$ rpki-client -vvvf rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft File: 55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft (raw, json) Hash identifier: sxmDBdEp19sLW4R5/t0wJJt0lmpBl1uEQsDQrKYtU0c= Subject key identifier: 13:0D:C7:AC:12:F3:98:34:D8:E5:01:6A:00:49:97:D7:B7:EF:FE:0D Authority key identifier: 55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97 Certificate issuer: /CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697 Certificate serial: 07E432D094CA7BB57828649A721A2B0610EE79BF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer Subject info access: rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 16:01:35 +0000 Manifest this update: Sat 26 Sep 2026 15:56:35 +0000 Manifest next update: Sun 27 Sep 2026 16:27:35 +0000 Files and hashes: 1: 3130332e3137382e33372e302f32342d3234203d3e203633383937.roa (hash: dBLtMtWolWPZlDBlQNEYLj3mkdf7gjz7o7zCR6CwyI8=) 2: 3130332e3132372e3233372e302f32342d3234203d3e203633383937.roa (hash: hLL+Q2dyswUs44c6qgjOFEnwxGdXH4rlp2JBE4jLeaI=) 3: 3130332e3137382e33362e302f32342d3234203d3e203633383937.roa (hash: 2azY5QpqkCNrePgWVeAMiXZ5eEir6bAcf/jcts5dKaA=) 4: 323430303a343436303a3a2f33322d3332203d3e203633383937.roa (hash: E17SRJCOW39t5BmRtT7oN3GTu5stDbJU5j3SmVWuYIY=) 5: 3130332e3132372e3233392e302f32342d3234203d3e203633383937.roa (hash: RXB9NbnwUCoIODvg6FbjUt5jkhMEopd79EmJGHVqbuA=) 6: 3130332e3132372e3233382e302f32342d3234203d3e20323038393332.roa (hash: nt3GnjyC68uevHd0pUpAVGqFmziCH3936csURlgKs7c=) 7: 3130332e3137382e33362e302f32332d3233203d3e203633383937.roa (hash: TrUjkrPBuZfmFYv7xRBVx68uC1wSPuSMTE2msjPc8Oc=) 8: 55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl (hash: dpOgA42+bPPhGYeclFLRWFSAuhadX1eWRZ5ohvSK9ts=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 09:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e4:32:d0:94:ca:7b:b5:78:28:64:9a:72:1a:2b:06:10:ee:79:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697 Validity Not Before: Sep 26 15:56:35 2026 GMT Not After : Sep 27 16:27:35 2026 GMT Subject: CN=130DC7AC12F39834D8E5016A004997D7B7EFFE0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:90:0c:da:13:c3:7d:9e:03:08:60:71:e0:c1: 32:99:a0:58:32:97:f9:3d:2d:64:9b:47:32:d8:23: 64:e6:e5:23:3d:0c:4f:bf:68:62:c6:7f:8b:db:d0: 7d:e4:5c:a3:bd:31:e8:52:14:91:b0:78:4a:d7:c5: 2b:98:1b:05:72:2a:7a:7a:0d:dd:d5:32:76:b0:0f: 01:c8:3a:e2:d4:f5:55:79:8a:f7:d0:03:8d:c0:c8: 34:e8:26:47:1f:36:06:30:8b:56:56:8e:20:de:dd: 4d:c7:28:a6:43:b1:33:81:69:d4:b4:55:bb:1f:ac: 0f:5a:5c:9f:6d:43:b9:b5:0c:b3:f3:bc:d9:68:9a: 69:70:c4:9c:df:51:00:7d:3c:96:35:1f:91:59:ad: b2:6d:20:b6:10:9e:e2:40:12:0f:73:71:01:53:ed: 7c:69:7e:88:4f:be:ac:e5:80:bc:81:e1:92:62:80: 24:38:d4:96:54:4d:4e:65:db:f3:b3:49:11:a2:61: fe:d6:ec:fc:1c:80:d5:f6:63:70:07:59:b4:65:3a: bc:b6:ca:3d:79:7d:ce:24:71:46:83:cc:be:50:af: 89:c0:a6:50:87:e6:df:2c:9e:b4:42:ba:57:3a:1e: fe:ae:aa:31:be:ed:2e:db:48:dc:87:cf:4a:e5:6b: 87:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0D:C7:AC:12:F3:98:34:D8:E5:01:6A:00:49:97:D7:B7:EF:FE:0D X509v3 Authority Key Identifier: keyid:55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:15:e7:a4:7b:0b:b8:5c:ae:ad:37:eb:4a:91:73:34:15:f6: 5d:42:ff:d7:15:5c:e3:47:f9:cc:3e:61:8f:04:29:3e:6d:e5: 87:2f:57:95:cd:63:aa:bf:b5:66:c5:55:ee:0c:73:37:b2:ef: 11:22:ca:90:de:b4:e3:30:22:e5:56:84:41:60:80:1f:a8:0b: bf:66:c1:e7:70:b3:de:8d:25:93:d4:07:34:1b:a1:33:1c:56: ef:e7:6d:68:de:80:23:07:2b:53:4a:5d:da:27:c5:8e:89:96: eb:92:17:b8:d5:eb:38:17:2d:2c:96:56:5f:7b:c0:f0:28:53: 84:74:b2:9a:85:fb:38:65:b4:4c:1b:9b:a8:f2:09:9f:9f:0a: cb:47:84:18:62:e1:32:c0:fc:ec:80:79:87:1c:a8:8b:db:66: af:01:97:39:49:48:ac:14:a7:68:18:82:36:98:3f:51:4c:cf: d1:e3:93:25:43:61:1c:b0:fc:91:a2:6a:51:4d:67:28:32:a7: d3:f0:83:84:0f:7b:e3:bb:8d:6e:f4:03:0f:86:d7:dc:3d:a3: b6:79:bc:1e:48:de:76:ff:23:89:48:c4:bd:23:15:9e:84:20: cb:6f:f5:24:5f:97:fa:49:80:11:a7:7e:dc:0a:60:87:bd:ab: 92:ac:b3:99 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUB+Qy0JTKe7V4KGSachorBhDueb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwNDJFNDE2QUREQzAzQTUxNjRBN0JGRkRGRjJDM0JG Mjg1RTY5NzAeFw0yNjA5MjYxNTU2MzVaFw0yNjA5MjcxNjI3MzVaMDMxMTAvBgNV BAMTKDEzMERDN0FDMTJGMzk4MzREOEU1MDE2QTAwNDk5N0Q3QjdFRkZFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJkAzaE8N9ngMIYHHgwTKZoFgy l/k9LWSbRzLYI2Tm5SM9DE+/aGLGf4vb0H3kXKO9MehSFJGweErXxSuYGwVyKnp6 Dd3VMnawDwHIOuLU9VV5ivfQA43AyDToJkcfNgYwi1ZWjiDe3U3HKKZDsTOBadS0 VbsfrA9aXJ9tQ7m1DLPzvNlommlwxJzfUQB9PJY1H5FZrbJtILYQnuJAEg9zcQFT 7XxpfohPvqzlgLyB4ZJigCQ41JZUTU5l2/OzSRGiYf7W7PwcgNX2Y3AHWbRlOry2 yj15fc4kcUaDzL5Qr4nAplCH5t8snrRCulc6Hv6uqjG+7S7bSNyHz0rla4cdAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUEw3HrBLzmDTY5QFqAEmX17fv/g0wHwYDVR0j BBgwFoAUVQQuQWrdwDpRZKe//f8sO/KF5pcwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVk9DT00v MC81NTA0MkU0MTZBRERDMDNBNTE2NEE3QkZGREZGMkMzQkYyODVFNjk3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzU1MDQyRTQxNkFEREMwM0E1MTY0QTdCRkZERkYy QzNCRjI4NUU2OTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WT0NPTS8wLzU1MDQyRTQxNkFEREMw M0E1MTY0QTdCRkZERkYyQzNCRjI4NUU2OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6Feekewu4XK6t N+tKkXM0FfZdQv/XFVzjR/nMPmGPBCk+beWHL1eVzWOqv7VmxVXuDHM3su8RIsqQ 3rTjMCLlVoRBYIAfqAu/ZsHncLPejSWT1Ac0G6EzHFbv521o3oAjBytTSl3aJ8WO iZbrkhe41es4Fy0sllZfe8DwKFOEdLKahfs4ZbRMG5uo8gmfnwrLR4QYYuEywPzs gHmHHKiL22avAZc5SUisFKdoGII2mD9RTM/R45MlQ2EcsPyRompRTWcoMqfT8IOE D3vju41u9AMPhtfcPaO2ebweSN52/yOJSMS9IxWehCDLb/UkX5f6SYARp37cCmCH vauSrLOZ -----END CERTIFICATE-----Generated at Sat Sep 26 18:33:31 2026 by rpki-client