$ rpki-client -vvvf rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft File: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft (raw, json) Hash identifier: QFQ8v03lZoDRmyqwSjdo1Omzn34y0Jwp1w/nf8/0IWY= Subject key identifier: C9:77:F5:7D:02:65:65:CF:05:38:23:8B:AF:FE:4F:2A:57:8B:E6:64 Authority key identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 Certificate issuer: /CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Certificate serial: 59B05A6184FCE71CFA2E92A6AEB6144890D777B4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft Manifest number: FC Signing time: Sat 14 Nov 2026 08:25:57 +0000 Manifest this update: Sat 14 Nov 2026 08:20:57 +0000 Manifest next update: Sun 15 Nov 2026 11:58:57 +0000 Files and hashes: 1: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl (hash: VnASYPqhj5cAM7+IGDlIIIAawvbgOyRvppfYxdomk18=) 2: 3136302e3139312e342e302f32332d3234203d3e20313438393936.roa (hash: WDQ6isA31vRFBEKAPNTN2h03bliS7XG3+ZDUsxu5ekM=) 3: 3136302e3139312e342e302f32332d3234203d3e203338303432.roa (hash: uC4SAyffO7EbE3rGS0jHS6n7C39qBWkfFa7uUUduW8s=) 4: 3136302e3139312e342e302f32332d3234203d3e20313334383233.roa (hash: MvSn3+N3E0x49y2zyFZseXhPFbhPYX7FDxa/hvK0XxA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 11:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b0:5a:61:84:fc:e7:1c:fa:2e:92:a6:ae:b6:14:48:90:d7:77:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Validity Not Before: Nov 14 08:20:57 2026 GMT Not After : Nov 15 11:58:57 2026 GMT Subject: CN=C977F57D026565CF0538238BAFFE4F2A578BE664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:f5:9f:46:ca:3b:a9:7f:32:3b:90:08:65: 63:d9:9f:73:b3:45:b3:25:6d:a3:b3:36:7e:c0:f2: 3e:16:0d:69:81:dd:47:80:42:16:b6:c8:76:2b:c8: 6b:69:59:f8:69:c5:6c:88:c2:d9:21:fa:c4:2a:98: d3:56:ac:91:29:eb:72:2f:bc:91:16:82:2d:aa:4a: 51:3f:1b:06:b4:65:a8:52:23:93:63:81:ad:96:9f: b5:c2:03:e9:68:ed:d7:af:c2:f4:6d:82:84:b5:0a: cb:9d:a0:87:cf:86:57:8e:bc:be:a3:c1:05:d0:1b: 1d:a7:40:b0:25:d2:10:e4:8b:82:7d:e8:eb:0a:6d: a3:93:5b:61:b2:1d:79:0f:41:44:4c:01:1a:0e:90: d9:6f:7b:08:2f:ab:53:26:8c:44:c3:d3:92:5b:dd: 01:99:63:fa:42:d7:31:1e:cb:83:f1:8b:05:e7:81: 3e:37:95:42:9d:e5:3f:3e:1b:ab:bb:9b:63:ba:53: 98:52:b7:ba:3b:d6:46:87:44:13:e8:d4:b1:af:7a: 32:42:01:51:34:a1:b9:90:26:cf:90:cc:b0:aa:47: 9e:a2:fa:e1:17:56:47:54:79:b4:a9:3d:92:60:99: 8a:86:25:20:12:6b:db:5c:55:a4:84:eb:c3:f9:ce: 0f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:77:F5:7D:02:65:65:CF:05:38:23:8B:AF:FE:4F:2A:57:8B:E6:64 X509v3 Authority Key Identifier: keyid:EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:df:29:86:0b:7b:18:d8:e0:36:81:e8:a2:18:07:a8:ed:6c: 00:9d:d6:a8:7f:15:52:a1:72:72:56:fd:17:01:38:a3:17:a3: d1:56:5f:ca:c2:14:eb:eb:22:76:e6:64:58:29:f7:0b:ef:cf: ed:52:58:be:47:7c:9f:02:3b:65:13:d8:38:4d:b4:2c:59:0f: 55:04:1f:34:a7:8a:2b:bf:87:4a:d2:56:ec:ba:56:4e:a4:af: a1:ad:d4:9b:84:6b:62:78:19:c8:34:1c:be:4a:0f:c3:20:31: 91:74:02:f2:e9:72:3e:ed:1f:4c:51:6e:09:60:85:f1:d7:fa: 6a:86:44:5f:bd:d7:9d:85:9f:aa:b0:dc:7a:e8:d1:bd:f3:96: ae:cc:82:57:68:d2:ea:7c:32:a0:8c:49:7d:39:1d:13:89:ec: 2b:c1:18:3e:c9:2b:b1:24:a8:a7:56:bd:49:02:f9:8c:3a:67: 26:a8:cd:d7:6d:9b:47:3d:76:da:31:07:1a:04:f4:ef:f1:2b: c8:e6:bb:8d:46:8f:a7:f0:75:85:77:06:7f:a6:e4:23:67:dd: 96:79:e6:97:fa:31:b5:de:92:2d:99:6b:2a:c6:e1:9d:17:dc: b0:56:90:75:ce:c6:55:ad:81:73:a8:9d:22:08:90:8d:23:93: 27:46:1b:99 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUWbBaYYT85xz6LpKmrrYUSJDXd7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYxRDEwNDg0RUZBNzlBQkMwMThGQTBFRkE3RjNCMEMx NkVFNDNBNzAeFw0yNjExMTQwODIwNTdaFw0yNjExMTUxMTU4NTdaMDMxMTAvBgNV BAMTKEM5NzdGNTdEMDI2NTY1Q0YwNTM4MjM4QkFGRkU0RjJBNTc4QkU2NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgPWfRso7qX8yO5AIZWPZn3Oz RbMlbaOzNn7A8j4WDWmB3UeAQha2yHYryGtpWfhpxWyIwtkh+sQqmNNWrJEp63Iv vJEWgi2qSlE/Gwa0ZahSI5Njga2Wn7XCA+lo7devwvRtgoS1CsudoIfPhleOvL6j wQXQGx2nQLAl0hDki4J96OsKbaOTW2GyHXkPQURMARoOkNlvewgvq1MmjETD05Jb 3QGZY/pC1zEey4PxiwXngT43lUKd5T8+G6u7m2O6U5hSt7o71kaHRBPo1LGvejJC AVE0obmQJs+QzLCqR56i+uEXVkdUebSpPZJgmYqGJSASa9tcVaSE68P5zg/nAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUyXf1fQJlZc8FOCOLr/5PKleL5mQwHwYDVR0j BBgwFoAU7x0QSE76eavAGPoO+n87DBbuQ6cwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1ZS0wv MC9FRjFEMTA0ODRFRkE3OUFCQzAxOEZBMEVGQTdGM0IwQzE2RUU0M0E3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0VGMUQxMDQ4NEVGQTc5QUJDMDE4RkEwRUZBN0Yz QjBDMTZFRTQzQTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTVlLTC8wL0VGMUQxMDQ4NEVGQTc5 QUJDMDE4RkEwRUZBN0YzQjBDMTZFRTQzQTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB13ymGC3sY2OA2 geiiGAeo7WwAndaofxVSoXJyVv0XATijF6PRVl/KwhTr6yJ25mRYKfcL78/tUli+ R3yfAjtlE9g4TbQsWQ9VBB80p4orv4dK0lbsulZOpK+hrdSbhGtieBnINBy+Sg/D IDGRdALy6XI+7R9MUW4JYIXx1/pqhkRfvdedhZ+qsNx66NG985auzIJXaNLqfDKg jEl9OR0TiewrwRg+ySuxJKinVr1JAvmMOmcmqM3XbZtHPXbaMQcaBPTv8SvI5ruN Ro+n8HWFdwZ/puQjZ92WeeaX+jG13pItmWsqxuGdF9ywVpB1zsZVrYFzqJ0iCJCN I5MnRhuZ -----END CERTIFICATE-----Generated at Sun Nov 15 00:11:05 2026 by rpki-client