$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft File: 5407824F2094BDB5E96C450A4F36563A73225CCB.mft (raw, json) Hash identifier: DNNnOLs5XG6FnX22KJOMT4EoBueQJQNSDcJh82pLI4s= Subject key identifier: 47:D4:9B:0D:FE:35:1E:82:A9:19:1F:81:5C:12:DE:E6:A8:24:61:65 Authority key identifier: 54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB Certificate issuer: /CN=5407824F2094BDB5E96C450A4F36563A73225CCB Certificate serial: 1D37284DC13649B0C953134CB925A0664440E46D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft Manifest number: BA Signing time: Thu 24 Sep 2026 03:51:21 +0000 Manifest this update: Thu 24 Sep 2026 03:46:21 +0000 Manifest next update: Fri 25 Sep 2026 04:47:21 +0000 Files and hashes: 1: 5407824F2094BDB5E96C450A4F36563A73225CCB.crl (hash: GsTJ0w5FVDflrSbgi8MI1GRujNWeXOO1DmFmCZgrD4g=) 2: 323430313a626136303a3a2f33322d3438203d3e2039393233.roa (hash: 5TVrVE33kIL0XhQaO3gte1KLCXkOhF1o3uG63J4/55s=) 3: 323430313a626136303a3a2f33322d3438203d3e203332353935.roa (hash: RBIOP3iKwRtqrSWqj44FA3/x/uVqA34IvA8ZG8hK44Q=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:37:28:4d:c1:36:49:b0:c9:53:13:4c:b9:25:a0:66:44:40:e4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5407824F2094BDB5E96C450A4F36563A73225CCB Validity Not Before: Sep 24 03:46:21 2026 GMT Not After : Sep 25 04:47:21 2026 GMT Subject: CN=47D49B0DFE351E82A9191F815C12DEE6A8246165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:5a:9f:b1:83:83:39:e2:c2:7c:65:e2:89: 68:7b:74:99:c6:07:32:45:0a:91:fb:50:2a:d9:79: aa:57:c3:0c:43:67:b6:98:29:56:b6:87:ea:be:8a: 2f:08:51:9b:af:7a:0b:cf:91:70:51:37:7a:57:24: cd:3b:dc:ad:ea:19:41:62:df:7d:e8:2d:01:80:21: 83:3b:a6:af:28:ae:ef:d0:32:4a:25:44:70:43:82: 77:d4:29:e2:97:a5:e3:b6:28:fd:b0:83:95:a1:9b: 3a:d4:2b:4e:d8:66:39:86:55:ba:73:a2:6a:23:84: 1e:74:40:ef:ee:8c:41:1c:94:63:b8:0f:0d:ba:14: 73:2b:d9:55:df:ae:b6:6e:bb:2c:22:63:19:b6:6e: e8:06:31:3f:35:e5:40:49:a0:29:ba:11:07:36:06: 6d:0c:da:fe:5c:9d:12:05:38:99:5b:cd:65:7f:f7: 5f:da:80:6d:a0:77:7a:60:03:68:09:58:b8:1a:4e: 3a:3a:fd:50:5c:94:50:3a:d0:60:5a:65:12:7e:6b: 53:6b:0a:58:c3:47:8f:66:aa:c8:e0:39:1f:17:b4: bf:f5:2e:14:8a:55:ad:a2:96:94:4e:4e:27:c3:9e: c2:d2:d7:1c:8b:44:67:c3:4f:61:63:d6:84:7d:77: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D4:9B:0D:FE:35:1E:82:A9:19:1F:81:5C:12:DE:E6:A8:24:61:65 X509v3 Authority Key Identifier: keyid:54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:1b:a7:d3:45:d8:c2:2e:ec:e4:8c:3f:7f:e0:3e:47:52:a4: d0:98:9f:0b:80:f3:92:87:c5:3b:ff:61:2c:bb:cc:9f:35:3c: f0:49:a0:d6:ec:92:10:61:2d:c3:58:95:f7:14:46:3b:c5:4f: bf:54:0f:7d:7e:38:a6:18:0e:d6:af:83:84:c5:4a:ec:04:d3: 20:9a:3b:4f:ef:05:77:cd:57:c5:25:e7:4f:79:5a:ab:f0:81: 77:dc:d8:7a:e3:14:57:af:56:47:fb:ec:2d:d1:23:cb:2c:a7: b8:3e:95:d0:1e:cd:3a:27:10:8a:5e:13:81:9f:2e:87:9b:fe: 63:cc:d4:49:7f:54:30:c8:fe:f6:e2:dd:b0:6b:71:6f:c5:04: 89:b6:95:6e:60:c6:e3:83:e7:04:ae:c1:44:e7:9a:1b:44:5d: 9a:e5:89:47:ac:ef:46:dd:03:0a:5a:41:ab:eb:51:49:78:f5: ec:36:1c:f2:69:bc:47:a4:43:62:7c:a0:8d:49:5e:10:6a:e0: 10:95:d8:cc:54:68:b2:8d:b1:81:b2:1b:bf:64:1c:73:b8:a9: 82:36:2e:a4:7d:12:72:f6:08:74:5d:e4:da:99:fe:77:86:44: 58:43:da:e6:26:86:e1:a3:3d:4e:f1:d9:ff:ff:42:d7:3f:8a: 87:72:85:80 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUHTcoTcE2SbDJUxNMuSWgZkRA5G0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQwNzgyNEYyMDk0QkRCNUU5NkM0NTBBNEYzNjU2M0E3 MzIyNUNDQjAeFw0yNjA5MjQwMzQ2MjFaFw0yNjA5MjUwNDQ3MjFaMDMxMTAvBgNV BAMTKDQ3RDQ5QjBERkUzNTFFODJBOTE5MUY4MTVDMTJERUU2QTgyNDYxNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCov1qfsYODOeLCfGXiiWh7dJnG BzJFCpH7UCrZeapXwwxDZ7aYKVa2h+q+ii8IUZuvegvPkXBRN3pXJM073K3qGUFi 333oLQGAIYM7pq8oru/QMkolRHBDgnfUKeKXpeO2KP2wg5WhmzrUK07YZjmGVbpz omojhB50QO/ujEEclGO4Dw26FHMr2VXfrrZuuywiYxm2bugGMT815UBJoCm6EQc2 Bm0M2v5cnRIFOJlbzWV/91/agG2gd3pgA2gJWLgaTjo6/VBclFA60GBaZRJ+a1Nr CljDR49mqsjgOR8XtL/1LhSKVa2ilpROTifDnsLS1xyLRGfDT2Fj1oR9d2eDAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUR9SbDf41HoKpGR+BXBLe5qgkYWUwHwYDVR0j BBgwFoAUVAeCTyCUvbXpbEUKTzZWOnMiXMswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExF LzAvNTQwNzgyNEYyMDk0QkRCNUU5NkM0NTBBNEYzNjU2M0E3MzIyNUNDQi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS81NDA3ODI0RjIwOTRCREI1RTk2QzQ1MEE0RjM2 NTYzQTczMjI1Q0NCLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExFLzAvNTQwNzgyNEYyMDk0 QkRCNUU5NkM0NTBBNEYzNjU2M0E3MzIyNUNDQi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALIbp9NF2MIu 7OSMP3/gPkdSpNCYnwuA85KHxTv/YSy7zJ81PPBJoNbskhBhLcNYlfcURjvFT79U D31+OKYYDtavg4TFSuwE0yCaO0/vBXfNV8Ul5095WqvwgXfc2HrjFFevVkf77C3R I8ssp7g+ldAezTonEIpeE4GfLoeb/mPM1El/VDDI/vbi3bBrcW/FBIm2lW5gxuOD 5wSuwUTnmhtEXZrliUes70bdAwpaQavrUUl49ew2HPJpvEekQ2J8oI1JXhBq4BCV 2MxUaLKNsYGyG79kHHO4qYI2LqR9EnL2CHRd5NqZ/neGRFhD2uYmhuGjPU7x2f// Qtc/iodyhYA= -----END CERTIFICATE-----Generated at Thu Sep 24 17:21:21 2026 by rpki-client