$ rpki-client -vvvf rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft File: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft (raw, json) Hash identifier: 2CiNjAmvM963dEiW0A1ynGnk3VTq5CyYeeDH/ETy6xM= Subject key identifier: 95:66:3A:78:69:21:9A:0B:8B:9F:3A:95:C6:93:A5:08:86:02:42:7C Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Certificate serial: 73E19F4C961F45468CB7D154735A95D1120667CC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft Manifest number: BF Signing time: Fri 25 Sep 2026 14:38:23 +0000 Manifest this update: Fri 25 Sep 2026 14:33:23 +0000 Manifest next update: Sat 26 Sep 2026 14:44:23 +0000 Files and hashes: 1: 3130332e3232372e3232342e302f32332d3234203d3e20313334383233.roa (hash: GuzN1ophfvX5EgHLKpJRkwlqpD4JGNW35OZ+ZCoqD78=) 2: 3130332e3232372e3232342e302f32332d3234203d3e20313438393936.roa (hash: Pe+GfCAU9CJUhyX0GcmCiKMiXy/uVxymKcKinAclsuQ=) 3: 3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa (hash: cQkjcrDW6Cw958N6gtJjxyd/adphXQyJjpPcfgZ5xG4=) 4: 3130332e3232372e3232352e302f32342d3234203d3e20313438393936.roa (hash: 3Fs3YXCHVhPim686QjSLVypvleRfB5cNa4r0sVni22s=) 5: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl (hash: HsE+VUZ4LjgMhL5zb3ttlsxVevzc3Lzbl8uU7AWFf78=) 6: 3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa (hash: qkqrj9/N2V1M+ri4JRAjh2Xtl5l0eXftPC6OL0jPaCQ=) 7: 3130332e3137372e33322e302f32332d3234203d3e203338303432.roa (hash: xPDyINdFmufQbNbHGWy0zvLscglHenPHYxlwfT+v00s=) 8: 3130332e3137372e33322e302f32342d3234203d3e20323134343332.roa (hash: 2YaoD0V9MTmYaytjBdN3g/2JltFPIOscJRsxuw7e/EQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 14:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e1:9f:4c:96:1f:45:46:8c:b7:d1:54:73:5a:95:d1:12:06:67:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Validity Not Before: Sep 25 14:33:23 2026 GMT Not After : Sep 26 14:44:23 2026 GMT Subject: CN=95663A7869219A0B8B9F3A95C693A5088602427C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:3c:0f:dc:11:6f:e0:0b:26:11:cb:2f:af: 8d:0b:68:8f:d4:39:ad:54:5e:5f:8b:28:b1:87:d3: 19:ad:1e:e4:18:95:3e:56:55:bc:1f:5e:3d:46:9e: 64:48:d8:e0:b8:1e:41:42:86:4d:1c:08:1a:a9:11: 6b:5d:51:20:7d:6f:99:ca:f4:b6:3d:78:20:d1:70: ba:0b:c7:6e:28:09:b1:43:f8:3a:f3:ce:76:fa:2c: f7:7e:21:9c:67:80:73:69:cf:64:64:65:e8:0a:98: 1f:c1:76:c2:40:2d:06:e3:71:22:96:03:c0:33:4d: 1d:1d:e4:62:93:69:fc:89:d9:07:e2:aa:3e:68:b3: 52:c4:c4:2d:ac:28:aa:e2:bb:2a:9d:38:57:3c:75: 89:3e:05:bf:35:2d:03:a9:de:17:bb:87:75:9d:12: c9:d4:9f:80:0f:f3:7c:22:83:42:2b:02:27:f3:9f: d3:fc:d2:c3:02:fb:27:09:9e:d0:df:22:b3:af:87: 73:21:57:c9:b4:f1:dd:b0:01:f4:76:ae:41:0d:ef: 7d:4a:bd:3b:72:74:6a:d3:93:02:38:28:5c:80:d9: e0:6a:f3:c5:e6:7b:5a:07:b8:e8:cc:f4:76:fa:8c: cb:26:51:ba:e4:55:41:4c:e0:11:2c:2a:8b:47:2a: f4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:66:3A:78:69:21:9A:0B:8B:9F:3A:95:C6:93:A5:08:86:02:42:7C X509v3 Authority Key Identifier: keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7c:f7:ac:39:7d:74:a8:1d:fa:64:90:dc:a6:5d:a7:88:4c: f5:b0:17:0b:60:9c:02:c2:c1:f9:26:85:4b:f4:52:70:b9:a5: 42:cf:6a:b5:75:fa:aa:50:f1:14:ea:a4:46:e3:e4:c0:2a:e1: c6:a3:e4:37:d6:3c:5d:c3:8b:36:e0:6d:99:a2:25:e2:74:4c: c5:c2:ec:f3:28:5d:7c:aa:ed:cc:86:11:51:14:98:79:d9:71: e6:79:88:f8:05:a3:d2:37:f3:c9:50:bf:86:b9:b2:bd:cf:75: 4c:58:48:24:ef:30:ed:c7:0e:b1:88:18:25:0e:0d:f0:3d:8b: 60:05:7d:9b:85:de:b4:1a:8d:ba:d3:e4:a7:6d:8b:91:cb:01: b2:f8:77:b2:be:b7:17:fc:6d:c8:bc:0e:e5:7c:41:44:84:45: 96:b3:7a:34:a4:77:c0:c0:c8:2a:05:61:3b:66:2c:ef:5d:8e: 2a:90:a8:fc:02:e9:52:7d:90:9e:0e:a6:91:13:05:e4:61:53: 24:b3:bc:77:ba:a0:ba:90:71:7a:92:04:a4:1a:16:37:4f:3e: 6f:02:af:75:f8:97:e0:42:94:3d:aa:0f:f0:58:ca:44:37:bf: 39:83:0d:7c:be:fe:fb:b9:cf:5f:76:1e:fe:5e:8b:69:b9:60: 8f:dc:74:d5 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUc+GfTJYfRUaMt9FUc1qV0RIGZ8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MjdFNEU1M0JBNTE3QkJDNUM3OThDRjBEM0FGODcw Mzc1QzBCMDAeFw0yNjA5MjUxNDMzMjNaFw0yNjA5MjYxNDQ0MjNaMDMxMTAvBgNV BAMTKDk1NjYzQTc4NjkyMTlBMEI4QjlGM0E5NUM2OTNBNTA4ODYwMjQyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sDwP3BFv4AsmEcsvr40LaI/U Oa1UXl+LKLGH0xmtHuQYlT5WVbwfXj1GnmRI2OC4HkFChk0cCBqpEWtdUSB9b5nK 9LY9eCDRcLoLx24oCbFD+Drzznb6LPd+IZxngHNpz2RkZegKmB/BdsJALQbjcSKW A8AzTR0d5GKTafyJ2Qfiqj5os1LExC2sKKriuyqdOFc8dYk+Bb81LQOp3he7h3Wd EsnUn4AP83wig0IrAifzn9P80sMC+ycJntDfIrOvh3MhV8m08d2wAfR2rkEN731K vTtydGrTkwI4KFyA2eBq88Xme1oHuOjM9Hb6jMsmUbrkVUFM4BEsKotHKvRhAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUlWY6eGkhmguLnzqVxpOlCIYCQnwwHwYDVR0j BBgwFoAUp4J+TlO6UXu8XHmM8NOvhwN1wLAwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1DUlMv MC9BNzgyN0U0RTUzQkE1MTdCQkM1Qzc5OENGMEQzQUY4NzAzNzVDMEIwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0E3ODI3RTRFNTNCQTUxN0JCQzVDNzk4Q0YwRDNB Rjg3MDM3NUMwQjAuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTUNSUy8wL0E3ODI3RTRFNTNCQTUx N0JCQzVDNzk4Q0YwRDNBRjg3MDM3NUMwQjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPfPesOX10qB36 ZJDcpl2niEz1sBcLYJwCwsH5JoVL9FJwuaVCz2q1dfqqUPEU6qRG4+TAKuHGo+Q3 1jxdw4s24G2ZoiXidEzFwuzzKF18qu3MhhFRFJh52XHmeYj4BaPSN/PJUL+GubK9 z3VMWEgk7zDtxw6xiBglDg3wPYtgBX2bhd60Go260+SnbYuRywGy+HeyvrcX/G3I vA7lfEFEhEWWs3o0pHfAwMgqBWE7ZizvXY4qkKj8AulSfZCeDqaREwXkYVMks7x3 uqC6kHF6kgSkGhY3Tz5vAq91+JfgQpQ9qg/wWMpEN785gw18vv77uc9fdh7+Xotp uWCP3HTV -----END CERTIFICATE-----Generated at Fri Sep 25 17:35:57 2026 by rpki-client