$ rpki-client -vvvf rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft File: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft (raw, json) Hash identifier: FShTza8KYiiZ34ENsaV1cT6Xq2KhKJTjP4vXb6fxBQw= Subject key identifier: 26:75:DD:3D:AE:DF:08:B4:29:5F:36:1F:00:88:AF:28:9F:FF:AC:27 Authority key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25 Certificate issuer: /CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25 Certificate serial: 442237FC62AC62E86FA324C597E63D4D2A02CE61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 14:20:04 +0000 Manifest this update: Thu 24 Sep 2026 14:15:04 +0000 Manifest next update: Fri 25 Sep 2026 16:36:04 +0000 Files and hashes: 1: 3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa (hash: sgvshajZGUxIlcU63EqLfebE4wegi3sti647jzuqblg=) 2: 3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa (hash: xeGUxts4a0IBuIHgiewir0gp38fQafeLm2d3Cwvi9SE=) 3: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl (hash: tpxeftx++9op55Hclwcllx+ZrDCKRq9PH5BKyvWY7nw=) 4: 3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa (hash: 5vM1t1el5nYZJRxVKo6mmnrOcGRvisTj4oU5YWdMajw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:22:37:fc:62:ac:62:e8:6f:a3:24:c5:97:e6:3d:4d:2a:02:ce:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25 Validity Not Before: Sep 24 14:15:04 2026 GMT Not After : Sep 25 16:36:04 2026 GMT Subject: CN=2675DD3DAEDF08B4295F361F0088AF289FFFAC27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9f:f7:7a:95:a9:b3:17:ea:4f:58:da:70:07: d6:1a:d4:e9:c8:43:91:4d:1a:ab:4b:10:f3:75:85: 9b:ee:c6:37:71:4b:11:67:98:bd:df:18:27:c2:7c: 74:fa:d6:df:fd:2d:9a:9a:31:f6:b1:1d:04:68:0b: 82:a0:b4:2d:7c:08:9d:20:07:39:fc:9e:e8:35:da: a7:c7:7d:7a:4d:c0:6c:ff:2d:a3:d7:0f:62:de:c5: f8:80:cf:1f:d2:23:79:2d:1e:4f:80:37:10:ae:ba: 70:4b:fc:47:bd:96:88:7c:6d:eb:ad:d9:18:ec:f0: 74:38:e3:16:00:84:34:4b:5b:2c:16:d6:2c:6f:00: 33:c9:1c:c3:35:c3:15:3b:5a:60:c7:f9:30:25:0a: 3a:d4:de:b4:c6:c3:39:1e:e0:b5:bd:6e:18:34:e7: fd:eb:df:85:16:68:f8:6c:a6:bc:57:b1:1c:f0:e4: 8b:1c:1f:72:ce:54:91:5d:c4:4a:51:47:62:a2:11: 8b:af:8d:09:1f:50:3f:97:77:ab:eb:c5:e0:82:a3: f3:f1:ad:37:f5:d3:64:7c:6b:25:f4:68:91:cb:c1: 67:bf:07:dc:1a:52:0e:1d:80:71:10:61:85:62:61: 1f:97:ab:7b:23:64:5c:af:9c:e6:46:d8:13:0b:7f: c8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:75:DD:3D:AE:DF:08:B4:29:5F:36:1F:00:88:AF:28:9F:FF:AC:27 X509v3 Authority Key Identifier: keyid:D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1c:0b:20:75:a3:80:e3:2c:6c:12:00:10:0e:40:79:66:5b: f6:2c:c3:18:d1:6c:49:f5:ca:74:29:83:e5:36:a8:71:fb:6a: 2d:63:b4:8a:f5:a1:85:fa:70:79:c4:52:2f:12:7b:80:8f:37: 33:44:88:b2:60:85:01:35:b4:80:8f:74:36:e7:16:6c:16:f6: b1:6a:82:1a:19:53:a5:05:8e:6e:2d:56:fa:50:a0:07:91:d7: 42:bb:1f:e6:b7:be:cc:f3:a3:94:df:ac:af:eb:01:3d:e1:18: 55:7b:82:7b:67:a4:88:29:70:f9:cd:ed:5a:3e:23:38:61:91: 85:ec:93:32:9f:e6:e6:27:f1:96:39:43:f3:34:ff:62:81:4e: a0:fb:34:a0:bc:e2:2a:1a:ef:3f:80:83:76:45:fa:3b:19:e8: a8:b0:db:06:10:64:b6:3d:ce:73:4f:fd:9e:d3:0a:f2:42:e8: 74:bb:01:72:10:68:1f:ce:8f:43:38:2a:d3:58:27:68:27:fa: 98:1b:3e:44:48:5d:9c:9b:44:78:74:21:83:df:e1:b8:21:71: 31:7c:74:f1:05:46:9d:95:74:12:43:1c:3f:1e:b2:8c:ad:95: 73:5c:1c:84:a3:6c:4e:32:1d:69:c4:68:ef:09:cd:4a:4a:4a: a7:ae:4d:89 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIURCI3/GKsYuhvoyTFl+Y9TSoCzmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkxRjZCMTdBNURGRTNCMjMzNkQxQUUzRTIzM0QxMEIy RDYyQUEyNTAeFw0yNjA5MjQxNDE1MDRaFw0yNjA5MjUxNjM2MDRaMDMxMTAvBgNV BAMTKDI2NzVERDNEQUVERjA4QjQyOTVGMzYxRjAwODhBRjI4OUZGRkFDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCan/d6lamzF+pPWNpwB9Ya1OnI Q5FNGqtLEPN1hZvuxjdxSxFnmL3fGCfCfHT61t/9LZqaMfaxHQRoC4KgtC18CJ0g Bzn8nug12qfHfXpNwGz/LaPXD2LexfiAzx/SI3ktHk+ANxCuunBL/Ee9loh8beut 2Rjs8HQ44xYAhDRLWywW1ixvADPJHMM1wxU7WmDH+TAlCjrU3rTGwzke4LW9bhg0 5/3r34UWaPhsprxXsRzw5IscH3LOVJFdxEpRR2KiEYuvjQkfUD+Xd6vrxeCCo/Px rTf102R8ayX0aJHLwWe/B9waUg4dgHEQYYViYR+Xq3sjZFyvnOZG2BMLf8hTAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUJnXdPa7fCLQpXzYfAIivKJ//rCcwHwYDVR0j BBgwFoAU2R9rF6Xf47IzbRrj4jPRCy1iqiUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJ LzEvRDkxRjZCMTdBNURGRTNCMjMzNkQxQUUzRTIzM0QxMEIyRDYyQUEyNS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC9EOTFGNkIxN0E1REZFM0IyMzM2RDFBRTNFMjMz RDEwQjJENjJBQTI1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJLzEvRDkxRjZCMTdBNURG RTNCMjMzNkQxQUUzRTIzM0QxMEIyRDYyQUEyNS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADccCyB1o4Dj LGwSABAOQHlmW/YswxjRbEn1ynQpg+U2qHH7ai1jtIr1oYX6cHnEUi8Se4CPNzNE iLJghQE1tICPdDbnFmwW9rFqghoZU6UFjm4tVvpQoAeR10K7H+a3vszzo5TfrK/r AT3hGFV7gntnpIgpcPnN7Vo+IzhhkYXskzKf5uYn8ZY5Q/M0/2KBTqD7NKC84ioa 7z+Ag3ZF+jsZ6Kiw2wYQZLY9znNP/Z7TCvJC6HS7AXIQaB/Oj0M4KtNYJ2gn+pgb PkRIXZybRHh0IYPf4bghcTF8dPEFRp2VdBJDHD8esoytlXNcHISjbE4yHWnEaO8J zUpKSqeuTYk= -----END CERTIFICATE-----Generated at Thu Sep 24 17:28:13 2026 by rpki-client