$ rpki-client -vvvf rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft File: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft (raw, json) Hash identifier: BdZSqvgOS10zvCmEv1QYK4WnPOIrmzHkD4HWc5Btc8g= Subject key identifier: 72:A2:6A:EE:D2:E2:29:84:11:37:F2:F8:4E:C9:F2:54:E0:28:06:26 Authority key identifier: 86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49 Certificate issuer: /CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849 Certificate serial: 45EFA341E07554B4972E384CC7E0E539EA0343AD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft Manifest number: B7 Signing time: Thu 24 Sep 2026 09:39:22 +0000 Manifest this update: Thu 24 Sep 2026 09:34:22 +0000 Manifest next update: Fri 25 Sep 2026 11:23:22 +0000 Files and hashes: 1: 323430303a373432303a3a2f33322d3332203d3e20313334383233.roa (hash: qqWWtvqYwHtuTqDmq6KrURru6pr7pReD9Wzh4csu0e4=) 2: 3130332e3138362e3138362e302f32332d3234203d3e20313334383233.roa (hash: sU0nxf0k+bvMj58mzvcqIhIM4sCuxjf2EUmRobYvVAQ=) 3: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl (hash: XCLpYMIJFgtjsg1HquMs7wYMz4zYO3s04zNfGBPLAcg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ef:a3:41:e0:75:54:b4:97:2e:38:4c:c7:e0:e5:39:ea:03:43:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849 Validity Not Before: Sep 24 09:34:22 2026 GMT Not After : Sep 25 11:23:22 2026 GMT Subject: CN=72A26AEED2E229841137F2F84EC9F254E0280626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:62:33:59:67:6c:20:29:f9:0f:71:27:fd: a1:48:cc:09:7c:9b:c1:bd:a2:70:99:05:4c:2e:58: b1:18:8e:2e:2e:21:bd:20:f7:73:67:56:66:42:4e: bb:67:bc:75:51:28:13:b4:50:6d:69:07:f9:7e:ee: f9:a4:b2:3b:43:be:a0:18:7a:58:a6:d6:ba:33:76: 73:71:da:88:45:4e:0b:b5:96:01:93:a1:30:da:9e: d0:c9:27:47:bf:32:02:0d:9e:70:5c:66:ff:e0:89: e2:6f:3a:22:82:2e:fb:60:39:04:a1:c6:9c:f6:aa: 90:b8:9f:8e:7d:d8:01:f3:77:b6:d5:d7:17:a8:b5: 28:75:f2:70:d4:b3:94:37:aa:0d:47:50:72:b9:92: b5:28:f9:a0:7c:4c:19:cc:ee:d2:ef:20:f7:e2:37: 0c:24:49:16:00:05:17:ce:fb:1c:d5:c9:79:cb:c5: fb:29:0c:e7:f0:68:d9:76:8a:f9:20:31:51:c6:84: ac:19:40:fd:b0:7f:0a:c9:d7:c7:9b:ff:17:69:22: e4:82:7d:c9:e2:14:d6:bf:87:22:ee:8f:5b:b1:4e: dd:e8:1a:fa:5f:6f:6b:f1:91:1b:ad:62:58:4b:1b: d9:00:6c:31:d0:4a:8f:48:1e:67:ae:e0:f1:e9:e5: 4d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A2:6A:EE:D2:E2:29:84:11:37:F2:F8:4E:C9:F2:54:E0:28:06:26 X509v3 Authority Key Identifier: keyid:86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c4:ee:43:95:b6:39:cf:d1:4c:14:2d:17:e2:bf:33:4c:df: 14:67:45:b3:02:ef:8c:c0:9b:31:f4:1b:08:36:00:e5:96:05: a5:81:27:67:76:08:37:b7:a9:cd:02:32:42:66:57:7e:f5:f4: dc:5f:db:1f:97:a5:0f:a8:9f:4a:57:12:11:c0:63:38:cc:76: 3b:0d:4d:bc:e7:f5:c6:da:31:f5:d8:93:e0:fd:2d:da:7a:e2: 94:64:bb:23:b5:49:aa:08:be:40:35:1c:54:ac:75:4f:99:e0: 27:ef:87:17:0f:8b:58:4e:7a:fb:ab:0d:8a:ee:5c:ea:7c:c3: 75:a5:8c:d4:81:e2:9d:36:7c:79:71:d8:1f:5c:82:f7:d0:1c: 40:28:4e:be:9a:31:76:67:94:5c:19:69:55:ce:bc:60:ed:60: 26:a6:69:78:ee:58:e6:fb:74:ed:05:01:ce:a2:18:31:c4:56: ed:7b:67:82:e5:13:c9:ee:0c:60:9c:08:90:46:c8:9e:5a:7b: 13:96:3c:f4:3f:67:ce:73:fe:a6:0f:50:55:2b:e7:74:cd:77: 8e:84:23:79:29:ff:10:7d:a4:9d:84:80:82:8a:0e:ba:ff:6f: b8:69:ae:60:b4:41:a0:43:96:ae:5a:76:35:84:ef:0c:c2:5f: 03:4a:c0:cd -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIURe+jQeB1VLSXLjhMx+DlOeoDQ60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NzE1MDRGNDJCN0IwQUYxODgzRThERkE1QkFBNTU1 QThCRTg0OTAeFw0yNjA5MjQwOTM0MjJaFw0yNjA5MjUxMTIzMjJaMDMxMTAvBgNV BAMTKDcyQTI2QUVFRDJFMjI5ODQxMTM3RjJGODRFQzlGMjU0RTAyODA2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmWIzWWdsICn5D3En/aFIzAl8 m8G9onCZBUwuWLEYji4uIb0g93NnVmZCTrtnvHVRKBO0UG1pB/l+7vmksjtDvqAY elim1rozdnNx2ohFTgu1lgGToTDantDJJ0e/MgINnnBcZv/gieJvOiKCLvtgOQSh xpz2qpC4n4592AHzd7bV1xeotSh18nDUs5Q3qg1HUHK5krUo+aB8TBnM7tLvIPfi NwwkSRYABRfO+xzVyXnLxfspDOfwaNl2ivkgMVHGhKwZQP2wfwrJ18eb/xdpIuSC fcniFNa/hyLuj1uxTt3oGvpfb2vxkRutYlhLG9kAbDHQSo9IHmeu4PHp5U29AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUcqJq7tLiKYQRN/L4TsnyVOAoBiYwHwYDVR0j BBgwFoAUhpcVBPQrewrxiD6N+luqVVqL6EkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0dVLzAv ODY5NzE1MDRGNDJCN0IwQUYxODgzRThERkE1QkFBNTU1QThCRTg0OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS84Njk3MTUwNEY0MkI3QjBBRjE4ODNFOERGQTVCQUE1 NTVBOEJFODQ5LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0dVLzAvODY5NzE1MDRGNDJCN0IwQUYx ODgzRThERkE1QkFBNTU1QThCRTg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIzE7kOVtjnP0UwULRfi vzNM3xRnRbMC74zAmzH0Gwg2AOWWBaWBJ2d2CDe3qc0CMkJmV3719Nxf2x+XpQ+o n0pXEhHAYzjMdjsNTbzn9cbaMfXYk+D9Ldp64pRkuyO1SaoIvkA1HFSsdU+Z4Cfv hxcPi1hOevurDYruXOp8w3WljNSB4p02fHlx2B9cgvfQHEAoTr6aMXZnlFwZaVXO vGDtYCamaXjuWOb7dO0FAc6iGDHEVu17Z4LlE8nuDGCcCJBGyJ5aexOWPPQ/Z85z /qYPUFUr53TNd46EI3kp/xB9pJ2EgIKKDrr/b7hprmC0QaBDlq5adjWE7wzCXwNK wM0= -----END CERTIFICATE-----Generated at Fri Sep 25 02:48:07 2026 by rpki-client