$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft File: KQF6QhbLesJUItjytuveOXjBS-c.mft (raw, json) Hash identifier: vKjI8SvwSTWdBwBA3pbxUxxCbh/4GNvHbzBq/WjTai0= Subject key identifier: 7A:1F:7A:84:67:00:4D:E3:64:99:1A:45:B9:A5:DA:8E:67:C1:AD:17 Authority key identifier: 29:01:7A:42:16:CB:7A:C2:54:22:D8:F2:B6:EB:DE:39:78:C1:4B:E7 Certificate issuer: /CN=29017A4216CB7AC25422D8F2B6EBDE3978C14BE7 Certificate serial: 01C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft Manifest number: 01C8 Signing time: Thu 26 Mar 2026 21:58:16 +0000 Manifest this update: Thu 26 Mar 2026 21:58:16 +0000 Manifest next update: Fri 27 Mar 2026 03:58:16 +0000 Files and hashes: 1: 8hpjA8jUWHTJ-XrRrIgVLenTo1I.roa (hash: 5xd0ZvP39RbAt2K0chW0V9e6/aVioqMYr7abYJ2trW0=) 2: KQF6QhbLesJUItjytuveOXjBS-c.crl (hash: rezNyknnqFKNguPLGgarb7Xvffc92D3qYlugbhyzc2w=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 03:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29017A4216CB7AC25422D8F2B6EBDE3978C14BE7 Validity Not Before: Mar 26 21:58:16 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7A1F7A8467004DE364991A45B9A5DA8E67C1AD17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:28:2a:6c:31:ba:3c:a5:ca:bb:e8:75:be: 0c:aa:bb:9b:01:5c:ae:5c:7a:34:92:8b:8c:2e:73: 4b:35:eb:94:d8:84:a7:f0:9a:fb:c4:00:00:a4:26: 50:5e:be:cd:2b:a6:79:5c:94:df:42:0f:d2:64:99: 22:75:98:63:cd:00:17:9e:17:3a:52:22:3a:ce:0f: 53:3d:7b:46:ca:e6:52:d8:f5:ae:12:ca:e7:ae:f1: 93:79:90:a9:bf:7f:7a:d2:5e:db:77:11:92:52:11: 68:73:99:8f:a5:ff:c5:6e:8a:e1:a7:57:52:87:a7: 02:af:9d:7d:09:61:6f:a7:a5:07:26:65:96:f5:f1: be:fc:c6:30:59:e6:81:c2:f2:c6:30:f4:21:92:e4: 42:83:17:ec:f7:d8:3e:f5:ed:64:35:ee:7b:92:da: 50:fa:b2:9e:44:36:31:91:06:80:a4:5b:1c:db:f4: df:54:7a:24:09:97:04:88:1f:94:1d:be:26:9e:5c: 59:b7:6f:1e:e6:ad:ae:0e:b5:c4:53:62:ac:a8:ea: 94:2a:ce:32:68:cb:28:7f:bf:9b:75:0f:9f:fe:46: a7:03:1c:ec:7a:2b:99:dd:35:62:a9:0f:ad:b0:17: f4:5b:5b:48:23:34:6b:bc:cc:35:cc:9a:6d:a8:c4: e1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1F:7A:84:67:00:4D:E3:64:99:1A:45:B9:A5:DA:8E:67:C1:AD:17 X509v3 Authority Key Identifier: keyid:29:01:7A:42:16:CB:7A:C2:54:22:D8:F2:B6:EB:DE:39:78:C1:4B:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c4:75:e4:fa:ad:9f:87:6c:61:9c:30:8e:80:d9:5e:a3:6c: 66:8f:42:cc:3b:86:d1:80:39:db:e9:8f:99:a6:35:82:fe:16: fb:47:a8:df:78:62:da:e5:2b:fa:77:6e:52:c4:41:0c:ca:69: ab:b0:23:1b:fc:d9:f9:2e:b4:0b:ef:ef:5f:be:d9:d9:8a:13: 91:25:91:bd:66:40:68:81:62:e1:4d:a7:92:a4:94:87:d6:e6: d8:9c:e0:ed:e0:86:c9:4d:39:11:b9:84:ba:ca:94:a3:1d:6c: 1f:0e:87:1b:cb:1c:54:66:97:0b:b6:3e:f6:2b:76:a0:97:4d: fd:98:3f:d9:66:b7:ce:a1:ed:22:fa:60:ee:67:4b:1b:bc:0b: a2:d9:74:85:dd:62:dd:7e:38:bd:8e:9c:68:95:00:23:59:e9: 4d:8c:c4:60:46:6c:fb:0b:47:73:87:da:48:96:8f:90:1d:43: 82:d5:74:e0:3f:c1:91:fe:fd:30:f7:40:c7:b5:e9:f9:db:a2: c2:82:08:d1:3f:b1:9c:c5:89:d5:78:5e:37:a6:18:a6:36:83: a1:02:47:c9:5c:86:ed:55:d2:d6:75:e8:26:7b:58:58:b5:56: 49:85:5d:db:8d:c1:c2:16:f8:38:cb:67:b7:a2:59:83:b3:23: e6:37:c6:af -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICAckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjkw MTdBNDIxNkNCN0FDMjU0MjJEOEYyQjZFQkRFMzk3OEMxNEJFNzAeFw0yNjAzMjYy MTU4MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdBMUY3QTg0NjcwMDRE RTM2NDk5MUE0NUI5QTVEQThFNjdDMUFEMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtdCgqbDG6PKXKu+h1vgyqu5sBXK5cejSSi4wuc0s165TYhKfw mvvEAACkJlBevs0rpnlclN9CD9JkmSJ1mGPNABeeFzpSIjrOD1M9e0bK5lLY9a4S yueu8ZN5kKm/f3rSXtt3EZJSEWhzmY+l/8VuiuGnV1KHpwKvnX0JYW+npQcmZZb1 8b78xjBZ5oHC8sYw9CGS5EKDF+z32D717WQ17nuS2lD6sp5ENjGRBoCkWxzb9N9U eiQJlwSIH5QdviaeXFm3bx7mra4OtcRTYqyo6pQqzjJoyyh/v5t1D5/+RqcDHOx6 K5ndNWKpD62wF/RbW0gjNGu8zDXMmm2oxOGXAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUeh96hGcATeNkmRpFuaXajmfBrRcwHwYDVR0jBBgwFoAUKQF6QhbLesJUItjy tuveOXjBS+cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUUlTREEv S1FGNlFoYkxlc0pVSXRqeXR1dmVPWGpCUy1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9LUUY2UWhiTGVzSlVJdGp5dHV2ZU9YakJTLWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9RSVNEQS9LUUY2UWhiTGVzSlVJdGp5dHV2 ZU9YakJTLWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMR1 5Pqtn4dsYZwwjoDZXqNsZo9CzDuG0YA52+mPmaY1gv4W+0eo33hi2uUr+nduUsRB DMppq7AjG/zZ+S60C+/vX77Z2YoTkSWRvWZAaIFi4U2nkqSUh9bm2Jzg7eCGyU05 EbmEusqUox1sHw6HG8scVGaXC7Y+9it2oJdN/Zg/2Wa3zqHtIvpg7mdLG7wLotl0 hd1i3X44vY6caJUAI1npTYzEYEZs+wtHc4faSJaPkB1DgtV04D/Bkf79MPdAx7Xp +duiwoII0T+xnMWJ1XheN6YYpjaDoQJHyVyG7VXS1nXoJntYWLVWSYVd243Bwhb4 OMtnt6JZg7Mj5jfGrw== -----END CERTIFICATE-----Generated at Fri Mar 27 01:54:03 2026 by rpki-client