$ rpki-client -vvvf rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft File: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft (raw, json) Hash identifier: KICB/sElBvX/f7f3gGz/SjGishnkZgGfBE4aTs/D428= Subject key identifier: C2:F8:EA:93:B0:AB:DA:02:57:8A:F4:D5:63:C7:38:6E:78:32:32:EE Authority key identifier: 21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 Certificate issuer: /CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Certificate serial: 3F7746F3EBC666C6410873F4CE4C124E88DBE99C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft Manifest number: BC Signing time: Sat 26 Sep 2026 01:44:55 +0000 Manifest this update: Sat 26 Sep 2026 01:39:55 +0000 Manifest next update: Sun 27 Sep 2026 03:27:55 +0000 Files and hashes: 1: 3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa (hash: yNF0rjdZhiThfjXcp9q9ny7hpelDoujpqo41tWTYbEo=) 2: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl (hash: tos1HW9sRB1bHDxhaKYuCy8ZIXZV5WwrHawxSj+0Rcg=) 3: 3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa (hash: AS3qH/RjBUke7M3rlCKwKKx7OXc4/iKqzu9OBdcpsSg=) 4: 3130332e3131372e3133322e302f32332d3234203d3e203231383539.roa (hash: V7xrPLp5f+XdiNXnNwOKJbYVBx4iv5pqsU5W1y0I9ac=) 5: 3130332e3131372e3133322e302f32332d3234203d3e2039363737.roa (hash: L4VMPfmAF+ujWD/W3Q/uT3gBZ3GdNZkDF1QTrHGw11I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 03:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:77:46:f3:eb:c6:66:c6:41:08:73:f4:ce:4c:12:4e:88:db:e9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Validity Not Before: Sep 26 01:39:55 2026 GMT Not After : Sep 27 03:27:55 2026 GMT Subject: CN=C2F8EA93B0ABDA02578AF4D563C7386E783232EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:91:1b:c3:d0:a9:bd:2b:bd:47:2c:c8:4d:05: 7e:92:2c:de:9d:08:f8:d1:74:ef:db:00:cd:6d:af: b0:fa:fb:3e:e8:a0:f2:38:31:03:78:a6:6e:ab:9a: 06:5a:51:65:2e:9f:00:fe:80:64:8b:b7:e3:a5:b2: ec:37:b0:5a:56:06:65:15:a9:9a:f2:a5:49:27:11: 68:cb:a8:69:88:bd:c0:12:61:61:80:f6:34:c7:ab: c7:62:f9:d6:f0:46:72:72:48:b3:11:5f:ae:1f:b6: 8b:64:1c:ed:c8:a3:57:62:cf:69:a5:8b:27:66:94: 69:67:30:fc:08:d0:a2:11:d7:19:2f:7e:e8:01:bf: 42:a6:77:ab:0e:b4:74:b9:6d:fe:ec:36:ea:1c:91: 62:07:91:a4:95:62:5e:75:b0:c0:24:48:5a:82:c0: 1f:f8:0f:89:74:2c:47:e9:be:a0:98:bd:69:e4:8f: 35:55:b9:9c:fa:88:05:9b:9f:55:36:ce:6e:be:04: 38:b4:50:17:96:52:48:1f:14:cb:f1:53:71:db:b0: f0:d9:0c:de:9b:0a:72:d9:56:ae:35:f4:ad:b8:8f: 7b:70:98:b8:6b:36:f4:9a:e1:99:4f:58:12:82:45: bf:4a:56:14:b9:6d:21:a7:35:61:9b:a5:a6:fc:cf: 8c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F8:EA:93:B0:AB:DA:02:57:8A:F4:D5:63:C7:38:6E:78:32:32:EE X509v3 Authority Key Identifier: keyid:21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5c:6d:9d:d9:94:ef:a7:4c:d8:9c:ea:82:45:9a:f9:bd:00: 1c:ea:cf:de:68:93:f4:d4:f4:18:4d:ff:02:19:fa:38:cd:c4: f0:ed:b0:cc:36:6f:36:f3:cc:7b:f7:7d:b3:23:79:c0:82:8c: 01:71:43:3d:14:30:1e:2f:cf:86:99:8e:1e:bc:95:1b:20:7c: d5:f1:ce:b3:5b:ee:b0:b8:67:4b:5f:03:0a:48:b9:cb:a5:8f: 1e:8a:f2:00:57:94:0f:a9:ac:59:1b:ad:d0:aa:c5:34:42:75: a9:07:71:69:a8:60:ee:6a:13:06:74:dc:07:79:67:bd:85:2f: a3:4e:00:52:52:88:dd:c2:4b:07:7d:25:cc:00:f6:d8:b3:25: c6:7e:88:f5:c5:d2:c7:aa:97:f5:67:b2:2f:8a:d6:42:48:b9: 7d:69:65:0e:80:76:68:44:3c:ad:79:1a:a5:91:e2:31:38:3a: 9a:9b:99:ba:3a:cf:e9:cc:a6:4f:fe:5a:7a:67:33:7b:87:eb: 4e:bb:28:49:38:27:4d:22:4d:55:d9:3b:bf:09:a5:d7:46:4b: 97:af:2e:c2:2c:4a:18:97:b4:aa:66:13:6d:4b:7e:65:4f:43: ff:e2:1a:ff:78:85:57:ae:e2:53:c9:a9:9e:c9:05:2a:6f:42: b1:43:95:58 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUP3dG8+vGZsZBCHP0zkwSTojb6ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQz RkNGQjVCMzAeFw0yNjA5MjYwMTM5NTVaFw0yNjA5MjcwMzI3NTVaMDMxMTAvBgNV BAMTKEMyRjhFQTkzQjBBQkRBMDI1NzhBRjRENTYzQzczODZFNzgzMjMyRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnkRvD0Km9K71HLMhNBX6SLN6d CPjRdO/bAM1tr7D6+z7ooPI4MQN4pm6rmgZaUWUunwD+gGSLt+Olsuw3sFpWBmUV qZrypUknEWjLqGmIvcASYWGA9jTHq8di+dbwRnJySLMRX64ftotkHO3Io1diz2ml iydmlGlnMPwI0KIR1xkvfugBv0Kmd6sOtHS5bf7sNuockWIHkaSVYl51sMAkSFqC wB/4D4l0LEfpvqCYvWnkjzVVuZz6iAWbn1U2zm6+BDi0UBeWUkgfFMvxU3HbsPDZ DN6bCnLZVq419K24j3twmLhrNvSa4ZlPWBKCRb9KVhS5bSGnNWGbpab8z4x3AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUwvjqk7Cr2gJXivTVY8c4bngyMu4wHwYDVR0j BBgwFoAUIbYtYOGrU4A7IpzPg8F5/T/PtbMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAv MjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yMUI2MkQ2MEUxQUI1MzgwM0IyMjlDQ0Y4M0MxNzlG RDNGQ0ZCNUIzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAvMjFCNjJENjBFMUFCNTM4MDNC MjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD9cbZ3ZlO+nTNic6oJF mvm9ABzqz95ok/TU9BhN/wIZ+jjNxPDtsMw2bzbzzHv3fbMjecCCjAFxQz0UMB4v z4aZjh68lRsgfNXxzrNb7rC4Z0tfAwpIuculjx6K8gBXlA+prFkbrdCqxTRCdakH cWmoYO5qEwZ03Ad5Z72FL6NOAFJSiN3CSwd9JcwA9tizJcZ+iPXF0seql/Vnsi+K 1kJIuX1pZQ6AdmhEPK15GqWR4jE4Opqbmbo6z+nMpk/+WnpnM3uH6067KEk4J00i TVXZO78JpddGS5evLsIsShiXtKpmE21LfmVPQ//iGv94hVeu4lPJqZ7JBSpvQrFD lVg= -----END CERTIFICATE-----Generated at Sat Sep 26 14:18:57 2026 by rpki-client