$ rpki-client -vvvf rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft File: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft (raw, json) Hash identifier: MgREreYvfsf+htyHlMek+gvs5Z+GXmVBNhpkTLlDm5A= Subject key identifier: 3A:C6:F7:2C:C8:35:44:9D:D4:AE:4C:B0:C5:F1:BE:41:30:39:61:77 Authority key identifier: 21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF Certificate issuer: /CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF Certificate serial: 2CE3522B6FDFCF1B39B7C954CA3A85249C2D82B2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft Manifest number: F3 Signing time: Thu 05 Nov 2026 01:57:01 +0000 Manifest this update: Thu 05 Nov 2026 01:52:01 +0000 Manifest next update: Fri 06 Nov 2026 04:51:01 +0000 Files and hashes: 1: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl (hash: PRMwWspyyw5zp/1v99P0HJoSI1eDR5iny9v7puFxOZY=) 2: 323430313a636436303a3a2f34302d3430203d3e20323134303330.roa (hash: 780V3DLt+Fe7Fs8V4ULwUWJozzo56xPXySO9+JGJ2W8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 21:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e3:52:2b:6f:df:cf:1b:39:b7:c9:54:ca:3a:85:24:9c:2d:82:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF Validity Not Before: Nov 5 01:52:01 2026 GMT Not After : Nov 6 04:51:01 2026 GMT Subject: CN=3AC6F72CC835449DD4AE4CB0C5F1BE4130396177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:e2:bd:a3:3b:0e:f0:9c:5b:05:f9:a5:37: 48:19:5b:98:57:09:3e:01:ae:e7:ea:39:ef:f4:e1: 6b:c6:be:6a:3d:af:b3:ac:ac:68:27:6d:ae:3b:d3: 8f:09:87:b6:60:b8:23:80:89:0d:0c:11:1e:61:5e: 7a:e2:2d:24:eb:d9:59:df:70:97:4b:da:e3:fe:29: a4:eb:15:a1:cb:6b:f8:08:8e:28:27:52:e5:5b:71: 71:16:e2:4f:4d:67:e9:67:81:ba:48:3c:34:36:ad: b7:70:95:05:31:3f:98:86:f6:9c:5b:60:98:f1:26: ed:4e:08:60:a9:b3:70:03:7c:0b:fa:75:04:8c:67: a8:56:a5:c4:99:52:43:ef:d8:d6:84:fa:a8:d7:5f: 32:b2:9d:7a:9f:01:31:03:cc:2e:2c:58:d1:58:f6: 69:73:9b:f7:30:80:5f:c1:59:f7:ce:6b:44:92:c9: 35:18:a4:19:17:43:9c:b9:9f:f0:db:75:ae:85:2b: f7:23:96:db:cc:bd:29:c0:af:57:53:f9:fe:a3:ea: 9f:e4:58:73:8e:e7:97:c8:79:2c:68:03:8c:79:cb: 94:c7:06:2d:6b:d1:54:90:ef:16:7e:3e:32:54:50: 3a:66:cf:08:a5:20:6a:9e:fb:42:53:ed:54:ef:3a: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C6:F7:2C:C8:35:44:9D:D4:AE:4C:B0:C5:F1:BE:41:30:39:61:77 X509v3 Authority Key Identifier: keyid:21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d4:0a:b7:d4:ef:18:8b:bb:f5:12:bd:58:90:e3:9e:32:e1: e6:6e:6a:af:80:a7:78:6a:36:4e:c5:56:28:4a:69:2a:b8:ac: 10:d7:21:87:df:9d:72:70:4a:7c:4d:3b:fe:07:cb:0f:5b:64: f0:e3:fd:9b:1c:c3:7c:e9:2a:a1:c7:16:03:b0:d2:d3:d1:33: 15:25:82:71:36:8a:70:7e:31:eb:34:29:74:32:92:99:ee:f7: a0:af:00:05:39:96:36:f7:93:71:a9:6a:fa:65:10:cf:eb:d7: 00:78:e1:dd:3c:f1:01:7a:45:06:14:41:4e:0e:83:36:ac:9d: 06:cf:49:d4:ab:37:7f:c0:68:92:fc:03:e5:d0:9b:a1:38:04: e6:cd:ac:74:18:84:b6:d5:2a:d2:70:e1:7a:a3:07:bd:5a:43: 41:c3:66:a1:34:9f:e5:70:17:ca:ed:0c:ab:80:85:c6:ef:c1: 29:5c:f2:0c:7e:d8:63:a6:46:11:7e:0f:18:45:7e:82:38:f4: 35:06:b8:52:0f:07:a5:34:95:b8:9f:42:71:e6:3f:1a:5a:07: 63:d5:17:b9:75:e7:41:ad:70:12:1e:43:97:b6:c6:01:d5:0c: 23:64:87:17:e5:9d:eb:24:ed:b8:e1:10:72:a5:52:78:70:cc: b5:79:17:65 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIULONSK2/fzxs5t8lUyjqFJJwtgrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5 NDlDRDVBRjAeFw0yNjExMDUwMTUyMDFaFw0yNjExMDYwNDUxMDFaMDMxMTAvBgNV BAMTKDNBQzZGNzJDQzgzNTQ0OURENEFFNENCMEM1RjFCRTQxMzAzOTYxNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyEuK9ozsO8JxbBfmlN0gZW5hX CT4BrufqOe/04WvGvmo9r7OsrGgnba47048Jh7ZguCOAiQ0MER5hXnriLSTr2Vnf cJdL2uP+KaTrFaHLa/gIjignUuVbcXEW4k9NZ+lngbpIPDQ2rbdwlQUxP5iG9pxb YJjxJu1OCGCps3ADfAv6dQSMZ6hWpcSZUkPv2NaE+qjXXzKynXqfATEDzC4sWNFY 9mlzm/cwgF/BWffOa0SSyTUYpBkXQ5y5n/Dbda6FK/cjltvMvSnAr1dT+f6j6p/k WHOO55fIeSxoA4x5y5THBi1r0VSQ7xZ+PjJUUDpmzwilIGqe+0JT7VTvOjB/AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUOsb3LMg1RJ3UrkywxfG+QTA5YXcwHwYDVR0j BBgwFoAUIdv9GSESH3MMYUwN5iEs1pSc1a8wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE LzAvMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMURCRkQxOTIxMTIxRjczMEM2MTRDMERFNjIx MkNENjk0OUNENUFGLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzAvMjFEQkZEMTkyMTEy MUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHrUCrfU7xiL u/USvViQ454y4eZuaq+Ap3hqNk7FVihKaSq4rBDXIYffnXJwSnxNO/4Hyw9bZPDj /Zscw3zpKqHHFgOw0tPRMxUlgnE2inB+Mes0KXQykpnu96CvAAU5ljb3k3Gpavpl EM/r1wB44d088QF6RQYUQU4OgzasnQbPSdSrN3/AaJL8A+XQm6E4BObNrHQYhLbV KtJw4XqjB71aQ0HDZqE0n+VwF8rtDKuAhcbvwSlc8gx+2GOmRhF+DxhFfoI49DUG uFIPB6U0lbifQnHmPxpaB2PVF7l150GtcBIeQ5e2xgHVDCNkhxflnesk7bjhEHKl UnhwzLV5F2U= -----END CERTIFICATE-----Generated at Thu Nov 5 15:26:22 2026 by rpki-client