$ rpki-client -vvvf rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft File: 8B6578CFFA2564370C947633B4222B38FBE04787.mft (raw, json) Hash identifier: ZTlY3TNjvLMM5eIczvDePWMKIDyIWHXJmCxKcH7bbyc= Subject key identifier: E9:8B:E8:3A:08:49:2B:71:CC:C3:46:D7:6E:09:D5:4A:2B:58:72:2C Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87 Certificate issuer: /CN=8B6578CFFA2564370C947633B4222B38FBE04787 Certificate serial: 5FE3D3207D4D12DF0F16A6EEB16B70B865D4A086 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft Manifest number: B9 Signing time: Mon 21 Sep 2026 05:35:53 +0000 Manifest this update: Mon 21 Sep 2026 05:30:53 +0000 Manifest next update: Tue 22 Sep 2026 07:38:53 +0000 Files and hashes: 1: 8B6578CFFA2564370C947633B4222B38FBE04787.crl (hash: FMANmCtmT7EbtaOELkiQEkcHI5YTJN4jTc8OR2hR0PM=) 2: 3130332e3130342e3135312e302f32342d3234203d3e20313530323838.roa (hash: OVmj6wqpCDoCVGv/wnIQ7J+KG2IP7XidmU+Gbdn+nyQ=) 3: 3130332e3130342e3135302e302f32342d3234203d3e20313335323933.roa (hash: h1zDSRZ3TRJlhR+U4wVbJzjHTzTePNMp3oBDSC21x4k=) 4: 3130332e3130342e3134382e302f32332d3332203d3e20313331363137.roa (hash: ptYVo8fcmKCNY0SB5M4EFl0tfitQ5lFpdJDuUwWLs1E=) 5: 3130332e3130342e3134382e302f32342d3332203d3e20313331363137.roa (hash: 3HCjGtrVeXk0xOR0uuHBiqXc7pJZ9osCCcWRgAc2u0I=) 6: 3130332e3130342e3134382e302f32332d3332203d3e20313338343135.roa (hash: iG/RKgeK0WnHEYeyY7HDeBCF1wwyNY/516KS8KYs4xI=) 7: 3130332e3130342e3134392e302f32342d3332203d3e20313331363137.roa (hash: OZwQnvVk4yetwjei/3UcgDl7U/wG9KFLqEYavrhzVlI=) 8: 3130332e3130342e3135312e302f32342d3234203d3e20313331363138.roa (hash: XPIZKI0b+STshE1jyzyv6vzwTCkp1FigGgVTYDae6lY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 07:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e3:d3:20:7d:4d:12:df:0f:16:a6:ee:b1:6b:70:b8:65:d4:a0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787 Validity Not Before: Sep 21 05:30:53 2026 GMT Not After : Sep 22 07:38:53 2026 GMT Subject: CN=E98BE83A08492B71CCC346D76E09D54A2B58722C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:75:6b:04:bc:59:af:d1:ae:72:ae:06:db:76: 93:cc:a8:b4:a6:70:75:8e:27:83:1a:15:8f:7d:77: 19:94:a7:2a:35:b5:a3:7a:45:c6:45:d9:a1:9e:58: 74:95:9c:d4:7a:c7:3a:c3:b5:eb:f5:f4:0c:42:b3: 10:05:86:fa:d4:03:7b:9a:85:78:da:ab:a0:4f:9f: a4:1e:69:00:1c:33:43:b7:d2:64:6e:29:72:dd:ae: 29:63:06:ca:e2:eb:11:cc:a1:03:c3:e8:f6:4d:16: 5e:76:aa:88:d4:bf:9b:4e:b9:a7:8d:5d:73:ec:31: ba:d6:1e:41:07:0c:2f:12:1a:6d:e5:98:54:f3:2c: 30:ee:e9:f5:a8:c1:1d:cb:45:66:78:40:ec:fb:cd: 62:dd:b6:8f:1f:db:96:a2:13:44:1d:a1:db:5f:cc: 87:15:76:6f:3c:a3:41:4d:ad:0f:27:b1:86:9c:50: 6e:f3:49:54:9b:ae:1c:57:46:67:26:6e:55:7f:41: b0:e0:a3:49:9e:23:54:9b:6a:94:b5:7f:f2:81:92: 1a:d3:2a:8b:c2:aa:4b:64:7f:d4:c6:b6:31:85:c9: fd:20:f3:db:4a:67:21:20:0c:35:25:9f:aa:92:99: 48:c2:55:65:da:1c:6e:05:05:30:46:4a:fc:2c:26: 2b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8B:E8:3A:08:49:2B:71:CC:C3:46:D7:6E:09:D5:4A:2B:58:72:2C X509v3 Authority Key Identifier: keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:56:fe:50:3e:f0:d2:4c:54:06:14:1b:02:44:2e:46:6d:8e: e7:98:b7:51:4f:b3:0a:0f:66:62:10:70:8c:54:fd:d4:0d:a9: ad:c3:07:63:5e:ed:d8:9a:9f:e3:37:17:c7:8b:dc:86:d8:d9: 76:8d:69:fe:c7:3b:ff:a7:dd:0c:6c:04:4f:2e:95:a7:be:37: d7:c8:86:cf:2d:dd:72:cc:73:76:76:e6:6d:11:11:e5:fe:22: 59:00:43:13:9d:12:d8:d6:bd:83:89:f8:95:44:6f:06:25:4f: ee:6f:a7:a5:d3:76:c4:97:c7:73:e9:6e:b6:a6:6e:95:bc:e9: 2d:90:d1:d1:c4:ac:bf:e3:28:1e:12:64:2f:64:a1:17:cb:9c: ab:c2:0e:3c:40:f2:d9:ae:98:93:54:c3:23:e3:50:15:e0:22: 10:81:73:d1:3f:16:9c:b4:e2:58:c3:b3:53:13:31:b0:eb:9e: 3a:b0:4e:e8:2e:66:ce:29:cc:8c:78:55:2a:22:ca:94:a5:4a: ac:1c:a8:3c:27:1d:f2:dc:f2:41:a9:73:2a:bc:83:67:07:fd: 61:0f:ef:62:22:78:11:d9:d0:e2:cf:11:32:3a:f4:df:9a:b8: a1:8b:36:51:3e:68:89:1c:24:68:fc:96:bd:3c:dd:8b:9b:24: 5c:6f:d4:f9 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUX+PTIH1NEt8PFqbusWtwuGXUoIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI2NTc4Q0ZGQTI1NjQzNzBDOTQ3NjMzQjQyMjJCMzhG QkUwNDc4NzAeFw0yNjA5MjEwNTMwNTNaFw0yNjA5MjIwNzM4NTNaMDMxMTAvBgNV BAMTKEU5OEJFODNBMDg0OTJCNzFDQ0MzNDZENzZFMDlENTRBMkI1ODcyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCddWsEvFmv0a5yrgbbdpPMqLSm cHWOJ4MaFY99dxmUpyo1taN6RcZF2aGeWHSVnNR6xzrDtev19AxCsxAFhvrUA3ua hXjaq6BPn6QeaQAcM0O30mRuKXLdriljBsri6xHMoQPD6PZNFl52qojUv5tOuaeN XXPsMbrWHkEHDC8SGm3lmFTzLDDu6fWowR3LRWZ4QOz7zWLdto8f25aiE0Qdodtf zIcVdm88o0FNrQ8nsYacUG7zSVSbrhxXRmcmblV/QbDgo0meI1SbapS1f/KBkhrT KovCqktkf9TGtjGFyf0g89tKZyEgDDUln6qSmUjCVWXaHG4FBTBGSvwsJivNAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU6YvoOghJK3HMw0bXbgnVSitYciwwHwYDVR0j BBgwFoAUi2V4z/olZDcMlHYztCIrOPvgR4cwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0VOVFJP SUQvMC84QjY1NzhDRkZBMjU2NDM3MEM5NDc2MzNCNDIyMkIzOEZCRTA0Nzg3LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzhCNjU3OENGRkEyNTY0MzcwQzk0NzYzM0I0 MjIyQjM4RkJFMDQ3ODcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DRU5UUk9JRC8wLzhCNjU3OENG RkEyNTY0MzcwQzk0NzYzM0I0MjIyQjM4RkJFMDQ3ODcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKVv5Q PvDSTFQGFBsCRC5GbY7nmLdRT7MKD2ZiEHCMVP3UDamtwwdjXu3Ymp/jNxfHi9yG 2Nl2jWn+xzv/p90MbARPLpWnvjfXyIbPLd1yzHN2duZtERHl/iJZAEMTnRLY1r2D ifiVRG8GJU/ub6el03bEl8dz6W62pm6VvOktkNHRxKy/4ygeEmQvZKEXy5yrwg48 QPLZrpiTVMMj41AV4CIQgXPRPxactOJYw7NTEzGw6546sE7oLmbOKcyMeFUqIsqU pUqsHKg8Jx3y3PJBqXMqvINnB/1hD+9iIngR2dDizxEyOvTfmrihizZRPmiJHCRo /Ja9PN2LmyRcb9T5 -----END CERTIFICATE-----Generated at Tue Sep 22 01:50:31 2026 by rpki-client