$ rpki-client -vvvf rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft File: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft (raw, json) Hash identifier: Hyn+aOpFJnynYBOUk8wh7dpTYwwMsndH482cfpyF9n0= Subject key identifier: 51:E7:DE:D5:0F:E7:60:74:0B:CE:28:DB:9A:1C:32:9B:00:D0:BE:AC Authority key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA Certificate issuer: /CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Certificate serial: 220D4A3329358E1E072F28417B0A2360DD128CF0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft Manifest number: BD Signing time: Fri 25 Sep 2026 09:57:39 +0000 Manifest this update: Fri 25 Sep 2026 09:52:39 +0000 Manifest next update: Sat 26 Sep 2026 13:23:39 +0000 Files and hashes: 1: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl (hash: iQqhP8ebUFTdnFTyIr0T7yH1n0sApBraiKHfMHCLpjA=) 2: 3130332e3137332e39342e302f32332d3234203d3e2039393230.roa (hash: 4AY9mKhgxxuuSl6y1Sy2exIP/SFNw2gXcIDmergV1Y0=) 3: 323430373a653463303a31303a3a2f34382d3438203d3e20323138363939.roa (hash: 5NPYn896f6cSL35NtV5sGfz6luML+FwCVhmlOoiZn4A=) 4: 323430373a653463303a313a3a2f34382d3438203d3e2039393230.roa (hash: SPZzDHWF7IOGU0RefkHatr6T+UuWJ43wu5dvfPsUlBc=) 5: 3130332e3137332e39352e302f32342d3234203d3e2039393230.roa (hash: GRWZ7hnM+/dWxb1R4FqblAJoXVc3WKwBr5Lvm8NY3Iw=) 6: 3130332e3137332e39342e302f32332d3234203d3e20313532363134.roa (hash: DFwmEzDSWwn1n/LKb3VnZN0eid9zGs6vXBGXUYxrvVE=) 7: 323430373a653463303a3a2f34382d3438203d3e20313532363134.roa (hash: vgzFcwGEYe/SuHzv/bradPPbtlCxt1g9+kfxNVcgqL0=) 8: 3130332e3137332e39342e302f32342d3234203d3e2039393230.roa (hash: LLLHTnX1lDVfIT/USPcy8uRSK7AEjVy8r3OHlXaKRtA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 13:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0d:4a:33:29:35:8e:1e:07:2f:28:41:7b:0a:23:60:dd:12:8c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Validity Not Before: Sep 25 09:52:39 2026 GMT Not After : Sep 26 13:23:39 2026 GMT Subject: CN=51E7DED50FE760740BCE28DB9A1C329B00D0BEAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:1d:37:9c:78:b2:4c:56:4e:6d:b6:78:1a: 4c:47:4b:84:27:6a:d0:51:83:a8:96:60:76:6f:f6: 5f:2e:f8:7f:56:c6:81:97:d2:66:f7:d9:4d:53:24: d1:3b:68:55:db:f2:b3:96:a6:1d:63:23:3d:04:f8: f8:34:06:70:45:b2:c7:8d:11:16:43:f6:c6:d1:2c: c4:2a:51:b9:df:fa:65:a1:60:63:1f:6d:49:80:61: e0:82:2f:03:6c:00:4b:25:e8:fb:4e:35:57:e7:51: 94:5c:b5:fd:cf:7e:fc:76:53:a6:ba:28:4e:ab:80: db:9f:94:33:fb:4d:d4:29:a2:ae:2d:2e:a3:8b:a0: 49:bf:08:33:04:40:b6:e8:09:db:10:64:ea:05:a4: 5d:73:18:50:a4:b1:d2:46:0b:d7:16:f9:20:c6:a2: 9a:b1:a7:ad:77:80:e0:ee:45:95:d7:1f:28:84:3f: b4:a3:eb:42:ee:b2:00:93:f8:5a:44:bc:02:78:db: 19:2c:36:b7:95:1d:35:38:5c:b3:a4:e9:f1:84:ce: c8:a3:5f:5d:7b:38:47:d7:1b:3a:c0:2b:d0:be:1d: 42:9a:9c:84:5b:9d:25:a5:61:a2:ac:40:97:75:e2: 54:38:2a:fe:13:0d:44:ab:af:a5:17:c4:ad:ae:ca: 8a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E7:DE:D5:0F:E7:60:74:0B:CE:28:DB:9A:1C:32:9B:00:D0:BE:AC X509v3 Authority Key Identifier: keyid:41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:92:4a:43:1f:80:aa:fc:73:25:ed:b3:03:b7:3f:3f:d8:f4: 60:3f:15:73:11:a6:66:79:c3:04:7c:fc:ca:b4:b1:ee:09:6c: f3:29:6b:ea:80:dd:f2:04:ec:0d:f8:93:61:6e:25:93:bb:09: 6c:74:66:a7:dc:75:9d:0d:1f:f4:13:17:ae:2c:a9:be:d2:50: 8f:d4:e5:44:0f:d3:5c:5d:29:5e:14:0f:8d:66:db:c8:c7:f1: b0:ea:3e:d7:86:26:47:e9:ff:60:dc:98:b4:b2:6d:db:4c:d5: fe:ee:24:f4:19:e3:7c:6a:fa:51:1b:a8:46:58:21:c7:35:35: 59:24:48:fe:6e:6f:e0:19:43:d9:8d:cc:64:2f:03:31:0c:60: e1:b6:00:5f:45:57:25:e6:db:aa:57:7c:c1:ad:3a:1e:09:47: 4c:a3:ee:10:c2:09:09:3d:c7:92:4f:9a:ce:44:ac:ca:eb:2c: 91:c7:3e:6c:ea:be:03:e0:0a:17:83:0c:e7:a6:43:ce:21:22: 10:44:48:2a:92:17:0c:7f:31:e8:aa:c5:89:1a:22:27:8d:0e: ec:42:64:b9:07:6e:62:e3:26:8d:15:f4:81:ce:1d:74:39:be: 1c:96:1a:39:bf:75:06:c7:3a:9c:63:f9:79:88:e8:1f:5c:86: 6b:76:e1:39 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUIg1KMyk1jh4HLyhBewojYN0SjPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFCRUI2NTY2OEUxNjQ5RURFOTcyOEU0RkY0ODU5MUZB MEM1ODJCQTAeFw0yNjA5MjUwOTUyMzlaFw0yNjA5MjYxMzIzMzlaMDMxMTAvBgNV BAMTKDUxRTdERUQ1MEZFNzYwNzQwQkNFMjhEQjlBMUMzMjlCMDBEMEJFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Ix03nHiyTFZObbZ4GkxHS4Qn atBRg6iWYHZv9l8u+H9WxoGX0mb32U1TJNE7aFXb8rOWph1jIz0E+Pg0BnBFsseN ERZD9sbRLMQqUbnf+mWhYGMfbUmAYeCCLwNsAEsl6PtONVfnUZRctf3Pfvx2U6a6 KE6rgNuflDP7TdQpoq4tLqOLoEm/CDMEQLboCdsQZOoFpF1zGFCksdJGC9cW+SDG opqxp613gODuRZXXHyiEP7Sj60LusgCT+FpEvAJ42xksNreVHTU4XLOk6fGEzsij X117OEfXGzrAK9C+HUKanIRbnSWlYaKsQJd14lQ4Kv4TDUSrr6UXxK2uyoqJAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUUefe1Q/nYHQLzijbmhwymwDQvqwwHwYDVR0j BBgwFoAUQb62VmjhZJ7elyjk/0hZH6DFgrowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVNUVkMv MC80MUJFQjY1NjY4RTE2NDlFREU5NzI4RTRGRjQ4NTkxRkEwQzU4MkJBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzQxQkVCNjU2NjhFMTY0OUVERTk3MjhFNEZGNDg1 OTFGQTBDNTgyQkEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JU1RWQy8wLzQxQkVCNjU2NjhFMTY0 OUVERTk3MjhFNEZGNDg1OTFGQTBDNTgyQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKkkpDH4Cq/HMl 7bMDtz8/2PRgPxVzEaZmecMEfPzKtLHuCWzzKWvqgN3yBOwN+JNhbiWTuwlsdGan 3HWdDR/0ExeuLKm+0lCP1OVED9NcXSleFA+NZtvIx/Gw6j7XhiZH6f9g3Ji0sm3b TNX+7iT0GeN8avpRG6hGWCHHNTVZJEj+bm/gGUPZjcxkLwMxDGDhtgBfRVcl5tuq V3zBrToeCUdMo+4QwgkJPceST5rORKzK6yyRxz5s6r4D4AoXgwznpkPOISIQREgq khcMfzHoqsWJGiInjQ7sQmS5B25i4yaNFfSBzh10Ob4clho5v3UGxzqcY/l5iOgf XIZrduE5 -----END CERTIFICATE-----Generated at Fri Sep 25 23:52:19 2026 by rpki-client