$ rpki-client -vvvf rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft File: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft (raw, json) Hash identifier: GtEAwaZ4U/Msn6iARhmNa0z3QmBQfYfcji138aHJ+4s= Subject key identifier: 1F:E8:AC:D6:EF:66:4F:8C:C3:EE:AB:BD:16:51:26:EE:DB:F6:A3:30 Authority key identifier: 5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E Certificate issuer: /CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Certificate serial: 0648A919373D19F63F41115CB52724B55065FFBD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft Manifest number: BA Signing time: Wed 23 Sep 2026 21:53:17 +0000 Manifest this update: Wed 23 Sep 2026 21:48:17 +0000 Manifest next update: Fri 25 Sep 2026 00:55:17 +0000 Files and hashes: 1: 323430333a623334303a3a2f33322d3332203d3e2037343832.roa (hash: hiAMshIFeOvfI56eDRx+E/hRaz9fkWvi1Lc3t0AuAEM=) 2: 3130332e3133302e34382e302f32322d3234203d3e2037343832.roa (hash: 1XWO79v70d0DECH7Xj/kPutEjOsPSVEabfarX+KunFQ=) 3: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl (hash: 3SW3Px3odJLwHtNXoi+md208CYfdu1Rtgzn9a9qqPuA=) 4: 3130332e3133302e34382e302f32322d3234203d3e2039393232.roa (hash: aCIxecjNLFEVzEOiCgmZ0K9yJGY1pe87ewnv5AFzkXs=) 5: 323430333a623334303a3a2f33322d3332203d3e2039393232.roa (hash: gstqBh9leADrly9mEk8JDvYH97tC5t4YGpfgybnlAak=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:48:a9:19:37:3d:19:f6:3f:41:11:5c:b5:27:24:b5:50:65:ff:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Validity Not Before: Sep 23 21:48:17 2026 GMT Not After : Sep 25 00:55:17 2026 GMT Subject: CN=1FE8ACD6EF664F8CC3EEABBD165126EEDBF6A330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3d:85:f2:ff:35:f9:73:9a:0b:fa:5d:86:31: 99:8a:e9:59:b6:a7:ee:0d:4e:b0:31:3d:e4:f6:2c: b5:ad:55:b4:0f:7b:58:2b:ef:e0:ff:5f:51:d6:02: fd:65:6e:c6:16:f1:c7:83:5f:f3:72:46:61:43:60: 1e:66:93:c1:75:85:eb:75:d8:fb:3b:d3:c6:4a:41: db:3f:b2:f1:0b:37:bb:75:1d:22:7f:70:10:1a:3f: 75:86:b8:44:74:6b:d3:1f:e8:8f:ac:fa:27:43:d5: cd:91:43:93:fa:13:30:34:0f:f6:9d:70:7d:32:71: 6c:a9:6b:65:25:57:3d:74:76:98:d8:c7:4b:a0:d2: 2f:ea:b6:7e:08:4f:51:a5:b9:09:22:35:a3:2a:3e: 85:1c:87:32:f7:dc:13:b9:dd:ac:ac:3e:fa:1e:b4: f8:bd:3d:5d:74:bb:d5:b4:ff:f1:80:39:a3:6c:04: 35:24:db:39:be:4f:59:fd:13:ee:f8:76:ab:83:fe: 2b:93:ef:e5:5a:08:22:6c:a1:8a:9c:d2:3a:54:50: 76:dc:45:2a:54:dd:6d:7e:85:21:4e:59:89:7d:fe: 69:40:59:db:42:b0:41:6a:95:76:27:86:f5:57:fd: e8:73:16:3b:f2:5d:d6:fa:92:7e:cd:42:38:2a:5c: d8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E8:AC:D6:EF:66:4F:8C:C3:EE:AB:BD:16:51:26:EE:DB:F6:A3:30 X509v3 Authority Key Identifier: keyid:5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6f:4e:7c:f2:b9:8a:4e:35:16:24:04:90:7d:79:b7:a2:b5: 75:fd:30:af:72:0c:b2:c0:ed:38:60:a3:d3:61:fc:16:b1:cc: 32:ed:74:8a:83:04:52:cc:47:c4:78:ea:23:76:d3:08:f7:c3: e0:73:a9:99:ff:99:5a:c8:45:8f:2a:38:4a:b2:21:a9:07:aa: e7:0e:74:90:36:07:c9:d9:1b:f6:eb:99:62:c5:1f:a1:5f:60: 22:9b:d0:8b:07:33:b6:6f:ef:96:69:ed:66:84:fc:48:eb:09: 86:87:4a:38:60:ce:85:6a:ff:bf:33:d7:d5:ad:ec:95:50:f3: 70:33:63:ee:87:98:de:e3:14:f0:3b:b3:13:50:d0:23:cb:10: 7c:71:d7:d3:65:b1:ac:c5:22:c1:1d:dc:06:7c:58:36:2e:72: 7d:7b:49:42:72:99:aa:fb:49:13:33:44:6c:8e:fc:90:e3:e7: 09:92:f9:9c:59:9e:47:7d:4a:b1:25:84:c1:8d:8e:99:54:ec: bc:35:d3:07:f3:47:6c:b8:e5:12:29:a9:03:54:9d:6e:dd:d6: 4f:6a:1b:cb:01:98:d5:ba:21:44:57:c4:3b:75:55:49:56:21: 97:14:1c:8c:86:bf:b3:78:77:a5:b8:05:18:5a:77:87:4e:60: f7:89:c9:b4 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUBkipGTc9GfY/QRFctScktVBl/70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVD NTg4QkE5RTAeFw0yNjA5MjMyMTQ4MTdaFw0yNjA5MjUwMDU1MTdaMDMxMTAvBgNV BAMTKDFGRThBQ0Q2RUY2NjRGOENDM0VFQUJCRDE2NTEyNkVFREJGNkEzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFPYXy/zX5c5oL+l2GMZmK6Vm2 p+4NTrAxPeT2LLWtVbQPe1gr7+D/X1HWAv1lbsYW8ceDX/NyRmFDYB5mk8F1het1 2Ps708ZKQds/svELN7t1HSJ/cBAaP3WGuER0a9Mf6I+s+idD1c2RQ5P6EzA0D/ad cH0ycWypa2UlVz10dpjYx0ug0i/qtn4IT1GluQkiNaMqPoUchzL33BO53aysPvoe tPi9PV10u9W0//GAOaNsBDUk2zm+T1n9E+74dquD/iuT7+VaCCJsoYqc0jpUUHbc RSpU3W1+hSFOWYl9/mlAWdtCsEFqlXYnhvVX/ehzFjvyXdb6kn7NQjgqXNgHAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUH+is1u9mT4zD7qu9FlEm7tv2ozAwHwYDVR0j BBgwFoAUWivuJDlbNvT/qVdT9nMVFcWIup4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVU LzAvNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS81QTJCRUUyNDM5NUIzNkY0RkZBOTU3NTNGNjcz MTUxNUM1ODhCQTlFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVULzAvNUEyQkVFMjQzOTVC MzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE1vTnzyuYpO NRYkBJB9ebeitXX9MK9yDLLA7Thgo9Nh/BaxzDLtdIqDBFLMR8R46iN20wj3w+Bz qZn/mVrIRY8qOEqyIakHqucOdJA2B8nZG/brmWLFH6FfYCKb0IsHM7Zv75Zp7WaE /EjrCYaHSjhgzoVq/78z19Wt7JVQ83AzY+6HmN7jFPA7sxNQ0CPLEHxx19NlsazF IsEd3AZ8WDYucn17SUJymar7SRMzRGyO/JDj5wmS+ZxZnkd9SrElhMGNjplU7Lw1 0wfzR2y45RIpqQNUnW7d1k9qG8sBmNW6IURXxDt1VUlWIZcUHIyGv7N4d6W4BRha d4dOYPeJybQ= -----END CERTIFICATE-----Generated at Thu Sep 24 18:49:30 2026 by rpki-client