$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft File: 866155EC56EF0A61BC489259EA6B444F2596FF9E.mft (raw, json) Hash identifier: 8GfCRfzBYtkIDZ3hOcAHqo9SU0T9rn57KvgB0Z3i7ps= Subject key identifier: 8C:AD:AB:D3:A1:55:C6:58:CE:CE:7A:05:47:AE:2E:50:71:23:63:72 Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E Certificate issuer: /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E Certificate serial: 38ECBCBCE63568AECD3BCF4468D62216B8EB34E9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft Manifest number: C2 Signing time: Sat 26 Sep 2026 03:10:06 +0000 Manifest this update: Sat 26 Sep 2026 03:05:06 +0000 Manifest next update: Sun 27 Sep 2026 04:09:06 +0000 Files and hashes: 1: 866155EC56EF0A61BC489259EA6B444F2596FF9E.crl (hash: VXpTDpLQmoqEk7BC6J2Vf6MNE18pLVep197W3Fcea/s=) 2: 3132322e3235352e38302e302f32302d3234203d3e2032393134.roa (hash: fMdNagEZlOANeSxcOpb3w/TF/IYf3DkNkif0u6p7BJo=) 3: 3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa (hash: QsixafQjwfqu9M7sBGz7C/Kx4ATf5EPodViRplY14v8=) 4: 3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa (hash: 5asE5DvsTfpB1BVRf4zu0Zel18vuQX5T6T90JBepePs=) 5: 36312e35382e34312e3137362f32382d3238203d3e2033393439.roa (hash: 8+1bqHrAQFD10kktfKxge62Vv7sjt8foTbNXn1au08A=) 6: 36312e35382e33342e302f32352d3235203d3e203138303138.roa (hash: sEbgj8r5BW9LG+uLbdsnQ3mfWS9qyXUgDZxxUrhdajU=) 7: 36312e35382e33322e302f32302d3234203d3e2032393134.roa (hash: 5f4R2kruXwvonwhPEwdiJqWNobqGweT9ncTpgiNvvP8=) 8: 323030313a6434303a3a2f33322d3332203d3e2032393134.roa (hash: 95cinPFxr6M1UrLSOID8fzCFDcqIv0aWY/wubzGwKoY=) 9: 3132322e3235352e39332e3131322f32382d3238203d3e203138303138.roa (hash: DCuf39QCWplBT1yHKKE16KE93ZquNcCivbp7rdZaTpo=) 10: 3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa (hash: jFOqKNSTBrTIV1xUzqrbetFhA6QtKyhxqkPiIbQ8Meo=) 11: 3132322e3235352e39342e302f32382d3238203d3e203138303138.roa (hash: 1FyQfERQbzRtqHMN+lCM3804V/dGWG068p//0dtL/f4=) 12: 36312e35382e34312e3132382f32392d3239203d3e20313331363138.roa (hash: E6IxpTdYXlAMqeX0+c0IU8U2bczaMIO7WYlkAnDJQFE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 04:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ec:bc:bc:e6:35:68:ae:cd:3b:cf:44:68:d6:22:16:b8:eb:34:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E Validity Not Before: Sep 26 03:05:06 2026 GMT Not After : Sep 27 04:09:06 2026 GMT Subject: CN=8CADABD3A155C658CECE7A0547AE2E5071236372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:66:ed:d6:1f:35:07:75:fc:06:c6:6b:52: e0:b1:7f:8e:73:0b:f2:66:35:87:5c:38:98:5c:d7: 14:f3:9d:98:5b:01:93:82:15:ad:12:34:f5:3c:72: 44:c0:d7:d5:75:d9:f7:de:8b:7f:fa:39:0d:c7:f5: fb:6b:a9:f0:ee:d3:1c:25:5f:e4:fc:14:84:18:1a: 43:34:4d:60:01:a0:40:92:48:38:fd:63:3f:da:ca: 3b:71:9f:0c:31:ed:14:40:74:4d:f7:18:0c:dc:91: 0f:5a:29:3f:8d:59:2f:40:83:6f:19:c6:35:27:aa: 52:df:ae:2a:2f:5a:aa:44:f1:2f:74:37:e8:46:2a: ce:27:d4:ae:c1:16:28:6d:8d:01:b9:1e:cb:a7:92: 0a:51:33:cd:45:b8:97:a7:15:a7:a2:25:15:59:fa: 6d:00:39:d6:39:80:56:d0:b7:8a:20:64:5c:5a:65: 78:56:0b:ce:97:c2:49:61:fb:f2:4b:3d:33:61:9e: e0:94:1b:b8:7a:a5:cf:58:f5:46:d1:5b:9b:9b:9c: 81:81:ae:0b:0c:64:56:ed:5d:54:57:bd:10:3f:d1: 00:37:46:7c:fe:08:18:70:1b:6f:08:64:23:61:3d: 60:b3:3c:62:fd:76:e9:05:6c:17:de:c8:9c:83:6b: e3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AD:AB:D3:A1:55:C6:58:CE:CE:7A:05:47:AE:2E:50:71:23:63:72 X509v3 Authority Key Identifier: keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fe:18:83:7f:98:21:97:3d:a3:f5:a2:86:4a:97:02:04:c8: f9:62:0c:9e:8f:6c:10:0b:0a:a0:e9:ca:0f:e3:32:eb:2b:e1: 66:c2:3b:2b:19:c9:78:87:66:73:15:58:45:8f:27:d2:e9:2f: c6:8e:a8:49:1f:a8:6c:c3:ee:59:a8:91:d7:2f:7d:b5:17:a5: d1:82:4c:5c:d9:11:e8:1e:19:98:3c:5a:82:51:8c:0b:1c:d8: dd:83:69:85:84:7b:2c:5b:49:c6:99:1f:92:e1:d2:19:59:35: 03:d4:08:18:83:04:60:6f:5e:0b:92:53:76:68:a5:59:d2:4c: 58:1e:61:97:08:ba:8f:bc:d6:50:16:f9:7e:cd:d5:f5:5f:e5: fc:6c:89:96:c9:d3:9a:44:4e:f5:76:3e:20:66:cf:a2:26:e9: 6d:b8:25:a0:01:fc:40:71:43:27:c8:5e:2d:ef:a0:83:28:fd: 51:62:d6:3e:83:83:23:79:c7:ac:df:a5:36:14:1e:2b:ef:ba: fd:45:b5:21:12:d6:fa:ee:b4:0d:3d:2c:65:ea:8b:91:0a:be: 08:68:0d:b3:24:6c:f0:c3:36:9a:5b:05:bc:56:ab:42:de:2f: b4:98:92:2c:51:69:13:0c:b2:51:ac:56:01:85:cc:48:90:e5: 41:d7:ae:e0 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUOOy8vOY1aK7NO89EaNYiFrjrNOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2MTU1RUM1NkVGMEE2MUJDNDg5MjU5RUE2QjQ0NEYy NTk2RkY5RTAeFw0yNjA5MjYwMzA1MDZaFw0yNjA5MjcwNDA5MDZaMDMxMTAvBgNV BAMTKDhDQURBQkQzQTE1NUM2NThDRUNFN0EwNTQ3QUUyRTUwNzEyMzYzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlWbt1h81B3X8BsZrUuCxf45z C/JmNYdcOJhc1xTznZhbAZOCFa0SNPU8ckTA19V12ffei3/6OQ3H9ftrqfDu0xwl X+T8FIQYGkM0TWABoECSSDj9Yz/ayjtxnwwx7RRAdE33GAzckQ9aKT+NWS9Ag28Z xjUnqlLfriovWqpE8S90N+hGKs4n1K7BFihtjQG5HsunkgpRM81FuJenFaeiJRVZ +m0AOdY5gFbQt4ogZFxaZXhWC86Xwklh+/JLPTNhnuCUG7h6pc9Y9UbRW5ubnIGB rgsMZFbtXVRXvRA/0QA3Rnz+CBhwG28IZCNhPWCzPGL9dukFbBfeyJyDa+PdAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUjK2r06FVxljOznoFR64uUHEjY3IwHwYDVR0j BBgwFoAUhmFV7FbvCmG8SJJZ6mtETyWW/54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOVFQv MC84NjYxNTVFQzU2RUYwQTYxQkM0ODkyNTlFQTZCNDQ0RjI1OTZGRjlFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzg2NjE1NUVDNTZFRjBBNjFCQzQ4OTI1OUVBNkI0 NDRGMjU5NkZGOUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05UVC8wLzg2NjE1NUVDNTZFRjBB NjFCQzQ4OTI1OUVBNkI0NDRGMjU5NkZGOUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAf/hiDf5ghlz2j 9aKGSpcCBMj5Ygyej2wQCwqg6coP4zLrK+FmwjsrGcl4h2ZzFVhFjyfS6S/GjqhJ H6hsw+5ZqJHXL321F6XRgkxc2RHoHhmYPFqCUYwLHNjdg2mFhHssW0nGmR+S4dIZ WTUD1AgYgwRgb14LklN2aKVZ0kxYHmGXCLqPvNZQFvl+zdX1X+X8bImWydOaRE71 dj4gZs+iJultuCWgAfxAcUMnyF4t76CDKP1RYtY+g4Mjeces36U2FB4r77r9RbUh Etb67rQNPSxl6ouRCr4IaA2zJGzwwzaaWwW8VqtC3i+0mJIsUWkTDLJRrFYBhcxI kOVB167g -----END CERTIFICATE-----Generated at Sun Sep 27 00:31:17 2026 by rpki-client