$ rpki-client -vvvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft File: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json) Hash identifier: 8AZpKqSznxP3zuBltfsplGaKgeWWfoFz3K07QBvs0Wg= Subject key identifier: 44:77:FE:D1:06:7C:E6:D6:53:25:DA:AF:CC:22:43:14:3D:42:85:51 Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Certificate serial: 3CB366E0B906C0B8B9E3A72F7404C91AC20CBB51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft Manifest number: BA Signing time: Thu 24 Sep 2026 00:09:19 +0000 Manifest this update: Thu 24 Sep 2026 00:04:19 +0000 Manifest next update: Fri 25 Sep 2026 01:14:19 +0000 Files and hashes: 1: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=) 2: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: +gX+602ilo6TIJT1R0bkJu93XL8FmpJcTrUFdwY8RCM=) 3: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=) 4: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=) 5: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b3:66:e0:b9:06:c0:b8:b9:e3:a7:2f:74:04:c9:1a:c2:0c:bb:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Validity Not Before: Sep 24 00:04:19 2026 GMT Not After : Sep 25 01:14:19 2026 GMT Subject: CN=4477FED1067CE6D65325DAAFCC2243143D428551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:d5:6a:c1:60:97:64:8d:09:d3:e6:c4:e3: 9b:1e:8f:de:91:a7:64:57:b3:5f:b1:d4:99:20:82: 2d:3a:2b:ae:fa:8d:fd:12:a4:25:22:ec:e3:c8:2d: d2:ff:b2:e4:bd:98:f3:d1:c5:7c:42:a7:4a:30:cf: 84:61:de:7e:b3:ac:c8:f1:4c:2c:58:7f:98:da:c4: 30:88:4b:28:32:22:0b:05:14:a3:f0:02:cc:96:1f: 7e:dc:d3:d3:70:54:ba:78:a4:8a:94:b2:cb:e9:00: f4:be:1a:62:56:0e:be:c2:1c:aa:7b:a8:db:66:30: e4:34:28:ee:00:5f:6e:60:07:77:90:c6:3b:dd:d5: a4:7a:c4:43:24:b7:5d:d3:9b:ad:21:14:de:1e:b4: 1d:59:31:d1:6f:9c:e6:99:ee:7d:84:c2:f6:b5:74: 24:60:62:14:20:0e:3b:17:65:97:09:d7:2c:42:4c: 2b:3e:99:23:ed:1b:31:2b:2a:04:98:dd:88:87:39: e1:83:4b:2e:7f:01:e6:57:8e:fe:86:51:7b:25:3e: d4:36:03:94:0a:b6:b7:6d:23:ac:d5:22:8d:4e:8b: 33:8e:fa:dd:5d:6a:2d:3a:53:93:da:b7:07:50:04: 54:2a:b9:72:f4:2c:71:a8:2c:e6:c2:82:f2:7e:5f: cb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:77:FE:D1:06:7C:E6:D6:53:25:DA:AF:CC:22:43:14:3D:42:85:51 X509v3 Authority Key Identifier: keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:78:60:bc:9e:71:45:c8:d9:e1:9c:38:c9:6b:fe:86:1a:30: db:ac:39:73:3f:72:90:70:a9:20:d7:21:60:5c:80:db:b4:71: 10:7d:46:19:ab:66:f6:e5:d0:a2:b1:b5:1e:07:8f:51:16:32: 7e:fc:90:69:fe:d3:f8:a4:f5:85:6f:42:d8:35:28:5e:32:27: bc:88:ab:bb:5c:8c:1c:84:89:0c:b7:c4:fc:bb:93:7a:43:0d: 76:b3:3f:9b:70:c0:4e:46:81:dd:af:42:df:22:0d:a0:08:b5: c6:26:7c:7c:4a:11:a1:cc:8c:a1:38:30:e9:d4:7d:31:19:82: 75:56:3d:ef:4c:53:b8:70:4c:56:09:ea:25:8e:8d:eb:54:aa: 4c:92:ea:bd:bd:6e:58:51:43:8d:0c:c4:57:62:6a:99:64:ff: 08:53:fa:62:8d:bb:f5:e9:5f:17:97:b6:a6:ee:da:d9:03:16: be:e6:fd:d1:a0:bd:9a:d2:c5:7c:b1:8f:bf:07:5e:fc:11:9c: a5:11:cd:89:d6:60:76:38:08:9d:8f:88:58:37:b4:4c:b3:a3: af:83:29:a6:06:25:21:84:93:f2:0e:59:9b:5e:de:2e:2b:bd: 1c:fc:a9:c2:bc:24:d3:a9:9d:6b:16:1b:62:74:1b:4a:01:b2: fc:ac:2e:8d -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUPLNm4LkGwLi546cvdATJGsIMu1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFDMjdENTI0 NjZBQzdFNjAeFw0yNjA5MjQwMDA0MTlaFw0yNjA5MjUwMTE0MTlaMDMxMTAvBgNV BAMTKDQ0NzdGRUQxMDY3Q0U2RDY1MzI1REFBRkNDMjI0MzE0M0Q0Mjg1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCatNVqwWCXZI0J0+bE45sej96R p2RXs1+x1Jkggi06K676jf0SpCUi7OPILdL/suS9mPPRxXxCp0owz4Rh3n6zrMjx TCxYf5jaxDCISygyIgsFFKPwAsyWH37c09NwVLp4pIqUssvpAPS+GmJWDr7CHKp7 qNtmMOQ0KO4AX25gB3eQxjvd1aR6xEMkt13Tm60hFN4etB1ZMdFvnOaZ7n2Ewva1 dCRgYhQgDjsXZZcJ1yxCTCs+mSPtGzErKgSY3YiHOeGDSy5/AeZXjv6GUXslPtQ2 A5QKtrdtI6zVIo1OizOO+t1dai06U5PatwdQBFQquXL0LHGoLObCgvJ+X8tfAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQURHf+0QZ85tZTJdqvzCJDFD1ChVEwHwYDVR0j BBgwFoAUTU29KLvriSCzeqYEisJ9UkZqx+YwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VDVU5F VC8wLzRENERCRDI4QkJFQjg5MjBCMzdBQTYwNDhBQzI3RDUyNDY2QUM3RTYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFD MjdENTI0NjZBQzdFNi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NFQ1VORVQvMC80RDREQkQyOEJC RUI4OTIwQjM3QUE2MDQ4QUMyN0Q1MjQ2NkFDN0U2Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHhgvJ5x RcjZ4Zw4yWv+hhow26w5cz9ykHCpINchYFyA27RxEH1GGatm9uXQorG1HgePURYy fvyQaf7T+KT1hW9C2DUoXjInvIiru1yMHISJDLfE/LuTekMNdrM/m3DATkaB3a9C 3yINoAi1xiZ8fEoRocyMoTgw6dR9MRmCdVY970xTuHBMVgnqJY6N61SqTJLqvb1u WFFDjQzEV2JqmWT/CFP6Yo279elfF5e2pu7a2QMWvub90aC9mtLFfLGPvwde/BGc pRHNidZgdjgInY+IWDe0TLOjr4MppgYlIYST8g5Zm17eLiu9HPypwrwk06mdaxYb YnQbSgGy/KwujQ== -----END CERTIFICATE-----Generated at Thu Sep 24 15:24:54 2026 by rpki-client