$ rpki-client -vvvf rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft File: 589DA145B1A822538BB2E68D892E6742B34F0701.mft (raw, json) Hash identifier: XOaBlCtyGszSxDxUDXYIIi3R1xEZk1+4ufWfUm1cOvA= Subject key identifier: 75:B9:92:3C:0A:55:04:76:25:37:5F:82:05:49:55:A1:37:50:51:A0 Authority key identifier: 58:9D:A1:45:B1:A8:22:53:8B:B2:E6:8D:89:2E:67:42:B3:4F:07:01 Certificate issuer: /CN=589DA145B1A822538BB2E68D892E6742B34F0701 Certificate serial: 61F20E73E62ED891957EF4E9D2B16CCC2BA34260 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/589DA145B1A822538BB2E68D892E6742B34F0701.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft Manifest number: B8 Signing time: Fri 25 Sep 2026 11:27:50 +0000 Manifest this update: Fri 25 Sep 2026 11:22:50 +0000 Manifest next update: Sat 26 Sep 2026 14:55:50 +0000 Files and hashes: 1: 589DA145B1A822538BB2E68D892E6742B34F0701.crl (hash: GexW0pfAQyO8ydsnA5Iw6Ths3QRprYAYCMMsNNGKIEM=) 2: 3136312e3234382e3132382e302f32332d3234203d3e20313331363435.roa (hash: A2tEu7HgD7mnKwNZUDnZPRv7DPPNtScV1zkEjUfoaE8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.crl rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/589DA145B1A822538BB2E68D892E6742B34F0701.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 14:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f2:0e:73:e6:2e:d8:91:95:7e:f4:e9:d2:b1:6c:cc:2b:a3:42:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589DA145B1A822538BB2E68D892E6742B34F0701 Validity Not Before: Sep 25 11:22:50 2026 GMT Not After : Sep 26 14:55:50 2026 GMT Subject: CN=75B9923C0A55047625375F82054955A1375051A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:94:60:83:f2:fa:14:2a:11:6d:23:c2:ad: 2e:c4:70:ab:55:30:a7:5d:f0:cd:08:0f:66:c1:bb: d9:f9:c1:8e:39:e3:72:99:d7:78:7f:7a:03:d2:0f: 23:19:d1:59:33:dd:92:8b:92:62:55:d0:66:d9:9c: d4:29:ed:ee:9f:d8:09:f3:ad:22:00:0f:e8:8a:09: 61:a6:19:85:4d:ae:dd:e1:f1:f5:b5:83:bd:d8:bd: b6:3d:63:92:68:77:5b:b5:f2:45:ad:d6:b8:ff:55: 1b:f9:5c:97:cc:50:42:88:38:0f:ea:93:c9:7b:72: 3a:5f:a7:57:ba:2e:49:e6:fe:b2:c2:e7:46:a5:47: b4:54:e5:ba:b0:2a:85:d1:ff:dd:1e:57:a9:4a:af: 88:e2:15:31:ef:2f:0d:79:37:ba:72:5c:0e:da:f3: bd:7d:31:de:15:17:c3:68:c2:3a:79:13:45:e9:b8: 41:94:c6:17:69:45:92:da:ae:c1:58:68:f0:1f:ed: 4d:00:13:a1:54:22:c3:ea:a8:79:11:e0:f4:41:db: 67:bc:e3:4b:bb:68:cf:1c:71:84:1e:3b:77:f3:3d: d9:ef:4e:0b:4d:ec:4c:0a:34:2a:71:a0:3d:58:3d: 02:c0:f0:81:4a:29:46:84:19:bb:99:9e:0a:22:7c: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B9:92:3C:0A:55:04:76:25:37:5F:82:05:49:55:A1:37:50:51:A0 X509v3 Authority Key Identifier: keyid:58:9D:A1:45:B1:A8:22:53:8B:B2:E6:8D:89:2E:67:42:B3:4F:07:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/589DA145B1A822538BB2E68D892E6742B34F0701.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:55:df:04:5e:30:ef:41:32:b6:a9:56:c4:9c:ff:d0:33:b2: ea:01:67:b6:15:b6:1f:9b:33:30:dd:05:c4:0b:23:71:2f:c0: 9a:47:91:90:42:b2:d9:5c:d4:74:af:b1:8f:1c:5c:86:31:50: 98:39:a1:63:23:80:c3:10:3c:96:7b:69:24:64:b5:14:5e:01: 93:0c:5c:0e:a2:e2:0d:83:eb:b9:50:78:0d:0a:22:c6:cd:6c: 1b:cc:fe:86:ff:2c:c2:9d:28:31:3c:50:66:60:59:00:26:5b: 06:d1:c8:99:58:1b:ca:eb:13:83:37:e8:88:83:e3:b0:fa:c4: df:b7:cc:bb:15:00:fa:86:b6:c6:5a:0f:06:11:e6:86:d1:e3: 4a:2f:2f:f7:26:6d:73:75:b4:36:40:de:9d:c4:9a:13:77:6e: 47:d6:84:42:77:9b:7b:d4:d3:aa:5c:82:68:4e:d5:1c:8f:b4: d3:52:0f:3a:75:a4:69:4d:7d:16:0a:5b:fc:bc:b4:5e:1d:b3: 92:99:f7:5a:f2:85:e4:48:7c:39:db:3f:88:8c:18:e7:ea:58: 9d:bf:0a:20:17:6c:fc:72:0a:63:89:c5:90:c7:6e:03:58:76: 84:1e:98:66:d2:7f:05:0b:08:e0:67:e0:87:1d:bd:25:02:bc: 16:e9:3c:41 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUYfIOc+Yu2JGVfvTp0rFszCujQmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg5REExNDVCMUE4MjI1MzhCQjJFNjhEODkyRTY3NDJC MzRGMDcwMTAeFw0yNjA5MjUxMTIyNTBaFw0yNjA5MjYxNDU1NTBaMDMxMTAvBgNV BAMTKDc1Qjk5MjNDMEE1NTA0NzYyNTM3NUY4MjA1NDk1NUExMzc1MDUxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcS5Rgg/L6FCoRbSPCrS7EcKtV MKdd8M0ID2bBu9n5wY4543KZ13h/egPSDyMZ0Vkz3ZKLkmJV0GbZnNQp7e6f2Anz rSIAD+iKCWGmGYVNrt3h8fW1g73YvbY9Y5Jod1u18kWt1rj/VRv5XJfMUEKIOA/q k8l7cjpfp1e6Lknm/rLC50alR7RU5bqwKoXR/90eV6lKr4jiFTHvLw15N7pyXA7a 8719Md4VF8Nowjp5E0XpuEGUxhdpRZLarsFYaPAf7U0AE6FUIsPqqHkR4PRB22e8 40u7aM8ccYQeO3fzPdnvTgtN7EwKNCpxoD1YPQLA8IFKKUaEGbuZngoifN21AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUdbmSPApVBHYlN1+CBUlVoTdQUaAwHwYDVR0j BBgwFoAUWJ2hRbGoIlOLsuaNiS5nQrNPBwEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzEv NTg5REExNDVCMUE4MjI1MzhCQjJFNjhEODkyRTY3NDJCMzRGMDcwMS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMC81ODlEQTE0NUIxQTgyMjUzOEJCMkU2OEQ4OTJFNjc0 MkIzNEYwNzAxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzEvNTg5REExNDVCMUE4MjI1MzhC QjJFNjhEODkyRTY3NDJCMzRGMDcwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG1V3wReMO9BMrapVsSc /9AzsuoBZ7YVth+bMzDdBcQLI3EvwJpHkZBCstlc1HSvsY8cXIYxUJg5oWMjgMMQ PJZ7aSRktRReAZMMXA6i4g2D67lQeA0KIsbNbBvM/ob/LMKdKDE8UGZgWQAmWwbR yJlYG8rrE4M36IiD47D6xN+3zLsVAPqGtsZaDwYR5obR40ovL/cmbXN1tDZA3p3E mhN3bkfWhEJ3m3vU06pcgmhO1RyPtNNSDzp1pGlNfRYKW/y8tF4ds5KZ91ryheRI fDnbP4iMGOfqWJ2/CiAXbPxyCmOJxZDHbgNYdoQemGbSfwULCOBn4IcdvSUCvBbp PEE= -----END CERTIFICATE-----Generated at Sat Sep 26 08:21:16 2026 by rpki-client