$ rpki-client -vvvf rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft File: 20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft (raw, json) Hash identifier: 77fjs5w0meeLK+q2Dj/vq6XoWC0/eYQiab8y62nntGg= Subject key identifier: D6:6E:D8:75:E7:2F:38:7B:7E:7B:ED:7D:A9:5A:89:EC:86:11:98:84 Authority key identifier: 20:E6:A3:BA:2C:4D:A1:64:07:FE:46:FD:4F:DF:6D:BD:BA:41:97:DC Certificate issuer: /CN=20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC Certificate serial: 2ED839F172BB1F980E494A9746C6099E10AA0BB3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft Manifest number: BB Signing time: Tue 22 Sep 2026 17:11:05 +0000 Manifest this update: Tue 22 Sep 2026 17:06:05 +0000 Manifest next update: Wed 23 Sep 2026 20:10:05 +0000 Files and hashes: 1: 20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl (hash: mezVEfg0UKe5/+k2r/EVSoEomcn8IpoX8FNvUppfoz8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d8:39:f1:72:bb:1f:98:0e:49:4a:97:46:c6:09:9e:10:aa:0b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC Validity Not Before: Sep 22 17:06:05 2026 GMT Not After : Sep 23 20:10:05 2026 GMT Subject: CN=D66ED875E72F387B7E7BED7DA95A89EC86119884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:68:52:20:31:f8:ba:45:93:60:ad:4d:34: 07:3a:f6:c2:35:58:b6:e0:ac:f2:67:ed:0b:f2:30: 8b:0d:a8:25:73:2e:c0:a7:1b:e0:bd:7f:dd:22:38: 31:8d:93:29:a2:5f:12:49:44:31:06:69:e5:d0:bf: ab:a9:58:bd:3b:9e:07:58:f6:33:3c:6e:50:37:0a: 60:6c:ae:96:1b:c2:c3:c0:02:e5:1c:5a:85:54:eb: af:c0:83:98:bd:65:69:3b:02:96:0f:a1:04:b8:49: c8:fd:61:13:ff:55:6a:4c:e2:bf:2a:20:be:1d:af: 1a:e2:c9:05:af:75:94:da:b4:6d:1e:cf:74:87:91: ed:7d:eb:fc:87:9c:f4:96:48:e8:d8:a3:b6:01:03: 4f:8e:6b:cc:73:a7:45:b6:81:0c:97:25:f7:50:cc: f2:7a:aa:7e:68:86:91:fa:e5:63:81:f0:9a:61:aa: 93:d5:f2:58:25:86:91:c8:2f:e1:e6:ac:b6:5c:c7: d8:c9:23:70:8a:58:fb:17:7a:9e:d5:5a:00:70:bd: 4c:81:b7:d3:da:76:79:ad:78:9b:58:bd:fa:6b:c8: bb:67:b7:24:10:ea:05:86:2b:f3:97:0f:97:9d:16: 06:2d:13:cd:b8:17:c7:fc:5a:58:ac:d0:79:24:b4: ad:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6E:D8:75:E7:2F:38:7B:7E:7B:ED:7D:A9:5A:89:EC:86:11:98:84 X509v3 Authority Key Identifier: keyid:20:E6:A3:BA:2C:4D:A1:64:07:FE:46:FD:4F:DF:6D:BD:BA:41:97:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0b:ed:fe:b3:b3:ab:83:9a:f0:ee:61:93:c3:e1:88:02:1e: 5a:49:23:8e:1d:f3:41:64:cc:3d:a1:0c:53:33:41:29:f7:91: 95:6a:d5:3f:bd:19:55:b1:e4:4c:f9:2b:04:07:1d:19:69:15: ce:6f:29:f3:61:f7:28:43:6f:b2:7f:5a:40:4a:78:8d:f0:a1: 23:cb:6f:18:c5:65:fc:5d:70:04:1a:02:90:52:4e:2f:f8:98: 59:bb:de:68:0a:6d:11:3a:ec:9a:e2:cc:e9:e4:bb:87:17:99: a9:b4:17:0d:00:fd:cc:9c:27:8e:17:53:28:4c:1c:21:bc:9a: d1:e0:34:80:71:f1:ee:f5:a3:aa:97:b7:5e:6f:68:42:98:30: 9d:06:c6:06:36:98:6f:b6:62:f2:b3:55:d4:91:c8:ee:bd:3f: de:bc:fd:2d:9f:98:50:dd:ee:91:cf:c8:37:27:ec:45:87:03: 46:7f:ab:79:64:02:b3:ae:07:c2:b0:db:89:fa:47:42:d1:e7: ea:69:cb:21:c2:18:1d:07:df:a6:c0:7f:18:37:df:ae:dc:58: c6:90:39:e7:f0:87:ac:bd:59:06:17:7a:97:50:d0:78:14:b6: 36:97:d7:28:95:57:c8:3f:49:bf:81:4a:15:a7:bb:37:e3:e3: 66:23:d8:0e -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIULtg58XK7H5gOSUqXRsYJnhCqC7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFNkEzQkEyQzREQTE2NDA3RkU0NkZENEZERjZEQkRC QTQxOTdEQzAeFw0yNjA5MjIxNzA2MDVaFw0yNjA5MjMyMDEwMDVaMDMxMTAvBgNV BAMTKEQ2NkVEODc1RTcyRjM4N0I3RTdCRUQ3REE5NUE4OUVDODYxMTk4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44WhSIDH4ukWTYK1NNAc69sI1 WLbgrPJn7QvyMIsNqCVzLsCnG+C9f90iODGNkymiXxJJRDEGaeXQv6upWL07ngdY 9jM8blA3CmBsrpYbwsPAAuUcWoVU66/Ag5i9ZWk7ApYPoQS4Scj9YRP/VWpM4r8q IL4drxriyQWvdZTatG0ez3SHke196/yHnPSWSOjYo7YBA0+Oa8xzp0W2gQyXJfdQ zPJ6qn5ohpH65WOB8JphqpPV8lglhpHIL+HmrLZcx9jJI3CKWPsXep7VWgBwvUyB t9PadnmteJtYvfpryLtntyQQ6gWGK/OXD5edFgYtE824F8f8Wlis0HkktK1bAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU1m7YdecvOHt+e+19qVqJ7IYRmIQwHwYDVR0j BBgwFoAUIOajuixNoWQH/kb9T99tvbpBl9wwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVJRE9V LzAvMjBFNkEzQkEyQzREQTE2NDA3RkU0NkZENEZERjZEQkRCQTQxOTdEQy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMEU2QTNCQTJDNERBMTY0MDdGRTQ2RkQ0RkRG NkRCREJBNDE5N0RDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVJRE9VLzAvMjBFNkEzQkEyQzRE QTE2NDA3RkU0NkZENEZERjZEQkRCQTQxOTdEQy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABUL7f6zs6uD mvDuYZPD4YgCHlpJI44d80FkzD2hDFMzQSn3kZVq1T+9GVWx5Ez5KwQHHRlpFc5v KfNh9yhDb7J/WkBKeI3woSPLbxjFZfxdcAQaApBSTi/4mFm73mgKbRE67JrizOnk u4cXmam0Fw0A/cycJ44XUyhMHCG8mtHgNIBx8e71o6qXt15vaEKYMJ0GxgY2mG+2 YvKzVdSRyO69P968/S2fmFDd7pHPyDcn7EWHA0Z/q3lkArOuB8Kw24n6R0LR5+pp yyHCGB0H36bAfxg3367cWMaQOefwh6y9WQYXepdQ0HgUtjaX1yiVV8g/Sb+BShWn uzfj42Yj2A4= -----END CERTIFICATE-----Generated at Tue Sep 22 22:09:24 2026 by rpki-client