$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft File: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft (raw, json) Hash identifier: YZCOobdAuYblX35fbLug7ByyPLU9TyC4zVmQPS23Je4= Subject key identifier: FF:E8:14:03:E9:6C:E1:3A:0A:47:D3:EA:32:94:4B:04:39:D2:86:E5 Authority key identifier: BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA Certificate issuer: /CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Certificate serial: 2C2E69DFC93E9A35638537EBC7F90030904D03C6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft Manifest number: BB Signing time: Sun 20 Sep 2026 04:08:31 +0000 Manifest this update: Sun 20 Sep 2026 04:03:31 +0000 Manifest next update: Mon 21 Sep 2026 07:56:31 +0000 Files and hashes: 1: 323430323a346432303a3a2f34382d3438203d3e20323133343330.roa (hash: yXLG5aJYFzJQAOcQmz7saI6BueUDkIVJ2tp9ey7Y/oo=) 2: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl (hash: ZaSclvToaV3fTu9N+9AUNcAO7h9O2Njcf2C3a/ZGNYE=) 3: 323430323a346432303a3a2f34382d3438203d3e20313532363236.roa (hash: gWGrH7k/E1wfVhOhIGsZWVZwwwOvXG8dp1buitprMVE=) 4: 323430323a346432303a313a3a2f34382d3438203d3e20313331363533.roa (hash: X9wIzhuw1c0lYPQ7mtcEb2gQt9tzHi6f24KHdsIqRUI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 07:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2e:69:df:c9:3e:9a:35:63:85:37:eb:c7:f9:00:30:90:4d:03:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Validity Not Before: Sep 20 04:03:31 2026 GMT Not After : Sep 21 07:56:31 2026 GMT Subject: CN=FFE81403E96CE13A0A47D3EA32944B0439D286E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:02:eb:3a:9d:af:5c:ec:09:29:91:8c:24: 0d:fd:6f:5c:36:f2:c1:a7:87:de:7d:2b:24:64:5d: 3c:ac:c5:15:d6:a0:77:9f:56:a4:f0:2f:ac:77:e6: ba:ad:9f:28:8f:6b:02:b0:de:7d:16:9f:1f:47:c1: 3f:a5:19:ce:4d:07:e9:c7:82:7b:bc:f7:57:4c:9e: 81:0b:47:6e:8f:78:43:14:a0:92:e7:8c:10:0a:7c: 48:bf:a1:7e:1a:ef:31:0d:8f:fe:ed:5f:76:a6:3a: a7:43:b7:fa:9a:b6:82:28:84:b6:74:89:2d:90:2e: 5b:00:9b:68:6e:cd:bd:a6:56:aa:46:3d:65:1b:c0: 1f:8a:20:e7:17:e9:84:b7:17:10:b1:2e:e0:64:ce: ef:c8:4c:5f:88:93:15:4e:0f:7e:7f:37:63:26:cc: bf:50:47:ed:0a:f4:d6:97:1f:35:5f:5d:eb:fe:90: 18:49:3d:32:89:f5:9b:1a:72:99:a0:0e:6e:8a:18: 99:d5:65:b7:72:27:5b:c6:ef:2a:fe:45:58:27:64: 6b:f9:b9:9b:c4:eb:3c:5d:07:0b:32:9a:22:58:ec: 45:7b:ce:b7:60:e2:f8:dc:5e:15:0e:bf:2b:4e:bf: 9b:a0:8d:3e:c1:7b:4d:3e:17:db:83:f4:24:bc:e9: 9d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E8:14:03:E9:6C:E1:3A:0A:47:D3:EA:32:94:4B:04:39:D2:86:E5 X509v3 Authority Key Identifier: keyid:BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:3a:e0:96:85:2f:82:14:43:48:90:5d:d1:e8:97:65:c7:2e: d5:91:8c:45:6c:43:45:88:e0:12:5f:fe:7d:5d:24:99:89:f0: e4:c1:9b:12:7e:a9:04:5b:24:49:22:f5:0b:68:7e:cd:41:d3: 57:07:86:13:dc:31:78:e1:d7:1a:05:75:45:dd:18:82:98:62: fe:80:94:73:0b:13:8c:b4:41:d2:34:6d:9c:b0:25:9b:92:76: ae:5b:2c:2d:9b:61:ad:63:c3:39:0b:37:ec:b4:d5:5d:c4:cd: a6:b0:cf:f9:21:05:e5:30:a1:aa:86:2a:26:f2:bd:2c:1f:ac: fa:6c:3c:37:b9:44:55:43:06:b1:f0:c6:79:56:5a:ae:5e:82: f3:e7:97:d4:ec:12:72:a4:b8:de:02:e0:ea:c7:0e:5c:e4:89: 0c:ee:11:be:61:5c:b2:96:12:94:60:0b:d6:d8:4d:04:22:05: 14:ff:61:c5:71:4f:03:0c:13:a3:e2:9c:36:6e:91:eb:fd:99: e9:dd:28:e8:51:05:da:e8:19:60:47:fc:ff:19:61:b7:8f:8b: 2b:81:03:c7:c4:ee:7b:7d:93:49:c7:94:81:8d:98:bd:5c:bf: b2:e8:61:4a:63:a8:45:72:2b:c2:ac:9b:8b:5b:17:5c:a1:98: 19:74:82:6e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIULC5p38k+mjVjhTfrx/kAMJBNA8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3 QTlFMDVEQTAeFw0yNjA5MjAwNDAzMzFaFw0yNjA5MjEwNzU2MzFaMDMxMTAvBgNV BAMTKEZGRTgxNDAzRTk2Q0UxM0EwQTQ3RDNFQTMyOTQ0QjA0MzlEMjg2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VwLrOp2vXOwJKZGMJA39b1w2 8sGnh959KyRkXTysxRXWoHefVqTwL6x35rqtnyiPawKw3n0Wnx9HwT+lGc5NB+nH gnu891dMnoELR26PeEMUoJLnjBAKfEi/oX4a7zENj/7tX3amOqdDt/qatoIohLZ0 iS2QLlsAm2huzb2mVqpGPWUbwB+KIOcX6YS3FxCxLuBkzu/ITF+IkxVOD35/N2Mm zL9QR+0K9NaXHzVfXev+kBhJPTKJ9ZsacpmgDm6KGJnVZbdyJ1vG7yr+RVgnZGv5 uZvE6zxdBwsymiJY7EV7zrdg4vjcXhUOvytOv5ugjT7Be00+F9uD9CS86Z1vAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU/+gUA+ls4ToKR9PqMpRLBDnShuUwHwYDVR0j BBgwFoAUvtclxBPHpDb1ogDyB/PLOnqeBdowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURC QVNFLzAvQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9CRUQ3MjVDNDEzQzdBNDM2RjVBMjAwRjIw N0YzQ0IzQTdBOUUwNURBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURCQVNFLzAvQkVENzI1 QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAQ6 4JaFL4IUQ0iQXdHol2XHLtWRjEVsQ0WI4BJf/n1dJJmJ8OTBmxJ+qQRbJEki9Qto fs1B01cHhhPcMXjh1xoFdUXdGIKYYv6AlHMLE4y0QdI0bZywJZuSdq5bLC2bYa1j wzkLN+y01V3Ezaawz/khBeUwoaqGKibyvSwfrPpsPDe5RFVDBrHwxnlWWq5egvPn l9TsEnKkuN4C4OrHDlzkiQzuEb5hXLKWEpRgC9bYTQQiBRT/YcVxTwMME6PinDZu kev9mendKOhRBdroGWBH/P8ZYbePiyuBA8fE7nt9k0nHlIGNmL1cv7LoYUpjqEVy K8Ksm4tbF1yhmBl0gm4= -----END CERTIFICATE-----Generated at Sun Sep 20 20:18:44 2026 by rpki-client