$ rpki-client -vvvf rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft File: 9F397B838061280C2F2A887AC9D64012310492D8.mft (raw, json) Hash identifier: 2Vy0WE8AL5VN0ahwe7YAJIjWmBbNNSUUpHdLrUh/Kyk= Subject key identifier: A6:E0:C3:36:81:BC:5E:E3:D8:01:BC:27:C3:D9:10:A5:98:94:F6:36 Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8 Certificate serial: 52CDEC0E3CB778862B1B174AF81DD7D6C4F0E50E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft Manifest number: F5 Signing time: Thu 05 Nov 2026 14:03:18 +0000 Manifest this update: Thu 05 Nov 2026 13:58:18 +0000 Manifest next update: Fri 06 Nov 2026 14:33:18 +0000 Files and hashes: 1: 9F397B838061280C2F2A887AC9D64012310492D8.crl (hash: a3+tNWLj87CkCUCyc5/8VmsNijnXUen+cPSld5Ds/i0=) 2: 3135312e3135382e362e302f32332d3234203d3e20313532363136.roa (hash: i1SCJ8GhyQLw1P2Ps8s9Plw8FCUopeJLu1mfg5xNyLQ=) 3: 3135312e3135382e372e302f32342d3234203d3e20333936393832.roa (hash: CiRNyIUTHDtjTklbG45WKUEv5VbhmGe28aKTdsZW1mc=) 4: 3135312e3135382e362e302f32332d3234203d3e20323132393639.roa (hash: g66apYgbNhFQA/s/Xvj16zu4hXDJuL5Fa8ux6Zav1qQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 02:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cd:ec:0e:3c:b7:78:86:2b:1b:17:4a:f8:1d:d7:d6:c4:f0:e5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8 Validity Not Before: Nov 5 13:58:18 2026 GMT Not After : Nov 6 14:33:18 2026 GMT Subject: CN=A6E0C33681BC5EE3D801BC27C3D910A59894F636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:03:06:88:1c:fc:5c:1a:d5:5c:7e:ea:6b: c7:26:57:74:99:45:e5:7c:06:ab:2f:3d:5e:3f:2f: 0a:b3:ee:a6:c1:2f:7b:ae:44:7a:32:a2:47:e4:e8: 00:66:b2:46:27:ec:e6:c8:63:76:74:93:33:70:45: f8:0c:bd:1f:d3:8c:29:7c:3f:36:0f:55:34:4e:2b: 0c:23:79:2a:bf:69:66:d6:9a:ea:35:81:0f:44:8b: 27:00:6b:e9:2f:e5:8c:5c:b2:ed:cc:df:71:40:a5: 26:be:6e:55:aa:c6:c9:be:25:3d:dc:d1:e4:28:0f: 7d:7b:d3:d3:1b:30:a8:b9:dc:57:60:01:c8:03:4d: 97:4c:59:cb:84:f9:67:2b:13:36:24:17:58:40:a1: f0:e2:ad:90:84:5d:96:76:7c:88:61:ea:62:ee:22: 67:3f:aa:43:b7:cf:5b:e9:d2:da:d0:5d:54:bd:32: e3:1b:14:35:a3:8b:b5:db:d1:76:09:fa:8b:29:08: 7c:c5:87:6b:9a:fd:4a:f3:4d:cd:f7:47:77:eb:c3: d2:d1:13:0b:b4:d9:5a:a1:b6:11:0a:78:44:c7:7c: 92:46:77:4e:ec:89:f9:16:f6:66:f3:73:9c:9b:07: 09:d8:ce:06:8b:86:81:43:b8:0a:d4:83:c3:f0:f5: a3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E0:C3:36:81:BC:5E:E3:D8:01:BC:27:C3:D9:10:A5:98:94:F6:36 X509v3 Authority Key Identifier: keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:16:80:20:72:68:57:be:c8:cc:4d:0d:5c:9e:0b:94:da:67: a3:c9:c2:87:36:bb:cd:16:2b:c1:81:a8:d3:21:ce:b1:c4:c7: 40:11:27:5e:eb:ce:09:69:fb:92:34:cf:86:5e:24:86:66:b4: ff:d5:59:b0:ce:b9:b1:12:ed:ad:06:8d:07:26:ea:23:3d:45: f9:91:62:85:60:99:66:7b:e0:ff:2f:2d:cc:60:60:73:46:0e: 67:dc:b7:eb:be:e8:eb:d0:24:8b:8e:d1:2c:3b:78:5b:c1:5c: a2:7a:69:8d:45:63:f5:03:31:a6:2a:e0:b5:ad:fc:8f:1c:60: 62:fa:05:c8:33:63:7c:22:5f:8a:ef:ee:47:b1:ba:ee:1a:13: 3e:03:fb:52:81:71:25:93:2b:8c:9d:2d:15:20:ee:4b:f4:ed: 8c:f6:01:9c:db:b9:c4:3e:db:2c:7a:92:e3:d1:9b:8b:be:17: 29:03:72:ec:65:69:82:f3:2f:04:fb:8d:eb:b4:95:29:e5:1f: 6d:9b:5e:9c:a4:74:70:13:20:91:e8:0e:ba:ae:9b:e0:40:74: 8e:90:a9:2e:ee:30:ea:e0:cb:46:84:bd:cc:67:5f:de:f3:68: c0:19:67:27:47:e3:f2:01:98:b6:f0:82:16:7b:4f:f7:54:64: e1:e9:a4:fe -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUUs3sDjy3eIYrGxdK+B3X1sTw5Q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQwMTIz MTA0OTJEODAeFw0yNjExMDUxMzU4MThaFw0yNjExMDYxNDMzMThaMDMxMTAvBgNV BAMTKEE2RTBDMzM2ODFCQzVFRTNEODAxQkMyN0MzRDkxMEE1OTg5NEY2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfwMGiBz8XBrVXH7qa8cmV3SZ ReV8BqsvPV4/Lwqz7qbBL3uuRHoyokfk6ABmskYn7ObIY3Z0kzNwRfgMvR/TjCl8 PzYPVTROKwwjeSq/aWbWmuo1gQ9EiycAa+kv5Yxcsu3M33FApSa+blWqxsm+JT3c 0eQoD31709MbMKi53FdgAcgDTZdMWcuE+WcrEzYkF1hAofDirZCEXZZ2fIhh6mLu Imc/qkO3z1vp0trQXVS9MuMbFDWji7Xb0XYJ+ospCHzFh2ua/UrzTc33R3frw9LR Ewu02VqhthEKeETHfJJGd07sifkW9mbzc5ybBwnYzgaLhoFDuArUg8Pw9aNfAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUpuDDNoG8XuPYAbwnw9kQpZiU9jYwHwYDVR0j BBgwFoAUnzl7g4BhKAwvKoh6ydZAEjEEktgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8x LzlGMzk3QjgzODA2MTI4MEMyRjJBODg3QUM5RDY0MDEyMzEwNDkyRDguY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzMvOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQw MTIzMTA0OTJEOC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS85RjM5N0I4MzgwNjEyODBD MkYyQTg4N0FDOUQ2NDAxMjMxMDQ5MkQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBaAIHJoV77IzE0N XJ4LlNpno8nChza7zRYrwYGo0yHOscTHQBEnXuvOCWn7kjTPhl4khma0/9VZsM65 sRLtrQaNBybqIz1F+ZFihWCZZnvg/y8tzGBgc0YOZ9y3677o69Aki47RLDt4W8Fc onppjUVj9QMxpirgta38jxxgYvoFyDNjfCJfiu/uR7G67hoTPgP7UoFxJZMrjJ0t FSDuS/TtjPYBnNu5xD7bLHqS49Gbi74XKQNy7GVpgvMvBPuN67SVKeUfbZtenKR0 cBMgkegOuq6b4EB0jpCpLu4w6uDLRoS9zGdf3vNowBlnJ0fj8gGYtvCCFntP91Rk 4emk/g== -----END CERTIFICATE-----Generated at Thu Nov 5 19:24:01 2026 by rpki-client