$ rpki-client -vvvf rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft File: C4FE0149FC774090A5B6304E8968380A1F1B0426.mft (raw, json) Hash identifier: lkcSVp2gzbhi3Dzae3SZOHZlzQw3AMUfzi4U6tD+NOI= Subject key identifier: 62:07:80:68:74:BB:58:30:4F:54:60:A6:BC:28:07:0F:2E:85:19:FA Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 Certificate issuer: /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Certificate serial: 504B0FABF2C52E39376186AD4ED7B096373E5CFE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft Manifest number: B9 Signing time: Thu 24 Sep 2026 18:39:08 +0000 Manifest this update: Thu 24 Sep 2026 18:34:08 +0000 Manifest next update: Fri 25 Sep 2026 19:21:08 +0000 Files and hashes: 1: C4FE0149FC774090A5B6304E8968380A1F1B0426.crl (hash: e/6elzuDpjC3UcoslZ1CvF3/f/2oOHU6HxhhEZD1Okk=) 2: 323430373a643234303a3a2f33322d3438203d3e203138343238.roa (hash: rBUhV/xvRZeEelrs2jyNJogNIGW8G/cMNY2z96YxdgM=) 3: 3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa (hash: RmocfnFYGeRr/aQ5L4jWeV+BcjwmA5Wox7nbUvuA0XQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4b:0f:ab:f2:c5:2e:39:37:61:86:ad:4e:d7:b0:96:37:3e:5c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Validity Not Before: Sep 24 18:34:08 2026 GMT Not After : Sep 25 19:21:08 2026 GMT Subject: CN=6207806874BB58304F5460A6BC28070F2E8519FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:46:8d:09:ed:44:44:12:2d:d5:7b:9e:23:92: 48:22:e0:79:f6:c4:3c:e9:32:45:fa:f7:a1:52:7f: 07:93:fa:59:f5:dd:98:40:e0:2c:a5:36:59:6e:25: d1:7e:90:a2:ac:57:96:4f:cc:f1:e2:ce:b5:76:2d: 16:07:5f:ba:95:87:96:38:e4:65:cc:2f:e5:65:78: ca:10:ec:24:ea:07:3a:c6:1e:f7:92:ee:6d:bf:22: 2b:fe:ee:c5:33:5b:a3:0f:c6:b7:14:7f:37:3d:ba: cf:45:e6:c6:bd:a8:79:b1:66:01:39:9f:94:f8:ac: 4a:4e:04:40:03:0e:c7:84:61:b3:a6:78:c8:a5:0d: 1d:a4:f3:c1:de:4d:d6:b7:bc:49:8b:a3:87:10:00: 61:cf:8a:dd:7a:b1:3c:04:98:ac:0d:6b:f1:5d:15: 47:df:9b:e0:09:b5:37:77:a2:09:eb:e1:9a:61:96: bc:3c:89:5f:86:1f:2e:93:75:f7:2c:4c:ab:2a:96: 1d:d1:fb:d5:24:6c:2a:73:dd:e5:60:ae:f5:e1:ff: 42:da:3c:9d:11:93:54:07:80:1a:6a:6b:3c:3b:c1: 7a:ea:7c:b4:a2:5a:e2:10:65:86:ae:a1:02:b7:f0: 1f:37:ea:e9:54:6d:a4:22:39:34:2c:ad:99:0f:2c: b8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:07:80:68:74:BB:58:30:4F:54:60:A6:BC:28:07:0F:2E:85:19:FA X509v3 Authority Key Identifier: keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8b:cd:dd:3b:20:01:68:27:2e:42:30:d3:96:f7:24:5b:36: 31:c2:b4:12:ff:88:3b:86:ea:e9:9e:47:f0:01:15:c8:b8:dd: c6:a8:8c:30:45:f4:74:12:4e:46:4f:72:17:48:d4:43:ea:ce: c8:3c:37:d0:73:2f:26:ae:00:3a:c8:75:60:c2:94:17:e3:31: 06:bc:2a:ec:ff:af:39:06:b6:a1:64:f8:60:0a:19:f5:ec:17: 58:7a:88:0a:5e:1a:cf:0e:8f:3e:bf:1a:ba:a1:62:d1:d5:67: 3d:5f:47:8e:7c:6b:bf:fc:fe:3a:e7:18:59:4d:d8:10:51:28: a0:e6:6b:7a:2f:c8:b9:80:d8:38:4e:8d:3e:6e:49:12:ea:70: 31:6e:b1:ce:52:4c:a4:12:9d:d3:93:92:6b:e2:93:33:83:d5: 6e:0c:ec:88:a4:8a:be:c1:14:bf:24:14:2e:86:55:db:7a:7e: e8:ef:ee:1a:eb:cd:ff:ba:3a:ac:b3:c3:0d:fe:67:d6:9f:cb: 32:42:64:3c:e1:cb:0f:ff:aa:f0:e8:a0:a8:6b:1e:69:9c:06: e3:9e:34:f8:80:5b:0b:22:73:c3:d0:11:2e:e9:e2:86:4c:8e: 82:30:48:54:78:8f:d5:84:39:3d:d6:cf:e7:6e:a1:50:65:a8: a7:4b:04:74 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUUEsPq/LFLjk3YYatTtewljc+XP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGRTAxNDlGQzc3NDA5MEE1QjYzMDRFODk2ODM4MEEx RjFCMDQyNjAeFw0yNjA5MjQxODM0MDhaFw0yNjA5MjUxOTIxMDhaMDMxMTAvBgNV BAMTKDYyMDc4MDY4NzRCQjU4MzA0RjU0NjBBNkJDMjgwNzBGMkU4NTE5RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRo0J7UREEi3Ve54jkkgi4Hn2 xDzpMkX696FSfweT+ln13ZhA4CylNlluJdF+kKKsV5ZPzPHizrV2LRYHX7qVh5Y4 5GXML+VleMoQ7CTqBzrGHveS7m2/Iiv+7sUzW6MPxrcUfzc9us9F5sa9qHmxZgE5 n5T4rEpOBEADDseEYbOmeMilDR2k88HeTda3vEmLo4cQAGHPit16sTwEmKwNa/Fd FUffm+AJtTd3ognr4Zphlrw8iV+GHy6TdfcsTKsqlh3R+9UkbCpz3eVgrvXh/0La PJ0Rk1QHgBpqazw7wXrqfLSiWuIQZYauoQK38B836ulUbaQiOTQsrZkPLLjXAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUYgeAaHS7WDBPVGCmvCgHDy6FGfowHwYDVR0j BBgwFoAUxP4BSfx3QJCltjBOiWg4Ch8bBCYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUVSQ1lD QVQvMC9DNEZFMDE0OUZDNzc0MDkwQTVCNjMwNEU4OTY4MzgwQTFGMUIwNDI2LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0M0RkUwMTQ5RkM3NzQwOTBBNUI2MzA0RTg5 NjgzODBBMUYxQjA0MjYuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NRVJDWUNBVC8wL0M0RkUwMTQ5 RkM3NzQwOTBBNUI2MzA0RTg5NjgzODBBMUYxQjA0MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPi83d OyABaCcuQjDTlvckWzYxwrQS/4g7hurpnkfwARXIuN3GqIwwRfR0Ek5GT3IXSNRD 6s7IPDfQcy8mrgA6yHVgwpQX4zEGvCrs/685BrahZPhgChn17BdYeogKXhrPDo8+ vxq6oWLR1Wc9X0eOfGu//P465xhZTdgQUSig5mt6L8i5gNg4To0+bkkS6nAxbrHO UkykEp3Tk5Jr4pMzg9VuDOyIpIq+wRS/JBQuhlXben7o7+4a683/ujqss8MN/mfW n8syQmQ84csP/6rw6KCoax5pnAbjnjT4gFsLInPD0BEu6eKGTI6CMEhUeI/VhDk9 1s/nbqFQZainSwR0 -----END CERTIFICATE-----Generated at Fri Sep 25 04:46:11 2026 by rpki-client