$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft File: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft (raw, json) Hash identifier: 990wRJiQx+qRKA2U5oqM5hEiItnDBMe0VDZedDArkXw= Subject key identifier: 01:58:DD:6E:D8:0E:03:F4:DD:AD:29:D7:4B:A8:6C:3C:E8:4C:80:EA Authority key identifier: D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90 Certificate issuer: /CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90 Certificate serial: 1E0D0F477D305B2C6CEDDBF0E73EA90ED3E41384 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 18:49:10 +0000 Manifest this update: Thu 24 Sep 2026 18:44:10 +0000 Manifest next update: Fri 25 Sep 2026 19:45:10 +0000 Files and hashes: 1: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl (hash: jUKZCv88VkgcBll/VWkRG6Kc3CbB5Q3IKygPDVLQxc8=) 2: 3130332e3132362e38382e302f32322d3234203d3e203138303436.roa (hash: WYxsc8T18C1jcbx9ZCaeGlpS/rFD1h17zovXNmt5VJk=) 3: 3130332e3132362e38382e302f32342d3234203d3e203438303234.roa (hash: Sd6Q7YbX3hdrc0mji0ubguZvwyQj1Zh6EbmfJzdspl4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:0d:0f:47:7d:30:5b:2c:6c:ed:db:f0:e7:3e:a9:0e:d3:e4:13:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90 Validity Not Before: Sep 24 18:44:10 2026 GMT Not After : Sep 25 19:45:10 2026 GMT Subject: CN=0158DD6ED80E03F4DDAD29D74BA86C3CE84C80EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:ab:56:d7:fa:e4:4f:13:2f:1a:06:64:8e: 1c:9a:fe:78:0b:37:d0:3a:3e:e3:72:05:11:a2:8f: be:e3:af:a1:03:72:8b:fe:92:5f:ba:5d:fe:43:de: bd:cc:89:2d:16:5c:74:4e:e5:42:59:25:90:9b:43: 38:67:56:8c:4f:0e:9a:60:bd:0d:37:3b:e7:b2:17: 3a:1d:fe:66:f2:ee:dd:e2:d2:ee:99:78:26:c6:d0: 8c:86:5e:9d:ec:e2:c4:46:9c:6a:61:6f:ea:24:3f: 8f:19:59:67:5e:c5:fe:22:1c:bf:8d:b3:80:59:6c: ab:a0:90:54:af:2f:b5:34:fc:37:97:17:7a:fb:67: 35:5e:10:09:86:30:a8:86:38:65:e5:29:06:eb:ec: 58:1b:49:cb:da:38:52:eb:e7:55:ff:85:2a:66:ec: 91:d0:d9:25:6c:20:56:0a:12:b1:2f:f5:85:57:56: 13:92:8a:c5:ad:9f:c0:b8:44:60:a5:21:0d:be:66: d3:b3:68:dc:1d:da:f4:20:a8:c6:56:d7:28:01:07: bd:35:07:80:bb:9a:d8:d7:4b:65:5a:32:ac:4d:35: 26:e4:db:51:89:83:e4:10:95:32:65:31:de:fd:27: 33:ee:11:8b:71:da:c1:a4:c0:97:8b:01:cb:45:fb: 51:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:58:DD:6E:D8:0E:03:F4:DD:AD:29:D7:4B:A8:6C:3C:E8:4C:80:EA X509v3 Authority Key Identifier: keyid:D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c6:5b:ca:65:12:63:18:ab:3f:b1:df:33:cd:4c:1c:cb:29: 3f:a0:8f:dc:7d:bc:7c:2b:fa:c7:0d:a9:d2:d2:80:99:0d:bd: c7:33:f3:17:1e:62:96:ba:9a:7a:56:ee:55:63:1d:05:3d:ee: 84:bd:5f:7f:95:d6:a6:32:33:f6:7f:c4:90:b2:a3:79:fa:ec: f3:e4:34:39:4c:c5:e4:22:7b:04:f6:bb:49:d8:40:87:b2:6a: 59:9c:46:84:e0:67:3f:f2:e9:5f:af:06:1a:15:34:b7:4f:cf: 21:18:f0:b7:9d:e7:b6:d2:38:72:31:05:52:48:6e:d5:de:4e: e1:3c:cc:f0:2a:7a:d6:ad:69:9e:20:1d:0f:16:e5:70:13:75: 42:e9:81:e4:38:17:83:dc:c1:6d:f7:39:14:16:93:94:a5:92: ba:ec:f6:a0:19:05:36:3f:ba:e0:8f:9d:cf:21:46:f6:1d:95: 8d:64:b8:31:66:06:47:2f:20:75:50:35:3e:12:1d:1b:28:73: fd:da:e7:32:d1:21:07:87:aa:d6:7e:f6:e6:51:f0:3b:2d:92: 80:a4:75:3d:25:71:d6:4b:49:57:68:55:a2:ed:03:05:0a:79: 86:95:e4:48:4f:80:59:17:c0:8e:d2:a7:52:61:ee:95:aa:a1: f7:5e:a0:4d -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUHg0PR30wWyxs7dvw5z6pDtPkE4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFBRTMzMzgwMzVCRkNBN0M0RTg2RkJDMjgxQTFGREYw QkU2OUI5MDAeFw0yNjA5MjQxODQ0MTBaFw0yNjA5MjUxOTQ1MTBaMDMxMTAvBgNV BAMTKDAxNThERDZFRDgwRTAzRjREREFEMjlENzRCQTg2QzNDRTg0QzgwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwh6tW1/rkTxMvGgZkjhya/ngL N9A6PuNyBRGij77jr6EDcov+kl+6Xf5D3r3MiS0WXHRO5UJZJZCbQzhnVoxPDppg vQ03O+eyFzod/mby7t3i0u6ZeCbG0IyGXp3s4sRGnGphb+okP48ZWWdexf4iHL+N s4BZbKugkFSvL7U0/DeXF3r7ZzVeEAmGMKiGOGXlKQbr7FgbScvaOFLr51X/hSpm 7JHQ2SVsIFYKErEv9YVXVhOSisWtn8C4RGClIQ2+ZtOzaNwd2vQgqMZW1ygBB701 B4C7mtjXS2VaMqxNNSbk21GJg+QQlTJlMd79JzPuEYtx2sGkwJeLActF+1ETAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUAVjdbtgOA/TdrSnXS6hsPOhMgOowHwYDVR0j BBgwFoAU0a4zOANb/KfE6G+8KBof3wvmm5AwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hBTkdG VS8wL0QxQUUzMzM4MDM1QkZDQTdDNEU4NkZCQzI4MUExRkRGMEJFNjlCOTAuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvRDFBRTMzMzgwMzVCRkNBN0M0RTg2RkJDMjgx QTFGREYwQkU2OUI5MC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NIQU5HRlUvMC9EMUFFMzMzODAz NUJGQ0E3QzRFODZGQkMyODFBMUZERjBCRTY5QjkwLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8ZbymUS YxirP7HfM81MHMspP6CP3H28fCv6xw2p0tKAmQ29xzPzFx5ilrqaelbuVWMdBT3u hL1ff5XWpjIz9n/EkLKjefrs8+Q0OUzF5CJ7BPa7SdhAh7JqWZxGhOBnP/LpX68G GhU0t0/PIRjwt53nttI4cjEFUkhu1d5O4TzM8Cp61q1pniAdDxblcBN1QumB5DgX g9zBbfc5FBaTlKWSuuz2oBkFNj+64I+dzyFG9h2VjWS4MWYGRy8gdVA1PhIdGyhz /drnMtEhB4eq1n725lHwOy2SgKR1PSVx1ktJV2hVou0DBQp5hpXkSE+AWRfAjtKn UmHulaqh916gTQ== -----END CERTIFICATE-----Generated at Thu Sep 24 20:52:16 2026 by rpki-client