$ rpki-client -vvf rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft File: 9F397B838061280C2F2A887AC9D64012310492D8.mft (raw, json) Hash identifier: kmMQgBjltJFDmg2xgCxXTbdBYucKtgs7wmCotuxd+gY= Subject key identifier: B1:FE:8F:9E:C4:48:D8:9C:20:E7:9C:21:AA:9F:DC:0A:AD:F3:DB:6B Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8 Certificate serial: 5392F62210FF81E81A4ABF1363A56558BB323CFE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft Manifest number: 6F Signing time: Tue 28 Jul 2026 22:25:02 +0000 Manifest this update: Tue 28 Jul 2026 22:20:02 +0000 Manifest next update: Wed 29 Jul 2026 22:28:02 +0000 Files and hashes: 1: 9F397B838061280C2F2A887AC9D64012310492D8.crl (hash: 5PtixhZMFdh9daPl07zLckTD2OQPIjq7OpuVF74s40s=) 2: 3135312e3135382e372e302f32342d3234203d3e20333936393832.roa (hash: CiRNyIUTHDtjTklbG45WKUEv5VbhmGe28aKTdsZW1mc=) 3: 3135312e3135382e362e302f32332d3234203d3e20323132393639.roa (hash: g66apYgbNhFQA/s/Xvj16zu4hXDJuL5Fa8ux6Zav1qQ=) 4: 3135312e3135382e362e302f32332d3234203d3e20313532363136.roa (hash: i1SCJ8GhyQLw1P2Ps8s9Plw8FCUopeJLu1mfg5xNyLQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:92:f6:22:10:ff:81:e8:1a:4a:bf:13:63:a5:65:58:bb:32:3c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8 Validity Not Before: Jul 28 22:20:02 2026 GMT Not After : Jul 29 22:28:02 2026 GMT Subject: CN=B1FE8F9EC448D89C20E79C21AA9FDC0AADF3DB6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:46:78:c9:fe:d0:e3:23:07:95:ac:c8:f3:5c: 8a:5d:25:44:4e:a6:80:6e:c3:f4:fe:4c:25:64:70: e0:c2:be:78:ac:cc:68:71:bc:b3:94:7b:e0:6e:ee: 6c:81:55:16:a7:f4:1f:aa:ce:aa:df:3c:9a:d0:d1: ef:9b:09:5d:56:36:9e:40:a8:c9:24:dc:37:6c:d4: d8:2f:73:02:53:e6:8a:fd:75:a9:af:3e:6f:8c:31: c4:c0:a7:52:f9:b0:6e:55:6c:5b:e7:5f:c2:f0:3d: d8:9e:21:ea:53:03:e6:5c:ba:4a:ae:82:e1:35:81: 0f:b7:e3:52:08:03:76:6c:1d:7c:2e:07:4b:b0:21: 25:79:e1:a3:6f:1f:43:b3:3d:4c:f7:9c:b8:22:ac: 7f:74:2b:ec:3b:5d:0c:87:26:4a:ac:e6:59:ec:df: bf:96:fc:ad:60:19:6f:ea:51:25:64:97:b2:06:29: 57:31:35:2c:d5:6e:c5:e0:ce:9f:00:ea:c8:fa:02: ba:41:6b:4a:30:10:f2:56:37:e8:22:34:ed:78:bb: be:86:6b:fd:75:b7:ab:e7:af:ab:a8:94:d5:f0:18: c5:95:db:1b:bf:de:39:10:9f:6d:3f:d3:b4:7d:57: f9:e2:f0:67:ca:45:94:a7:db:d9:e4:eb:0a:d8:e9: 84:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FE:8F:9E:C4:48:D8:9C:20:E7:9C:21:AA:9F:DC:0A:AD:F3:DB:6B X509v3 Authority Key Identifier: keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:52:7f:1f:10:79:2f:b6:ce:05:ee:2f:62:59:85:98:90:0c: 2b:8f:7c:39:03:38:82:fc:ba:aa:57:cc:28:00:91:a1:c5:87: 19:e7:07:a3:c0:f1:71:4e:00:82:e5:73:61:6a:54:d0:6c:01: 3a:52:d1:c1:90:ae:c2:73:34:18:43:a2:12:8a:fa:4a:28:d3: 95:e4:34:07:6c:4e:3c:9d:2e:b9:e0:22:4a:71:46:57:f3:ad: d4:0c:b0:2d:18:5b:45:b2:40:b3:41:cc:85:53:1c:e2:0a:70: 9f:b0:70:a3:0a:30:7c:3d:6c:42:d8:00:cd:a1:18:97:5e:c1: a4:85:3d:08:73:8c:00:91:cb:c1:2b:d7:0a:c3:93:57:d0:f8: 2d:41:52:7e:d0:c6:20:b2:c9:2b:35:c8:d1:d5:22:60:8a:93: 1c:3b:de:57:42:47:f7:e0:1f:77:25:1d:87:49:21:36:c0:62: 93:7f:11:58:b9:42:63:c1:7f:9d:4a:99:a2:80:7e:39:7b:7e: bf:83:ee:6c:ce:67:2e:45:62:fc:5f:33:50:53:98:c1:aa:ab: c9:0f:ad:65:f1:3c:85:e1:60:88:f2:67:33:40:43:e8:41:b8: fe:79:de:1a:48:30:bb:76:3a:5b:ea:ee:dc:97:92:e0:ee:b1: 3a:b9:1f:52 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUU5L2IhD/gegaSr8TY6VlWLsyPP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQwMTIz MTA0OTJEODAeFw0yNjA3MjgyMjIwMDJaFw0yNjA3MjkyMjI4MDJaMDMxMTAvBgNV BAMTKEIxRkU4RjlFQzQ0OEQ4OUMyMEU3OUMyMUFBOUZEQzBBQURGM0RCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChRnjJ/tDjIweVrMjzXIpdJURO poBuw/T+TCVkcODCvniszGhxvLOUe+Bu7myBVRan9B+qzqrfPJrQ0e+bCV1WNp5A qMkk3Dds1NgvcwJT5or9damvPm+MMcTAp1L5sG5VbFvnX8LwPdieIepTA+Zcukqu guE1gQ+341IIA3ZsHXwuB0uwISV54aNvH0OzPUz3nLgirH90K+w7XQyHJkqs5lns 37+W/K1gGW/qUSVkl7IGKVcxNSzVbsXgzp8A6sj6ArpBa0owEPJWN+giNO14u76G a/11t6vnr6uolNXwGMWV2xu/3jkQn20/07R9V/ni8GfKRZSn29nk6wrY6YTxAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUsf6PnsRI2Jwg55whqp/cCq3z22swHwYDVR0j BBgwFoAUnzl7g4BhKAwvKoh6ydZAEjEEktgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8x LzlGMzk3QjgzODA2MTI4MEMyRjJBODg3QUM5RDY0MDEyMzEwNDkyRDguY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzMvOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQw MTIzMTA0OTJEOC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS85RjM5N0I4MzgwNjEyODBD MkYyQTg4N0FDOUQ2NDAxMjMxMDQ5MkQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVJ/HxB5L7bOBe4v YlmFmJAMK498OQM4gvy6qlfMKACRocWHGecHo8DxcU4AguVzYWpU0GwBOlLRwZCu wnM0GEOiEor6SijTleQ0B2xOPJ0uueAiSnFGV/Ot1AywLRhbRbJAs0HMhVMc4gpw n7BwowowfD1sQtgAzaEYl17BpIU9CHOMAJHLwSvXCsOTV9D4LUFSftDGILLJKzXI 0dUiYIqTHDveV0JH9+AfdyUdh0khNsBik38RWLlCY8F/nUqZooB+OXt+v4PubM5n LkVi/F8zUFOYwaqryQ+tZfE8heFgiPJnM0BD6EG4/nneGkgwu3Y6W+ru3JeS4O6x OrkfUg== -----END CERTIFICATE-----Generated at Wed Jul 29 05:24:26 2026 by rpki-client