$ rpki-client -vvvf rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft File: AAED3548B647C9B95804411BAB19736F229C5A54.mft (raw, json) Hash identifier: 9Of2Zk+nmkNCNqusdhl0ksmgPb02yF0QUz8nUD4RigM= Subject key identifier: 63:BB:E9:A7:94:68:96:72:4E:66:C2:5E:26:D7:D8:74:9A:34:C2:89 Authority key identifier: AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54 Certificate issuer: /CN=AAED3548B647C9B95804411BAB19736F229C5A54 Certificate serial: 5CE0C27C885CD05C2724A5517E0A2B623E11D067 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 16:35:38 +0000 Manifest this update: Thu 24 Sep 2026 16:30:38 +0000 Manifest next update: Fri 25 Sep 2026 18:56:38 +0000 Files and hashes: 1: AAED3548B647C9B95804411BAB19736F229C5A54.crl (hash: Y8Bpxls3Ql7KwhEI8smMK5mxGEPJJXzfECI85tZ5EKw=) 2: 3231312e37362e302e302f31392d3139203d3e2037343738.roa (hash: kS4UeB9bSZUO5PaEgviQEGNKSk9y0LCLxXLeAUQgMz0=) 3: 3231302e3234342e3139322e302f31392d3230203d3e2037343738.roa (hash: W335AiMtYbmtyFJ/6qInNtRm+Ld5a3fuzl0Q/nTZ7Xs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 18:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e0:c2:7c:88:5c:d0:5c:27:24:a5:51:7e:0a:2b:62:3e:11:d0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAED3548B647C9B95804411BAB19736F229C5A54 Validity Not Before: Sep 24 16:30:38 2026 GMT Not After : Sep 25 18:56:38 2026 GMT Subject: CN=63BBE9A7946896724E66C25E26D7D8749A34C289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:1b:2d:a1:97:d2:2d:51:11:97:72:4c:1a: 38:01:12:5d:91:0a:43:28:d4:b7:3f:86:6b:49:9c: 45:d5:1a:03:bc:2a:5c:28:90:3b:38:13:ce:0e:fe: 5e:3a:36:17:97:e7:39:9b:1e:5f:2c:60:aa:02:17: ef:a0:af:83:ba:f2:ca:58:ff:c4:4c:ee:cd:88:71: 37:d0:5e:a1:ca:fb:99:e0:ac:c6:53:6c:f9:e3:45: 9d:32:35:99:22:57:03:61:2d:4c:ec:c1:79:00:16: 61:9d:f7:95:0d:25:a5:ea:a0:e0:5a:28:54:c4:d2: 9e:04:51:36:1b:f8:b7:ab:c5:ac:05:34:b2:53:3d: 65:68:63:a9:7f:48:07:fe:d1:d8:86:20:90:25:ce: 6f:02:87:63:b7:a0:bd:de:98:e4:4b:00:9d:42:47: 64:5c:c4:31:71:2e:98:fa:1b:4f:c7:5a:da:59:e4: c9:e4:19:59:04:14:cf:56:b1:8f:8d:da:99:90:5b: 3e:f8:dd:18:0d:93:50:a9:b9:6b:5a:7c:ce:6f:d5: 2b:bf:cd:21:df:fe:8b:04:26:11:75:9d:93:48:71: 7e:bd:39:0d:f1:a6:96:fb:c1:b0:de:b0:4a:da:db: 5a:b0:d3:25:18:57:32:c5:e0:0a:45:a6:86:f1:9a: 0e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BB:E9:A7:94:68:96:72:4E:66:C2:5E:26:D7:D8:74:9A:34:C2:89 X509v3 Authority Key Identifier: keyid:AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3d:0b:b1:d8:7a:08:8c:09:11:04:0f:c7:62:12:0e:9c:b9: 26:82:5c:a7:8e:63:39:4a:a8:66:1e:11:17:8b:a8:7f:4f:f3: 91:60:91:ba:07:d8:fd:25:ab:77:01:80:45:c4:bf:ec:24:22: 95:51:37:e7:db:1f:c7:5f:45:de:29:74:94:bb:da:54:70:0b: 5e:09:46:34:be:91:c1:25:ca:b2:90:25:a6:00:ba:22:7c:5f: f6:03:1a:1c:e2:90:92:91:b5:43:53:96:b8:3d:00:9c:6d:58: e6:ee:a1:b8:fe:da:81:a0:04:a0:c9:eb:32:76:4c:1f:08:f3: bd:15:c0:91:ff:1d:49:a3:86:66:45:ef:a4:ce:9b:46:cc:8e: 76:89:4e:89:f6:a6:cf:61:34:f0:5c:92:09:66:3e:bd:9b:a3: 82:f4:4a:0b:7d:17:d1:d7:97:56:79:df:b7:bb:c6:fd:0c:4e: d5:24:50:28:b5:7c:93:f7:3c:d1:c5:a4:9d:55:3b:b6:19:f4: 89:e4:70:7a:10:c1:47:11:bf:c2:db:bd:c3:0b:d3:bd:05:e5: d9:ee:0a:6c:d3:4d:bb:0b:cf:cb:f5:81:c0:42:2a:a8:7b:5d: 68:66:24:6f:53:c9:34:4e:d3:6a:35:90:85:52:eb:3b:f0:68: b5:51:0b:9b -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUXODCfIhc0FwnJKVRfgorYj4R0GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYy MjlDNUE1NDAeFw0yNjA5MjQxNjMwMzhaFw0yNjA5MjUxODU2MzhaMDMxMTAvBgNV BAMTKDYzQkJFOUE3OTQ2ODk2NzI0RTY2QzI1RTI2RDdEODc0OUEzNEMyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlRstoZfSLVERl3JMGjgBEl2R CkMo1Lc/hmtJnEXVGgO8KlwokDs4E84O/l46NheX5zmbHl8sYKoCF++gr4O68spY /8RM7s2IcTfQXqHK+5ngrMZTbPnjRZ0yNZkiVwNhLUzswXkAFmGd95UNJaXqoOBa KFTE0p4EUTYb+LerxawFNLJTPWVoY6l/SAf+0diGIJAlzm8Ch2O3oL3emORLAJ1C R2RcxDFxLpj6G0/HWtpZ5MnkGVkEFM9WsY+N2pmQWz743RgNk1CpuWtafM5v1Su/ zSHf/osEJhF1nZNIcX69OQ3xppb7wbDesEra21qw0yUYVzLF4ApFpobxmg53AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUY7vpp5RolnJOZsJeJtfYdJo0wokwHwYDVR0j BBgwFoAUqu01SLZHyblYBEEbqxlzbyKcWlQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAv QUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9BQUVEMzU0OEI2NDdDOUI5NTgwNDQxMUJBQjE5NzM2 RjIyOUM1QTU0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAvQUFFRDM1NDhCNjQ3QzlCOTU4 MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFo9C7HYegiMCREED8di Eg6cuSaCXKeOYzlKqGYeEReLqH9P85FgkboH2P0lq3cBgEXEv+wkIpVRN+fbH8df Rd4pdJS72lRwC14JRjS+kcElyrKQJaYAuiJ8X/YDGhzikJKRtUNTlrg9AJxtWObu obj+2oGgBKDJ6zJ2TB8I870VwJH/HUmjhmZF76TOm0bMjnaJTon2ps9hNPBckglm Pr2bo4L0Sgt9F9HXl1Z537e7xv0MTtUkUCi1fJP3PNHFpJ1VO7YZ9InkcHoQwUcR v8LbvcML070F5dnuCmzTTbsLz8v1gcBCKqh7XWhmJG9TyTRO02o1kIVS6zvwaLVR C5s= -----END CERTIFICATE-----Generated at Fri Sep 25 02:39:02 2026 by rpki-client