$ rpki-client -vvvf rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft File: 8DFE241B6B56425D05308D6CF84E530F0AD99312.mft (raw, json) Hash identifier: WfQCgUMARMjJ1xGG2T1SHZAV6EJtRj7EmZ7w0gH1v1c= Subject key identifier: 1C:F6:17:75:24:C4:36:79:00:BC:11:24:63:13:56:29:C5:EB:15:BE Authority key identifier: 8D:FE:24:1B:6B:56:42:5D:05:30:8D:6C:F8:4E:53:0F:0A:D9:93:12 Certificate issuer: /CN=8DFE241B6B56425D05308D6CF84E530F0AD99312 Certificate serial: 0727FB2EF85F51A731CB601D5ED8DE2285B16361 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft Manifest number: BA Signing time: Fri 25 Sep 2026 17:23:42 +0000 Manifest this update: Fri 25 Sep 2026 17:18:42 +0000 Manifest next update: Sat 26 Sep 2026 20:01:42 +0000 Files and hashes: 1: 3130332e3135392e3230362e302f32332d3234203d3e203331393732.roa (hash: eK6+/TDh22lTbQdbALPHM65FmvpRbot7SqYBFf/0Vc0=) 2: 8DFE241B6B56425D05308D6CF84E530F0AD99312.crl (hash: BMubrAzDHzjFDb7qZFCK9L4uijMQaI43sIO3jtWw/AU=) 3: 3130332e3135392e3230362e302f32332d3234203d3e20313332333639.roa (hash: Njq8PYL4sI6Vl6OpGpULpdTiodD6fNVPkIMKZbxgiBg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.crl rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 20:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:27:fb:2e:f8:5f:51:a7:31:cb:60:1d:5e:d8:de:22:85:b1:63:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DFE241B6B56425D05308D6CF84E530F0AD99312 Validity Not Before: Sep 25 17:18:42 2026 GMT Not After : Sep 26 20:01:42 2026 GMT Subject: CN=1CF6177524C4367900BC112463135629C5EB15BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:a9:4f:84:73:2d:97:25:78:fd:67:50:8e: 09:26:dc:c8:9b:3c:56:9b:02:11:df:25:2e:60:6d: eb:a5:d2:7b:76:29:0a:ae:31:88:64:99:3e:68:d9: a6:9a:6e:33:78:b9:81:30:02:86:a6:b8:c1:a9:49: 99:86:a8:d5:76:47:dc:3d:eb:3b:69:7f:a1:06:79: 8f:23:f3:60:1c:df:f0:d8:78:bb:ba:bf:9d:21:4e: b3:cf:f4:c5:f5:d8:fd:ab:fe:ff:6b:5e:aa:a4:fa: 08:25:f2:3e:c2:43:91:7f:e4:db:42:e1:3b:67:2c: 16:27:1d:a7:60:be:77:f7:a9:cf:52:a4:0e:fb:62: 16:34:86:86:29:a1:53:1d:06:df:dd:a6:f0:60:fb: 51:32:50:01:ec:83:f8:9c:ef:3e:c7:e9:5c:6b:3a: 40:a2:fd:ca:db:36:30:04:2e:b8:5d:38:f3:df:0b: 29:59:ed:21:98:03:81:bd:4c:30:6b:3b:7f:35:67: 1e:98:76:b8:84:2c:33:43:36:9d:b7:0a:f6:1d:51: fd:a3:6e:42:d2:1d:ae:01:3d:58:07:7e:60:9a:fd: 54:b4:be:49:d2:6e:3e:83:4a:bc:4c:b9:dd:55:20: 12:44:56:27:56:c8:ac:e4:5d:0a:85:db:37:aa:56: 18:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F6:17:75:24:C4:36:79:00:BC:11:24:63:13:56:29:C5:EB:15:BE X509v3 Authority Key Identifier: keyid:8D:FE:24:1B:6B:56:42:5D:05:30:8D:6C:F8:4E:53:0F:0A:D9:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1f:c4:35:74:40:4a:cb:bc:98:43:a7:5e:59:ed:a0:b6:02: 86:f8:89:4f:db:a7:f2:d7:21:15:8c:bd:0b:0d:68:0e:43:c4: 9c:d4:3d:41:9d:75:db:53:33:fd:c8:cf:ec:91:c4:74:fa:2d: 4c:be:30:06:3d:19:76:90:18:4f:9c:16:4c:67:13:d0:0b:71: f4:8e:92:b5:1a:0e:1d:bc:8e:74:4b:0e:30:28:2f:e4:96:41: 73:d2:60:1f:8a:7b:d8:e0:03:b3:b3:80:c1:7b:b1:81:cb:88: 70:75:5b:f0:c7:04:22:a0:94:63:66:b2:b3:fb:f2:64:c8:cf: 43:dc:ca:99:18:00:52:1e:59:c9:6f:fe:77:5f:1d:55:81:b7: 6b:b3:1b:78:10:3b:29:6d:05:8c:4d:b0:8c:b8:56:4b:54:7c: 26:a4:70:bb:ff:33:69:11:8c:71:21:42:6a:ad:99:dc:df:6e: f9:b0:ed:fd:58:43:0c:32:b1:89:17:35:f7:1c:8b:31:4c:bf: cb:cb:09:d2:c0:8f:ad:72:6a:53:7e:bf:1d:cb:07:e0:47:05: 6e:67:2e:58:2d:29:5f:09:3e:17:28:88:3d:8b:76:5e:7d:41: 26:4f:61:cb:1f:57:ae:e8:5b:65:29:37:af:96:bb:b3:8a:27: e3:7a:d4:e9 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUByf7LvhfUacxy2AdXtjeIoWxY2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERGRTI0MUI2QjU2NDI1RDA1MzA4RDZDRjg0RTUzMEYw QUQ5OTMxMjAeFw0yNjA5MjUxNzE4NDJaFw0yNjA5MjYyMDAxNDJaMDMxMTAvBgNV BAMTKDFDRjYxNzc1MjRDNDM2NzkwMEJDMTEyNDYzMTM1NjI5QzVFQjE1QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI3alPhHMtlyV4/WdQjgkm3Mib PFabAhHfJS5gbeul0nt2KQquMYhkmT5o2aaabjN4uYEwAoamuMGpSZmGqNV2R9w9 6ztpf6EGeY8j82Ac3/DYeLu6v50hTrPP9MX12P2r/v9rXqqk+ggl8j7CQ5F/5NtC 4TtnLBYnHadgvnf3qc9SpA77YhY0hoYpoVMdBt/dpvBg+1EyUAHsg/ic7z7H6Vxr OkCi/crbNjAELrhdOPPfCylZ7SGYA4G9TDBrO381Zx6YdriELDNDNp23CvYdUf2j bkLSHa4BPVgHfmCa/VS0vknSbj6DSrxMud1VIBJEVidWyKzkXQqF2zeqVhhhAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUHPYXdSTENnkAvBEkYxNWKcXrFb4wHwYDVR0j BBgwFoAUjf4kG2tWQl0FMI1s+E5TDwrZkxIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFROUy8w LzhERkUyNDFCNkI1NjQyNUQwNTMwOEQ2Q0Y4NEU1MzBGMEFEOTkzMTIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOERGRTI0MUI2QjU2NDI1RDA1MzA4RDZDRjg0RTUz MEYwQUQ5OTMxMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RUTlMvMC84REZFMjQxQjZCNTY0MjVE MDUzMDhENkNGODRFNTMwRjBBRDk5MzEyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEx/ENXRASsu8mEOn XlntoLYChviJT9un8tchFYy9Cw1oDkPEnNQ9QZ1121Mz/cjP7JHEdPotTL4wBj0Z dpAYT5wWTGcT0Atx9I6StRoOHbyOdEsOMCgv5JZBc9JgH4p72OADs7OAwXuxgcuI cHVb8McEIqCUY2ays/vyZMjPQ9zKmRgAUh5ZyW/+d18dVYG3a7MbeBA7KW0FjE2w jLhWS1R8JqRwu/8zaRGMcSFCaq2Z3N9u+bDt/VhDDDKxiRc19xyLMUy/y8sJ0sCP rXJqU36/HcsH4EcFbmcuWC0pXwk+FyiIPYt2Xn1BJk9hyx9XruhbZSk3r5a7s4on 43rU6Q== -----END CERTIFICATE-----Generated at Sat Sep 26 14:23:10 2026 by rpki-client