$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft File: AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft (raw, json) Hash identifier: Dpt0JS62rK7UtGWgOOPhecg8sCWR6Jx7YsHr6ai/AII= Subject key identifier: 37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Certificate serial: 0EDF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft Manifest number: 0E43 Signing time: Thu 26 Mar 2026 12:27:57 +0000 Manifest this update: Thu 26 Mar 2026 12:27:57 +0000 Manifest next update: Sat 28 Mar 2026 12:27:57 +0000 Files and hashes: 1: AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl (hash: sFON9Cp0n406kfffEQZzDLjUWdVykSXbBYfBzZSsfxY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 03:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3807 (0xedf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Validity Not Before: Mar 26 12:27:57 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=372D66D089BD7DDFC0D3FACB220981EDE0C5968D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:a5:83:b4:12:b1:26:3f:09:69:85:93:4f: e3:76:ec:36:6c:ae:7c:2c:a9:40:28:2a:07:a7:c4: 8b:01:38:42:c8:0d:ea:c9:84:83:a7:a8:4a:6d:46: c5:19:31:8e:b9:ec:19:d7:af:89:81:99:81:b0:14: 2b:9e:14:e4:78:97:c7:40:fc:84:95:21:28:83:6f: bb:bc:b5:ad:37:75:5c:a2:84:c1:b2:00:a2:58:2f: 66:1e:18:3e:13:6d:c3:c6:81:30:5c:bf:0c:bf:a0: fd:05:1d:34:f7:cc:c2:ad:6e:34:64:00:98:40:37: 01:4f:f1:a5:55:4b:85:5e:44:5a:e5:bd:a8:7c:ec: 03:97:f6:68:46:d1:a5:6b:25:a7:26:29:07:69:df: 7f:59:4f:d0:0a:a6:16:09:e0:4b:f6:a6:59:51:79: ba:0c:fc:cb:20:b5:55:40:43:b6:12:2c:62:c6:3e: 2c:9a:11:6d:b7:da:7f:3d:7f:fb:2c:08:43:4e:37: f9:c8:55:c0:2d:5a:09:8a:08:e4:a6:44:e6:cb:73: 6b:f9:95:01:88:4b:7b:92:72:8b:22:7b:3a:b9:b4: 67:ff:8c:56:f0:4e:21:07:2c:76:02:7b:2e:d1:0b: ed:8a:d4:36:9f:3f:95:21:5c:bd:36:ba:34:fe:36: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D X509v3 Authority Key Identifier: keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d3:de:ca:a8:33:a4:11:fa:05:3b:17:25:e0:8e:c8:89:9b: 2e:fa:c2:66:fc:fb:67:57:93:6c:b0:e7:42:68:9d:33:25:79: 5a:43:9a:35:c2:e1:62:c3:a1:29:8d:de:72:e1:fc:26:2c:6c: db:c4:4a:5a:a8:f0:2d:d6:c5:6a:a9:89:f7:8a:e9:81:fd:51: 51:af:4c:51:ce:c9:7a:62:ba:52:4d:17:24:96:d2:9d:10:1d: 49:da:c3:12:a8:f6:5d:6b:37:28:52:ce:df:d3:db:9b:52:6d: 57:fa:ab:bb:4e:70:85:8a:ec:7f:ce:4a:cf:ba:37:be:3b:41: a8:51:da:c8:ce:59:dc:e3:08:d0:37:a3:90:1b:43:79:13:48: 71:96:d4:e2:8d:c2:7c:6e:09:b8:bb:54:b4:8b:57:44:9c:52: e9:b0:41:d4:0e:81:b5:f4:84:8b:77:80:d9:4d:ff:73:d3:bc: 31:67:11:c2:c8:55:75:64:81:c7:3b:c3:e1:fd:4b:94:23:99: 7f:51:ec:01:c9:43:4a:19:36:be:35:4e:23:97:02:30:5e:45: 8e:fd:fe:b5:99:8b:c4:76:d1:3f:1d:bf:63:8d:8f:81:2a:0c: 8d:dd:8b:8f:05:8c:2d:1f:23:58:7f:f5:a5:3a:6e:84:eb:a4: 7c:46:cb:bd -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgICDt8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1 NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yNjAzMjYx MjI3NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM3MkQ2NkQwODlCRDdE REZDMEQzRkFDQjIyMDk4MUVERTBDNTk2OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFfKWDtBKxJj8JaYWTT+N27DZsrnwsqUAoKgenxIsBOELIDerJ hIOnqEptRsUZMY657BnXr4mBmYGwFCueFOR4l8dA/ISVISiDb7u8ta03dVyihMGy AKJYL2YeGD4TbcPGgTBcvwy/oP0FHTT3zMKtbjRkAJhANwFP8aVVS4VeRFrlvah8 7AOX9mhG0aVrJacmKQdp339ZT9AKphYJ4Ev2pllReboM/MsgtVVAQ7YSLGLGPiya EW232n89f/ssCENON/nIVcAtWgmKCOSmRObLc2v5lQGIS3uScosiezq5tGf/jFbw TiEHLHYCey7RC+2K1DafP5UhXL02ujT+NmoFAgMBAAGjggINMIICCTAdBgNVHQ4E FgQUNy1m0Im9fd/A0/rLIgmB7eDFlo0wHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB 76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL0FGY3VtY1pPMWxM NmdkVUI3NkZzLWRSSzZady5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAL097KqDOkEfoFOxcl4I7IiZsu+sJm/PtnV5NssOdCaJ0zJXlaQ5o1wuFi w6Epjd5y4fwmLGzbxEpaqPAt1sVqqYn3iumB/VFRr0xRzsl6YrpSTRckltKdEB1J 2sMSqPZdazcoUs7f09ubUm1X+qu7TnCFiux/zkrPuje+O0GoUdrIzlnc4wjQN6OQ G0N5E0hxltTijcJ8bgm4u1S0i1dEnFLpsEHUDoG19ISLd4DZTf9z07wxZxHCyFV1 ZIHHO8Ph/UuUI5l/UewByUNKGTa+NU4jlwIwXkWO/f61mYvEdtE/Hb9jjY+BKgyN 3YuPBYwtHyNYf/WlOm6E66R8Rsu9 -----END CERTIFICATE-----Generated at Fri Mar 27 00:56:08 2026 by rpki-client