$ rpki-client -vvvf rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft File: 71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft (raw, json) Hash identifier: WCovuaNny4yNxMTnQyHs8V9CfyfqcG2g7GPKNK/psdY= Subject key identifier: E4:71:BC:B3:E2:13:91:46:C2:EA:AC:5F:75:BF:40:FB:9B:51:36:CA Authority key identifier: 71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11 Certificate issuer: /CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911 Certificate serial: 3A16C82002C929856A0D67334462EEB314A82EFB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft Manifest number: F1 Signing time: Sat 07 Nov 2026 18:35:55 +0000 Manifest this update: Sat 07 Nov 2026 18:30:55 +0000 Manifest next update: Sun 08 Nov 2026 21:48:55 +0000 Files and hashes: 1: 71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl (hash: Dr7qPSkiwpRvJ9GGTtQhht3PYjxNp+D9hN3dpwxDjns=) 2: 36312e35372e3234302e302f32302d3234203d3e203138343135.roa (hash: dB5hiO5nyANYzeAWgeX1ND73H/9m/AUcozE5q3e2mrA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 19:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:16:c8:20:02:c9:29:85:6a:0d:67:33:44:62:ee:b3:14:a8:2e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911 Validity Not Before: Nov 7 18:30:55 2026 GMT Not After : Nov 8 21:48:55 2026 GMT Subject: CN=E471BCB3E2139146C2EAAC5F75BF40FB9B5136CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b6:8f:fe:df:12:0b:72:c6:84:12:9a:6e:3b: b7:d8:55:da:a2:7a:b3:e4:92:8c:e3:44:73:9f:4c: 63:0d:ce:29:7b:1b:2d:d4:6e:c0:f0:20:0f:f2:06: 8f:54:68:c8:82:8a:c5:4d:db:2d:0a:cf:fb:58:6e: ac:2d:7a:63:e7:1b:2d:85:4c:90:5b:60:b2:65:d2: 78:2d:e9:22:ee:28:63:5e:7d:e5:ee:95:ff:a7:1b: ac:b3:ce:1f:5d:dd:05:cc:ab:4c:ab:c2:78:b8:bd: 1a:e6:53:65:1c:83:f9:92:45:ca:98:c3:16:1f:ae: 2f:19:fc:dc:f9:ac:48:2b:b2:40:ee:41:13:1f:a4: 53:60:6a:d1:f1:94:f8:b7:10:bd:64:c5:70:4a:48: c4:d7:d6:bc:d6:40:44:10:73:46:15:ef:97:dd:19: 76:c5:51:18:58:8a:f8:81:bf:77:05:09:e1:04:98: bf:61:89:44:7a:b8:73:28:14:72:dc:d7:40:97:a8: 03:5d:b6:60:69:9a:94:e2:4a:cc:4d:a0:b7:16:f7: 90:8d:1f:8e:01:9d:30:6a:35:7e:1c:ae:66:fc:2e: fa:bf:82:5a:5a:ed:4e:d1:32:48:0b:37:cc:71:f1: 8e:8e:b7:cb:6e:79:4e:1e:7a:67:12:bd:35:db:ac: 24:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:71:BC:B3:E2:13:91:46:C2:EA:AC:5F:75:BF:40:FB:9B:51:36:CA X509v3 Authority Key Identifier: keyid:71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5c:98:cc:49:21:7e:60:5e:6e:3b:12:d0:83:47:05:93:bd: c2:8f:88:ee:6f:48:d1:b6:cd:6d:7d:08:d3:3a:8b:50:29:91: c5:22:aa:4c:a9:9d:fc:f4:c6:97:8b:d8:12:ab:c8:73:d8:87: c0:b2:2e:d4:25:71:d9:c4:c3:ea:5c:6b:68:3c:ed:5b:0e:8c: 06:bb:fc:da:d1:6a:cd:0b:91:2d:48:b6:4a:d3:42:b5:3f:b3: 4a:b9:26:0d:6c:97:7d:68:9c:c8:81:64:ee:ce:b1:51:67:99: d0:07:e1:51:05:01:93:61:4b:41:ab:53:ed:27:a9:58:9d:5a: 68:13:b3:67:1a:7d:c1:61:f6:ee:a9:30:0a:80:c6:17:88:5d: b8:74:69:13:20:d5:3d:66:1b:ed:e6:99:cc:f9:bb:bb:96:2b: a1:72:c4:18:91:16:9c:af:14:68:ad:9d:54:25:a3:c9:0c:3c: 1d:b9:d7:ea:13:8a:db:2d:c0:32:ad:a4:04:31:b6:cd:6e:eb: 9b:e4:e8:1f:4f:6d:10:7f:74:1c:1d:52:14:c6:ba:7f:41:e4: 57:55:9b:a6:04:d7:24:14:23:9b:37:74:92:64:2a:63:f3:2a: 7b:ad:e4:24:41:d9:d3:54:47:c6:ff:eb:86:db:bc:fd:f0:dd: a5:6d:81:9f -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUOhbIIALJKYVqDWczRGLusxSoLvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDRERGNjIzQUJDRTM5RjQxRkI2QUFDMTlGODFFOTFG OUFENjkxMTAeFw0yNjExMDcxODMwNTVaFw0yNjExMDgyMTQ4NTVaMDMxMTAvBgNV BAMTKEU0NzFCQ0IzRTIxMzkxNDZDMkVBQUM1Rjc1QkY0MEZCOUI1MTM2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmto/+3xILcsaEEppuO7fYVdqi erPkkozjRHOfTGMNzil7Gy3UbsDwIA/yBo9UaMiCisVN2y0Kz/tYbqwtemPnGy2F TJBbYLJl0ngt6SLuKGNefeXulf+nG6yzzh9d3QXMq0yrwni4vRrmU2Ucg/mSRcqY wxYfri8Z/Nz5rEgrskDuQRMfpFNgatHxlPi3EL1kxXBKSMTX1rzWQEQQc0YV75fd GXbFURhYiviBv3cFCeEEmL9hiUR6uHMoFHLc10CXqANdtmBpmpTiSsxNoLcW95CN H44BnTBqNX4crmb8Lvq/glpa7U7RMkgLN8xx8Y6Ot8tueU4eemcSvTXbrCR/AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU5HG8s+ITkUbC6qxfdb9A+5tRNsowHwYDVR0j BBgwFoAUcc3fYjq8459B+2qsGfgekfmtaREwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQldJWi8w LzcxQ0RERjYyM0FCQ0UzOUY0MUZCNkFBQzE5RjgxRTkxRjlBRDY5MTEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNzFDRERGNjIzQUJDRTM5RjQxRkI2QUFDMTlGODFF OTFGOUFENjkxMS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JXSVovMC83MUNEREY2MjNBQkNFMzlG NDFGQjZBQUMxOUY4MUU5MUY5QUQ2OTExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVyYzEkhfmBebjsS 0INHBZO9wo+I7m9I0bbNbX0I0zqLUCmRxSKqTKmd/PTGl4vYEqvIc9iHwLIu1CVx 2cTD6lxraDztWw6MBrv82tFqzQuRLUi2StNCtT+zSrkmDWyXfWicyIFk7s6xUWeZ 0AfhUQUBk2FLQatT7SepWJ1aaBOzZxp9wWH27qkwCoDGF4hduHRpEyDVPWYb7eaZ zPm7u5YroXLEGJEWnK8UaK2dVCWjyQw8HbnX6hOK2y3AMq2kBDG2zW7rm+ToH09t EH90HB1SFMa6f0HkV1WbpgTXJBQjmzd0kmQqY/Mqe63kJEHZ01RHxv/rhtu8/fDd pW2Bnw== -----END CERTIFICATE-----Generated at Sun Nov 8 18:02:10 2026 by rpki-client