$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft File: 71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json) Hash identifier: iOAx7ioOXzDiWtIVnNYV1iXJEAdanmzoiKPy6wXkEVs= Subject key identifier: 46:5C:3D:09:D4:79:E9:53:97:67:26:3B:9D:77:CC:86:BE:73:02:5E Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 Certificate issuer: /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Certificate serial: 25CBBB297EAAD051F7B8FAFCA46DF6B84B347310 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft Manifest number: 0293 Signing time: Wed 23 Sep 2026 22:18:50 +0000 Manifest this update: Wed 23 Sep 2026 22:13:50 +0000 Manifest next update: Thu 24 Sep 2026 22:52:50 +0000 Files and hashes: 1: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=) 2: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=) 3: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=) 4: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: 2u1fNQvqnYgdvaC30KOZMGHK9m3xF82ym5sB7ojHOy4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:cb:bb:29:7e:aa:d0:51:f7:b8:fa:fc:a4:6d:f6:b8:4b:34:73:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Validity Not Before: Sep 23 22:13:50 2026 GMT Not After : Sep 24 22:52:50 2026 GMT Subject: CN=465C3D09D479E9539767263B9D77CC86BE73025E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:73:ef:04:d3:4c:20:dd:9b:3b:ed:5a:93: 8a:08:5b:17:17:84:ee:ac:31:3f:ce:6b:92:b3:be: 24:73:2d:ba:9f:56:5f:55:17:29:62:8c:20:e9:4c: ce:27:7f:a8:32:99:a0:88:05:32:5e:dc:79:42:83: e3:aa:ed:40:71:c9:dd:87:ea:0e:1b:0f:9d:37:05: 48:2d:71:f1:cf:8f:1e:47:a7:8a:68:d6:ab:67:ab: 4a:23:8f:17:be:86:32:f1:f6:84:3f:d8:37:cb:ed: 3d:44:43:ee:6b:ce:32:ab:96:3a:1d:4e:38:29:1e: 93:5f:6c:8d:11:03:47:aa:00:9a:8b:0b:23:f4:43: 18:29:bd:ef:91:ec:64:b7:64:d8:1a:03:84:64:44: 36:d4:5c:6b:11:87:38:65:2d:2e:30:ed:f5:89:d0: 80:67:b7:61:45:ad:f8:86:e5:f6:1b:ee:77:50:bd: d8:2f:7d:ea:8b:ed:a3:f2:16:c2:f1:d7:38:45:b6: 05:da:4f:9b:80:b0:80:06:51:c7:0b:d1:63:36:2b: 21:91:41:41:b5:d3:a4:c2:72:8e:ec:dd:7c:a5:89: c0:d9:61:4b:35:ce:0d:32:a6:34:4a:79:2e:3a:b4: e3:a4:70:77:f4:d5:b3:b5:33:ec:dd:d8:6f:48:c3: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5C:3D:09:D4:79:E9:53:97:67:26:3B:9D:77:CC:86:BE:73:02:5E X509v3 Authority Key Identifier: keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:00:cb:2d:73:42:cb:e8:58:14:fd:cd:37:d0:19:03:e9:cb: 8a:bb:bb:5c:cb:d9:16:fa:90:d9:dc:5e:39:19:af:37:0b:b8: 26:4f:1b:40:dc:ac:75:1b:60:b4:a9:13:b1:95:6a:6f:79:81: 32:12:4d:2a:e7:6c:89:df:96:5d:d7:b3:28:51:eb:fc:1e:85: 83:b3:11:82:83:e5:1e:9e:39:2e:46:b8:8b:c8:f5:60:67:a4: 3a:5f:45:77:d5:1b:99:a2:f5:fd:62:00:36:68:b2:67:36:f3: 04:b1:97:ce:98:dd:13:80:2f:74:6d:41:cb:3c:6d:92:12:03: df:9a:f4:ff:1c:72:c4:cb:00:a2:14:2e:18:2c:94:54:55:77: 6b:7e:d9:ca:33:66:0f:ef:89:c1:e7:88:d0:9f:05:f4:24:27: 28:bd:a7:c3:52:cb:0c:a7:6e:af:3b:07:c1:58:5d:75:7b:cd: c9:d1:fe:e7:2a:6e:1c:f7:b7:21:60:ca:cf:2d:cc:ae:93:86: cf:13:83:d3:ec:a1:ff:34:1b:74:06:9f:b3:20:24:88:7a:78: 51:5f:54:a1:1b:60:83:a7:f3:53:8e:9f:2e:9d:aa:2d:d9:2e: 25:6c:5d:7b:d6:48:b3:e9:17:cf:97:2b:df:38:89:fe:a7:a4: d5:e4:b4:a1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUJcu7KX6q0FH3uPr8pG32uEs0cxAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyg3MTUyNTk3MkUz QzExNTNERTUzMDU0Nzk4RjUxQTVCRDU1Qzc1MDE5MB4XDTI2MDkyMzIyMTM1MFoX DTI2MDkyNDIyNTI1MFowMzExMC8GA1UEAxMoNDY1QzNEMDlENDc5RTk1Mzk3Njcy NjNCOUQ3N0NDODZCRTczMDI1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHsc+8E00wg3Zs77VqTighbFxeE7qwxP85rkrO+JHMtup9WX1UXKWKMIOlM zid/qDKZoIgFMl7ceUKD46rtQHHJ3YfqDhsPnTcFSC1x8c+PHkenimjWq2erSiOP F76GMvH2hD/YN8vtPURD7mvOMquWOh1OOCkek19sjREDR6oAmosLI/RDGCm975Hs ZLdk2BoDhGRENtRcaxGHOGUtLjDt9YnQgGe3YUWt+Ibl9hvud1C92C996ovto/IW wvHXOEW2BdpPm4CwgAZRxwvRYzYrIZFBQbXTpMJyjuzdfKWJwNlhSzXODTKmNEp5 Ljq046Rwd/TVs7Uz7N3Yb0jDMCMCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBRGXD0J 1HnpU5dnJjudd8yGvnMCXjAfBgNVHSMEGDAWgBRxUlly48EVPeUwVHmPUaW9VcdQ GTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzIvNzE1MjU5NzJFM0MxMTUzREU1MzA1 NDc5OEY1MUE1QkQ1NUM3NTAxOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYx RDY2MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvY1ZKWmN1UEJGVDNsTUZSNWoxR2x2VlhI VUJrLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8yLzcxNTI1OTcyRTNDMTE1M0RFNTMw NTQ3OThGNTFBNUJENTVDNzUwMTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkAMstc0LL6FgU/c030BkD 6cuKu7tcy9kW+pDZ3F45Ga83C7gmTxtA3Kx1G2C0qROxlWpveYEyEk0q52yJ35Zd 17MoUev8HoWDsxGCg+UenjkuRriLyPVgZ6Q6X0V31RuZovX9YgA2aLJnNvMEsZfO mN0TgC90bUHLPG2SEgPfmvT/HHLEywCiFC4YLJRUVXdrftnKM2YP74nB54jQnwX0 JCcovafDUssMp26vOwfBWF11e83J0f7nKm4c97chYMrPLcyuk4bPE4PT7KH/NBt0 Bp+zICSIenhRX1ShG2CDp/NTjp8unaot2S4lbF171kiz6RfPlyvfOIn+p6TV5LSh -----END CERTIFICATE-----Generated at Thu Sep 24 01:29:43 2026 by rpki-client