$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft File: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json) Hash identifier: jQtUK+8iww8c5dr8IkYbL0E3exsEizra4t5fEVRzfMw= Subject key identifier: B9:51:40:28:25:F2:2D:29:EC:FB:B1:83:B4:96:B4:C1:0A:92:E3:08 Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05 Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005 Certificate serial: 7E25411D1C50352785B7C44739160D901FF9DF09 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft Manifest number: 02DD Signing time: Sat 14 Nov 2026 17:58:19 +0000 Manifest this update: Sat 14 Nov 2026 17:53:19 +0000 Manifest next update: Sun 15 Nov 2026 20:09:19 +0000 Files and hashes: 1: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=) 2: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=) 3: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=) 4: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=) 5: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=) 6: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=) 7: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=) 8: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=) 9: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: OHYUSrx/PN+/ARzMz/m0e4fuV2yiUZaMpYFaRnFDvcs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 20:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:25:41:1d:1c:50:35:27:85:b7:c4:47:39:16:0d:90:1f:f9:df:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005 Validity Not Before: Nov 14 17:53:19 2026 GMT Not After : Nov 15 20:09:19 2026 GMT Subject: CN=B951402825F22D29ECFBB183B496B4C10A92E308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:98:7b:df:d8:ae:05:15:a4:d1:50:48:a5: 2d:86:6a:7a:37:a4:0a:65:b4:5a:04:c3:71:34:ab: 73:57:8a:4d:7a:6a:92:d2:63:7e:a3:63:ef:b9:8c: af:8c:18:23:de:e6:f8:fa:bb:59:45:50:6d:16:48: 78:ff:b5:ef:25:e4:16:a1:bf:de:4e:86:63:da:28: 81:87:c6:cf:95:63:42:62:8b:76:13:5f:ba:cf:a1: 77:c5:60:31:3f:d2:7b:24:4c:0e:b5:7b:26:3f:6d: c9:9e:aa:59:b4:97:70:bd:d3:fd:95:9b:29:32:dc: 63:d5:03:da:3c:57:c8:a1:66:6d:46:12:7f:d8:c1: 63:ba:08:95:a5:f2:dd:ea:f0:01:d4:91:90:16:cc: 8d:65:93:96:a8:50:c9:13:43:ec:1f:19:f2:0a:94: 68:3d:71:fe:91:9d:09:49:7c:21:7a:a8:80:5f:77: 11:eb:ef:e2:78:4d:ba:75:2b:2d:fc:33:8f:9d:29: 47:b1:30:44:e9:3a:af:c1:42:b7:3a:33:f2:ff:64: 9f:3b:fe:41:fc:96:ff:92:75:55:bb:47:6b:f5:55: fe:1d:d6:3e:15:f9:2c:8a:a3:86:a7:28:ec:6c:a3: a2:68:f4:7b:02:37:33:59:35:18:ad:f7:d6:6e:32: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:51:40:28:25:F2:2D:29:EC:FB:B1:83:B4:96:B4:C1:0A:92:E3:08 X509v3 Authority Key Identifier: keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f7:5b:b7:28:f2:0c:45:21:69:aa:5b:e3:08:94:fa:d8:7f: af:ee:f9:67:f6:76:11:0c:43:78:88:16:19:31:fa:91:ba:6d: 12:bc:ca:90:04:d5:76:e6:d7:75:d9:60:58:a8:e3:93:92:6c: e3:88:12:38:79:e1:c5:b2:1f:62:90:7f:57:3b:46:64:1d:72: f8:8f:1d:d8:24:d4:06:d4:0c:88:71:6d:38:cf:fb:0a:39:55: 32:a6:19:61:c1:0c:ca:48:21:c3:40:d2:68:57:30:58:dc:24: 2f:e3:37:2a:81:6f:ca:bc:4d:99:8e:c8:1c:f6:10:b5:f0:e9: e9:94:68:c0:94:3e:bd:18:9e:45:d7:fd:d9:4d:e0:b9:45:27: 50:a8:8b:16:67:f1:b9:8c:df:52:e3:4a:c1:6d:cf:c7:1c:5e: ff:29:9e:3e:0d:87:ba:d9:66:9a:40:99:6c:b5:b3:42:c5:43: 52:a4:1e:dc:5a:8d:31:41:7e:00:af:63:40:99:0d:5c:ca:6b: ac:3c:75:e5:e1:9b:84:7a:53:04:b5:18:08:f9:8d:5d:15:e1: d9:6b:c2:36:6f:6a:d5:f2:36:9d:57:55:0c:c8:ec:c8:d9:ca: 67:f0:a7:ba:25:65:f7:15:18:59:cd:49:40:de:48:aa:cb:8f: 36:b2:eb:f7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUfiVBHRxQNSeFt8RHORYNkB/53wkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDNDlCQUUyNDMw QkVFQzM1NEMxQjE0RjIyNkU3NjFGQzlCRENGMDA1MB4XDTI2MTExNDE3NTMxOVoX DTI2MTExNTIwMDkxOVowMzExMC8GA1UEAxMoQjk1MTQwMjgyNUYyMkQyOUVDRkJC MTgzQjQ5NkI0QzEwQTkyRTMwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsrmHvf2K4FFaTRUEilLYZqejekCmW0WgTDcTSrc1eKTXpqktJjfqNj77mM r4wYI97m+Pq7WUVQbRZIeP+17yXkFqG/3k6GY9oogYfGz5VjQmKLdhNfus+hd8Vg MT/SeyRMDrV7Jj9tyZ6qWbSXcL3T/ZWbKTLcY9UD2jxXyKFmbUYSf9jBY7oIlaXy 3erwAdSRkBbMjWWTlqhQyRND7B8Z8gqUaD1x/pGdCUl8IXqogF93Eevv4nhNunUr Lfwzj50pR7EwROk6r8FCtzoz8v9knzv+QfyW/5J1VbtHa/VV/h3WPhX5LIqjhqco 7Gyjomj0ewI3M1k1GK331m4yZNUCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBS5UUAo JfItKez7sYO0lrTBCpLjCDAfBgNVHSMEGDAWgBTEm64kML7sNUwbFPIm52H8m9zw BTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzMvQzQ5QkFFMjQzMEJFRUMzNTRDMUIx NEYyMjZFNzYxRkM5QkRDRjAwNS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveEp1dUpEQy03RFZNR3hUeUp1ZGhfSnZj OEFVLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8zL0M0OUJBRTI0MzBCRUVDMzU0QzFC MTRGMjI2RTc2MUZDOUJEQ0YwMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBP91u3KPIMRSFpqlvjCJT6 2H+v7vln9nYRDEN4iBYZMfqRum0SvMqQBNV25td12WBYqOOTkmzjiBI4eeHFsh9i kH9XO0ZkHXL4jx3YJNQG1AyIcW04z/sKOVUyphlhwQzKSCHDQNJoVzBY3CQv4zcq gW/KvE2Zjsgc9hC18OnplGjAlD69GJ5F1/3ZTeC5RSdQqIsWZ/G5jN9S40rBbc/H HF7/KZ4+DYe62WaaQJlstbNCxUNSpB7cWo0xQX4Ar2NAmQ1cymusPHXl4ZuEelME tRgI+Y1dFeHZa8I2b2rV8jadV1UMyOzI2cpn8Ke6JWX3FRhZzUlA3kiqy482suv3 -----END CERTIFICATE-----Generated at Sat Nov 14 22:22:08 2026 by rpki-client