$ rpki-client -vvvf rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft File: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft (raw, json) Hash identifier: LOEWWqAd3pD7b2oWoq3m/9yTyo8ctjgnC3KIRmasrik= Subject key identifier: FF:1A:A0:04:8D:91:63:B7:F1:43:61:5C:EC:EF:89:A9:CF:45:20:D9 Authority key identifier: 85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 Certificate issuer: /CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Certificate serial: 3B73BD1BD4E9B10FA843929107E2E8C0687640F2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft Manifest number: BE Signing time: Sun 27 Sep 2026 00:27:31 +0000 Manifest this update: Sun 27 Sep 2026 00:22:31 +0000 Manifest next update: Mon 28 Sep 2026 02:01:31 +0000 Files and hashes: 1: 3130332e3233342e38312e302f32342d3234203d3e203137373130.roa (hash: Zvu3k5iDBaX9iOQpea8Ybb+zcrWBht3qRGl2nLlRl/o=) 2: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl (hash: vT6kzF4kJC1QhXnvl8VGnwTotP/yJFtNvmxJXXOeguY=) 3: 3130332e3233342e38302e302f32322d3234203d3e203137373130.roa (hash: uqLuHrrFZUmLWpdnoJCaLRe1oXTuRusUvNya24FB8bg=) 4: 3135302e3130372e36342e302f32322d3234203d3e203137373130.roa (hash: n+v5o9SBdWVqA5qvRZf6BeSCSFLkZj6roCOPAhBcFqM=) 5: 36312e35372e3232342e302f32302d3234203d3e203137373130.roa (hash: X08v+g23C1Fx8BQtKNgspF5UjPkGFKh01lY2BRa8ypo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:73:bd:1b:d4:e9:b1:0f:a8:43:92:91:07:e2:e8:c0:68:76:40:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Validity Not Before: Sep 27 00:22:31 2026 GMT Not After : Sep 28 02:01:31 2026 GMT Subject: CN=FF1AA0048D9163B7F143615CECEF89A9CF4520D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:2f:37:fa:87:16:51:ee:b2:eb:28:0f:e1: 05:14:4f:46:69:cd:62:5f:7b:85:16:b5:e8:86:44: aa:7b:2a:81:46:58:92:16:1e:46:07:cc:db:a8:9b: ea:13:00:f1:6e:99:c6:16:db:3c:e3:1b:75:46:1b: fc:1f:1f:0d:05:b1:e2:1e:a6:83:84:b8:1a:6e:45: f2:f8:ef:41:c8:1e:3e:54:49:dd:07:ea:4b:e6:7e: c4:f1:cb:d6:bc:6a:7f:d8:87:48:23:fd:43:46:c7: 54:23:d5:0a:ad:fd:4a:b3:e8:c0:94:3b:be:86:12: 8e:df:e5:79:6e:8d:ff:87:00:b0:0f:35:50:0b:9b: 16:41:99:bd:6b:91:70:39:7a:2d:62:23:b0:3c:ef: 49:08:3e:38:32:9f:b9:7f:41:84:42:d8:bc:c4:b4: fd:9d:07:6f:8b:85:d8:e6:c3:bf:18:1c:a3:0b:ae: cb:e7:b8:0e:54:fc:17:be:f2:16:c2:01:dd:94:92: c2:75:c3:9c:1e:7a:5d:81:1e:2e:e7:cf:37:44:9b: 1e:bb:a3:ac:49:61:92:10:62:81:98:31:cf:af:46: f7:8c:3e:4f:b1:72:cc:47:76:5c:f7:08:0e:6a:19: 43:b1:cb:40:7e:76:21:6e:66:26:7e:e6:8a:51:0f: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1A:A0:04:8D:91:63:B7:F1:43:61:5C:EC:EF:89:A9:CF:45:20:D9 X509v3 Authority Key Identifier: keyid:85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:47:fc:4a:d7:90:c3:22:33:1c:7f:96:d4:00:e9:c3:f0:b3: ab:f4:b0:8d:48:bc:47:d4:ac:7e:2e:f2:e6:98:d4:10:eb:d9: 7c:e2:b1:53:93:e6:cb:8d:a9:00:7c:dd:ef:06:94:5f:bc:21: 12:0b:31:6b:65:f3:61:51:01:7f:48:c1:26:98:e9:fe:64:38: a6:e7:65:1a:27:ed:3e:8e:7c:c3:3b:37:c2:09:55:eb:a7:a2: 3c:1f:22:10:6d:fb:8a:16:6c:13:24:ea:4b:01:02:2a:b0:0a: 51:34:31:bc:74:97:37:06:ce:03:69:0b:c2:3c:f2:d0:d9:6f: 41:b4:4c:09:dd:6e:b5:ec:6a:09:63:c0:5c:6b:3f:49:dc:e5: b5:90:36:02:08:54:99:89:89:54:1e:85:f9:d4:bf:5a:64:cc: 95:ef:0d:c6:48:b2:08:36:33:9e:54:2a:70:5a:a3:b3:ae:cd: 52:ec:fa:3e:13:bf:13:7e:e9:47:ec:98:ff:4b:c7:a8:a3:6c: 39:35:b2:4e:23:fb:1b:e3:8e:48:ca:b8:14:bb:ca:a0:58:9c: 8f:ab:46:d8:b9:8f:da:0b:d0:25:f5:9f:19:9c:6a:8b:b3:f9: 65:dc:6b:2f:3f:41:55:ed:a8:d7:af:44:92:8f:71:45:75:4c: 8d:98:af:bb -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUO3O9G9TpsQ+oQ5KRB+LowGh2QPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAz RDk0NTU4NTAeFw0yNjA5MjcwMDIyMzFaFw0yNjA5MjgwMjAxMzFaMDMxMTAvBgNV BAMTKEZGMUFBMDA0OEQ5MTYzQjdGMTQzNjE1Q0VDRUY4OUE5Q0Y0NTIwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CC83+ocWUe6y6ygP4QUUT0Zp zWJfe4UWteiGRKp7KoFGWJIWHkYHzNuom+oTAPFumcYW2zzjG3VGG/wfHw0FseIe poOEuBpuRfL470HIHj5USd0H6kvmfsTxy9a8an/Yh0gj/UNGx1Qj1Qqt/Uqz6MCU O76GEo7f5Xlujf+HALAPNVALmxZBmb1rkXA5ei1iI7A870kIPjgyn7l/QYRC2LzE tP2dB2+Lhdjmw78YHKMLrsvnuA5U/Be+8hbCAd2UksJ1w5weel2BHi7nzzdEmx67 o6xJYZIQYoGYMc+vRveMPk+xcsxHdlz3CA5qGUOxy0B+diFuZiZ+5opRD7OXAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU/xqgBI2RY7fxQ2Fc7O+Jqc9FINkwHwYDVR0j BBgwFoAUhXomhNfbyJznhOTfFvGhwD2UVYUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVU LzAvODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84NTdBMjY4NEQ3REJDODlDRTc4NEU0REYxNkYx QTFDMDNEOTQ1NTg1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVULzAvODU3QTI2ODREN0RC Qzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD1H/ErXkMMi Mxx/ltQA6cPws6v0sI1IvEfUrH4u8uaY1BDr2XzisVOT5suNqQB83e8GlF+8IRIL MWtl82FRAX9IwSaY6f5kOKbnZRon7T6OfMM7N8IJVeunojwfIhBt+4oWbBMk6ksB AiqwClE0Mbx0lzcGzgNpC8I88tDZb0G0TAndbrXsagljwFxrP0nc5bWQNgIIVJmJ iVQehfnUv1pkzJXvDcZIsgg2M55UKnBao7OuzVLs+j4TvxN+6UfsmP9Lx6ijbDk1 sk4j+xvjjkjKuBS7yqBYnI+rRti5j9oL0CX1nxmcaouz+WXcay8/QVXtqNevRJKP cUV1TI2Yr7s= -----END CERTIFICATE-----Generated at Sun Sep 27 10:45:45 2026 by rpki-client