$ rpki-client -vvvf rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft File: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft (raw, json) Hash identifier: U6RzYu6hX1HIfj4IT7lYrIGs8/q2f87SMLJOU/9aesg= Subject key identifier: 82:0C:BF:AB:C8:6E:B0:7F:1E:FD:E0:AE:42:F8:B4:FC:25:D7:FB:BF Authority key identifier: 82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8 Certificate issuer: /CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8 Certificate serial: 4DEC5B6ABD0EE226B804A93A246D4A31372CFD3C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft Manifest number: BA Signing time: Wed 23 Sep 2026 14:33:02 +0000 Manifest this update: Wed 23 Sep 2026 14:28:02 +0000 Manifest next update: Thu 24 Sep 2026 15:24:02 +0000 Files and hashes: 1: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl (hash: GsmLf6xU7U+7p2+tDjnUi/Xuo1hbmmxY9D2FWP5xHac=) 2: 3136302e3139312e392e302f32342d3234203d3e20313530373636.roa (hash: Fdjjfm1fJnNWkVxu2u3fwQcxaiitdeQENtBg51jTLAs=) 3: 3136302e3139312e382e302f32332d3234203d3e20313530373636.roa (hash: BxOTrJ4kAeU/jIshca7/vnqFH5T34oiHpb989w5ilgs=) 4: 3136302e3139312e382e302f32342d3234203d3e20313530373636.roa (hash: 23kEX/05VYapgUwuItpshBmqk2zUM39bNJvI89JH27Y=) 5: 3136302e3139312e382e302f32342d3332203d3e20313530373636.roa (hash: rnSZ0yRJQ87LO3K66pUprLSWzMYNldm6q1qbJoiJRVA=) 6: 3136302e3139312e392e302f32342d3332203d3e20313530373636.roa (hash: iobSCigwHPXsmKPAiv0Cm9wPrYmBsLfhPZWAEKgfxoc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ec:5b:6a:bd:0e:e2:26:b8:04:a9:3a:24:6d:4a:31:37:2c:fd:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8 Validity Not Before: Sep 23 14:28:02 2026 GMT Not After : Sep 24 15:24:02 2026 GMT Subject: CN=820CBFABC86EB07F1EFDE0AE42F8B4FC25D7FBBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:d9:ec:be:bb:52:5a:24:fb:4e:de:22:37: 27:11:a0:46:10:13:4d:d5:3e:96:e0:f2:d8:39:83: 10:d7:d2:6e:7a:a8:cc:9a:50:1e:eb:64:79:f5:bf: 00:78:79:3b:b1:18:65:18:b5:c1:c6:a8:0c:2b:60: f5:d3:ec:2d:ac:eb:0d:a7:a8:4c:c3:9d:13:23:10: 89:e9:94:3f:4d:19:2a:b9:3e:6e:b8:15:39:25:2e: 87:b2:63:bd:91:cc:59:b0:d3:f3:18:cb:8e:e4:66: 13:c6:0b:9d:56:5f:b9:44:f0:b5:ff:77:d6:07:e4: 4c:8f:7f:44:ad:8d:72:67:e2:f8:a2:65:12:45:50: a8:2f:c9:4a:50:e6:10:05:9a:51:07:35:4b:48:ec: 82:7f:5d:4c:0d:4e:71:3f:02:2a:5d:1c:87:2c:0d: 52:13:6d:69:5d:74:c4:90:f4:07:ba:27:e4:36:f0: fd:a1:d5:4b:11:44:87:4d:d6:1b:3e:b2:d1:7b:74: de:73:b9:f8:32:db:c1:b5:0f:e5:eb:ad:e7:4c:67: e1:8b:77:94:9d:fd:df:b4:17:83:65:59:1b:8d:46: 59:bd:60:df:06:9e:76:1c:a1:4a:1e:45:f4:ea:f0: f4:fc:f3:61:43:19:d7:b0:89:9e:68:b1:4b:39:9b: 9e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0C:BF:AB:C8:6E:B0:7F:1E:FD:E0:AE:42:F8:B4:FC:25:D7:FB:BF X509v3 Authority Key Identifier: keyid:82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d3:21:0c:63:8f:d7:49:42:45:a4:98:50:21:1d:e5:dc:a5: de:60:85:3e:d6:ef:06:81:88:38:db:e0:0f:95:2a:74:d8:3c: 31:8e:1b:ad:3d:6d:47:50:e4:83:d0:51:f5:4a:a5:71:f0:85: 1d:53:d0:d0:ce:ed:23:07:e8:9d:01:a6:f1:27:0b:26:ba:f4: fd:f2:7f:6b:55:e5:38:b8:4d:ee:e4:98:17:5c:fe:90:61:e0: 41:54:75:a9:a1:85:97:d9:60:0d:46:0b:5d:59:cf:81:57:a1: 6e:6f:8a:1b:cb:66:6e:a8:d8:ae:c2:29:db:ba:4e:9c:18:f7: 98:d5:c7:c7:f4:06:3c:b2:59:01:ba:99:87:ca:a3:da:50:43: 21:9c:14:04:a0:db:80:15:85:e5:e2:a0:a5:7f:11:34:7c:09: fa:83:ae:19:87:fe:9a:ea:d5:f2:70:18:66:4b:32:b0:48:c7: 27:4a:65:57:7b:40:54:c6:9a:c3:ee:7d:dd:7d:e9:b9:55:7f: 3c:25:99:37:d8:db:fd:a5:e8:70:13:42:26:3b:75:27:d0:da: 0c:70:3c:23:1e:49:c8:c8:3d:44:90:2c:65:e2:ca:1a:b2:b0: ec:8a:2f:75:c4:e5:90:39:cc:23:bf:af:ad:31:fa:74:7b:52: f5:33:39:32 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUTexbar0O4ia4BKk6JG1KMTcs/TwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI0MkEzOUUwNTc3RThFODJCRjg2M0QwMTI0RkY1QUYy RjUzQzlDODAeFw0yNjA5MjMxNDI4MDJaFw0yNjA5MjQxNTI0MDJaMDMxMTAvBgNV BAMTKDgyMENCRkFCQzg2RUIwN0YxRUZERTBBRTQyRjhCNEZDMjVEN0ZCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaENnsvrtSWiT7Tt4iNycRoEYQ E03VPpbg8tg5gxDX0m56qMyaUB7rZHn1vwB4eTuxGGUYtcHGqAwrYPXT7C2s6w2n qEzDnRMjEInplD9NGSq5Pm64FTklLoeyY72RzFmw0/MYy47kZhPGC51WX7lE8LX/ d9YH5EyPf0StjXJn4viiZRJFUKgvyUpQ5hAFmlEHNUtI7IJ/XUwNTnE/AipdHIcs DVITbWlddMSQ9Ae6J+Q28P2h1UsRRIdN1hs+stF7dN5zufgy28G1D+XrredMZ+GL d5Sd/d+0F4NlWRuNRlm9YN8GnnYcoUoeRfTq8PT882FDGdewiZ5osUs5m55TAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUggy/q8husH8e/eCuQvi0/CXX+78wHwYDVR0j BBgwFoAUgkKjngV36Ogr+GPQEk/1ry9TycgwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE LzEvODI0MkEzOUUwNTc3RThFODJCRjg2M0QwMTI0RkY1QUYyRjUzQzlDOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC84MjQyQTM5RTA1NzdFOEU4MkJGODYzRDAxMjRG RjVBRjJGNTNDOUM4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzEvODI0MkEzOUUwNTc3 RThFODJCRjg2M0QwMTI0RkY1QUYyRjUzQzlDOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEzTIQxjj9dJ QkWkmFAhHeXcpd5ghT7W7waBiDjb4A+VKnTYPDGOG609bUdQ5IPQUfVKpXHwhR1T 0NDO7SMH6J0BpvEnCya69P3yf2tV5Ti4Te7kmBdc/pBh4EFUdamhhZfZYA1GC11Z z4FXoW5vihvLZm6o2K7CKdu6TpwY95jVx8f0BjyyWQG6mYfKo9pQQyGcFASg24AV heXioKV/ETR8CfqDrhmH/prq1fJwGGZLMrBIxydKZVd7QFTGmsPufd196blVfzwl mTfY2/2l6HATQiY7dSfQ2gxwPCMeScjIPUSQLGXiyhqysOyKL3XE5ZA5zCO/r60x +nR7UvUzOTI= -----END CERTIFICATE-----Generated at Wed Sep 23 16:26:50 2026 by rpki-client