$ rpki-client -vvvf rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft File: 28110DE86B5C0A286A9B3545A4369B11A7480010.mft (raw, json) Hash identifier: mUuux1NXJr+sJo5uRXzPnasjsLVDKzPbOxvkyuMIGEw= Subject key identifier: DC:93:C8:30:42:DD:E3:E4:42:D2:C6:25:29:A3:B4:92:04:1E:09:50 Authority key identifier: 28:11:0D:E8:6B:5C:0A:28:6A:9B:35:45:A4:36:9B:11:A7:48:00:10 Certificate issuer: /CN=28110DE86B5C0A286A9B3545A4369B11A7480010 Certificate serial: 6A81D82413C1DBEFD006E71B8E8A694AF157E8EB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer Subject info access: rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft Manifest number: B9 Signing time: Fri 25 Sep 2026 16:58:40 +0000 Manifest this update: Fri 25 Sep 2026 16:53:40 +0000 Manifest next update: Sat 26 Sep 2026 18:23:40 +0000 Files and hashes: 1: 28110DE86B5C0A286A9B3545A4369B11A7480010.crl (hash: SIyqHhytBwRTnfo6UsmUQWYHe94NTzHzQRHvF4BMF8Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.crl rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 18:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:81:d8:24:13:c1:db:ef:d0:06:e7:1b:8e:8a:69:4a:f1:57:e8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28110DE86B5C0A286A9B3545A4369B11A7480010 Validity Not Before: Sep 25 16:53:40 2026 GMT Not After : Sep 26 18:23:40 2026 GMT Subject: CN=DC93C83042DDE3E442D2C62529A3B492041E0950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:90:e7:92:2a:1a:ee:20:9a:c8:e2:eb:f5:a1: 87:b1:3a:37:45:dc:7f:e9:7f:e0:c2:1d:36:94:3e: 47:cd:e8:39:ee:2b:4a:51:bc:cd:55:1c:b9:f9:86: d0:e6:42:82:ba:bf:4f:51:b4:13:62:36:45:4f:4a: cd:26:46:9b:b6:25:92:0e:5a:cc:d6:3c:ad:43:35: aa:21:78:7a:b2:b5:35:6b:0a:fd:0d:79:a5:6e:9e: af:b7:ac:e7:c9:fb:80:04:04:bc:43:24:a9:09:90: ee:67:2d:fc:5a:9c:b2:bd:aa:29:3b:5b:0a:e9:08: df:41:25:fa:37:68:21:5d:ed:65:b6:f5:6f:2b:7b: 09:96:d0:a8:00:d8:13:34:ae:28:1b:e9:48:c4:bc: f4:21:0f:9b:48:23:6f:7f:c8:2b:f3:c8:a7:2b:3c: 13:87:e8:9b:c3:72:73:96:81:ba:49:13:ae:1d:29: fc:26:ba:b6:02:97:eb:97:0c:14:34:74:79:89:4d: 2a:3e:db:7a:28:59:fc:b9:1d:69:84:ad:77:84:2f: d1:de:93:63:ec:29:1e:7e:b7:80:c9:5e:c9:4f:db: a6:19:93:a1:9a:fd:bf:45:fd:07:d1:66:cb:c3:18: f2:7d:83:6b:bc:f7:88:b3:45:4e:f5:fe:ca:35:ca: 8a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:93:C8:30:42:DD:E3:E4:42:D2:C6:25:29:A3:B4:92:04:1E:09:50 X509v3 Authority Key Identifier: keyid:28:11:0D:E8:6B:5C:0A:28:6A:9B:35:45:A4:36:9B:11:A7:48:00:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:83:ca:bc:91:29:fb:94:9c:7a:75:03:7d:8e:3b:b0:5b:78: d0:5e:ed:f7:24:12:9d:4f:16:f7:3c:f8:e1:06:7b:a9:08:0c: c2:59:bf:5e:4f:3d:b1:cc:2f:7b:37:06:be:86:81:4d:bb:e5: bf:01:60:88:04:79:04:ef:d0:a0:33:89:41:49:62:20:4e:1c: 8d:b2:52:4c:f5:4e:a1:70:0b:14:07:82:80:46:42:c7:1d:ce: b2:60:0a:a4:f6:31:75:af:63:b4:52:d2:46:49:55:fc:30:ad: 19:2a:75:b1:06:a2:44:7e:7a:e6:ac:15:d5:93:d7:2c:a7:ea: 92:e3:73:69:69:8f:7f:c1:ab:a7:28:b7:11:c7:e5:0b:6d:2f: 3a:14:1d:67:f8:85:32:c8:80:d2:af:6d:26:f8:1b:26:f7:c6: fd:c9:b8:fd:72:e4:e7:34:3a:ec:b1:51:75:46:d7:8c:80:54: c9:cc:e9:ad:2d:e0:05:ad:bf:95:e6:1b:84:f6:98:fc:f8:cd: f4:a5:55:f7:0f:73:e9:9a:21:29:c0:8f:b2:10:f8:1c:b3:64: d8:94:34:00:dc:a8:30:47:e9:2f:ad:a1:48:3f:40:ab:71:b8: 41:ad:bb:45:69:8f:2b:1d:b6:8e:e5:bb:3a:95:f3:2f:09:6a: 01:ba:dc:03 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUaoHYJBPB2+/QBucbjoppSvFX6OswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgxMTBERTg2QjVDMEEyODZBOUIzNTQ1QTQzNjlCMTFB NzQ4MDAxMDAeFw0yNjA5MjUxNjUzNDBaFw0yNjA5MjYxODIzNDBaMDMxMTAvBgNV BAMTKERDOTNDODMwNDJEREUzRTQ0MkQyQzYyNTI5QTNCNDkyMDQxRTA5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChkOeSKhruIJrI4uv1oYexOjdF 3H/pf+DCHTaUPkfN6DnuK0pRvM1VHLn5htDmQoK6v09RtBNiNkVPSs0mRpu2JZIO WszWPK1DNaoheHqytTVrCv0NeaVunq+3rOfJ+4AEBLxDJKkJkO5nLfxanLK9qik7 WwrpCN9BJfo3aCFd7WW29W8rewmW0KgA2BM0rigb6UjEvPQhD5tII29/yCvzyKcr PBOH6JvDcnOWgbpJE64dKfwmurYCl+uXDBQ0dHmJTSo+23ooWfy5HWmErXeEL9He k2PsKR5+t4DJXslP26YZk6Ga/b9F/QfRZsvDGPJ9g2u894izRU71/so1yooBAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU3JPIMELd4+RC0sYlKaO0kgQeCVAwHwYDVR0j BBgwFoAUKBEN6GtcCihqmzVFpDabEadIABAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXTi8w LzI4MTEwREU4NkI1QzBBMjg2QTlCMzU0NUE0MzY5QjExQTc0ODAwMTAuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMjgxMTBERTg2QjVDMEEyODZBOUIzNTQ1QTQzNjlC MTFBNzQ4MDAxMC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NUV04vMC8yODExMERFODZCNUMwQTI4 NkE5QjM1NDVBNDM2OUIxMUE3NDgwMDEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4PKvJEp+5ScenUD fY47sFt40F7t9yQSnU8W9zz44QZ7qQgMwlm/Xk89scwvezcGvoaBTbvlvwFgiAR5 BO/QoDOJQUliIE4cjbJSTPVOoXALFAeCgEZCxx3OsmAKpPYxda9jtFLSRklV/DCt GSp1sQaiRH565qwV1ZPXLKfqkuNzaWmPf8Grpyi3EcflC20vOhQdZ/iFMsiA0q9t JvgbJvfG/cm4/XLk5zQ67LFRdUbXjIBUyczprS3gBa2/leYbhPaY/PjN9KVV9w9z 6ZohKcCPshD4HLNk2JQ0ANyoMEfpL62hSD9Aq3G4Qa27RWmPKx22juW7OpXzLwlq AbrcAw== -----END CERTIFICATE-----Generated at Sat Sep 26 12:18:22 2026 by rpki-client