$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft File: Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft (raw, json) Hash identifier: MLIQDayEluOi6KvF3bZRSyVoaPDit+hWZ7Ru3N1CHmY= Subject key identifier: 3E:91:C8:32:C1:A0:B7:FD:FA:E6:CC:51:A2:5A:5D:22:91:43:62:79 Authority key identifier: 46:3A:AF:9D:F9:F6:55:8C:60:E4:81:6D:A0:24:85:62:F6:90:05:07 Certificate issuer: /CN=463AAF9DF9F6558C60E4816DA0248562F6900507 Certificate serial: 0160 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft Manifest number: 015F Signing time: Thu 26 Mar 2026 21:58:12 +0000 Manifest this update: Thu 26 Mar 2026 21:58:12 +0000 Manifest next update: Fri 27 Mar 2026 03:58:12 +0000 Files and hashes: 1: Rjqvnfn2VYxg5IFtoCSFYvaQBQc.crl (hash: HF515ritV0SobAV2dAnkeyGg2HmGWBUTNqhROqtTG4E=) 2: rPdWtUsi2UAHVk-l8KJCbvrCOD8.roa (hash: oTS/FYxx55v1DjeUunKoD2Yztyue5p9rzC+R5qtA5ek=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 03:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=463AAF9DF9F6558C60E4816DA0248562F6900507 Validity Not Before: Mar 26 21:58:12 2026 GMT Not After : Jan 15 15:30:19 2027 GMT Subject: CN=3E91C832C1A0B7FDFAE6CC51A25A5D2291436279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:f1:ec:9f:17:01:a4:cd:e1:b8:ac:d8:66: c5:09:3d:cb:c0:5e:b7:22:ae:46:46:92:3e:18:90: 64:6f:48:f7:42:51:7f:d2:21:55:8f:63:f3:13:b6: f1:0b:bd:ae:ec:4e:77:68:a3:6b:44:33:20:83:fc: 43:d6:3e:fb:f9:f0:d0:57:92:c3:b3:e4:da:d1:cd: 0a:21:31:fb:11:e3:31:1d:96:a9:6f:2c:8f:62:8b: 7e:78:6e:0d:f9:df:93:b8:84:17:43:c7:02:81:a2: 05:83:48:fd:69:12:76:0f:de:12:bb:54:c9:a3:ea: 2e:d7:31:de:24:e9:da:0a:b0:78:eb:55:09:37:de: a7:c3:d5:f0:53:f8:07:46:d2:57:3f:26:70:14:ac: e6:86:f5:6c:a0:fc:74:50:8d:2e:5e:20:b6:43:f5: 68:71:7c:0e:06:aa:66:b3:10:2a:f4:13:f1:7c:8f: d8:9f:a6:88:71:d8:37:a3:8c:8a:dd:0e:46:eb:df: 29:92:77:75:24:a7:56:5d:47:fb:bd:3d:38:2b:33: b6:3d:e2:38:a1:fe:cb:a1:d0:ee:2d:63:bd:3b:f1: 9e:1d:f4:8f:df:08:8a:4a:30:fa:67:6d:b6:38:6d: ef:70:b4:9c:4d:8d:dd:29:8a:27:1c:33:e9:43:8a: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:91:C8:32:C1:A0:B7:FD:FA:E6:CC:51:A2:5A:5D:22:91:43:62:79 X509v3 Authority Key Identifier: keyid:46:3A:AF:9D:F9:F6:55:8C:60:E4:81:6D:A0:24:85:62:F6:90:05:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a5:4c:f2:7a:58:d1:a7:bb:8a:a4:fd:38:76:c3:be:a2:a7: 21:1b:d0:04:5f:f1:55:48:02:d7:1c:92:ac:b6:f8:ab:a8:a0: 16:5a:d1:3b:95:8c:04:8a:8c:06:5a:4c:07:8c:1d:5b:a0:01: c0:54:a7:98:4e:f5:10:96:bb:10:ac:57:d8:49:12:7f:fa:31: 22:e4:03:4a:c1:0e:c6:40:e7:40:ef:3f:61:3c:d3:39:90:a4: 79:3d:44:35:57:c4:46:3e:13:27:37:66:96:34:4c:b9:4d:27: 2c:af:80:da:f9:8e:5b:f6:92:af:86:59:88:fa:63:ea:80:3d: 69:f0:90:52:fc:0c:2b:ea:2d:e5:3c:2e:31:68:0b:bc:74:05: fd:6d:b6:d9:9a:67:74:68:67:5a:32:cf:09:1b:6f:1d:7d:e7: ad:8c:b9:eb:ea:c1:2f:ab:0f:c5:80:d8:87:23:f8:51:39:e3: 67:26:96:e2:37:1c:f0:32:0e:71:b4:20:e0:3d:32:5e:07:9d: ee:0b:74:f8:2a:1f:78:f4:77:ee:2c:af:cc:2d:1b:6a:05:b8: 1b:7b:9c:79:1a:16:dc:0e:ae:f8:d0:69:15:6d:0d:38:6f:97: 0e:f5:3a:dd:d1:39:9f:00:3c:63:4b:c2:5f:9a:03:ec:94:4f: 71:e2:ac:99 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDYz QUFGOURGOUY2NTU4QzYwRTQ4MTZEQTAyNDg1NjJGNjkwMDUwNzAeFw0yNjAzMjYy MTU4MTJaFw0yNzAxMTUxNTMwMTlaMDMxMTAvBgNVBAMTKDNFOTFDODMyQzFBMEI3 RkRGQUU2Q0M1MUEyNUE1RDIyOTE0MzYyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTyfHsnxcBpM3huKzYZsUJPcvAXrcirkZGkj4YkGRvSPdCUX/S IVWPY/MTtvELva7sTndoo2tEMyCD/EPWPvv58NBXksOz5NrRzQohMfsR4zEdlqlv LI9ii354bg3535O4hBdDxwKBogWDSP1pEnYP3hK7VMmj6i7XMd4k6doKsHjrVQk3 3qfD1fBT+AdG0lc/JnAUrOaG9Wyg/HRQjS5eILZD9WhxfA4GqmazECr0E/F8j9if pohx2DejjIrdDkbr3ymSd3Ukp1ZdR/u9PTgrM7Y94jih/suh0O4tY7078Z4d9I/f CIpKMPpnbbY4be9wtJxNjd0piiccM+lDilldAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUPpHIMsGgt/365sxRolpdIpFDYnkwHwYDVR0jBBgwFoAURjqvnfn2VYxg5IFt oCSFYvaQBQcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0FOUkFZ Uy9SanF2bmZuMlZZeGc1SUZ0b0NTRll2YVFCUWMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1JqcXZuZm4yVll4ZzVJRnRvQ1NGWXZhUUJRYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0tBTlJBWVMvUmpxdm5mbjJWWXhnNUlG dG9DU0ZZdmFRQlFjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AJ+lTPJ6WNGnu4qk/Th2w76ipyEb0ARf8VVIAtcckqy2+KuooBZa0TuVjASKjAZa TAeMHVugAcBUp5hO9RCWuxCsV9hJEn/6MSLkA0rBDsZA50DvP2E80zmQpHk9RDVX xEY+Eyc3ZpY0TLlNJyyvgNr5jlv2kq+GWYj6Y+qAPWnwkFL8DCvqLeU8LjFoC7x0 Bf1tttmaZ3RoZ1oyzwkbbx19562MuevqwS+rD8WA2Icj+FE542cmluI3HPAyDnG0 IOA9Ml4Hne4LdPgqH3j0d+4sr8wtG2oFuBt7nHkaFtwOrvjQaRVtDThvlw71Ot3R OZ8APGNLwl+aA+yUT3HirJk= -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:27 2026 by rpki-client