$ rpki-client -vvvf rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft File: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft (raw, json) Hash identifier: ZeaAgQJL9JqIBjUdfckrKBLYGw7E4+ykfcH6MkeRBc8= Subject key identifier: 67:87:75:E4:5C:08:8D:95:26:D6:D6:5E:EC:13:9B:11:4E:8F:E9:75 Authority key identifier: 42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 Certificate issuer: /CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Certificate serial: 32E0D2786D52105857DF556269999F313B8ED949 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 10:39:33 +0000 Manifest this update: Thu 24 Sep 2026 10:34:33 +0000 Manifest next update: Fri 25 Sep 2026 12:30:33 +0000 Files and hashes: 1: 3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa (hash: GSRooEfHneMScmMay9/suUawwfISd9M2Zp/oSqWxd5c=) 2: 323430353a653463303a3a2f33322d3634203d3e20313331363737.roa (hash: 81X32lIDsqpLyEd5Xpy3ESJVHUbt39R1tegiSMqE1PY=) 3: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl (hash: N21fPyfunrk3bVneUScqKrSBlgtDyNWoMa/SSIOuj14=) 4: 3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa (hash: U1mFwcarBwcENEkbti0C1yVEmBtDzRAAAqYz8mcIUOg=) 5: 323430353a653463303a3a2f33322d3634203d3e20313331363734.roa (hash: R5XmHRGNRbL/JzVgicSjGM6c3avdhtCi9gHhhibn8Iw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 12:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e0:d2:78:6d:52:10:58:57:df:55:62:69:99:9f:31:3b:8e:d9:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Validity Not Before: Sep 24 10:34:33 2026 GMT Not After : Sep 25 12:30:33 2026 GMT Subject: CN=678775E45C088D9526D6D65EEC139B114E8FE975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:61:92:6c:ce:48:ae:81:9b:d9:ad:fc:5d: ab:de:5a:19:b7:c8:72:5f:af:fa:44:04:47:bf:e3: 98:d8:c4:96:1c:13:94:ed:e3:17:df:80:1b:27:d6: cd:e1:a2:cf:9a:e9:aa:e0:e0:89:78:ef:a0:57:d5: b0:69:45:f1:8c:0f:4f:b3:2a:df:a7:8f:12:3f:f8: f7:22:5e:9c:37:d3:e6:e6:61:59:7b:92:62:ce:de: 9a:dc:52:ac:5a:cd:d2:83:bd:8d:28:9f:2f:2b:d3: 51:70:d5:52:1b:c7:42:99:2c:41:38:d9:ce:83:11: e6:24:66:93:51:6c:78:77:47:16:73:54:31:d5:1f: c3:e9:0b:f7:ed:16:e5:00:62:bb:d6:0e:27:1b:95: 04:0e:ee:ac:c9:ca:ca:5a:11:4f:72:a6:1f:76:23: 02:32:67:dc:d4:2a:13:71:e9:54:e2:7f:5f:97:23: 45:40:61:b3:4e:50:d1:64:f7:a6:e8:09:4b:4a:af: a7:a2:a5:96:75:55:e5:6c:2a:19:aa:58:78:54:30: c4:bc:ba:3f:d7:e6:c7:40:bb:3f:f9:31:9e:d5:49: 29:8a:96:79:b5:4d:b6:35:95:ce:95:b0:e2:de:7a: 6c:99:c8:54:86:e0:e4:a5:63:1f:b9:15:d9:48:ee: 82:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:87:75:E4:5C:08:8D:95:26:D6:D6:5E:EC:13:9B:11:4E:8F:E9:75 X509v3 Authority Key Identifier: keyid:42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a1:4a:4e:17:2f:5f:54:28:15:79:3c:d7:53:fe:02:54:9e: 10:f3:29:ec:b1:75:84:c0:38:71:b3:c4:09:7b:20:76:a9:61: 47:85:89:1a:f5:72:24:39:c4:c8:18:d2:5d:9e:90:1d:6b:df: 4e:94:9f:02:f4:98:42:4e:0d:27:75:fe:ae:e5:3e:93:2d:b3: 51:ac:48:af:2e:be:a9:0f:36:a7:a4:79:2d:8b:8b:cf:72:a7: ea:cf:28:15:94:05:13:56:08:48:5b:61:cf:f8:41:97:2a:ca: fd:42:77:58:00:1d:6f:62:a3:ad:80:4f:6a:3e:7c:cf:eb:7f: 60:d0:89:b8:21:a3:0c:84:3b:38:24:81:73:4e:ad:72:3c:89: 9e:b0:21:52:7f:42:30:95:36:dc:0b:21:0e:4b:9d:40:fc:b8: 40:0a:5b:e1:fe:24:f2:b1:bd:13:42:41:c4:d5:67:c0:1b:37: 32:1e:76:ba:ec:ae:0b:36:41:fc:49:13:26:7d:b6:c2:d8:fb: 45:7a:dc:6c:c6:04:00:ea:c9:88:eb:b1:58:c4:74:e5:ae:42: 48:ac:3f:3b:55:7f:85:d8:58:d5:96:2e:1d:b3:be:f1:81:d6: dc:27:d9:8a:a6:44:8b:80:dd:33:2c:9d:dd:e1:0a:87:20:d0: 72:61:8d:dc -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUMuDSeG1SEFhX31ViaZmfMTuO2UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1RTA4REVB ODYyMDE2MjAeFw0yNjA5MjQxMDM0MzNaFw0yNjA5MjUxMjMwMzNaMDMxMTAvBgNV BAMTKDY3ODc3NUU0NUMwODhEOTUyNkQ2RDY1RUVDMTM5QjExNEU4RkU5NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDmGSbM5IroGb2a38XaveWhm3 yHJfr/pEBEe/45jYxJYcE5Tt4xffgBsn1s3hos+a6arg4Il476BX1bBpRfGMD0+z Kt+njxI/+PciXpw30+bmYVl7kmLO3prcUqxazdKDvY0ony8r01Fw1VIbx0KZLEE4 2c6DEeYkZpNRbHh3RxZzVDHVH8PpC/ftFuUAYrvWDicblQQO7qzJyspaEU9yph92 IwIyZ9zUKhNx6VTif1+XI0VAYbNOUNFk96boCUtKr6eipZZ1VeVsKhmqWHhUMMS8 uj/X5sdAuz/5MZ7VSSmKlnm1TbY1lc6VsOLeemyZyFSG4OSlYx+5FdlI7oKrAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUZ4d15FwIjZUm1tZe7BObEU6P6XUwHwYDVR0j BBgwFoAUQsf3jp/aALnKPi0d314I3qhiAWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTkZP Ui8wLzQyQzdGNzhFOUZEQTAwQjlDQTNFMkQxRERGNUUwOERFQTg2MjAxNjIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1 RTA4REVBODYyMDE2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL09QRU5GT1IvMC80MkM3Rjc4RTlG REEwMEI5Q0EzRTJEMURERjVFMDhERUE4NjIwMTYyLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6FKThcv X1QoFXk811P+AlSeEPMp7LF1hMA4cbPECXsgdqlhR4WJGvVyJDnEyBjSXZ6QHWvf TpSfAvSYQk4NJ3X+ruU+ky2zUaxIry6+qQ82p6R5LYuLz3Kn6s8oFZQFE1YISFth z/hBlyrK/UJ3WAAdb2KjrYBPaj58z+t/YNCJuCGjDIQ7OCSBc06tcjyJnrAhUn9C MJU23AshDkudQPy4QApb4f4k8rG9E0JBxNVnwBs3Mh52uuyuCzZB/EkTJn22wtj7 RXrcbMYEAOrJiOuxWMR05a5CSKw/O1V/hdhY1ZYuHbO+8YHW3CfZiqZEi4DdMyyd 3eEKhyDQcmGN3A== -----END CERTIFICATE-----Generated at Thu Sep 24 22:01:08 2026 by rpki-client