$ rpki-client -vvvf rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft File: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft (raw, json) Hash identifier: a2wP73Fdc2BG2nF6sbgXzR2zF//WhxH81i3lT2PzeKI= Subject key identifier: F2:92:46:72:52:BA:57:6D:AE:5A:11:D1:0A:59:41:C0:2F:5F:3F:32 Authority key identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 Certificate issuer: /CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Certificate serial: 4CDE5D87DDD9CFD511785E6BEEADC211896371 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft Manifest number: BA Signing time: Fri 25 Sep 2026 20:34:06 +0000 Manifest this update: Fri 25 Sep 2026 20:29:06 +0000 Manifest next update: Sat 26 Sep 2026 20:39:06 +0000 Files and hashes: 1: 3136302e3139312e342e302f32332d3234203d3e20313334383233.roa (hash: MvSn3+N3E0x49y2zyFZseXhPFbhPYX7FDxa/hvK0XxA=) 2: 3136302e3139312e342e302f32332d3234203d3e20313438393936.roa (hash: WDQ6isA31vRFBEKAPNTN2h03bliS7XG3+ZDUsxu5ekM=) 3: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl (hash: mAA1jSWquliQ4TjSwQgqvhNZ3oCDJhQKt0PXrwqqzMk=) 4: 3136302e3139312e342e302f32332d3234203d3e203338303432.roa (hash: uC4SAyffO7EbE3rGS0jHS6n7C39qBWkfFa7uUUduW8s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 20:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:de:5d:87:dd:d9:cf:d5:11:78:5e:6b:ee:ad:c2:11:89:63:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Validity Not Before: Sep 25 20:29:06 2026 GMT Not After : Sep 26 20:39:06 2026 GMT Subject: CN=F292467252BA576DAE5A11D10A5941C02F5F3F32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:bc:cd:02:2c:b6:9f:44:75:b6:05:38:71: 1b:13:68:2f:97:b7:c7:49:7a:ce:41:77:09:d8:c9: cb:ba:71:e7:6c:1e:44:91:6b:c2:cf:88:a1:e5:9b: 39:e2:a8:d0:8d:9a:c7:e8:e1:b8:5e:be:b0:20:0e: 45:07:a1:f5:72:8b:4c:7f:75:4e:09:ff:00:d9:54: 32:65:96:52:3b:6b:f7:8f:95:41:16:b3:b7:1b:96: e1:af:a3:d7:2c:fb:42:20:80:e2:95:60:33:36:d9: 04:15:14:f6:7c:17:05:77:87:e4:2d:75:cd:d5:ae: 8a:88:2a:7e:e8:ad:0e:67:59:78:48:2c:66:84:46: d1:2a:f4:de:b2:bc:de:23:ab:e9:3e:07:18:e0:5c: 38:68:d8:a2:60:f8:35:4a:29:8b:2b:2d:23:5f:41: 86:ad:6e:bd:62:f0:a5:51:e9:70:65:87:7f:96:6e: 64:02:e7:9f:42:d3:1c:35:7f:04:5d:a4:dd:7d:83: ec:26:74:5b:06:7f:42:b9:42:f1:6c:9b:84:ef:0c: 8d:52:71:22:02:46:e2:5d:bb:4b:dc:55:26:76:bf: e2:30:ca:45:1d:d2:35:36:b5:46:74:65:c2:55:53: ce:70:1d:0a:04:ea:26:26:7c:1a:c2:75:8b:d6:a8: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:92:46:72:52:BA:57:6D:AE:5A:11:D1:0A:59:41:C0:2F:5F:3F:32 X509v3 Authority Key Identifier: keyid:EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a3:13:c5:04:ab:69:81:1a:ae:12:09:68:2c:16:9b:82:1c: 21:ad:d8:e5:f0:76:cc:a9:4c:4b:71:a5:85:3b:8d:25:70:78: 8f:82:49:2f:7a:fe:1a:7c:f2:0c:83:30:09:cb:1f:99:84:9d: bc:bb:06:ee:21:be:57:38:68:6a:19:a6:96:e9:da:c2:83:b9: cb:2d:38:d4:85:39:49:a8:0e:6b:1a:7e:7b:1b:3f:22:1d:95: 07:16:70:0b:a1:69:d0:23:91:86:a2:16:3d:17:33:e8:92:d5: 15:c0:2e:cb:8e:b1:e5:29:ac:d0:94:4c:8b:e5:83:8e:01:2c: 9a:77:4e:ea:e2:6f:06:51:35:2f:70:41:d0:1f:71:80:fb:01: 54:d6:22:c5:72:28:ef:12:67:1c:46:a9:a3:89:f3:7e:9d:13: bf:16:95:e9:94:03:81:82:8d:71:27:17:66:41:b2:54:ff:29: 0b:42:df:f6:f8:b5:1f:28:bb:92:7a:7a:19:16:2c:be:3a:0f: 60:1c:18:38:0f:05:93:b4:be:c2:16:4a:77:30:cc:94:71:3c: 99:4a:1b:a6:26:69:8c:08:52:27:4a:bd:d2:2b:5d:57:fe:d5: 1e:aa:31:1e:7b:4c:f7:fc:52:05:7a:fc:86:08:5e:9f:ff:68: c5:39:15:72 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgITTN5dh93Zz9UReF5r7q3CEYljcTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhFRjFEMTA0ODRFRkE3OUFCQzAxOEZBMEVGQTdGM0IwQzE2 RUU0M0E3MB4XDTI2MDkyNTIwMjkwNloXDTI2MDkyNjIwMzkwNlowMzExMC8GA1UE AxMoRjI5MjQ2NzI1MkJBNTc2REFFNUExMUQxMEE1OTQxQzAyRjVGM0YzMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMH6vM0CLLafRHW2BThxGxNoL5e3 x0l6zkF3CdjJy7px52weRJFrws+IoeWbOeKo0I2ax+jhuF6+sCAORQeh9XKLTH91 Tgn/ANlUMmWWUjtr94+VQRaztxuW4a+j1yz7QiCA4pVgMzbZBBUU9nwXBXeH5C11 zdWuiogqfuitDmdZeEgsZoRG0Sr03rK83iOr6T4HGOBcOGjYomD4NUopiystI19B hq1uvWLwpVHpcGWHf5ZuZALnn0LTHDV/BF2k3X2D7CZ0WwZ/QrlC8WybhO8MjVJx IgJG4l27S9xVJna/4jDKRR3SNTa1RnRlwlVTznAdCgTqJiZ8GsJ1i9ao+SsCAwEA AaOCAewwggHoMB0GA1UdDgQWBBTykkZyUrpXba5aEdEKWUHAL18/MjAfBgNVHSME GDAWgBTvHRBITvp5q8AY+g76fzsMFu5DpzAOBgNVHQ8BAf8EBAMCB4AwYgYDVR0f BFswWTBXoFWgU4ZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTVlLTC8w L0VGMUQxMDQ4NEVGQTc5QUJDMDE4RkEwRUZBN0YzQjBDMTZFRTQzQTcuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRUYxRDEwNDg0RUZBNzlBQkMwMThGQTBFRkE3RjNC MEMxNkVFNDNBNy5jZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0lNWUtMLzAvRUYxRDEwNDg0RUZBNzlB QkMwMThGQTBFRkE3RjNCMEMxNkVFNDNBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAECjE8UEq2mBGq4S CWgsFpuCHCGt2OXwdsypTEtxpYU7jSVweI+CSS96/hp88gyDMAnLH5mEnby7Bu4h vlc4aGoZppbp2sKDucstONSFOUmoDmsafnsbPyIdlQcWcAuhadAjkYaiFj0XM+iS 1RXALsuOseUprNCUTIvlg44BLJp3TuribwZRNS9wQdAfcYD7AVTWIsVyKO8SZxxG qaOJ836dE78WlemUA4GCjXEnF2ZBslT/KQtC3/b4tR8ou5J6ehkWLL46D2AcGDgP BZO0vsIWSncwzJRxPJlKG6YmaYwIUidKvdIrXVf+1R6qMR57TPf8UgV6/IYIXp// aMU5FXI= -----END CERTIFICATE-----Generated at Sat Sep 26 14:18:30 2026 by rpki-client