$ rpki-client -vvvf rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft File: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft (raw, json) Hash identifier: AF3MjRx4X9vQP1oM9L2ggHXsoSsLUl3K9kNJGm0xZKY= Subject key identifier: D0:0C:3E:33:F6:D7:E3:27:3A:49:2C:CB:1F:53:81:12:9C:B3:3C:1B Authority key identifier: 5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E Certificate issuer: /CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Certificate serial: 217FE96931974731F0C46BF4B55B40345EA58A88 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft Manifest number: BB Signing time: Thu 24 Sep 2026 16:55:38 +0000 Manifest this update: Thu 24 Sep 2026 16:50:38 +0000 Manifest next update: Fri 25 Sep 2026 19:56:38 +0000 Files and hashes: 1: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl (hash: 709mejO9FlSL1A3XKCTrGktNidnoAb3pIRnz0kMDMtE=) 2: 3130332e3133302e34382e302f32322d3234203d3e2039393232.roa (hash: aCIxecjNLFEVzEOiCgmZ0K9yJGY1pe87ewnv5AFzkXs=) 3: 323430333a623334303a3a2f33322d3332203d3e2037343832.roa (hash: hiAMshIFeOvfI56eDRx+E/hRaz9fkWvi1Lc3t0AuAEM=) 4: 3130332e3133302e34382e302f32322d3234203d3e2037343832.roa (hash: 1XWO79v70d0DECH7Xj/kPutEjOsPSVEabfarX+KunFQ=) 5: 323430333a623334303a3a2f33322d3332203d3e2039393232.roa (hash: gstqBh9leADrly9mEk8JDvYH97tC5t4YGpfgybnlAak=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7f:e9:69:31:97:47:31:f0:c4:6b:f4:b5:5b:40:34:5e:a5:8a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Validity Not Before: Sep 24 16:50:38 2026 GMT Not After : Sep 25 19:56:38 2026 GMT Subject: CN=D00C3E33F6D7E3273A492CCB1F5381129CB33C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:a6:32:22:54:59:a5:15:f6:e9:89:f1:6b: 4c:e6:d1:30:5b:58:8c:0a:be:98:e6:4b:06:42:d0: 61:35:e9:67:f9:a6:fc:cf:8e:68:27:c1:84:8a:1d: 36:37:e8:25:f6:8f:23:3d:a8:e6:b9:db:41:db:2f: c8:f0:40:ec:e0:57:7d:5b:e7:a8:f1:0b:e1:14:78: e6:17:b6:a3:55:71:d0:23:95:b9:89:40:0b:19:a6: fd:c9:8f:05:e3:66:59:92:70:3a:59:42:b8:77:34: d0:81:f6:40:0d:3f:d8:bc:93:5c:a8:83:a6:02:4c: b6:6f:c6:10:0e:86:3e:ec:b9:1b:f5:e6:14:5d:77: fb:80:ce:4c:2c:c9:3a:f6:b2:2d:2f:2f:db:7e:7d: ce:a2:e6:9d:0d:ac:b6:fc:da:bd:91:24:ec:d4:eb: c8:7a:4b:85:c8:56:04:37:68:91:80:d4:d7:84:00: ba:38:f8:7c:2e:23:d4:56:79:3a:c5:01:a4:f7:fe: b7:98:72:b3:20:94:fe:b0:f7:59:a1:3b:e5:2f:3e: 92:98:89:cc:26:c0:3e:8f:9b:b6:e5:9b:b8:99:85: 33:53:5b:d8:ae:66:7e:47:e5:11:f5:a6:4a:4a:17: e1:db:97:2b:8f:d8:ac:80:f4:7c:2d:03:91:35:7e: 4a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0C:3E:33:F6:D7:E3:27:3A:49:2C:CB:1F:53:81:12:9C:B3:3C:1B X509v3 Authority Key Identifier: keyid:5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:84:75:ca:f8:70:65:7c:03:a1:58:cf:a1:ba:13:15:90:be: c0:05:b7:ef:3c:7a:1e:1a:16:e2:21:d7:59:ff:bc:56:38:49: 39:c7:96:3f:85:cc:bd:48:0d:36:07:9d:f8:6d:65:74:dd:bf: 9a:75:2b:1b:d8:51:ee:c4:00:03:6f:d1:3a:d3:e3:a0:77:0c: 33:90:09:de:34:ac:3d:7f:c8:97:2b:e9:18:64:98:dd:7d:65: 64:2a:c2:cb:ce:03:0f:2a:78:ed:aa:dd:7f:cb:f8:48:e1:50: eb:4a:1e:75:44:18:bf:11:65:cb:38:45:e9:0d:a0:fc:04:4e: d6:7a:43:ad:8a:17:77:89:5e:5c:71:ee:34:93:c9:1d:66:6c: 13:31:20:06:1b:5e:ab:f9:1d:1e:c8:2b:24:31:ad:a8:60:26: 8d:77:17:c0:8f:0a:84:ee:73:0f:c0:66:42:3d:46:5c:4a:d7: 5d:5e:c9:09:c9:ee:d3:a4:44:d8:bf:98:a2:b0:c5:ee:6d:bb: 1b:4a:17:51:d8:91:db:24:57:42:7b:2e:b3:e3:dd:e4:b9:46: fc:68:c3:64:7a:b5:8a:14:69:42:52:f9:31:20:aa:ad:3e:98: d8:cd:46:1d:13:c8:44:f2:16:6c:5a:1e:9b:b0:40:d9:c5:86: 19:7e:18:4a -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUIX/paTGXRzHwxGv0tVtANF6liogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVD NTg4QkE5RTAeFw0yNjA5MjQxNjUwMzhaFw0yNjA5MjUxOTU2MzhaMDMxMTAvBgNV BAMTKEQwMEMzRTMzRjZEN0UzMjczQTQ5MkNDQjFGNTM4MTEyOUNCMzNDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4G6YyIlRZpRX26Ynxa0zm0TBb WIwKvpjmSwZC0GE16Wf5pvzPjmgnwYSKHTY36CX2jyM9qOa520HbL8jwQOzgV31b 56jxC+EUeOYXtqNVcdAjlbmJQAsZpv3JjwXjZlmScDpZQrh3NNCB9kANP9i8k1yo g6YCTLZvxhAOhj7suRv15hRdd/uAzkwsyTr2si0vL9t+fc6i5p0NrLb82r2RJOzU 68h6S4XIVgQ3aJGA1NeEALo4+HwuI9RWeTrFAaT3/reYcrMglP6w91mhO+UvPpKY icwmwD6Pm7blm7iZhTNTW9iuZn5H5RH1pkpKF+HblyuP2KyA9HwtA5E1fkp7AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU0Aw+M/bX4yc6SSzLH1OBEpyzPBswHwYDVR0j BBgwFoAUWivuJDlbNvT/qVdT9nMVFcWIup4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVU LzAvNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS81QTJCRUUyNDM5NUIzNkY0RkZBOTU3NTNGNjcz MTUxNUM1ODhCQTlFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVULzAvNUEyQkVFMjQzOTVC MzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANiEdcr4cGV8 A6FYz6G6ExWQvsAFt+88eh4aFuIh11n/vFY4STnHlj+FzL1IDTYHnfhtZXTdv5p1 KxvYUe7EAANv0TrT46B3DDOQCd40rD1/yJcr6RhkmN19ZWQqwsvOAw8qeO2q3X/L +EjhUOtKHnVEGL8RZcs4RekNoPwETtZ6Q62KF3eJXlxx7jSTyR1mbBMxIAYbXqv5 HR7IKyQxrahgJo13F8CPCoTucw/AZkI9RlxK111eyQnJ7tOkRNi/mKKwxe5tuxtK F1HYkdskV0J7LrPj3eS5Rvxow2R6tYoUaUJS+TEgqq0+mNjNRh0TyETyFmxaHpuw QNnFhhl+GEo= -----END CERTIFICATE-----Generated at Thu Sep 24 20:51:00 2026 by rpki-client