$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft File: B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft (raw, json) Hash identifier: Ypw3uaYmiSrtzNC04HwPy0BvAfPfQQJpsFEmYNcR4aY= Subject key identifier: 8A:E3:55:CE:FE:87:06:12:EB:BB:94:D3:08:37:73:92:6F:E6:46:59 Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 1AB678A5737308DBBD97435E554E789F7282B424 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft Manifest number: 02A2 Signing time: Fri 25 Sep 2026 05:37:00 +0000 Manifest this update: Fri 25 Sep 2026 05:32:00 +0000 Manifest next update: Sat 26 Sep 2026 05:49:00 +0000 Files and hashes: 1: AS9264.roa (hash: QLmbG5wa3NxY4bLQDawo02KSEx9V2mKqt+zSToKsIXw=) 2: AS17712.roa (hash: yj06hI79Weqj0lNXdwRX13x+5jtyeGXUVFzjIzWVW0A=) 3: B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl (hash: Ei5Lpnr1ZkDSKbzqQXSWOr8Xae/Eio7FEz6ILK/aU3Q=) 4: AS18420.roa (hash: PXf9Qhwo15Y5emliO+pnlr0GJR0383jI4wLPlz9cZTg=) 5: AS17716.roa (hash: a/i12ZDZd4PdO/FM3dk8C6At59pShqCqeD+uHBMGx6s=) 6: AS38845.roa (hash: cBg+wWm1codz3x4d8coFCdbCh9JGi9zzO0X1xsE2hc0=) 7: AS9916.roa (hash: VmKEplDioE9dRbG+IqWy+ORyQkpVQi8turUDPKdrc2Q=) 8: AS18047.roa (hash: 19MTy8wCYv2FBhBBghHo9w6JAaEzVOI6LdAVH3Rlg5Y=) 9: AS18217.roa (hash: CBxkgnpykTRk9QIRMbL2x3TUBYEyue7/dUYQoccL57k=) 10: AS18177.roa (hash: JXd4kw1h0DUqkVz+WM6nOf/irwZe99z7YhtvoDc+f38=) 11: AS1659.roa (hash: a9JF70ttylpg+T9TOGnj3tVWmGB1CnSM61mc0bVSBuE=) 12: AS17713.roa (hash: LQ6EfaCsflHu4QRHUvkVyF9PGfNlVYNPlWt5InYVNtY=) 13: AS7539.roa (hash: 6fbm1TR+0zsapj8wMHiV2+RkmfeJg5iudxoqZFriHfU=) 14: AS17711.roa (hash: m0HPSs1Iwy9qB3mv37WVtid5LeyQRcfLwoUhzXI5emM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b6:78:a5:73:73:08:db:bd:97:43:5e:55:4e:78:9f:72:82:b4:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: Sep 25 05:32:00 2026 GMT Not After : Sep 26 05:49:00 2026 GMT Subject: CN=8AE355CEFE870612EBBB94D3083773926FE64659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:11:c1:f1:32:71:1b:17:59:b9:73:46:a2:7b: ba:05:d2:20:04:f5:37:fd:6e:79:1b:e5:12:98:38: 50:b7:f5:ef:a2:05:36:6f:48:8a:12:18:d4:75:47: 4a:f2:aa:71:a9:7d:6c:9b:60:b7:86:71:b5:e0:c6: d0:cc:05:2e:8e:99:c6:57:58:6c:fc:6f:c0:a3:ac: 49:4c:92:ad:cf:fd:40:02:5a:9a:50:d0:82:0b:ae: 57:30:a7:3d:82:1d:92:31:0f:4e:e1:6c:93:77:29: b2:98:fc:a5:2e:80:b1:e8:14:0f:9b:3e:41:f5:bf: a8:6f:1d:91:a3:0e:75:10:e6:80:02:5e:08:c8:39: a1:b7:d7:1a:d1:b9:3f:03:ef:80:6d:7e:cd:35:4f: e6:8b:ff:22:c1:a0:6e:28:c1:4c:80:88:a6:9b:6c: dc:a6:53:fd:3e:bc:db:71:ad:cb:68:f1:0a:40:b4: 2e:6c:d6:b7:f3:c2:37:ab:f4:c6:e6:1a:b3:c7:e0: 6e:ad:d6:cf:41:7a:e6:0c:4e:15:56:e5:65:ff:53: 25:09:f7:e1:e7:16:08:fa:a5:48:87:d1:63:23:9f: ad:55:33:34:78:e3:32:86:64:81:40:e4:fa:80:cb: dd:d1:41:cc:a7:6e:ce:f9:1f:77:2b:73:54:93:d0: a6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E3:55:CE:FE:87:06:12:EB:BB:94:D3:08:37:73:92:6F:E6:46:59 X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:70:f9:da:ea:39:51:9e:ee:52:fc:09:81:03:90:c7:67:c8: e6:06:09:bc:d1:fd:57:5c:59:83:46:23:96:38:aa:fa:73:d7: d4:72:54:ab:4c:4f:02:bc:ec:02:3e:0b:a4:a3:7a:a8:23:7f: 05:47:8b:1c:2c:7b:c3:d4:e6:26:75:9a:38:16:52:e3:3b:36: 69:5b:c8:38:05:88:5f:50:a3:6f:e3:ff:ab:b1:cf:65:f0:07: dc:d2:eb:cc:e1:f7:8b:5f:02:7d:b8:04:7f:a2:88:f5:62:a9: 0a:f0:42:ac:63:bf:a6:c7:31:8f:cf:c4:40:fe:c4:94:6b:47: 03:d7:b5:b3:86:02:74:99:ce:4e:64:f7:56:83:d7:59:78:b3: 38:3e:ce:1e:61:c7:0c:6d:c1:52:44:c0:08:90:95:06:4d:7d: fc:92:d8:1f:b1:c5:71:82:5b:e0:b7:ba:99:aa:63:ea:d4:03: 9f:c7:2a:38:9d:12:cd:5d:76:65:3c:a3:fe:12:56:4b:46:6c: 64:86:19:35:36:a9:7e:93:33:cc:76:22:a6:66:04:7b:4b:d4: c3:2a:1e:af:3a:66:f9:55:f5:38:d1:f5:51:d2:69:c8:38:08: 57:bf:54:fa:f2:f4:59:a5:2f:3c:d1:c1:d2:cd:99:ce:fc:22: be:8a:ec:35 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUGrZ4pXNzCNu9l0NeVU54n3KCtCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA5MjUwNTMyMDBaFw0yNjA5MjYwNTQ5MDBaMDMxMTAvBgNV BAMTKDhBRTM1NUNFRkU4NzA2MTJFQkJCOTREMzA4Mzc3MzkyNkZFNjQ2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbEcHxMnEbF1m5c0aie7oF0iAE 9Tf9bnkb5RKYOFC39e+iBTZvSIoSGNR1R0ryqnGpfWybYLeGcbXgxtDMBS6OmcZX WGz8b8CjrElMkq3P/UACWppQ0IILrlcwpz2CHZIxD07hbJN3KbKY/KUugLHoFA+b PkH1v6hvHZGjDnUQ5oACXgjIOaG31xrRuT8D74Btfs01T+aL/yLBoG4owUyAiKab bNymU/0+vNtxrcto8QpAtC5s1rfzwjer9MbmGrPH4G6t1s9BeuYMThVW5WX/UyUJ 9+HnFgj6pUiH0WMjn61VMzR44zKGZIFA5PqAy93RQcynbs75H3crc1ST0KbRAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUiuNVzv6HBhLru5TTCDdzkm/mRlkwHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xL0I3RjFBMTJBNTlGOUUw MjQ0QzQ0NUQxOTZEMzNDRjUwNzZCM0NGNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZcPna6jlRnu5S /AmBA5DHZ8jmBgm80f1XXFmDRiOWOKr6c9fUclSrTE8CvOwCPguko3qoI38FR4sc LHvD1OYmdZo4FlLjOzZpW8g4BYhfUKNv4/+rsc9l8Afc0uvM4feLXwJ9uAR/ooj1 YqkK8EKsY7+mxzGPz8RA/sSUa0cD17WzhgJ0mc5OZPdWg9dZeLM4Ps4eYccMbcFS RMAIkJUGTX38ktgfscVxglvgt7qZqmPq1AOfxyo4nRLNXXZlPKP+ElZLRmxkhhk1 Nql+kzPMdiKmZgR7S9TDKh6vOmb5VfU40fVR0mnIOAhXv1T68vRZpS880cHSzZnO /CK+iuw1 -----END CERTIFICATE-----Generated at Fri Sep 25 19:55:49 2026 by rpki-client