$ rpki-client -vvvf rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft File: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft (raw, json) Hash identifier: 5kifL4x7Zwaooqwm5pxIpQl8TPto4Gy3vO/TCgqx3IU= Subject key identifier: 88:D1:DA:EF:E5:61:C3:73:99:D3:83:7A:53:C7:89:10:25:A0:2D:BB Authority key identifier: 7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55 Certificate issuer: /CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55 Certificate serial: 1662D3059E04F82D9932FC7885ABF10D28289ED8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 05:17:24 +0000 Manifest this update: Thu 24 Sep 2026 05:12:24 +0000 Manifest next update: Fri 25 Sep 2026 05:22:24 +0000 Files and hashes: 1: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl (hash: sI+CckIe4VQGMloDSxdOUoy4Pc1jJ/IfFdQJeL1Fsg0=) 2: 3230322e36362e3138342e302f32332d3234203d3e20313334383233.roa (hash: lH3p+3OX/BiDzRmprhrZQaoUetVeXRdG+n2QK86mZUo=) 3: 3230322e36362e3138342e302f32332d3234203d3e20313438393936.roa (hash: cgtaS2R5qGGSPzt0Mrg5ICT2U+6ReXnIE6A4ms4mJp0=) 4: 323430323a323865303a3a2f33322d3438203d3e2039393233.roa (hash: gHs1ooQ8UXCCXGul6QZXotFYNVwq0J8g9JJdOF3VUFM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:62:d3:05:9e:04:f8:2d:99:32:fc:78:85:ab:f1:0d:28:28:9e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55 Validity Not Before: Sep 24 05:12:24 2026 GMT Not After : Sep 25 05:22:24 2026 GMT Subject: CN=88D1DAEFE561C37399D3837A53C7891025A02DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b3:a2:2a:6c:fd:0f:35:c0:34:90:0e:ae:7a: 7c:b3:13:70:6e:9d:f4:e8:7d:bc:da:fd:ba:f6:9d: 82:90:2f:7a:36:f2:ab:b5:8d:f8:29:a1:52:88:8a: 94:92:f6:67:30:1f:11:27:a6:e3:b0:60:af:22:ae: df:21:2f:09:89:4f:dd:ec:0b:2c:eb:5d:4b:c7:32: f9:8c:fb:8a:79:34:fc:6f:38:22:0e:5e:85:96:7a: 1b:ab:c6:2a:a5:1f:b0:ec:e5:67:11:fc:d1:9e:40: 1c:60:02:4d:cc:8d:3b:a2:89:be:24:d2:72:62:6e: ff:c4:d8:2d:b3:c1:45:ce:94:09:43:3d:d0:95:57: cd:f2:f1:0d:bb:02:59:97:ef:e6:4c:4f:cd:3b:eb: 3d:70:33:c5:7a:04:f7:a8:b0:24:94:b5:46:4f:6b: 1f:08:7f:11:1b:87:31:f3:d8:7f:fe:39:c4:c0:ce: 23:6a:a7:f2:ed:52:b2:9f:b8:9e:12:4d:7c:76:1c: 88:ba:0c:42:60:43:77:4f:4c:a1:11:d5:94:a3:fa: 7a:ae:16:34:3a:00:7e:a7:4f:52:2d:26:c7:45:64: 8f:d8:9b:c8:e4:5a:9f:9f:75:87:92:7c:d8:47:f6: ac:39:e6:04:3d:2a:d4:00:de:74:f8:b4:9d:1e:20: 3b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D1:DA:EF:E5:61:C3:73:99:D3:83:7A:53:C7:89:10:25:A0:2D:BB X509v3 Authority Key Identifier: keyid:7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:76:7d:6c:d7:45:f6:a7:bc:f9:55:32:6b:fd:96:dd:e3:55: cb:97:7a:dd:41:ba:3a:27:1b:9b:aa:1e:90:d1:c9:94:d3:8d: fd:bd:7f:8a:0c:25:54:19:95:cf:32:3e:89:7a:df:13:18:8f: 22:51:7d:bc:c5:35:0b:7c:e3:ec:53:45:07:75:10:84:00:e4: ed:d0:84:47:a2:25:ff:1e:ab:12:23:47:51:d2:58:66:46:e0: c0:31:17:5d:44:21:d7:e7:10:dd:71:ab:f3:29:63:4a:2b:5c: 79:3b:7a:2c:84:4b:c2:e5:15:1c:2c:5b:ab:70:a0:e3:9d:46: 80:b1:f5:0b:83:18:f7:24:01:bf:1e:33:f4:bf:a7:63:65:f4: 71:50:59:f8:eb:7c:d6:32:dc:fd:0f:42:af:be:88:f9:a5:00: 1c:9d:23:ab:83:cf:b4:24:f1:15:4a:73:c4:77:ae:2b:f8:27: 5a:ff:41:fd:07:65:57:e6:bc:bb:ea:c0:bd:d3:d9:ec:80:ba: 8a:05:25:a2:99:e1:c5:bc:81:bf:42:96:4f:e5:55:51:98:80: 5c:d5:49:95:a6:c5:e0:59:92:61:88:ac:bf:a4:e9:3c:c7:4f: 82:33:18:3c:ae:d0:2c:02:70:73:0e:8e:f1:08:dc:10:0d:1f: 9a:81:1c:a3 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUFmLTBZ4E+C2ZMvx4havxDSgontgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y3RTJFNUQyMEM3NDhCOEJFOUZERTQ0MDBFMDIzMjA1 OTc1RkQ1NTAeFw0yNjA5MjQwNTEyMjRaFw0yNjA5MjUwNTIyMjRaMDMxMTAvBgNV BAMTKDg4RDFEQUVGRTU2MUMzNzM5OUQzODM3QTUzQzc4OTEwMjVBMDJEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDps6IqbP0PNcA0kA6uenyzE3Bu nfTofbza/br2nYKQL3o28qu1jfgpoVKIipSS9mcwHxEnpuOwYK8irt8hLwmJT93s CyzrXUvHMvmM+4p5NPxvOCIOXoWWehurxiqlH7Ds5WcR/NGeQBxgAk3MjTuiib4k 0nJibv/E2C2zwUXOlAlDPdCVV83y8Q27AlmX7+ZMT8076z1wM8V6BPeosCSUtUZP ax8IfxEbhzHz2H/+OcTAziNqp/LtUrKfuJ4STXx2HIi6DEJgQ3dPTKER1ZSj+nqu FjQ6AH6nT1ItJsdFZI/Ym8jkWp+fdYeSfNhH9qw55gQ9KtQA3nT4tJ0eIDtvAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUiNHa7+Vhw3OZ04N6U8eJECWgLbswHwYDVR0j BBgwFoAUf34uXSDHSLi+n95EAOAjIFl1/VUwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTi8w LzdGN0UyRTVEMjBDNzQ4QjhCRTlGREU0NDAwRTAyMzIwNTk3NUZENTUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvN0Y3RTJFNUQyMEM3NDhCOEJFOUZERTQ0MDBFMDIz MjA1OTc1RkQ1NS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL09QRU4vMC83RjdFMkU1RDIwQzc0OEI4 QkU5RkRFNDQwMEUwMjMyMDU5NzVGRDU1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXZ9bNdF9qe8+VUy a/2W3eNVy5d63UG6Oicbm6oekNHJlNON/b1/igwlVBmVzzI+iXrfExiPIlF9vMU1 C3zj7FNFB3UQhADk7dCER6Il/x6rEiNHUdJYZkbgwDEXXUQh1+cQ3XGr8yljSitc eTt6LIRLwuUVHCxbq3Cg451GgLH1C4MY9yQBvx4z9L+nY2X0cVBZ+Ot81jLc/Q9C r76I+aUAHJ0jq4PPtCTxFUpzxHeuK/gnWv9B/QdlV+a8u+rAvdPZ7IC6igUlopnh xbyBv0KWT+VVUZiAXNVJlabF4FmSYYisv6TpPMdPgjMYPK7QLAJwcw6O8QjcEA0f moEcow== -----END CERTIFICATE-----Generated at Thu Sep 24 13:58:59 2026 by rpki-client