$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft File: OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft (raw, json) Hash identifier: OS9zkokdm/439VsX0JwScgWA9gIaVWWnRVWE/YzKTBM= Subject key identifier: 47:3B:B5:F3:F7:69:A0:EA:0C:96:E3:67:3D:14:3F:8C:37:D9:68:D0 Authority key identifier: 38:BF:B3:0C:72:CA:95:48:F7:96:CC:3D:4F:B6:00:6B:88:3E:27:01 Certificate issuer: /CN=38BFB30C72CA9548F796CC3D4FB6006B883E2701 Certificate serial: 02ED Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft Manifest number: 02EB Signing time: Thu 26 Mar 2026 08:27:52 +0000 Manifest this update: Thu 26 Mar 2026 08:27:52 +0000 Manifest next update: Thu 26 Mar 2026 14:27:52 +0000 Files and hashes: 1: OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl (hash: oCij8ogO0r/8hO/HPAgVvfbcPbWyMloU9QFq5E5th5Q=) 2: SLabTJZUnd9dxEvzHYFFrWea9UU.roa (hash: c8h/LrBIXQYnRPMFpRWKge88DSjxLRkfZbFW0lzmsog=) 3: y0It2rSVIUtpZCaFm-g0FOIFWKE.roa (hash: hT1m3KE7RGg7+zcFGlXdugL1MYYVOxzwx6SEZ/67da0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 14:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38BFB30C72CA9548F796CC3D4FB6006B883E2701 Validity Not Before: Mar 26 08:27:52 2026 GMT Not After : Oct 30 15:30:19 2026 GMT Subject: CN=473BB5F3F769A0EA0C96E3673D143F8C37D968D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:14:a1:8c:fc:46:61:77:08:c2:73:d3:3f: 9e:39:53:fe:5a:dc:d5:ca:28:e9:9a:e1:46:63:da: 4d:43:d7:dc:6c:66:f1:7c:c5:4b:b5:e8:3c:a8:49: 66:3f:8e:13:9c:dd:99:dd:8e:ca:00:74:c4:03:91: ba:6a:66:19:6e:8b:42:93:77:b5:08:d6:0c:bc:73: a8:21:02:98:ed:1b:9a:db:3a:3f:66:cb:a5:2c:9d: 46:ce:a2:9d:0c:38:e3:a2:2c:80:91:e0:92:9a:5e: b6:39:08:08:aa:a9:b4:ca:bf:88:01:e8:65:42:95: df:cb:e3:94:02:23:d9:eb:0f:f8:96:b7:29:4a:58: 94:ba:18:86:77:30:4d:31:d6:90:49:d6:e3:d7:3b: bb:1f:68:84:3b:69:9c:fe:ea:36:59:0f:f0:02:6c: 33:1f:9c:97:f5:16:18:fb:90:12:e6:05:4d:31:6c: 41:1b:7f:35:4f:75:e5:b9:29:97:c5:ea:1f:65:12: 4b:31:39:a6:6d:b2:4e:9a:ed:34:7e:d2:06:2d:df: 79:a7:d8:ee:97:d2:46:3d:38:f8:a8:a9:bf:f1:b2: 5b:2a:71:48:b2:82:01:4b:69:0e:1b:49:b2:22:53: dd:7a:ec:83:63:26:1e:ea:c9:86:5c:6f:96:47:41: 24:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3B:B5:F3:F7:69:A0:EA:0C:96:E3:67:3D:14:3F:8C:37:D9:68:D0 X509v3 Authority Key Identifier: keyid:38:BF:B3:0C:72:CA:95:48:F7:96:CC:3D:4F:B6:00:6B:88:3E:27:01 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:a5:c7:97:d5:d2:cb:93:54:4a:e8:dc:3a:bd:69:09:d9:8b: d2:cc:3f:bf:a9:8f:72:e8:c2:c7:67:46:30:da:a7:71:05:17: 29:49:7e:15:9f:8d:67:8e:89:5a:fc:5c:4c:72:57:5f:69:14: 56:de:55:fd:b3:66:ee:48:a8:97:14:07:41:2a:0d:a1:a5:12: 5e:86:b1:c6:36:5b:ac:1e:25:bb:3f:bb:a0:5c:15:a6:ed:aa: 8b:65:29:70:10:85:5c:15:03:da:b4:67:03:ba:5a:f3:54:6a: 68:aa:8d:c2:30:b9:54:4a:da:cf:2f:e4:4f:95:06:48:83:77: f9:02:0e:44:cd:4f:b8:16:0e:7b:cf:04:12:94:45:67:d8:ee: f5:c9:18:93:99:58:64:a2:19:eb:e4:92:8a:7a:78:f0:ac:bb: d9:5a:a5:72:b5:0c:0e:a9:a9:e8:78:eb:1a:dd:be:34:8d:d9: ee:12:d3:c9:17:26:54:06:d9:2e:a8:27:96:4d:0b:72:ad:83: b6:03:c5:27:1b:54:fd:9f:fe:ad:7b:0c:b7:5b:25:df:70:a9: cc:ba:ab:af:04:6b:c8:a9:dc:f8:65:57:92:c9:1b:fa:a0:47: cb:e5:80:85:da:1f:f2:2b:3c:96:6e:b0:01:b9:d1:b3:bf:c5: bd:c3:2a:98 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzhC RkIzMEM3MkNBOTU0OEY3OTZDQzNENEZCNjAwNkI4ODNFMjcwMTAeFw0yNjAzMjYw ODI3NTJaFw0yNjEwMzAxNTMwMTlaMDMxMTAvBgNVBAMTKDQ3M0JCNUYzRjc2OUEw RUEwQzk2RTM2NzNEMTQzRjhDMzdEOTY4RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVgBShjPxGYXcIwnPTP545U/5a3NXKKOma4UZj2k1D19xsZvF8 xUu16DyoSWY/jhOc3ZndjsoAdMQDkbpqZhlui0KTd7UI1gy8c6ghApjtG5rbOj9m y6UsnUbOop0MOOOiLICR4JKaXrY5CAiqqbTKv4gB6GVCld/L45QCI9nrD/iWtylK WJS6GIZ3ME0x1pBJ1uPXO7sfaIQ7aZz+6jZZD/ACbDMfnJf1Fhj7kBLmBU0xbEEb fzVPdeW5KZfF6h9lEksxOaZtsk6a7TR+0gYt33mn2O6X0kY9OPioqb/xslsqcUiy ggFLaQ4bSbIiU9167INjJh7qyYZcb5ZHQSQ7AgMBAAGjggIHMIICAzAdBgNVHQ4E FgQURzu18/dpoOoMluNnPRQ/jDfZaNAwHwYDVR0jBBgwFoAUOL+zDHLKlUj3lsw9 T7YAa4g+JwEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1hJ L09MLXpESExLbFVqM2xzdzlUN1lBYTRnLUp3RS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvT0wtekRITEtsVWozbHN3OVQ3WUFhNGctSndFLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1hJL09MLXpESExLbFVqM2xzdzlU N1lBYTRnLUp3RS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBX pceX1dLLk1RK6Nw6vWkJ2YvSzD+/qY9y6MLHZ0Yw2qdxBRcpSX4Vn41njola/FxM cldfaRRW3lX9s2buSKiXFAdBKg2hpRJehrHGNlusHiW7P7ugXBWm7aqLZSlwEIVc FQPatGcDulrzVGpoqo3CMLlUStrPL+RPlQZIg3f5Ag5EzU+4Fg57zwQSlEVn2O71 yRiTmVhkohnr5JKKenjwrLvZWqVytQwOqanoeOsa3b40jdnuEtPJFyZUBtkuqCeW TQtyrYO2A8UnG1T9n/6tewy3WyXfcKnMuquvBGvIqdz4ZVeSyRv6oEfL5YCF2h/y KzyWbrABudGzv8W9wyqY -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:02 2026 by rpki-client