$ rpki-client -vvvf rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft File: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft (raw, json) Hash identifier: XRJpQ28Xabi6z84MRQaG5xIkiMZxOnVLgesj1nKQp/A= Subject key identifier: 18:40:D1:9B:94:1C:74:AE:CC:72:01:BF:0C:D6:CA:16:1B:35:86:C7 Authority key identifier: 5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E Certificate issuer: /CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Certificate serial: 2F24D0C0F928660259E0998AD2824316F57358A5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft Manifest number: FF Signing time: Sat 14 Nov 2026 18:24:02 +0000 Manifest this update: Sat 14 Nov 2026 18:19:02 +0000 Manifest next update: Sun 15 Nov 2026 21:46:02 +0000 Files and hashes: 1: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl (hash: HhgZPK/6cdfuu+kJ1pnLlDeobaROp5riYOEETkdXxsQ=) 2: 3130332e3133302e34382e302f32322d3234203d3e2037343832.roa (hash: 1XWO79v70d0DECH7Xj/kPutEjOsPSVEabfarX+KunFQ=) 3: 323430333a623334303a3a2f33322d3332203d3e2037343832.roa (hash: hiAMshIFeOvfI56eDRx+E/hRaz9fkWvi1Lc3t0AuAEM=) 4: 323430333a623334303a3a2f33322d3332203d3e2039393232.roa (hash: gstqBh9leADrly9mEk8JDvYH97tC5t4YGpfgybnlAak=) 5: 3130332e3133302e34382e302f32322d3234203d3e2039393232.roa (hash: aCIxecjNLFEVzEOiCgmZ0K9yJGY1pe87ewnv5AFzkXs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:24:d0:c0:f9:28:66:02:59:e0:99:8a:d2:82:43:16:f5:73:58:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Validity Not Before: Nov 14 18:19:02 2026 GMT Not After : Nov 15 21:46:02 2026 GMT Subject: CN=1840D19B941C74AECC7201BF0CD6CA161B3586C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:17:54:f6:0a:70:05:fa:e9:09:d7:73:01: e7:0f:f9:9e:fb:a1:8c:51:6f:87:55:41:89:d4:e2: 78:41:9a:6f:b7:08:ca:47:53:36:4e:5e:bc:a3:85: 06:82:73:4d:74:ca:d2:23:00:95:ba:79:a0:c7:06: c2:93:6f:0a:a6:ea:52:96:8f:25:4f:e6:e7:d1:9b: e1:bc:f1:73:a1:86:d6:b4:5b:af:4c:0b:21:02:db: 5a:77:fe:21:09:63:36:46:52:de:9f:a9:9f:9e:9d: 83:a6:32:95:f2:f7:3a:d5:97:4d:98:b1:a5:34:10: 7e:5f:69:ae:28:c0:91:98:1c:12:0a:6c:e3:f8:1b: 68:a8:3b:35:db:b0:03:aa:84:74:63:4e:dc:93:2e: 87:ba:e5:aa:3e:64:97:28:e2:29:77:f7:a4:78:51: c1:0d:a6:34:c0:2a:46:9e:b3:b0:13:65:04:df:b8: 68:12:99:ce:ff:d1:64:02:5f:7b:74:15:ef:ae:4b: bf:f9:87:2a:8a:5a:c9:6b:aa:0b:5e:c9:1e:86:39: 95:f5:12:a2:d8:97:32:21:0a:02:fa:c0:38:56:cd: bf:b8:69:10:c9:f9:04:03:71:3e:e0:5b:e7:ee:48: fd:71:c7:8c:6d:b8:2f:ba:ad:90:30:b7:bc:d1:6c: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:40:D1:9B:94:1C:74:AE:CC:72:01:BF:0C:D6:CA:16:1B:35:86:C7 X509v3 Authority Key Identifier: keyid:5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d4:4f:80:a6:14:e9:b2:d6:9b:f1:ec:29:22:fb:2a:de:c7: e0:c2:8c:23:bf:eb:d4:43:46:00:41:30:75:b5:ce:cc:04:29: d1:ea:51:f9:b9:7a:4c:eb:97:46:36:ae:2f:b6:f0:8e:ef:9b: 4e:85:e2:3d:88:27:0d:45:35:81:78:90:95:2e:a1:e5:69:8f: 21:ef:03:a0:66:fb:16:0b:d8:1c:a6:97:5b:22:12:c6:00:82: c2:24:b5:fa:fb:bc:23:04:54:b1:bb:a7:f2:38:85:4b:75:50: 31:32:61:0e:03:64:3a:ab:ca:d3:be:a6:ed:3d:a3:82:1a:ad: 96:6a:75:48:5e:3d:e3:8e:37:f2:4a:f0:d5:11:e0:5a:fc:80: 04:d0:ed:1e:0a:ea:89:80:a0:87:19:42:ae:e5:44:60:dd:7a: e5:72:92:57:80:af:3a:03:b5:d3:bf:42:bf:23:54:a5:16:31: a8:80:42:37:7e:e0:1c:e1:75:4d:3c:ef:b5:b9:ad:0a:28:f2: f4:5f:c3:8e:3c:cc:d0:57:29:57:c0:29:65:4d:56:9b:c0:cf: 29:35:39:d5:e3:84:bc:d7:3d:bb:5f:51:47:96:01:c8:94:2b: 52:31:3b:1c:c8:a8:be:1e:d3:a4:a5:1a:bc:d0:71:aa:ee:29: 99:5d:ed:e9 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIULyTQwPkoZgJZ4JmK0oJDFvVzWKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVD NTg4QkE5RTAeFw0yNjExMTQxODE5MDJaFw0yNjExMTUyMTQ2MDJaMDMxMTAvBgNV BAMTKDE4NDBEMTlCOTQxQzc0QUVDQzcyMDFCRjBDRDZDQTE2MUIzNTg2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQRdU9gpwBfrpCddzAecP+Z77 oYxRb4dVQYnU4nhBmm+3CMpHUzZOXryjhQaCc010ytIjAJW6eaDHBsKTbwqm6lKW jyVP5ufRm+G88XOhhta0W69MCyEC21p3/iEJYzZGUt6fqZ+enYOmMpXy9zrVl02Y saU0EH5faa4owJGYHBIKbOP4G2ioOzXbsAOqhHRjTtyTLoe65ao+ZJco4il396R4 UcENpjTAKkaes7ATZQTfuGgSmc7/0WQCX3t0Fe+uS7/5hyqKWslrqgteyR6GOZX1 EqLYlzIhCgL6wDhWzb+4aRDJ+QQDcT7gW+fuSP1xx4xtuC+6rZAwt7zRbBLxAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUGEDRm5QcdK7McgG/DNbKFhs1hscwHwYDVR0j BBgwFoAUWivuJDlbNvT/qVdT9nMVFcWIup4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVU LzAvNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS81QTJCRUUyNDM5NUIzNkY0RkZBOTU3NTNGNjcz MTUxNUM1ODhCQTlFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVULzAvNUEyQkVFMjQzOTVC MzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAALUT4CmFOmy 1pvx7Cki+yrex+DCjCO/69RDRgBBMHW1zswEKdHqUfm5ekzrl0Y2ri+28I7vm06F 4j2IJw1FNYF4kJUuoeVpjyHvA6Bm+xYL2Byml1siEsYAgsIktfr7vCMEVLG7p/I4 hUt1UDEyYQ4DZDqrytO+pu09o4IarZZqdUhePeOON/JK8NUR4Fr8gATQ7R4K6omA oIcZQq7lRGDdeuVykleArzoDtdO/Qr8jVKUWMaiAQjd+4BzhdU0877W5rQoo8vRf w448zNBXKVfAKWVNVpvAzyk1OdXjhLzXPbtfUUeWAciUK1IxOxzIqL4e06SlGrzQ caruKZld7ek= -----END CERTIFICATE-----Generated at Sun Nov 15 02:05:43 2026 by rpki-client