:b5:a5: 5d:05:6c:9d:95:94:94:8e:60:32:fe:0d:57:b2:07:15:27:05: a6:65:29:9b:d1:4c:a9:55:9e:05:b9:71:40:01:f8:21:75:4c: 32:04:e4:c9:67:90:16:93:ce:75:d6:0d:35:b9:58:a5:1e:b4: 9b:f6:24:c3:99:ef:21:95:fa:ac:95:bb:87:65:d8:7a:03:06: 5a:9d:bc:9c:25:7a:28:b5:26:1f:55:9a:50:d9:ef:40:3e:de: 00:fe:a1:d5:f1:42:f2:ae:f8:6d:39:59:52:a3:c8:3f:97:68: b7:2a:10:06:b4:c6:f8:a0:75:bf:9e:bf:d0:c6:a5:19:0f:09: 87:95:41:ce:c6:2f:d2:76:6f:0c:e0:14:c3:c7:79:4a:27:37: 50:d1:27:e9 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUHF/8U6t6Wo9tbpq3Cy6W1eeQ5sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MjdFNEU1M0JBNTE3QkJDNUM3OThDRjBEM0FGODcw Mzc1QzBCMDAeFw0yNjExMTUwMTQ5MDhaFw0yNjExMTYwMjIyMDhaMDMxMTAvBgNV BAMTKDIxNzkyMDIxODg2OUE4NDVGNkQ1QTdDRjc0ODE4Mjc5OTBBOTZBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfBCF2Y7dP23bqZETG6gdPSxmp pHI2qkniZ8HS9JWfMAfbHDlo4bgrmgVN/YZ/wNbDP09Cbl5CPs3x4OYjRTG6rsdL ClhCzheIurVxkNZaUj6m/XaYumyuWJsRHp2snsdmSZ+wb2MdxI4zK8PjZ6p4+RSv rUzukJTWzye6DwRGAGR38n/AUqklhXr+8g3PqmXyrAAOuO2xXKqnmXkas7tZe7sc kTnh6RABc6E9bc3bCAvdEmv5cQhd0Iiwc7cYRkl9PhnPs7PnYknCO+YY/ltoTmyZ K9rpftYxQS58Lw22Ro+h4dHUqqdo0W9ghcn6c9Ko6wDS7zhuEaVoIBuLrnUbAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUIXkgIYhpqEX21afPdIGCeZCpas8wHwYDVR0j BBgwFoAUp4J+TlO6UXu8XHmM8NOvhwN1wLAwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1DUlMv MC9BNzgyN0U0RTUzQkE1MTdCQkM1Qzc5OENGMEQzQUY4NzAzNzVDMEIwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0E3ODI3RTRFNTNCQTUxN0JCQzVDNzk4Q0YwRDNB Rjg3MDM3NUMwQjAuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTUNSUy8wL0E3ODI3RTRFNTNCQTUx N0JCQzVDNzk4Q0YwRDNBRjg3MDM3NUMwQjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4sswt5W+hWon/ c7Mq7e9fm7uF7L1hI4f/RV0Yn67NN0wt2oD2bx4taK96kO5G4AgoOUDj/9uQHwpk oC+MA9hC0qwx2sWqRiTOxlRCPGyWpoX91trWwQjDNJkmjBmfGXD5VdTfyx4kmyS2 taVdBWydlZSUjmAy/g1XsgcVJwWmZSmb0UypVZ4FuXFAAfghdUwyBOTJZ5AWk851 1g01uVilHrSb9iTDme8hlfqslbuHZdh6AwZanbycJXootSYfVZpQ2e9APt4A/qHV 8ULyrvhtOVlSo8g/l2i3KhAGtMb4oHW/nr/QxqUZDwmHlUHOxi/Sdm8M4BTDx3lK JzdQ0Sfp -----END CERTIFICATE-----Generated at Sun Nov 15 06:37:04 2026 by rpki-client