$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft File: 4F029ED27C82844F72C10999E3E77841D888E8A5.mft (raw, json) Hash identifier: hcfjxY37ZD2AT+VFtMGvjYTt3VbqHoKVk8AMMUM48SA= Subject key identifier: CE:F9:40:E5:96:24:19:C3:9D:5D:B1:59:B9:EC:85:2B:B9:F4:9D:A0 Authority key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 Certificate issuer: /CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Certificate serial: 69C73DE45CE75D9AC9C1E6FFAF58B5366C073920 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft Manifest number: C5 Signing time: Sat 03 Oct 2026 09:19:16 +0000 Manifest this update: Sat 03 Oct 2026 09:14:16 +0000 Manifest next update: Sun 04 Oct 2026 11:56:16 +0000 Files and hashes: 1: 3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa (hash: UO7gvVHXWOf9xNngHpaJcF4QjHFiPZ4bxN2SGXLKeFI=) 2: 4F029ED27C82844F72C10999E3E77841D888E8A5.crl (hash: upUCA5kJ52zOeuFxadOqprUdSnvB04QeUlYas8S9LbI=) 3: 3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa (hash: mrGHrLU6IhLiSFGZj4xNfph3sl5DRFLwfN+J+P0jaGY=) 4: 3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa (hash: SV9WMKCo6lqqmo4TlONcJhx+nWmHLOoLn96eGrQjUkk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 11:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c7:3d:e4:5c:e7:5d:9a:c9:c1:e6:ff:af:58:b5:36:6c:07:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Validity Not Before: Oct 3 09:14:16 2026 GMT Not After : Oct 4 11:56:16 2026 GMT Subject: CN=CEF940E5962419C39D5DB159B9EC852BB9F49DA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:e6:a1:35:e1:15:95:2a:72:fe:ce:e5:9a: 55:53:9d:e6:ea:11:25:4a:44:36:04:e9:45:88:e3: 2d:46:13:d0:66:45:c1:8e:8b:a4:9b:22:47:4b:09: ef:05:61:ce:23:72:43:a0:27:66:bf:d5:f0:1e:d2: 31:b2:1e:43:1f:66:83:ba:21:d1:33:54:37:46:68: 90:30:58:f3:53:cd:a7:84:aa:6f:64:a9:2e:b4:30: c8:03:07:f2:ae:7b:dd:80:fe:40:50:49:18:5e:de: fa:1d:1b:76:9c:89:39:9d:21:b3:28:95:89:98:57: 43:9f:ae:42:99:cd:d4:92:ef:21:59:bc:77:51:8d: 7e:6a:05:9f:9d:3e:90:eb:fc:0c:b5:db:4b:9a:61: 1b:ad:80:51:73:b2:42:76:84:9c:1d:bb:93:34:61: 40:7b:d5:05:41:ba:53:34:3c:e6:93:14:a8:a9:8f: 6b:cb:14:c4:3f:03:cb:67:b9:a3:ca:92:7a:8c:51: 89:6d:a1:03:45:70:27:cb:40:6d:77:ab:f8:2e:9d: fe:0e:25:09:bf:09:8e:19:ab:d6:e1:b0:38:34:44: 87:b2:a6:cd:97:6d:19:42:9e:ac:8d:b9:03:98:86: 0a:bc:b8:d4:f9:32:91:c1:0a:12:6f:d8:24:65:c7: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F9:40:E5:96:24:19:C3:9D:5D:B1:59:B9:EC:85:2B:B9:F4:9D:A0 X509v3 Authority Key Identifier: keyid:4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d3:48:23:86:bf:65:93:73:f5:94:14:ff:82:e7:f7:2e:dd: 27:16:6b:a9:b8:e3:29:1b:62:4c:9f:dc:45:9c:07:da:40:ce: d0:90:bc:57:65:8a:22:35:6d:aa:eb:3a:b7:e5:bc:c7:62:14: c0:b7:d6:cb:ef:33:c0:97:6e:4f:4c:da:aa:43:25:85:1f:da: c4:66:88:5b:4d:e1:c6:4a:b4:30:2c:5b:a2:c8:84:b6:2c:39: 1a:78:3f:2b:6c:18:5b:be:28:47:04:87:b2:a7:08:31:fb:d8: d3:7a:94:89:f1:98:fe:ff:98:3a:1a:c6:09:a0:70:11:48:a1: 43:00:6b:65:0c:0d:f0:e7:99:ac:6e:bf:df:05:51:a0:ad:f9: b7:c8:35:70:4a:6d:f0:c1:75:f2:59:77:d5:66:b6:73:2b:00: 9a:fb:1d:89:cc:c2:d3:76:8a:b4:b4:a1:de:ec:5b:2f:70:05: 6c:6e:ed:28:92:7a:b5:4d:3a:19:40:3e:bc:89:f0:2d:08:61: 6c:cf:89:45:2c:3f:89:f8:59:da:53:01:7b:fe:52:b7:a9:ef: a4:36:f6:44:c7:cd:e6:78:c1:ee:7c:e7:b8:49:92:08:32:2a: 79:9d:55:3a:c2:b1:50:58:e4:ac:b0:b9:58:45:ba:56:7a:c6: d1:7f:8d:bb -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUacc95FznXZrJweb/r1i1NmwHOSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjlFRDI3QzgyODQ0RjcyQzEwOTk5RTNFNzc4NDFE ODg4RThBNTAeFw0yNjEwMDMwOTE0MTZaFw0yNjEwMDQxMTU2MTZaMDMxMTAvBgNV BAMTKENFRjk0MEU1OTYyNDE5QzM5RDVEQjE1OUI5RUM4NTJCQjlGNDlEQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBl+ahNeEVlSpy/s7lmlVTnebq ESVKRDYE6UWI4y1GE9BmRcGOi6SbIkdLCe8FYc4jckOgJ2a/1fAe0jGyHkMfZoO6 IdEzVDdGaJAwWPNTzaeEqm9kqS60MMgDB/Kue92A/kBQSRhe3vodG3aciTmdIbMo lYmYV0OfrkKZzdSS7yFZvHdRjX5qBZ+dPpDr/Ay120uaYRutgFFzskJ2hJwdu5M0 YUB71QVBulM0POaTFKipj2vLFMQ/A8tnuaPKknqMUYltoQNFcCfLQG13q/gunf4O JQm/CY4Zq9bhsDg0RIeyps2XbRlCnqyNuQOYhgq8uNT5MpHBChJv2CRlx27JAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUzvlA5ZYkGcOdXbFZueyFK7n0naAwHwYDVR0j BBgwFoAUTwKe0nyChE9ywQmZ4+d4QdiI6KUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v MS80RjAyOUVEMjdDODI4NDRGNzJDMTA5OTlFM0U3Nzg0MUQ4ODhFOEE1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzRGMDI5RUQyN0M4Mjg0NEY3MkMxMDk5OUUzRTc3 ODQxRDg4OEU4QTUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8xLzRGMDI5RUQyN0M4Mjg0 NEY3MkMxMDk5OUUzRTc3ODQxRDg4OEU4QTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBg00gjhr9lk3P1 lBT/guf3Lt0nFmupuOMpG2JMn9xFnAfaQM7QkLxXZYoiNW2q6zq35bzHYhTAt9bL 7zPAl25PTNqqQyWFH9rEZohbTeHGSrQwLFuiyIS2LDkaeD8rbBhbvihHBIeypwgx +9jTepSJ8Zj+/5g6GsYJoHARSKFDAGtlDA3w55msbr/fBVGgrfm3yDVwSm3wwXXy WXfVZrZzKwCa+x2JzMLTdoq0tKHe7FsvcAVsbu0oknq1TToZQD68ifAtCGFsz4lF LD+J+FnaUwF7/lK3qe+kNvZEx83meMHufOe4SZIIMip5nVU6wrFQWOSssLlYRbpW esbRf427 -----END CERTIFICATE-----Generated at Sun Oct 4 02:39:54 2026 by rpki-client