$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft File: 71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json) Hash identifier: bGCCmTRf14iM5ZFLlRUskp0e+gVdgopkElK5ak4WxX0= Subject key identifier: 66:1C:6A:41:F6:BB:AF:DB:97:02:EE:E6:2F:20:11:83:CA:99:1E:07 Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 Certificate issuer: /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Certificate serial: 0FDEBC555B29EA88C4A312A3AB01FB35C5CEDF2C Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft Manifest number: 0298 Signing time: Sun 27 Sep 2026 10:23:40 +0000 Manifest this update: Sun 27 Sep 2026 10:18:40 +0000 Manifest next update: Mon 28 Sep 2026 12:28:40 +0000 Files and hashes: 1: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=) 2: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: qsgsZbF4ICHMAci1q0+DZENG8SVoYNS2bjlW4OZIsG8=) 3: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=) 4: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 12:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:de:bc:55:5b:29:ea:88:c4:a3:12:a3:ab:01:fb:35:c5:ce:df:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Validity Not Before: Sep 27 10:18:40 2026 GMT Not After : Sep 28 12:28:40 2026 GMT Subject: CN=661C6A41F6BBAFDB9702EEE62F201183CA991E07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:af:d1:4e:6a:3d:c3:6a:0c:a5:cb:8c:5a: 6c:b9:60:a8:44:8c:7c:65:c7:56:6e:66:82:4a:37: b8:1e:28:1a:69:af:b7:ff:b9:f4:28:2a:18:4b:fe: 94:2b:5d:f6:25:08:da:3e:98:44:06:29:8b:4a:4c: 39:e8:8e:6a:80:50:cc:24:9e:bd:c9:e9:c6:fe:c2: 1b:23:bb:77:d3:56:00:af:f9:a9:9e:7a:70:11:56: fe:cf:36:7d:7a:e3:1c:35:8e:9f:cd:be:8d:d9:98: 13:da:ef:0c:9b:7d:38:d3:b7:b2:32:22:c3:30:12: b8:4f:10:3b:8e:18:a8:b7:97:fd:35:db:f8:6f:48: c0:69:b4:38:6c:6e:ba:71:3d:64:d7:a6:3e:08:c2: 8e:c6:5a:de:53:d2:2e:b0:d4:bf:80:df:67:fc:9e: 81:50:90:e9:0d:6d:22:4b:32:a3:5d:b4:ab:74:7b: 2b:ae:3f:77:b8:e2:a9:b3:4f:01:0e:7d:32:20:81: 67:30:39:c1:94:c3:db:94:57:74:67:38:27:18:9e: 57:57:46:c0:62:49:93:56:7e:1c:50:8f:54:1c:33: f4:b5:39:1c:82:09:84:c6:e5:7d:42:fa:a6:4e:4e: 2c:6a:f2:c1:8c:94:08:79:37:47:d1:2f:0c:62:50: 45:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1C:6A:41:F6:BB:AF:DB:97:02:EE:E6:2F:20:11:83:CA:99:1E:07 X509v3 Authority Key Identifier: keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:48:92:76:ec:12:6d:54:d4:48:78:43:5b:6a:91:9e:5f:22: bd:92:20:86:81:30:c4:af:9a:ac:18:f6:91:4c:40:dc:46:bd: a1:98:61:92:1b:d6:4e:71:ca:7a:2d:da:3e:0c:a2:4f:3d:03: c7:a0:b5:ef:3c:b7:9e:ca:a8:20:77:15:87:22:2d:4f:a4:d3: d3:da:73:d9:6d:5d:38:7b:55:f8:f8:93:6d:12:b3:a3:59:dd: 00:50:17:95:b9:b8:ec:a1:b1:e2:01:b7:17:12:5b:7b:8b:36: 9c:7d:61:f2:97:48:0c:df:a7:11:21:bf:13:86:c3:33:7b:58: 99:4e:06:50:ce:db:fd:f1:9a:52:e1:86:2c:ff:aa:1f:9c:96: 09:0f:c0:17:5b:e3:28:0f:ca:00:fc:31:1e:81:ed:3a:72:5e: 0a:c4:f8:4d:7b:66:1f:12:66:44:98:a4:b8:23:3d:13:37:82: 09:95:dd:e7:4a:d5:b8:55:a4:bf:5f:15:38:08:42:b7:6f:c4: 95:18:d3:dc:e9:f4:74:68:94:fe:00:10:f5:1d:4a:0c:f0:f4: 07:fe:81:38:a2:d4:19:a0:0e:d8:a0:5f:91:2e:63:2c:73:60: 79:b9:69:e0:d0:21:0d:8a:bf:33:40:b7:6a:56:74:1b:7f:74: 8d:a5:45:0b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUD968VVsp6ojEoxKjqwH7NcXO3ywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyg3MTUyNTk3MkUz QzExNTNERTUzMDU0Nzk4RjUxQTVCRDU1Qzc1MDE5MB4XDTI2MDkyNzEwMTg0MFoX DTI2MDkyODEyMjg0MFowMzExMC8GA1UEAxMoNjYxQzZBNDFGNkJCQUZEQjk3MDJF RUU2MkYyMDExODNDQTk5MUUwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKLir9FOaj3Dagyly4xabLlgqESMfGXHVm5mgko3uB4oGmmvt/+59CgqGEv+ lCtd9iUI2j6YRAYpi0pMOeiOaoBQzCSevcnpxv7CGyO7d9NWAK/5qZ56cBFW/s82 fXrjHDWOn82+jdmYE9rvDJt9ONO3sjIiwzASuE8QO44YqLeX/TXb+G9IwGm0OGxu unE9ZNemPgjCjsZa3lPSLrDUv4DfZ/yegVCQ6Q1tIksyo120q3R7K64/d7jiqbNP AQ59MiCBZzA5wZTD25RXdGc4JxieV1dGwGJJk1Z+HFCPVBwz9LU5HIIJhMblfUL6 pk5OLGrywYyUCHk3R9EvDGJQRf8CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBRmHGpB 9ruv25cC7uYvIBGDypkeBzAfBgNVHSMEGDAWgBRxUlly48EVPeUwVHmPUaW9VcdQ GTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzIvNzE1MjU5NzJFM0MxMTUzREU1MzA1 NDc5OEY1MUE1QkQ1NUM3NTAxOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYx RDY2MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvY1ZKWmN1UEJGVDNsTUZSNWoxR2x2VlhI VUJrLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8yLzcxNTI1OTcyRTNDMTE1M0RFNTMw NTQ3OThGNTFBNUJENTVDNzUwMTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkSJJ27BJtVNRIeENbapGe XyK9kiCGgTDEr5qsGPaRTEDcRr2hmGGSG9ZOccp6Ldo+DKJPPQPHoLXvPLeeyqgg dxWHIi1PpNPT2nPZbV04e1X4+JNtErOjWd0AUBeVubjsobHiAbcXElt7izacfWHy l0gM36cRIb8ThsMze1iZTgZQztv98ZpS4YYs/6ofnJYJD8AXW+MoD8oA/DEege06 cl4KxPhNe2YfEmZEmKS4Iz0TN4IJld3nStW4VaS/XxU4CEK3b8SVGNPc6fR0aJT+ ABD1HUoM8PQH/oE4otQZoA7YoF+RLmMsc2B5uWng0CENir8zQLdqVnQbf3SNpUUL -----END CERTIFICATE-----Generated at Sun Sep 27 16:38:14 2026 by rpki-client