$ rpki-client -vvvf rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.mft File: 084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.mft (raw, json) Hash identifier: HdzpmreVsqqUUKW9bbqOlewlBTBonkZbGBGn5VqftUA= Subject key identifier: 1B:D2:7A:BA:32:8F:66:1A:5C:7B:BC:94:3D:E6:F0:4E:E2:94:26:00 Authority key identifier: 08:4F:CA:ED:B5:0B:B0:39:5F:4B:B9:1B:91:C0:F2:E4:E8:4C:B7:BD Certificate issuer: /CN=084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD Certificate serial: 6B7EF8DAED65FCE73F65D8ABF8CBD9B95069D760 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.mft Manifest number: BA Signing time: Thu 24 Sep 2026 15:40:29 +0000 Manifest this update: Thu 24 Sep 2026 15:35:29 +0000 Manifest next update: Fri 25 Sep 2026 15:42:29 +0000 Files and hashes: 1: 3230322e34372e3137322e302f32332d3332203d3e203134383734.roa (hash: z5ttCw1NDbIiW26b4wnwRq+YuLtgcLQsIT0yR4YwdOc=) 2: 084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.crl (hash: lQG+zeS8GCcXOMVJa4NJFC0XzXSuII0BJqYEXm6vp+M=) 3: 3230322e34372e3137322e302f32332d3332203d3e20313331363432.roa (hash: jG91Krj1u+UI6h33hZ+oxVLH/EozDMQyfvuXwZfwC/k=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.crl rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 15:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:7e:f8:da:ed:65:fc:e7:3f:65:d8:ab:f8:cb:d9:b9:50:69:d7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD Validity Not Before: Sep 24 15:35:29 2026 GMT Not After : Sep 25 15:42:29 2026 GMT Subject: CN=1BD27ABA328F661A5C7BBC943DE6F04EE2942600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:40:ae:6d:06:aa:b6:bd:61:e7:29:96:d4:13: ca:ef:95:f5:58:b2:a0:27:f1:b0:04:55:ee:f7:7a: 0e:e1:db:9f:7e:a0:5c:be:42:f6:0a:19:1d:66:dd: a0:18:dd:19:dd:c6:9d:25:8d:2f:99:ef:3c:53:b2: e8:c9:60:b0:b6:dc:f9:16:b8:57:80:c3:3a:94:fb: 89:29:9d:98:ae:ae:b2:0c:01:8b:a3:f5:bc:22:cf: 51:7e:c4:78:57:ed:ba:ee:40:f2:c7:c8:fe:62:50: 0e:b1:27:ae:ce:13:c6:75:af:83:bf:0f:c8:85:b9: c3:0e:05:31:b6:49:db:69:eb:40:5d:87:a4:f4:db: 31:e8:55:81:45:3d:89:e0:8f:10:18:98:73:89:97: 3c:3e:4d:66:9b:c5:42:66:9b:9b:af:89:e1:af:72: 67:c2:51:92:59:64:6a:3a:18:88:c9:53:58:ec:9b: 93:e7:80:e2:9e:ae:68:dc:e7:b7:83:83:0c:8b:83: 83:b3:d3:db:69:fa:a0:cf:e0:11:71:66:35:cc:c4: b6:53:77:1a:8d:8e:fe:b7:bb:f8:c5:66:67:68:19: 6d:dd:9b:06:a3:fa:33:eb:2a:ac:45:f9:af:c3:8d: b1:51:58:c4:1d:3c:c9:b7:85:62:2a:5a:53:5c:1b: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D2:7A:BA:32:8F:66:1A:5C:7B:BC:94:3D:E6:F0:4E:E2:94:26:00 X509v3 Authority Key Identifier: keyid:08:4F:CA:ED:B5:0B:B0:39:5F:4B:B9:1B:91:C0:F2:E4:E8:4C:B7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KAIWEI/0/084FCAEDB50BB0395F4BB91B91C0F2E4E84CB7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9c:de:d7:a0:18:52:7c:96:10:6a:2f:4f:9a:19:2f:76:9e: 28:c3:0e:f0:70:c4:4e:60:0c:3d:25:d0:31:4c:13:66:e1:b0: 26:c1:d9:72:cc:f7:56:20:41:e6:32:a8:5d:de:cb:26:77:db: 57:ac:af:62:37:21:c9:91:bb:d3:3a:11:1e:a7:c2:e4:ba:89: 9f:2c:84:bf:57:6d:89:60:c6:a9:04:d8:1b:d7:f8:9d:13:c3: 9e:6e:30:e4:3d:12:90:75:1d:16:c0:91:03:2f:a4:c4:5e:3a: 50:2d:f0:eb:2e:2b:30:e3:2a:59:6a:68:5b:9b:64:cd:48:14: 27:ee:15:0c:2b:c3:15:88:55:c8:e6:69:fe:04:bd:01:46:82: 5b:70:f9:b8:b0:65:a5:64:5e:dc:9c:42:8e:f8:1d:3a:ca:57: 57:0e:7d:85:cc:7d:f0:13:41:e9:cd:dc:33:57:42:52:6c:d0: 29:eb:a2:3d:93:80:5d:af:12:32:13:c4:91:69:44:98:06:7d: d4:a4:40:0a:55:ff:73:2a:14:45:ac:a7:55:8c:00:f0:b3:06: 0d:c4:9f:82:b9:99:0d:ba:ff:73:04:f8:7f:21:d4:ff:55:e8: ab:ce:a4:25:c2:60:2e:cd:6f:32:c4:9c:be:41:99:33:d1:e6: 29:8d:ec:12 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUa3742u1l/Oc/Zdir+MvZuVBp12AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0RkNBRURCNTBCQjAzOTVGNEJCOTFCOTFDMEYyRTRF ODRDQjdCRDAeFw0yNjA5MjQxNTM1MjlaFw0yNjA5MjUxNTQyMjlaMDMxMTAvBgNV BAMTKDFCRDI3QUJBMzI4RjY2MUE1QzdCQkM5NDNERTZGMDRFRTI5NDI2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzQK5tBqq2vWHnKZbUE8rvlfVY sqAn8bAEVe73eg7h259+oFy+QvYKGR1m3aAY3Rndxp0ljS+Z7zxTsujJYLC23PkW uFeAwzqU+4kpnZiurrIMAYuj9bwiz1F+xHhX7bruQPLHyP5iUA6xJ67OE8Z1r4O/ D8iFucMOBTG2Sdtp60Bdh6T02zHoVYFFPYngjxAYmHOJlzw+TWabxUJmm5uvieGv cmfCUZJZZGo6GIjJU1jsm5PngOKermjc57eDgwyLg4Oz09tp+qDP4BFxZjXMxLZT dxqNjv63u/jFZmdoGW3dmwaj+jPrKqxF+a/DjbFRWMQdPMm3hWIqWlNcG8q/AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUG9J6ujKPZhpce7yUPebwTuKUJgAwHwYDVR0j BBgwFoAUCE/K7bULsDlfS7kbkcDy5OhMt70wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FJV0VJ LzAvMDg0RkNBRURCNTBCQjAzOTVGNEJCOTFCOTFDMEYyRTRFODRDQjdCRC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8wODRGQ0FFREI1MEJCMDM5NUY0QkI5MUI5MUMw RjJFNEU4NENCN0JELmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FJV0VJLzAvMDg0RkNBRURCNTBC QjAzOTVGNEJCOTFCOTFDMEYyRTRFODRDQjdCRC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD6c3tegGFJ8 lhBqL0+aGS92nijDDvBwxE5gDD0l0DFME2bhsCbB2XLM91YgQeYyqF3eyyZ321es r2I3IcmRu9M6ER6nwuS6iZ8shL9XbYlgxqkE2BvX+J0Tw55uMOQ9EpB1HRbAkQMv pMReOlAt8OsuKzDjKllqaFubZM1IFCfuFQwrwxWIVcjmaf4EvQFGgltw+biwZaVk XtycQo74HTrKV1cOfYXMffATQenN3DNXQlJs0Cnroj2TgF2vEjITxJFpRJgGfdSk QApV/3MqFEWsp1WMAPCzBg3En4K5mQ26/3ME+H8h1P9V6KvOpCXCYC7NbzLEnL5B mTPR5imN7BI= -----END CERTIFICATE-----Generated at Fri Sep 25 05:10:36 2026 by rpki-client