$ rpki-client -vvvf rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft File: E2FEF6929D00129C0EC91DE25524363E78F319D7.mft (raw, json) Hash identifier: IODLj3lSZWAlYyYvv5rY/YhyH49UWPSYvqyg28V5wQg= Subject key identifier: A5:5F:55:45:45:AC:65:C0:57:CD:F2:56:59:16:69:2F:2F:42:DC:C1 Authority key identifier: E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7 Certificate issuer: /CN=E2FEF6929D00129C0EC91DE25524363E78F319D7 Certificate serial: 38A469D5236ADD22B44230163D506727C0F02207 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft Manifest number: B9 Signing time: Thu 24 Sep 2026 11:34:39 +0000 Manifest this update: Thu 24 Sep 2026 11:29:39 +0000 Manifest next update: Fri 25 Sep 2026 15:24:39 +0000 Files and hashes: 1: E2FEF6929D00129C0EC91DE25524363E78F319D7.crl (hash: u+8F8gKAYM4V0ALT/tDq5zKxgSf33uvbanXnkul3hBI=) 2: 3130332e3133382e3130362e302f32342d3234203d3e203137343038.roa (hash: 7hhipyt4Di6KylqpdZkFLgokgRg/ZHGamIeaZ0lFOO0=) 3: 3130332e3133382e3130362e302f32332d3234203d3e203137343038.roa (hash: nhkWWbEcHMQGryDxoH+6rKNwicNf5iRZvw6pvqc84z4=) 4: 3130332e3133382e3130372e302f32342d3234203d3e203137343038.roa (hash: De1HIXtsANXzLfuAQRrXgqC4plFB3ZURvmTwZ7qHlC8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a4:69:d5:23:6a:dd:22:b4:42:30:16:3d:50:67:27:c0:f0:22:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2FEF6929D00129C0EC91DE25524363E78F319D7 Validity Not Before: Sep 24 11:29:39 2026 GMT Not After : Sep 25 15:24:39 2026 GMT Subject: CN=A55F554545AC65C057CDF2565916692F2F42DCC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:ac:9b:8a:e9:6d:b7:cb:fe:aa:0d:2f:8e: 3b:6c:bc:85:04:dc:9b:7d:5d:12:01:06:93:88:0d: 2c:96:0a:5a:b3:bb:62:ca:af:b6:5e:ea:9d:56:fb: 63:55:13:82:0b:bc:4f:a1:1e:fb:20:5a:3c:23:5f: 44:a9:ff:bf:84:6e:86:89:62:a2:db:9c:1d:08:b7: 41:f0:5b:7e:4a:d4:be:cb:5b:a2:62:8d:b1:55:83: 8a:e6:78:81:e3:b0:9b:23:86:2d:a1:57:70:4f:88: a0:0d:c5:fd:fc:fb:ec:eb:5a:43:0b:f7:8b:aa:2a: 72:3e:f0:c1:a8:61:3c:9a:4d:35:3a:d8:7c:99:e9: 17:6d:43:a1:51:4f:29:ef:11:99:9a:21:a9:7b:d8: 1e:0c:23:ce:70:ab:c0:ba:2a:c6:6e:c1:d3:9d:27: 08:e7:4a:0e:81:b4:91:23:19:39:2b:1e:19:65:99: 27:20:8a:03:b1:aa:ec:4b:05:fe:40:be:7d:06:a6: 76:e5:c8:ad:1a:68:a1:e2:db:95:c8:9a:d9:68:ce: 0c:0f:cc:c1:85:a0:19:1a:5c:27:e2:2f:69:b9:f5: aa:52:96:f6:92:04:33:04:c1:46:34:e8:07:b8:e3: 3a:4b:05:a1:0f:61:9f:c1:e2:c2:70:d2:38:92:61: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5F:55:45:45:AC:65:C0:57:CD:F2:56:59:16:69:2F:2F:42:DC:C1 X509v3 Authority Key Identifier: keyid:E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:0c:4e:64:60:29:53:3c:64:ec:e9:4b:83:97:bb:b7:32:7a: 63:58:03:83:74:52:51:85:84:13:95:ae:79:16:c4:02:03:f4: ee:81:53:60:1e:1b:5b:14:e0:23:a6:33:84:08:e5:51:d1:8d: 51:a7:44:43:bf:a9:52:be:3f:53:2c:01:8a:99:a9:2c:13:82: 71:10:7f:2f:3b:a2:85:2f:ea:6f:94:c4:23:5b:00:3d:6b:05: 45:ee:17:ca:4d:82:57:7c:dd:ac:ae:a2:46:21:b4:16:29:d2: f1:99:10:65:b3:62:b9:bb:6a:02:af:c7:f6:96:56:f9:66:c4: 5d:df:5e:08:1f:6a:07:6a:7e:a7:c8:56:ec:30:44:5b:d2:dd: f0:ea:6e:df:a1:62:c8:11:59:a8:fa:eb:f4:84:44:93:f1:58: ee:96:1a:7d:db:2e:d2:c8:53:68:dc:e9:e6:8c:f6:be:70:47: 52:61:80:00:90:15:a4:8b:a9:c1:3e:75:1e:d9:b7:1b:e6:fc: 67:6c:db:62:14:cf:45:5d:0d:4f:5b:11:70:09:e0:d5:e5:ca: 86:b3:43:5b:cd:f9:38:32:eb:c8:c4:6e:a6:39:1c:ea:dc:01: 3b:09:ca:4e:ee:86:96:e5:d1:c5:4f:5d:47:e7:9e:56:12:73: ac:1a:d4:9c -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUOKRp1SNq3SK0QjAWPVBnJ8DwIgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJGRUY2OTI5RDAwMTI5QzBFQzkxREUyNTUyNDM2M0U3 OEYzMTlENzAeFw0yNjA5MjQxMTI5MzlaFw0yNjA5MjUxNTI0MzlaMDMxMTAvBgNV BAMTKEE1NUY1NTQ1NDVBQzY1QzA1N0NERjI1NjU5MTY2OTJGMkY0MkRDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqy6ybiultt8v+qg0vjjtsvIUE 3Jt9XRIBBpOIDSyWClqzu2LKr7Ze6p1W+2NVE4ILvE+hHvsgWjwjX0Sp/7+EboaJ YqLbnB0It0HwW35K1L7LW6JijbFVg4rmeIHjsJsjhi2hV3BPiKANxf38++zrWkML 94uqKnI+8MGoYTyaTTU62HyZ6RdtQ6FRTynvEZmaIal72B4MI85wq8C6KsZuwdOd JwjnSg6BtJEjGTkrHhllmScgigOxquxLBf5Avn0GpnblyK0aaKHi25XImtlozgwP zMGFoBkaXCfiL2m59apSlvaSBDMEwUY06Ae44zpLBaEPYZ/B4sJw0jiSYY4nAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUpV9VRUWsZcBXzfJWWRZpLy9C3MEwHwYDVR0j BBgwFoAU4v72kp0AEpwOyR3iVSQ2PnjzGdcwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0FOVEVB U1kvMC9FMkZFRjY5MjlEMDAxMjlDMEVDOTFERTI1NTI0MzYzRTc4RjMxOUQ3LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0UyRkVGNjkyOUQwMDEyOUMwRUM5MURFMjU1 MjQzNjNFNzhGMzE5RDcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5URUFTWS8wL0UyRkVGNjky OUQwMDEyOUMwRUM5MURFMjU1MjQzNjNFNzhGMzE5RDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEDE5k YClTPGTs6UuDl7u3MnpjWAODdFJRhYQTla55FsQCA/TugVNgHhtbFOAjpjOECOVR 0Y1Rp0RDv6lSvj9TLAGKmaksE4JxEH8vO6KFL+pvlMQjWwA9awVF7hfKTYJXfN2s rqJGIbQWKdLxmRBls2K5u2oCr8f2llb5ZsRd314IH2oHan6nyFbsMERb0t3w6m7f oWLIEVmo+uv0hEST8Vjulhp92y7SyFNo3OnmjPa+cEdSYYAAkBWki6nBPnUe2bcb 5vxnbNtiFM9FXQ1PWxFwCeDV5cqGs0Nbzfk4MuvIxG6mORzq3AE7CcpO7oaW5dHF T11H555WEnOsGtSc -----END CERTIFICATE-----Generated at Thu Sep 24 17:03:26 2026 by rpki-client