$ rpki-client -vvvf rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft File: D7FDD2309EFAC257359F67A560160D59D372E164.mft (raw, json) Hash identifier: VDiyJfNhpBxOZIdKBSWIGZW5m6N6EL5J+eW97WFrGy0= Subject key identifier: 72:C5:59:86:9D:59:6F:05:89:D8:A8:F1:06:C1:A1:CA:F2:0A:E2:11 Authority key identifier: D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64 Certificate issuer: /CN=D7FDD2309EFAC257359F67A560160D59D372E164 Certificate serial: 7A4D4F2E453A5243A17BA4702EB54BD6C51510B8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer Subject info access: rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft Manifest number: B7 Signing time: Thu 24 Sep 2026 10:09:25 +0000 Manifest this update: Thu 24 Sep 2026 10:04:25 +0000 Manifest next update: Fri 25 Sep 2026 12:30:25 +0000 Files and hashes: 1: 3130332e3233362e3232362e302f32332d3234203d3e203138303431.roa (hash: AzoWjoqKzfT2i2xH8uvnREwwRYXtqWtGT2FrkUty/Fw=) 2: 323430313a313661303a3a2f33322d3332203d3e203138303431.roa (hash: i0/pTPKyKu5j66qOAMiRZI9DIMIWaYy8NyfCfY/8Two=) 3: D7FDD2309EFAC257359F67A560160D59D372E164.crl (hash: jmtPZSm3jhrSZ6+ki8B3BCZSG4FenkLcM8qO/nAMS5U=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 12:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4d:4f:2e:45:3a:52:43:a1:7b:a4:70:2e:b5:4b:d6:c5:15:10:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7FDD2309EFAC257359F67A560160D59D372E164 Validity Not Before: Sep 24 10:04:25 2026 GMT Not After : Sep 25 12:30:25 2026 GMT Subject: CN=72C559869D596F0589D8A8F106C1A1CAF20AE211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9e:39:74:73:d3:fe:d5:dc:13:37:d0:63:79: 92:6c:b6:83:c0:c0:d8:66:bf:3a:32:69:de:d9:b5: 1b:4e:78:1b:0b:f8:89:5e:d5:18:40:51:37:c9:51: ec:66:35:0d:37:b9:53:b7:cf:42:71:28:3c:b5:35: db:66:d6:4c:e0:d9:4f:7e:8d:11:32:a7:41:c9:59: 0a:ce:6c:b6:81:9f:c6:83:a7:63:6d:5b:9b:50:5b: ea:df:ed:e3:9e:1c:df:44:88:88:63:04:b1:76:aa: 8a:ec:59:c0:74:4d:27:31:a4:18:93:61:04:81:d1: bf:38:c2:f7:e8:b3:a1:df:eb:74:15:b0:82:b5:ec: 39:39:0d:49:78:43:e6:4a:59:88:43:1b:81:2c:77: 09:36:94:43:55:a1:a8:fd:22:b7:29:8b:7a:01:57: a1:e2:3b:40:90:dc:9d:69:be:53:9d:f9:14:4b:20: 7d:29:89:4d:bf:3d:49:bb:cf:50:90:65:ed:e7:a6: 83:c5:9f:22:3b:3c:a3:e6:10:31:1a:c9:1b:e9:2b: b2:f5:9f:3f:4f:6b:01:dd:00:08:a1:a1:72:90:1f: d8:3f:b9:bb:fd:29:ea:ba:65:42:77:d9:69:3e:d2: c9:c7:57:25:0f:59:59:ad:6d:81:28:23:bf:cc:37: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C5:59:86:9D:59:6F:05:89:D8:A8:F1:06:C1:A1:CA:F2:0A:E2:11 X509v3 Authority Key Identifier: keyid:D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:94:51:13:78:d0:46:08:b6:7a:5c:27:8d:ed:53:56:2f:17: 43:b0:3a:74:af:24:59:d5:64:cf:61:86:56:52:1c:97:6c:25: 07:67:78:b9:e9:89:fd:59:b3:4c:31:6d:98:03:f2:d5:52:df: 1b:e7:c2:e0:ac:92:36:fb:40:f5:3d:9f:b6:50:fb:69:de:b0: f1:86:aa:49:d6:10:ba:24:37:04:95:ba:88:44:89:f9:c4:74: ae:57:a6:ec:5b:ff:74:bf:18:eb:d1:c8:0e:92:02:a5:ba:88: d0:7b:66:da:fc:9b:60:e5:60:c5:a9:f1:26:e1:07:1c:da:21: 43:b8:36:9d:d7:57:1c:af:95:1b:10:54:c1:d0:ca:3c:12:3a: 59:9c:ce:dc:68:0d:70:fb:5d:3b:99:5a:f3:2a:a1:3d:3f:d6: 49:9c:ab:3b:a8:16:98:7f:bb:1b:92:0c:94:48:c5:4f:e2:48: 02:b9:f8:26:21:f5:cf:cb:63:f5:9d:7e:9e:0a:7b:a3:65:85: 4d:6c:5f:7c:2f:2d:43:51:ec:56:c3:4c:f8:f4:38:77:a4:3b: 56:17:07:57:87:c9:d0:70:be:f0:a9:9a:47:7d:5a:98:1a:23: 0a:61:b1:be:b9:f3:c8:8f:53:3e:7f:ad:57:dc:15:50:2b:a2: 61:46:59:50 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUek1PLkU6UkOhe6RwLrVL1sUVELgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGREQyMzA5RUZBQzI1NzM1OUY2N0E1NjAxNjBENTlE MzcyRTE2NDAeFw0yNjA5MjQxMDA0MjVaFw0yNjA5MjUxMjMwMjVaMDMxMTAvBgNV BAMTKDcyQzU1OTg2OUQ1OTZGMDU4OUQ4QThGMTA2QzFBMUNBRjIwQUUyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjnjl0c9P+1dwTN9BjeZJstoPA wNhmvzoyad7ZtRtOeBsL+Ile1RhAUTfJUexmNQ03uVO3z0JxKDy1Ndtm1kzg2U9+ jREyp0HJWQrObLaBn8aDp2NtW5tQW+rf7eOeHN9EiIhjBLF2qorsWcB0TScxpBiT YQSB0b84wvfos6Hf63QVsIK17Dk5DUl4Q+ZKWYhDG4Esdwk2lENVoaj9Ircpi3oB V6HiO0CQ3J1pvlOd+RRLIH0piU2/PUm7z1CQZe3npoPFnyI7PKPmEDEayRvpK7L1 nz9PawHdAAihoXKQH9g/ubv9Keq6ZUJ32Wk+0snHVyUPWVmtbYEoI7/MN5y9AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUcsVZhp1ZbwWJ2KjxBsGhyvIK4hEwHwYDVR0j BBgwFoAU1/3SMJ76wlc1n2elYBYNWdNy4WQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkZULzAv RDdGREQyMzA5RUZBQzI1NzM1OUY2N0E1NjAxNjBENTlEMzcyRTE2NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9EN0ZERDIzMDlFRkFDMjU3MzU5RjY3QTU2MDE2MEQ1 OUQzNzJFMTY0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkZULzAvRDdGREQyMzA5RUZBQzI1NzM1 OUY2N0E1NjAxNjBENTlEMzcyRTE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHyUURN40EYItnpcJ43t U1YvF0OwOnSvJFnVZM9hhlZSHJdsJQdneLnpif1Zs0wxbZgD8tVS3xvnwuCskjb7 QPU9n7ZQ+2nesPGGqknWELokNwSVuohEifnEdK5Xpuxb/3S/GOvRyA6SAqW6iNB7 Ztr8m2DlYMWp8SbhBxzaIUO4Np3XVxyvlRsQVMHQyjwSOlmcztxoDXD7XTuZWvMq oT0/1kmcqzuoFph/uxuSDJRIxU/iSAK5+CYh9c/LY/Wdfp4Ke6NlhU1sX3wvLUNR 7FbDTPj0OHekO1YXB1eHydBwvvCpmkd9WpgaIwphsb6588iPUz5/rVfcFVAromFG WVA= -----END CERTIFICATE-----Generated at Thu Sep 24 20:35:10 2026 by rpki-client