$ rpki-client -vvvf rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft File: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft (raw, json) Hash identifier: P7sp92eioFVhCXzg6fccIIH9I3AdwkVXT6936BnTg+Q= Subject key identifier: 47:E0:B1:45:EB:A8:C7:DE:46:F4:7B:2E:E3:07:74:8B:39:FD:53:FA Authority key identifier: 9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 Certificate issuer: /CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Certificate serial: 54587D3300A021C172A652A76758A80D693DFD8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft Manifest number: FF Signing time: Sat 14 Nov 2026 22:27:48 +0000 Manifest this update: Sat 14 Nov 2026 22:22:48 +0000 Manifest next update: Mon 16 Nov 2026 00:42:48 +0000 Files and hashes: 1: 3133382e3235322e31332e302f32342d3234203d3e20313331363338.roa (hash: ZxFVwcoOUjiuOptQUvoMY0HJlqBq+tEMKJCTrxaADFk=) 2: 9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl (hash: cQWnXFEQXhcJLCyeh9sCxPw4tyCCC5N2kM7Lz7npYO4=) 3: 3133382e3235322e31322e302f32342d3234203d3e203633393030.roa (hash: M8obdGIsjRO1zF80aPiV/zHcUxXnNPdWJ9IvgOv18N0=) 4: 3133382e3235322e31322e302f32332d3234203d3e203633393030.roa (hash: T1G4LI5dLLgbVaIvhEyF4d3yTLg74BSvJymMPoiXRRs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:58:7d:33:00:a0:21:c1:72:a6:52:a7:67:58:a8:0d:69:3d:fd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDE503CCE370A39E157F8519ACF1A47727CC1C3 Validity Not Before: Nov 14 22:22:48 2026 GMT Not After : Nov 16 00:42:48 2026 GMT Subject: CN=47E0B145EBA8C7DE46F47B2EE307748B39FD53FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:37:b3:96:43:5c:c9:58:f1:42:62:7f:76: 81:df:4b:c5:cb:54:b9:86:f9:88:76:b8:07:d0:99: 12:95:4c:56:3e:ac:c7:e3:74:cd:fa:f4:65:db:e4: f1:e1:4e:5e:60:c9:a7:49:87:8d:01:85:dd:99:73: 16:7b:ce:13:55:67:2b:8b:46:d3:3d:b9:bb:52:a6: 8b:b9:d9:68:21:9c:ff:82:df:6f:1a:c7:47:2a:3a: 55:09:d9:43:51:0c:e7:b9:55:cf:ea:46:9e:30:8a: 5c:36:03:01:48:cf:06:39:79:79:f7:0f:1e:e0:e3: e7:b8:74:96:56:e3:a2:ea:f1:e4:28:8b:99:ce:85: 74:a2:a1:a5:f8:b5:7a:22:5e:f7:01:28:fc:18:56: 3d:4d:20:95:33:8d:3d:13:c9:21:6d:6f:4c:41:31: 83:51:03:74:70:9e:d0:06:3d:ce:05:3e:f7:a4:e6: 0c:23:a7:ae:14:df:83:a4:c7:83:c9:62:3a:6b:29: 3a:42:41:58:42:f5:e0:31:7d:2b:d3:43:b2:5f:0e: 35:cb:19:f4:d5:01:3a:bf:46:e6:51:99:50:c1:ba: bd:1c:ba:ec:9b:4d:5c:16:64:2d:28:d2:e5:b3:83: dd:c1:90:c8:89:97:0b:84:17:6f:df:1f:81:31:d4: 75:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E0:B1:45:EB:A8:C7:DE:46:F4:7B:2E:E3:07:74:8B:39:FD:53:FA X509v3 Authority Key Identifier: keyid:9C:DE:50:3C:CE:37:0A:39:E1:57:F8:51:9A:CF:1A:47:72:7C:C1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/1/9CDE503CCE370A39E157F8519ACF1A47727CC1C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:5f:74:4c:02:44:f4:13:29:e0:30:a9:2c:72:17:ad:00:e5: 6d:e3:08:9c:9b:ef:7b:ee:cb:47:0f:05:a9:84:c9:0a:67:8c: be:b8:da:d9:29:0f:11:3c:95:d1:d7:60:8c:7c:e3:81:6a:f6: f3:1d:cd:ec:b5:df:15:ce:9f:a0:d9:1a:77:6c:44:09:87:85: f0:cf:da:fd:d5:c7:0a:93:35:9b:5f:a9:6c:57:d6:c6:95:81: c7:0d:f4:77:f1:37:db:ba:c7:17:fb:24:d3:d3:39:69:87:28: f1:3f:54:ff:ff:b9:de:95:21:64:a8:a3:9c:4f:5a:3d:3a:80: 1f:50:c4:7e:51:46:7f:62:82:72:ba:c5:26:21:8d:12:9c:a1: 6f:c9:91:4c:f0:99:0a:77:4a:c6:be:0b:86:6b:08:82:df:f9: d1:49:73:c0:09:ad:7e:fc:43:de:41:13:dc:b8:a5:b5:12:d7: 0e:2a:23:38:99:ee:6e:7f:f0:47:36:dc:94:ae:a9:3a:69:33: 14:1a:ae:10:d5:3f:d7:39:9c:0c:e3:e5:8b:24:c4:52:71:6d: 61:2f:39:a8:9e:40:ba:bf:a2:5e:1d:0c:19:f2:02:74:fc:e6: 69:3f:0d:3a:70:83:45:c1:f7:ad:2b:b8:38:d7:a7:10:51:61: 6a:e2:37:d7 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUVFh9MwCgIcFyplKnZ1ioDWk9/Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFBNDc3 MjdDQzFDMzAeFw0yNjExMTQyMjIyNDhaFw0yNjExMTYwMDQyNDhaMDMxMTAvBgNV BAMTKDQ3RTBCMTQ1RUJBOEM3REU0NkY0N0IyRUUzMDc3NDhCMzlGRDUzRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/DezlkNcyVjxQmJ/doHfS8XL VLmG+Yh2uAfQmRKVTFY+rMfjdM369GXb5PHhTl5gyadJh40Bhd2ZcxZ7zhNVZyuL RtM9ubtSpou52WghnP+C328ax0cqOlUJ2UNRDOe5Vc/qRp4wilw2AwFIzwY5eXn3 Dx7g4+e4dJZW46Lq8eQoi5nOhXSioaX4tXoiXvcBKPwYVj1NIJUzjT0TySFtb0xB MYNRA3RwntAGPc4FPvek5gwjp64U34Okx4PJYjprKTpCQVhC9eAxfSvTQ7JfDjXL GfTVATq/RuZRmVDBur0cuuybTVwWZC0o0uWzg93BkMiJlwuEF2/fH4Ex1HUjAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUR+CxReuox95G9Hsu4wd0izn9U/owHwYDVR0j BBgwFoAUnN5QPM43CjnhV/hRms8aR3J8wcMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWlVTTy8x LzlDREU1MDNDQ0UzNzBBMzlFMTU3Rjg1MTlBQ0YxQTQ3NzI3Q0MxQzMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvOUNERTUwM0NDRTM3MEEzOUUxNTdGODUxOUFDRjFB NDc3MjdDQzFDMy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1pVU08vMS85Q0RFNTAzQ0NFMzcwQTM5 RTE1N0Y4NTE5QUNGMUE0NzcyN0NDMUMzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM190TAJE9BMp4DCp LHIXrQDlbeMInJvve+7LRw8FqYTJCmeMvrja2SkPETyV0ddgjHzjgWr28x3N7LXf Fc6foNkad2xECYeF8M/a/dXHCpM1m1+pbFfWxpWBxw30d/E327rHF/sk09M5aYco 8T9U//+53pUhZKijnE9aPTqAH1DEflFGf2KCcrrFJiGNEpyhb8mRTPCZCndKxr4L hmsIgt/50UlzwAmtfvxD3kET3LiltRLXDiojOJnubn/wRzbclK6pOmkzFBquENU/ 1zmcDOPliyTEUnFtYS85qJ5Aur+iXh0MGfICdPzmaT8NOnCDRcH3rSu4ONenEFFh auI31w== -----END CERTIFICATE-----Generated at Sun Nov 15 13:10:40 2026 by rpki-client