$ rpki-client -vvvf rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft File: 9F397B838061280C2F2A887AC9D64012310492D8.mft (raw, json) Hash identifier: hhLlUpzK4RltfVVu10QHgAB3BWYISrcgvhi8el5vsZE= Subject key identifier: 19:3D:B4:8F:E6:92:02:67:B2:02:63:EA:46:EA:D2:6B:10:32:69:74 Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8 Certificate serial: 62D35977F8533C12742DFB40B806CA28A319B72D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft Manifest number: B7 Signing time: Sun 20 Sep 2026 12:54:31 +0000 Manifest this update: Sun 20 Sep 2026 12:49:31 +0000 Manifest next update: Mon 21 Sep 2026 14:31:31 +0000 Files and hashes: 1: 9F397B838061280C2F2A887AC9D64012310492D8.crl (hash: LIZPxxi7hpcmTiVd/ksuoV6xG0Bw+AL+i06ikEKyURE=) 2: 3135312e3135382e362e302f32332d3234203d3e20313532363136.roa (hash: i1SCJ8GhyQLw1P2Ps8s9Plw8FCUopeJLu1mfg5xNyLQ=) 3: 3135312e3135382e362e302f32332d3234203d3e20323132393639.roa (hash: g66apYgbNhFQA/s/Xvj16zu4hXDJuL5Fa8ux6Zav1qQ=) 4: 3135312e3135382e372e302f32342d3234203d3e20333936393832.roa (hash: CiRNyIUTHDtjTklbG45WKUEv5VbhmGe28aKTdsZW1mc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 10:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d3:59:77:f8:53:3c:12:74:2d:fb:40:b8:06:ca:28:a3:19:b7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8 Validity Not Before: Sep 20 12:49:31 2026 GMT Not After : Sep 21 14:31:31 2026 GMT Subject: CN=193DB48FE6920267B20263EA46EAD26B10326974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:82:79:00:c2:7c:3c:21:dc:49:c5:aa:10: ca:c5:9c:a7:8c:a1:b8:cd:7d:b3:1a:35:d7:58:bf: b8:a6:15:8d:90:87:1d:e1:8f:cf:19:eb:88:81:ed: 5a:be:47:e0:ec:83:75:ff:db:3a:d1:97:f0:83:bf: 0c:51:27:c9:a1:9d:ef:3b:ed:ca:3d:36:7b:27:c3: b4:90:48:3b:d1:f5:34:86:97:36:fc:cc:c6:d7:4e: 60:d2:8a:3e:72:46:18:9a:31:d6:1f:2f:36:bf:5b: 47:e4:65:29:67:da:ca:c0:f8:66:f2:65:17:27:fe: 1b:4a:41:b1:f3:e4:39:16:69:69:1e:06:80:fd:5c: d8:f4:11:eb:e4:b0:3f:61:28:b2:7d:c8:df:d2:9c: 5e:05:0d:5d:e1:59:bc:68:81:30:c5:a6:fe:1a:36: 82:e6:74:82:7e:cf:73:da:63:10:78:02:83:47:39: d7:fc:39:0e:83:29:07:ce:dc:3f:a2:bd:9f:2c:91: a9:70:50:87:d1:35:f9:93:e1:80:b2:e6:e7:28:4a: 81:23:87:1b:50:de:5c:36:47:ee:b3:31:88:40:dc: c5:f1:e7:ad:c9:24:0f:72:f0:46:42:28:d6:0b:6a: 12:15:14:27:8e:c6:d9:90:f0:86:03:e2:4d:7f:3a: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3D:B4:8F:E6:92:02:67:B2:02:63:EA:46:EA:D2:6B:10:32:69:74 X509v3 Authority Key Identifier: keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:07:7d:48:cd:86:46:21:7e:3c:95:7b:23:63:72:ac:ca:0f: 8b:4c:d9:2d:b7:59:79:8e:08:29:b7:d5:f7:a1:81:50:5e:8c: df:a6:bb:24:f0:7b:78:f2:7d:fc:d1:10:7b:d1:5f:dd:7f:53: 07:42:17:6c:89:a6:08:60:1f:b7:ba:ae:52:7b:30:42:2d:91: b4:38:01:95:07:26:6b:00:29:8f:dc:9f:85:8b:b0:6b:48:53: 08:c3:c1:22:b3:81:1d:1c:10:f0:cf:5f:45:fe:d0:e8:62:e8: c8:95:5a:4e:a3:f0:78:e7:78:88:76:7d:00:e6:cb:55:8c:13: dd:15:6d:1b:60:26:09:d6:62:9a:42:d1:c8:62:2f:cd:8a:5e: 7e:72:1f:19:01:7e:91:ad:c4:d9:4d:15:54:ab:72:52:6f:b0: 83:06:22:17:c0:e3:ee:19:9b:14:19:b9:5d:13:66:68:78:57: a6:e3:67:34:d3:67:21:2c:8f:d5:4c:3c:8e:7c:ce:85:9e:c3: 56:fa:2c:38:6e:af:ae:07:21:ae:5e:4c:30:7a:b7:6c:dc:29: 38:ad:2d:56:58:3e:9e:4b:62:b0:a3:79:c1:95:46:3b:e6:fc: 15:44:de:b1:cf:41:8d:b9:25:71:1b:2a:cc:f4:82:9e:fb:99: 76:a4:f3:36 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUYtNZd/hTPBJ0LftAuAbKKKMZty0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQwMTIz MTA0OTJEODAeFw0yNjA5MjAxMjQ5MzFaFw0yNjA5MjExNDMxMzFaMDMxMTAvBgNV BAMTKDE5M0RCNDhGRTY5MjAyNjdCMjAyNjNFQTQ2RUFEMjZCMTAzMjY5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcYJ5AMJ8PCHcScWqEMrFnKeM objNfbMaNddYv7imFY2Qhx3hj88Z64iB7Vq+R+Dsg3X/2zrRl/CDvwxRJ8mhne87 7co9Nnsnw7SQSDvR9TSGlzb8zMbXTmDSij5yRhiaMdYfLza/W0fkZSln2srA+Gby ZRcn/htKQbHz5DkWaWkeBoD9XNj0EevksD9hKLJ9yN/SnF4FDV3hWbxogTDFpv4a NoLmdIJ+z3PaYxB4AoNHOdf8OQ6DKQfO3D+ivZ8skalwUIfRNfmT4YCy5ucoSoEj hxtQ3lw2R+6zMYhA3MXx563JJA9y8EZCKNYLahIVFCeOxtmQ8IYD4k1/OrJJAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUGT20j+aSAmeyAmPqRurSaxAyaXQwHwYDVR0j BBgwFoAUnzl7g4BhKAwvKoh6ydZAEjEEktgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8x LzlGMzk3QjgzODA2MTI4MEMyRjJBODg3QUM5RDY0MDEyMzEwNDkyRDguY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzMvOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQw MTIzMTA0OTJEOC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS85RjM5N0I4MzgwNjEyODBD MkYyQTg4N0FDOUQ2NDAxMjMxMDQ5MkQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgd9SM2GRiF+PJV7 I2NyrMoPi0zZLbdZeY4IKbfV96GBUF6M36a7JPB7ePJ9/NEQe9Ff3X9TB0IXbImm CGAft7quUnswQi2RtDgBlQcmawApj9yfhYuwa0hTCMPBIrOBHRwQ8M9fRf7Q6GLo yJVaTqPweOd4iHZ9AObLVYwT3RVtG2AmCdZimkLRyGIvzYpefnIfGQF+ka3E2U0V VKtyUm+wgwYiF8Dj7hmbFBm5XRNmaHhXpuNnNNNnISyP1Uw8jnzOhZ7DVvosOG6v rgchrl5MMHq3bNwpOK0tVlg+nktisKN5wZVGO+b8FUTesc9BjbklcRsqzPSCnvuZ dqTzNg== -----END CERTIFICATE-----Generated at Mon Sep 21 00:05:35 2026 by rpki-client