$ rpki-client -vvvf rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft File: 049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft (raw, json) Hash identifier: 4uucHe8dlieT+f448bVjBeAZYShr8LvLq1t39v5zFhE= Subject key identifier: 1D:0F:45:85:FC:39:88:4C:F9:32:4A:42:E5:C7:36:81:F7:78:14:F2 Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B Certificate serial: 505652410DFADC438BD48B6692A0B8C4EF23E87B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft Manifest number: D3 Signing time: Fri 25 Sep 2026 14:23:19 +0000 Manifest this update: Fri 25 Sep 2026 14:18:19 +0000 Manifest next update: Sat 26 Sep 2026 17:45:19 +0000 Files and hashes: 1: 3132322e39392e302e302f31382d3234203d3e2039343136.roa (hash: OPSFIJrW3fmKKJ0pvE28KRzPkCAaJ+W8WzXaI+ME20c=) 2: 3131392e31342e302e302f31372d3137203d3e203138303432.roa (hash: izV5LKXyRkMjgziCJgXNzX9mmTRUejlC9TqllBbTJjE=) 3: 3132332e3235322e302e302f31372d3234203d3e2039343136.roa (hash: 8JxW+fPG8BWMJ3eQJdeafOLn1uT7L6DDouqnppnhNkg=) 4: 3232302e3135372e3131322e302f32302d3234203d3e2039343136.roa (hash: MV88dvBez2VEHGQu9vHIsSHLmR+FC/BkqQXgQl6RGGE=) 5: 3131392e31342e3132382e302f31372d3137203d3e203138303432.roa (hash: Jdj9OnL+nvn+5vJ82BuOV+iDpLKwfqTLwAmIzmHjSjM=) 6: 3132342e3135352e3132382e302f31392d3234203d3e203138303432.roa (hash: IN0+/ooOlPpq110sSFYkiYlC1Kewj2Ug+tzHpY6kPI0=) 7: 3230332e3131382e3232342e302f32302d3230203d3e2039343136.roa (hash: P9ySgHddPveY+6EtVJoOuOaViOtED+utlhZfdlH05gM=) 8: 3131352e34332e302e302f31362d3234203d3e203138303432.roa (hash: 8CdvHvNqCGbHptsBsqmVxO/ddNWB2NuNellpQMuTOqQ=) 9: 3230322e3135312e34382e302f32302d3234203d3e2039343136.roa (hash: s8f8Uct02N0OIWDDH0xlBcjycL5P1/sP2dObZ84wjW8=) 10: 3131392e31342e3132382e302f31372d3137203d3e2039343136.roa (hash: etypLFOH/+2ky9YLH0gkWFgtIbtkxf0DGdzRztYvnQ4=) 11: 3131392e31342e302e302f31362d3234203d3e2039343136.roa (hash: ogg05JqGwuh8Rk6w6nYH2L3SIwxm+KuAyegtBtcSZ9I=) 12: 3131392e31342e302e302f31372d3137203d3e2039343136.roa (hash: E8EzQLG5CgTBVviuAYVjkJ5BeSPp51cZIv1bKC3xlIU=) 13: 3131392e31342e302e302f31362d3234203d3e203138303432.roa (hash: HbGluHb1NsEVJLOmIp1khnjJQIuZhHoSydxnFJStI9Y=) 14: 3132342e3135352e3132382e302f31392d3234203d3e2039343136.roa (hash: 893YGx4CNG5anpdx2bAhSvZbR8KtZI1gTBdgDg7AhWU=) 15: 3132332e3235322e36342e302f31382d3138203d3e2039343136.roa (hash: pbThQhpNTSnJMBASZ2s2lhxD43G2mkYc9iaYlmcl8J4=) 16: 3131352e34332e3132382e302f31372d3137203d3e2039343136.roa (hash: St+0TPB6YfmeZtsKtmzv7EeJUGiMlhWPr0IbfUc/xZE=) 17: 3132332e3235322e302e302f31372d3234203d3e203138303432.roa (hash: eh2WLuFL8JfqsgGPL8GnRsMff9j5TtrpXmSa0C/O+SY=) 18: 3132322e39392e302e302f31382d3234203d3e203138303432.roa (hash: Tz0cSD05i3OCST0PKGEitL9Cea02/7iZZXiFw8rsfjE=) 19: 3230332e3131382e3232342e302f32302d3230203d3e203138303432.roa (hash: 2exWg2jS2ItjCPg0xipUoannDwWvVERhxvaeyMJgPbs=) 20: 3131352e34332e3132382e302f31372d3137203d3e203138303432.roa (hash: kgd4Oaxwu9ubZEjWN6uD3zvpYDcWGuuxHkyqviavhU8=) 21: 3232302e3135372e3131322e302f32302d3234203d3e203138303432.roa (hash: wLcmvrG3+9+VQcoGh/RouCPLhBf4BpOjD6kqqbR7944=) 22: 3131352e34332e302e302f31372d3137203d3e2039343136.roa (hash: 8sPfy+KBH9Iy3oz6z3pK10IfnFdOzftlkUor0sZFlgE=) 23: 049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl (hash: AsLldD37VsLABXPm83UdV4okH/WHfTz30A+gygQ6sfA=) 24: 3132332e3235322e302e302f31382d3138203d3e2039343136.roa (hash: ERhjaQIXwvyOB2XFTJS7sS0ge8NmOyER/FKPC6xegWQ=) 25: 3131352e34332e302e302f31362d3234203d3e2039343136.roa (hash: ccHKYIH1onediXgVYiKh7EHNnwTYWQJoE9EhH+EUTBk=) 26: 3131352e34332e302e302f31372d3137203d3e203138303432.roa (hash: 5gZY3nEfq5SmiFBc4GkzG7kzPKYWP/eJ/0s+gE8A0xM=) 27: 3132332e3235322e36342e302f31382d3138203d3e2039393234.roa (hash: yJVJ6C+sbqUiX3chBCIQtUJyWlloqJi99X6AD9sg0ZA=) 28: 3230322e3135312e34382e302f32302d3234203d3e203138303432.roa (hash: 0Sm3TU3ucHMOKOYa+d48jFM4xmkHZ7KXpkQsW/3BXuk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:56:52:41:0d:fa:dc:43:8b:d4:8b:66:92:a0:b8:c4:ef:23:e8:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B Validity Not Before: Sep 25 14:18:19 2026 GMT Not After : Sep 26 17:45:19 2026 GMT Subject: CN=1D0F4585FC39884CF9324A42E5C73681F77814F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:19:1e:91:a8:5c:40:ba:e4:9a:20:71:b9: 11:ea:de:7b:6d:fb:50:a7:7a:19:1d:c6:64:dd:8a: 64:da:5c:44:55:73:ab:62:c2:9e:31:ce:4e:ce:ed: 1a:de:27:71:a2:8b:99:59:2a:57:5a:8f:c9:ae:3d: 53:cc:1a:ce:ae:60:75:a1:d7:25:25:13:4b:fa:48: a9:d0:b2:40:d7:d0:40:8d:b7:e7:0a:e2:2e:96:38: b9:23:18:53:ce:f2:4f:ba:8b:47:63:85:a5:7a:38: 19:35:f7:7c:82:92:f6:48:3f:28:7e:1a:46:e4:29: 90:a1:21:8f:2e:d6:d1:50:10:03:cd:75:4a:4c:b8: 20:0e:6a:57:48:12:1b:ad:48:39:d3:d3:46:e6:36: e2:95:20:1b:9c:62:4f:9c:a8:91:51:28:2e:a8:82: 1b:63:86:2d:4c:36:68:f6:ca:f5:c5:a7:64:77:b0: b2:85:db:66:3a:3b:3c:61:3e:40:01:64:bd:e2:b7: 0e:b2:d4:66:7f:25:2a:0f:70:eb:10:73:28:bd:62: ca:ae:70:de:11:c2:5e:1b:3e:2b:e7:c6:b7:82:c5: ec:4f:8e:90:78:e4:a5:a2:cf:14:b8:4a:99:9d:ef: 10:e3:b2:26:20:5d:83:61:6e:da:53:d7:e9:f4:ea: d6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0F:45:85:FC:39:88:4C:F9:32:4A:42:E5:C7:36:81:F7:78:14:F2 X509v3 Authority Key Identifier: keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:59:2e:19:44:17:ca:f0:62:94:ef:e9:44:d1:9b:82:41:4b: 12:a3:08:48:7f:eb:48:b5:1e:26:82:52:b2:cc:36:83:d3:0d: c8:c6:d2:d9:79:18:ea:b9:b7:27:1e:59:6f:ce:19:cc:88:ff: bb:1a:9f:ce:ae:09:17:f9:01:13:a8:99:ba:17:db:42:f2:ca: 33:22:70:a2:b4:5c:1c:2c:c7:f5:25:e3:7c:4b:4c:95:fc:12: 4f:49:d6:7f:d1:7b:05:96:41:58:0e:7e:ef:d9:2b:0f:d9:81: 30:0f:78:b0:38:0b:00:5d:56:c4:b7:08:b4:d4:69:4d:9c:0d: 9e:c6:3d:4b:2a:ec:d9:31:70:19:a5:4b:6f:f0:61:f9:e5:da: 8d:d6:85:06:54:e4:db:e6:2d:41:de:32:54:a9:de:8a:e9:e9: 95:58:0b:db:b5:ea:20:89:90:e5:58:0d:ad:fb:89:76:7c:4c: 52:bf:b0:44:bc:a1:7e:ab:b4:a6:16:d5:4e:e9:9a:fd:1e:dd: a1:7a:c6:70:32:bc:b8:55:0d:1d:1e:9f:18:ee:59:3a:59:06: b5:40:0b:f9:0e:fc:db:f0:8d:fc:f6:72:82:72:5b:a0:da:b8: d3:1e:1b:6a:d6:e6:a9:bd:74:9d:84:ac:54:8d:fc:b4:16:2c: 3a:f3:66:6a -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUUFZSQQ363EOL1ItmkqC4xO8j6HswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0Qy MzMyNEU0QjAeFw0yNjA5MjUxNDE4MTlaFw0yNjA5MjYxNzQ1MTlaMDMxMTAvBgNV BAMTKDFEMEY0NTg1RkMzOTg4NENGOTMyNEE0MkU1QzczNjgxRjc3ODE0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xRkekahcQLrkmiBxuRHq3ntt +1CnehkdxmTdimTaXERVc6tiwp4xzk7O7RreJ3Gii5lZKldaj8muPVPMGs6uYHWh 1yUlE0v6SKnQskDX0ECNt+cK4i6WOLkjGFPO8k+6i0djhaV6OBk193yCkvZIPyh+ GkbkKZChIY8u1tFQEAPNdUpMuCAOaldIEhutSDnT00bmNuKVIBucYk+cqJFRKC6o ghtjhi1MNmj2yvXFp2R3sLKF22Y6OzxhPkABZL3itw6y1GZ/JSoPcOsQcyi9Ysqu cN4Rwl4bPivnxreCxexPjpB45KWizxS4Spmd7xDjsiYgXYNhbtpT1+n06tZfAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUHQ9Fhfw5iEz5MkpC5cc2gfd4FPIwHwYDVR0j BBgwFoAUBJ1NvPql7iinm/SeYj6HzSMyTkswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5H LzAvMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8wNDlENERCQ0ZBQTVFRTI4QTc5QkY0OUU2MjNF ODdDRDIzMzI0RTRCLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5HLzAvMDQ5RDREQkNGQUE1 RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIJZLhlEF8rw YpTv6UTRm4JBSxKjCEh/60i1HiaCUrLMNoPTDcjG0tl5GOq5tyceWW/OGcyI/7sa n86uCRf5AROomboX20LyyjMicKK0XBwsx/Ul43xLTJX8Ek9J1n/RewWWQVgOfu/Z Kw/ZgTAPeLA4CwBdVsS3CLTUaU2cDZ7GPUsq7NkxcBmlS2/wYfnl2o3WhQZU5Nvm LUHeMlSp3orp6ZVYC9u16iCJkOVYDa37iXZ8TFK/sES8oX6rtKYW1U7pmv0e3aF6 xnAyvLhVDR0enxjuWTpZBrVAC/kO/Nvwjfz2coJyW6DauNMeG2rW5qm9dJ2ErFSN /LQWLDrzZmo= -----END CERTIFICATE-----Generated at Fri Sep 25 22:30:13 2026 by rpki-client