$ rpki-client -vvvf rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft File: 671DA95F67D703A8EBC3330E782717679AE5E9FD.mft (raw, json) Hash identifier: IRbz7t1Vzpt0dgBilzV2IGTv5FbsdvEdDnmrzFfv2jM= Subject key identifier: 33:03:43:50:4A:AF:C9:40:9B:AB:A5:9E:A3:E9:89:4F:77:79:E1:9F Authority key identifier: 67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD Certificate issuer: /CN=671DA95F67D703A8EBC3330E782717679AE5E9FD Certificate serial: 15F7779841B6CB8CA710FC6C1FEDD1977D8B7278 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft Manifest number: B7 Signing time: Sun 20 Sep 2026 17:33:54 +0000 Manifest this update: Sun 20 Sep 2026 17:28:54 +0000 Manifest next update: Mon 21 Sep 2026 18:25:54 +0000 Files and hashes: 1: 323430323a343736303a3a2f33322d3438203d3e20323132393639.roa (hash: C3SLp2cLKJEoSfOCrv1QENdxIJcJ56ZPXagR0nS+hok=) 2: 323430323a343736303a3a2f33322d3438203d3e20313532363136.roa (hash: lKmthCTTisqjHpuoP2bikfzfGXpUjgsnHNJya4mfXq4=) 3: 671DA95F67D703A8EBC3330E782717679AE5E9FD.crl (hash: eKdPtlUMY/99s3WHbAX9kLSoJRKCV2QsBGcjT32sg98=) 4: 323430323a343736303a39633a3a2f34382d3438203d3e20333936393832.roa (hash: W+cJcGEBHA5nMvetfbU/MxRKQJYX8lMgJjfV6ST7azg=) 5: 323430323a343736303a3a2f34382d3438203d3e20333936393832.roa (hash: xNniVHF2D5n4PRBYJLC1H1m4ixoVY/+fUm+4DZvFSao=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 08:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f7:77:98:41:b6:cb:8c:a7:10:fc:6c:1f:ed:d1:97:7d:8b:72:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=671DA95F67D703A8EBC3330E782717679AE5E9FD Validity Not Before: Sep 20 17:28:54 2026 GMT Not After : Sep 21 18:25:54 2026 GMT Subject: CN=330343504AAFC9409BABA59EA3E9894F7779E19F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:e1:7a:e1:df:1d:94:63:ae:6d:82:23:6b: b3:ac:e4:75:25:3f:8a:cb:ab:84:8e:54:a3:f1:f8: 6b:26:58:aa:2a:80:c0:f4:c3:21:75:b1:48:b2:19: b4:57:90:71:14:6d:74:d9:61:cc:2c:41:0c:a8:5e: a5:79:62:5d:5e:47:bc:27:ee:6b:49:a0:4b:4d:98: ac:17:e1:d7:27:bd:50:60:ba:d5:cc:3e:7c:cc:d9: 81:c8:22:0a:83:17:83:58:c8:09:f1:20:76:06:93: 6b:12:2b:c5:fb:d6:88:8c:3f:57:12:e2:0c:ca:c3: de:45:8b:3a:a2:4a:5a:8a:f9:11:5d:ec:b8:73:8d: 02:f3:25:e4:42:ed:62:39:56:68:10:44:5d:e2:30: ea:9f:63:4c:98:5b:2f:2c:51:df:4c:af:3a:6d:1e: 9d:85:4b:6b:92:f3:23:76:c7:aa:5e:04:58:f4:86: 4f:65:be:d4:34:9f:aa:2e:36:f2:3b:26:c3:3e:78: 16:e6:0a:53:6d:3c:9e:94:15:f2:81:d8:15:62:92: 37:d2:2a:95:30:4d:83:f4:d9:a1:3e:e0:1d:1e:0d: 4e:9c:17:7f:84:12:27:3d:a3:54:45:9c:f3:2f:47: c0:c7:4e:c2:32:18:e8:73:e7:3a:23:b8:16:1b:eb: 21:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:03:43:50:4A:AF:C9:40:9B:AB:A5:9E:A3:E9:89:4F:77:79:E1:9F X509v3 Authority Key Identifier: keyid:67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:81:28:41:38:f7:58:d7:a9:ae:ef:19:10:1c:ac:63:de:b1: b0:de:7c:ad:1e:cf:1d:df:88:b8:0b:84:ad:07:6e:5c:8a:29: 8f:b0:69:f0:23:83:a9:27:82:38:2d:84:11:16:97:35:6e:f6: 60:18:fa:cb:ac:a6:77:1d:5c:08:6a:39:20:74:e3:8e:d9:14: fe:95:91:16:c7:b4:cd:b2:fb:54:a4:45:1d:e0:9f:16:a1:0f: 25:ac:fc:30:f5:26:ee:6d:ac:95:0d:54:cc:f9:63:e7:47:50: 2a:13:6b:7e:ec:2d:1e:b1:be:28:7f:c4:41:4a:da:ab:0a:91: 21:be:36:62:fb:0d:6d:e8:d3:c5:8b:56:0e:b5:86:ab:61:af: 3d:80:bc:d5:45:d3:bb:06:ca:20:70:4f:ea:9f:9a:70:71:86: 81:49:e5:59:1e:e9:33:35:4a:ff:e5:0c:20:21:7e:33:1e:42: 63:ae:4c:06:8c:74:f8:5c:29:2e:90:38:1b:57:a1:9f:77:b5: c2:76:98:0e:9f:c7:96:50:f7:06:3e:8d:15:48:aa:54:69:0e: 66:e8:20:ac:b2:71:cb:cf:07:3b:8c:f7:79:15:ca:01:c7:c0: 02:9c:66:33:87:0c:20:26:e3:85:a3:f2:ea:20:c4:33:c3:30: a3:79:7b:fc -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUFfd3mEG2y4ynEPxsH+3Rl32LcngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcxREE5NUY2N0Q3MDNBOEVCQzMzMzBFNzgyNzE3Njc5 QUU1RTlGRDAeFw0yNjA5MjAxNzI4NTRaFw0yNjA5MjExODI1NTRaMDMxMTAvBgNV BAMTKDMzMDM0MzUwNEFBRkM5NDA5QkFCQTU5RUEzRTk4OTRGNzc3OUUxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpuF64d8dlGOubYIja7Os5HUl P4rLq4SOVKPx+GsmWKoqgMD0wyF1sUiyGbRXkHEUbXTZYcwsQQyoXqV5Yl1eR7wn 7mtJoEtNmKwX4dcnvVBgutXMPnzM2YHIIgqDF4NYyAnxIHYGk2sSK8X71oiMP1cS 4gzKw95FizqiSlqK+RFd7LhzjQLzJeRC7WI5VmgQRF3iMOqfY0yYWy8sUd9Mrzpt Hp2FS2uS8yN2x6peBFj0hk9lvtQ0n6ouNvI7JsM+eBbmClNtPJ6UFfKB2BVikjfS KpUwTYP02aE+4B0eDU6cF3+EEic9o1RFnPMvR8DHTsIyGOhz5zojuBYb6yH3AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUMwNDUEqvyUCbq6Weo+mJT3d54Z8wHwYDVR0j BBgwFoAUZx2pX2fXA6jrwzMOeCcXZ5rl6f0wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8w LzY3MURBOTVGNjdENzAzQThFQkMzMzMwRTc4MjcxNzY3OUFFNUU5RkQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNjcxREE5NUY2N0Q3MDNBOEVCQzMzMzBFNzgyNzE3 Njc5QUU1RTlGRC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMC82NzFEQTk1RjY3RDcwM0E4 RUJDMzMzMEU3ODI3MTc2NzlBRTVFOUZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIEoQTj3WNepru8Z EBysY96xsN58rR7PHd+IuAuErQduXIopj7Bp8CODqSeCOC2EERaXNW72YBj6y6ym dx1cCGo5IHTjjtkU/pWRFse0zbL7VKRFHeCfFqEPJaz8MPUm7m2slQ1UzPlj50dQ KhNrfuwtHrG+KH/EQUraqwqRIb42YvsNbejTxYtWDrWGq2GvPYC81UXTuwbKIHBP 6p+acHGGgUnlWR7pMzVK/+UMICF+Mx5CY65MBox0+FwpLpA4G1ehn3e1wnaYDp/H llD3Bj6NFUiqVGkOZuggrLJxy88HO4z3eRXKAcfAApxmM4cMICbjhaPy6iDEM8Mw o3l7/A== -----END CERTIFICATE-----Generated at Sun Sep 20 23:54:29 2026 by rpki-client