$ rpki-client -vvvf rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft File: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft (raw, json) Hash identifier: 9RQ2SwH/3ApfiLsLxwOf99VksGo//BoRsrH7v9m16Sk= Subject key identifier: 60:07:F5:91:17:FA:7A:F7:A6:10:44:37:C3:58:25:0F:79:85:CD:EA Authority key identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 Certificate issuer: /CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Certificate serial: 1B482CD95AF95D34127F29619F725461F0559438 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 07:03:59 +0000 Manifest this update: Thu 24 Sep 2026 06:58:59 +0000 Manifest next update: Fri 25 Sep 2026 10:48:59 +0000 Files and hashes: 1: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl (hash: bvgjTYbxzj8zemtX0HSi1d6yhdi2iz9gz6/9exOdQzA=) 2: 3136302e3139312e342e302f32332d3234203d3e20313334383233.roa (hash: MvSn3+N3E0x49y2zyFZseXhPFbhPYX7FDxa/hvK0XxA=) 3: 3136302e3139312e342e302f32332d3234203d3e20313438393936.roa (hash: WDQ6isA31vRFBEKAPNTN2h03bliS7XG3+ZDUsxu5ekM=) 4: 3136302e3139312e342e302f32332d3234203d3e203338303432.roa (hash: uC4SAyffO7EbE3rGS0jHS6n7C39qBWkfFa7uUUduW8s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:48:2c:d9:5a:f9:5d:34:12:7f:29:61:9f:72:54:61:f0:55:94:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Validity Not Before: Sep 24 06:58:59 2026 GMT Not After : Sep 25 10:48:59 2026 GMT Subject: CN=6007F59117FA7AF7A6104437C358250F7985CDEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:4b:0d:b8:c6:54:5c:d4:a9:ab:55:a0:9d: 0b:1a:1f:ff:22:cf:a7:27:df:d8:9e:63:13:f5:44: ca:b2:05:01:cf:ee:00:0d:a4:c0:de:cd:3f:bb:38: f7:e1:81:cf:1b:6a:71:0b:0e:12:b7:03:b3:af:55: e8:a0:a4:aa:d4:94:97:05:74:99:e4:33:b1:1d:57: cd:c3:de:8d:43:6d:01:4d:87:f3:13:ee:6f:cb:79: 5b:d7:88:00:d5:20:7a:84:45:b8:51:13:a7:b5:3c: 22:95:22:11:37:dd:f2:f2:08:c1:69:fe:a5:dd:2d: 2e:95:c4:4b:c8:9a:95:58:3a:68:e8:fa:35:9a:d7: 6c:4d:6d:b0:af:2e:6c:f4:57:67:17:f8:04:ab:11: 4e:be:6c:c0:fe:7a:79:d0:47:6b:b4:39:90:76:f9: dd:b7:38:0b:6e:3f:39:df:32:45:a4:dc:16:77:1e: fe:9c:3f:0e:ae:14:41:0b:11:c3:42:35:5f:68:b8: 98:41:78:d8:56:43:45:20:3c:98:49:cb:1c:1d:b9: 7a:2d:8c:76:88:21:99:ec:2e:b7:44:05:32:3c:e5: 7d:0f:50:b1:3e:69:26:39:4a:88:dc:21:c0:ca:1c: 24:be:2a:ab:c1:8f:c3:1a:f2:27:75:c9:2b:66:9c: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:07:F5:91:17:FA:7A:F7:A6:10:44:37:C3:58:25:0F:79:85:CD:EA X509v3 Authority Key Identifier: keyid:EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a4:a1:30:81:d3:08:ab:a1:ab:ab:79:cd:24:18:ab:8b:54: f4:fc:e8:0f:06:91:ac:49:e5:a6:dc:52:9f:17:04:b1:0f:3f: f3:6c:bb:7e:df:cf:8f:4d:03:aa:b4:eb:85:23:4c:6e:5b:63: 15:67:cb:63:2e:84:6b:b4:04:14:02:4b:d7:ec:5e:ae:b1:ed: c0:10:06:90:f4:54:92:64:9d:b1:fd:71:ec:5c:89:c6:72:3c: 90:99:b0:47:c7:f1:10:13:77:3b:a1:9b:ed:6c:f2:22:2e:f0: c2:a9:d6:4f:26:de:b0:84:d4:e1:e5:59:28:46:44:07:a0:c5: b3:50:0e:7b:7d:c5:cb:45:4b:3c:2f:d2:a2:98:60:cd:a2:00: 32:88:e9:ad:52:f2:db:71:fb:19:ed:bf:f9:f3:0c:1c:a3:32: b8:ca:35:03:75:84:2b:a3:e2:8e:af:08:0e:82:49:9f:ba:fa: 34:77:8a:41:54:da:09:76:c5:0d:9c:69:77:b3:84:f5:2b:cd: f4:84:be:56:06:f0:c9:4b:0c:48:c1:e1:de:39:21:5f:bc:78: fb:c8:d0:7e:66:6f:e4:69:ca:24:6b:dd:4e:ef:bd:69:66:34: 68:2a:d0:b2:0c:92:b1:c3:e0:ad:7a:54:b0:47:7f:58:7a:f1: d1:5e:c6:da -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUG0gs2Vr5XTQSfylhn3JUYfBVlDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYxRDEwNDg0RUZBNzlBQkMwMThGQTBFRkE3RjNCMEMx NkVFNDNBNzAeFw0yNjA5MjQwNjU4NTlaFw0yNjA5MjUxMDQ4NTlaMDMxMTAvBgNV BAMTKDYwMDdGNTkxMTdGQTdBRjdBNjEwNDQzN0MzNTgyNTBGNzk4NUNERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZ0sNuMZUXNSpq1WgnQsaH/8i z6cn39ieYxP1RMqyBQHP7gANpMDezT+7OPfhgc8banELDhK3A7OvVeigpKrUlJcF dJnkM7EdV83D3o1DbQFNh/MT7m/LeVvXiADVIHqERbhRE6e1PCKVIhE33fLyCMFp /qXdLS6VxEvImpVYOmjo+jWa12xNbbCvLmz0V2cX+ASrEU6+bMD+ennQR2u0OZB2 +d23OAtuPznfMkWk3BZ3Hv6cPw6uFEELEcNCNV9ouJhBeNhWQ0UgPJhJyxwduXot jHaIIZnsLrdEBTI85X0PULE+aSY5SojcIcDKHCS+KqvBj8Ma8id1yStmnN0LAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUYAf1kRf6evemEEQ3w1glD3mFzeowHwYDVR0j BBgwFoAU7x0QSE76eavAGPoO+n87DBbuQ6cwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1ZS0wv MC9FRjFEMTA0ODRFRkE3OUFCQzAxOEZBMEVGQTdGM0IwQzE2RUU0M0E3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0VGMUQxMDQ4NEVGQTc5QUJDMDE4RkEwRUZBN0Yz QjBDMTZFRTQzQTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTVlLTC8wL0VGMUQxMDQ4NEVGQTc5 QUJDMDE4RkEwRUZBN0YzQjBDMTZFRTQzQTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1pKEwgdMIq6Gr q3nNJBiri1T0/OgPBpGsSeWm3FKfFwSxDz/zbLt+38+PTQOqtOuFI0xuW2MVZ8tj LoRrtAQUAkvX7F6use3AEAaQ9FSSZJ2x/XHsXInGcjyQmbBHx/EQE3c7oZvtbPIi LvDCqdZPJt6whNTh5VkoRkQHoMWzUA57fcXLRUs8L9KimGDNogAyiOmtUvLbcfsZ 7b/58wwcozK4yjUDdYQro+KOrwgOgkmfuvo0d4pBVNoJdsUNnGl3s4T1K830hL5W BvDJSwxIweHeOSFfvHj7yNB+Zm/kacoka91O771pZjRoKtCyDJKxw+CtelSwR39Y evHRXsba -----END CERTIFICATE-----Generated at Thu Sep 24 18:24:03 2026 by rpki-client