$ rpki-client -vvvf rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft File: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft (raw, json) Hash identifier: G2+WPm9NwoGZEKJJ6IV0DoUOJcpM0NGtjipPC4jCtqo= Subject key identifier: 29:D6:9F:23:72:49:E9:B9:2C:20:28:F4:26:A4:34:93:96:00:6D:98 Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 Certificate issuer: /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Certificate serial: 31622549575341F2CB1D1B48D800FDAB7026C66F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft Manifest number: BC Signing time: Wed 23 Sep 2026 10:37:18 +0000 Manifest this update: Wed 23 Sep 2026 10:32:18 +0000 Manifest next update: Thu 24 Sep 2026 14:15:18 +0000 Files and hashes: 1: 3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa (hash: xP411/3P+QncE7UBCG9FjIpMvagWAoQKRii7/7dwrps=) 2: 323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa (hash: ZRXaYx+Nrn2iAFlJIwnl9HLp8Eud4rItrm9qIQL8K3o=) 3: 3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa (hash: CBt4aj49jAfK/FkdSCAEmu5FJcJ8ZBpytmS6xaMxItA=) 4: 323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa (hash: o6RGuHIfda02+Jk34ePKyhchsrC+xHDAy6BJ51uRReg=) 5: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl (hash: KXrZG6SvGra+VvUEmZZT+4TWCppiAUvoGyxclHXTh8Y=) 6: 3130332e3132392e3134342e302f32342d3234203d3e2035303635.roa (hash: r6atDIqgperuF3RfaudvB73QXSoXlYlurO9YxRuzsEo=) 7: 3130332e3132392e3134372e302f32342d3234203d3e203230343733.roa (hash: jLHkK85y6D6I/P5jhpzcJkW6hQFZ18OruOJ4poV43Y8=) 8: 323430333a376634303a666630303a3a2f34382d3438203d3e203230343733.roa (hash: AfAX13SxCLnlMaK5dhRCuMKxU7A8dV/NgyypCpd1bdY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:62:25:49:57:53:41:f2:cb:1d:1b:48:d8:00:fd:ab:70:26:c6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Validity Not Before: Sep 23 10:32:18 2026 GMT Not After : Sep 24 14:15:18 2026 GMT Subject: CN=29D69F237249E9B92C2028F426A4349396006D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:b7:da:22:18:5c:49:aa:87:0a:89:cd:bb: 98:e1:df:d4:71:c1:a6:20:1f:d6:5c:6c:17:e9:8d: b5:7c:4e:50:eb:8e:c2:8e:9e:8d:23:85:82:0c:03: 5c:bb:64:5f:dc:73:da:0f:5c:57:1a:49:7d:3a:13: 3f:e1:2e:30:b8:2e:71:29:33:04:aa:cc:0c:ae:16: 73:93:b4:c3:52:55:0b:aa:bf:33:ae:a4:c5:4f:de: 62:67:b9:1b:40:c3:05:79:ee:eb:98:48:f6:80:a6: 3a:10:93:06:0c:4a:c5:3e:59:7b:19:79:04:b6:22: 7f:f9:86:b1:5a:5a:f3:22:a7:d4:e3:ec:90:8e:c0: 02:67:d9:59:45:d8:5a:14:5d:5e:9c:44:38:1a:b8: 32:04:95:0d:a5:86:9c:4f:38:33:99:89:ed:c2:91: 7b:d1:0e:d1:c4:d7:2f:73:1b:96:64:4e:90:2e:44: 03:8e:31:b2:44:5e:78:ca:c8:d6:7d:c8:83:2f:d4: d3:a2:6f:b5:11:4c:c1:9d:51:d7:29:90:b7:9e:73: d1:14:76:19:10:ad:a9:fe:98:aa:9c:f3:96:b2:6f: b8:ae:b7:43:9d:e0:d6:35:2d:07:0c:bd:b4:ce:e3: 16:93:bf:ee:b8:8b:4e:9f:2b:92:69:a1:3c:ca:7a: 7d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D6:9F:23:72:49:E9:B9:2C:20:28:F4:26:A4:34:93:96:00:6D:98 X509v3 Authority Key Identifier: keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d7:f4:40:2d:18:40:e3:c6:c7:2f:15:0b:93:47:8f:10:1f: 03:d5:79:49:23:3f:68:c8:64:de:be:36:25:d2:3a:b3:93:fb: f2:1e:61:89:68:53:82:f8:bf:9f:fb:97:18:09:67:e8:d1:1a: 71:64:4c:e3:7c:7f:74:1a:f3:28:8c:4a:98:8d:b5:07:0c:cc: e0:ac:79:22:d4:e5:cc:90:40:e7:b4:eb:01:a9:10:b8:23:64: 6e:08:37:fd:2e:51:aa:d9:bd:17:72:48:fb:c0:6d:b8:57:cc: 2d:73:64:19:9e:15:67:5a:f4:22:e6:eb:ae:3d:e5:a8:ee:56: 90:a7:06:2a:6e:75:70:9e:64:01:69:af:6f:53:40:2f:30:b9: fb:7f:86:54:3f:38:b4:e1:c0:22:27:a6:be:7e:6c:07:08:bf: 7c:2c:ad:51:ce:91:b1:03:34:7f:76:19:a2:e3:4e:2c:be:c1: 5f:b1:6b:39:f0:10:84:1b:ce:49:76:aa:22:23:04:62:51:b9: 79:64:5d:72:d9:4d:10:91:f1:d6:bb:21:7b:f1:e9:0c:39:e8: b9:fb:f1:32:18:13:ef:95:8e:5a:c5:f3:b3:7f:e4:90:3a:9e: e5:e8:fc:de:38:5b:4f:23:8c:ed:b2:61:aa:a9:21:b4:b5:59: a4:a0:bf:bf -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUMWIlSVdTQfLLHRtI2AD9q3Amxm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlD Q0Y1MEVBMzAeFw0yNjA5MjMxMDMyMThaFw0yNjA5MjQxNDE1MThaMDMxMTAvBgNV BAMTKDI5RDY5RjIzNzI0OUU5QjkyQzIwMjhGNDI2QTQzNDkzOTYwMDZEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZrfaIhhcSaqHConNu5jh39Rx waYgH9ZcbBfpjbV8TlDrjsKOno0jhYIMA1y7ZF/cc9oPXFcaSX06Ez/hLjC4LnEp MwSqzAyuFnOTtMNSVQuqvzOupMVP3mJnuRtAwwV57uuYSPaApjoQkwYMSsU+WXsZ eQS2In/5hrFaWvMip9Tj7JCOwAJn2VlF2FoUXV6cRDgauDIElQ2lhpxPODOZie3C kXvRDtHE1y9zG5ZkTpAuRAOOMbJEXnjKyNZ9yIMv1NOib7URTMGdUdcpkLeec9EU dhkQran+mKqc85ayb7iut0Od4NY1LQcMvbTO4xaTv+64i06fK5JpoTzKen3nAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUKdafI3JJ6bksICj0JqQ0k5YAbZgwHwYDVR0j BBgwFoAUVtLiXkCf6VahSo9aXA7qacz1DqMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAv NTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS81NkQyRTI1RTQwOUZFOTU2QTE0QThGNUE1QzBFRUE2 OUNDRjUwRUEzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAvNTZEMkUyNUU0MDlGRTk1NkEx NEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD7X9EAtGEDjxscvFQuT R48QHwPVeUkjP2jIZN6+NiXSOrOT+/IeYYloU4L4v5/7lxgJZ+jRGnFkTON8f3Qa 8yiMSpiNtQcMzOCseSLU5cyQQOe06wGpELgjZG4IN/0uUarZvRdySPvAbbhXzC1z ZBmeFWda9CLm66495ajuVpCnBipudXCeZAFpr29TQC8wuft/hlQ/OLThwCInpr5+ bAcIv3wsrVHOkbEDNH92GaLjTiy+wV+xaznwEIQbzkl2qiIjBGJRuXlkXXLZTRCR 8da7IXvx6Qw56Ln78TIYE++VjlrF87N/5JA6nuXo/N44W08jjO2yYaqpIbS1WaSg v78= -----END CERTIFICATE-----Generated at Wed Sep 23 19:09:09 2026 by rpki-client