$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft File: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft (raw, json) Hash identifier: S4koYQW0Hwzj+n2YaE6GHC5N+ov52qGu+nEmNIc7u8o= Subject key identifier: EE:BE:68:32:9E:7B:5B:BF:71:6E:9E:93:A0:60:46:85:E4:8F:AA:79 Authority key identifier: BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA Certificate issuer: /CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Certificate serial: 6B656A9E5E0EBE5A83D9C8FA6B5BF742F31FF6AB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft Manifest number: 010A Signing time: Sun 15 Nov 2026 05:04:04 +0000 Manifest this update: Sun 15 Nov 2026 04:59:04 +0000 Manifest next update: Mon 16 Nov 2026 07:00:04 +0000 Files and hashes: 1: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl (hash: e0eGYMJ9E6cciGuGNW9v8opISyCw37YWuajhUYddhko=) 2: 323430323a346432303a3a2f34382d3438203d3e20313532363236.roa (hash: gWGrH7k/E1wfVhOhIGsZWVZwwwOvXG8dp1buitprMVE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:65:6a:9e:5e:0e:be:5a:83:d9:c8:fa:6b:5b:f7:42:f3:1f:f6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Validity Not Before: Nov 15 04:59:04 2026 GMT Not After : Nov 16 07:00:04 2026 GMT Subject: CN=EEBE68329E7B5BBF716E9E93A0604685E48FAA79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:7c:09:9c:69:03:6b:a9:91:b9:c9:bc:fd: 9c:d8:a1:70:de:49:22:b3:35:43:f7:15:fd:58:aa: 1b:35:b6:bd:9f:c9:b7:4d:9f:a0:19:03:1a:71:b0: 2e:fd:f3:c0:6d:96:5a:c6:63:4f:b4:40:0c:ec:8a: 03:f7:f3:86:d5:a0:f0:e2:1d:89:7e:5c:eb:53:e6: b0:38:ce:79:57:4d:e5:41:92:ac:e7:18:9e:a1:4c: ee:d4:a8:35:b7:3b:5d:5e:32:a3:45:61:0c:0a:c1: 0c:31:96:7c:d9:b8:e6:c6:b9:ba:1f:14:15:06:88: 53:93:e8:7e:50:e8:b4:a2:22:f7:15:fe:30:98:56: 31:6a:f0:53:85:57:91:21:ec:a4:f0:eb:a1:b4:48: 2e:bd:55:c1:35:d6:d7:a3:e5:5f:28:a7:d6:75:2c: f5:c4:80:00:48:41:f6:d3:0c:19:3e:3f:5e:79:d1: da:fa:e9:2e:60:46:8e:1b:0e:f9:50:e5:c7:87:1a: b9:ec:53:f1:a9:46:37:9c:f1:92:97:cc:ac:19:7f: b1:77:b0:14:d7:c6:12:3e:0e:b6:89:4e:f0:85:53: 00:12:22:84:79:d5:9b:b1:d0:1f:a5:e9:7b:93:b0: d6:de:3f:e4:8f:ff:62:0d:7f:7a:c1:45:91:02:3e: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BE:68:32:9E:7B:5B:BF:71:6E:9E:93:A0:60:46:85:E4:8F:AA:79 X509v3 Authority Key Identifier: keyid:BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:65:5f:76:23:10:db:4b:c8:10:7c:0a:cc:7d:88:d2:2a:9b: 9a:5e:c8:05:99:60:ff:ef:2e:6f:be:92:2b:d8:d5:d0:3e:03: 83:d5:4b:88:f9:02:e2:85:ef:47:a6:fa:12:c4:a6:2d:5d:be: 40:9d:1c:29:29:5b:48:8f:d6:e4:9e:4d:40:69:31:85:5f:e3: 76:e6:f6:c0:15:5e:ac:6a:43:cd:3a:72:15:68:df:eb:0d:4e: ad:17:b0:d0:c4:14:84:88:db:b1:a4:a3:ea:53:70:fb:08:6a: bc:36:f1:b4:f0:0e:f3:62:03:43:95:d8:40:24:24:c1:17:a1: a2:23:8c:23:0b:92:7e:24:c0:b5:b9:13:87:f6:a1:ba:ec:05: c1:32:8b:ac:e0:e6:33:2d:df:5c:66:c7:59:c9:d5:3f:21:8d: 03:7e:81:5d:e4:98:fc:09:4a:0a:0e:dd:3b:dc:af:b2:45:de: be:81:b1:45:fc:c7:a2:1b:5c:79:d2:d5:92:be:3a:05:0b:e2: e9:c4:1d:62:7d:4a:e4:67:25:e2:41:0d:21:60:5a:5c:88:a9: 1f:b2:26:8c:29:1f:71:20:d5:ef:bd:12:e1:f6:05:01:70:fd: a0:a5:d5:ed:f8:cb:49:ab:dd:41:ed:e9:ae:0a:74:4a:47:42: d2:d9:ec:02 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUa2Vqnl4OvlqD2cj6a1v3QvMf9qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3 QTlFMDVEQTAeFw0yNjExMTUwNDU5MDRaFw0yNjExMTYwNzAwMDRaMDMxMTAvBgNV BAMTKEVFQkU2ODMyOUU3QjVCQkY3MTZFOUU5M0EwNjA0Njg1RTQ4RkFBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61HwJnGkDa6mRucm8/ZzYoXDe SSKzNUP3Ff1Yqhs1tr2fybdNn6AZAxpxsC7988BtllrGY0+0QAzsigP384bVoPDi HYl+XOtT5rA4znlXTeVBkqznGJ6hTO7UqDW3O11eMqNFYQwKwQwxlnzZuObGubof FBUGiFOT6H5Q6LSiIvcV/jCYVjFq8FOFV5Eh7KTw66G0SC69VcE11tej5V8op9Z1 LPXEgABIQfbTDBk+P1550dr66S5gRo4bDvlQ5ceHGrnsU/GpRjec8ZKXzKwZf7F3 sBTXxhI+DraJTvCFUwASIoR51Zux0B+l6XuTsNbeP+SP/2INf3rBRZECPjkxAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU7r5oMp57W79xbp6ToGBGheSPqnkwHwYDVR0j BBgwFoAUvtclxBPHpDb1ogDyB/PLOnqeBdowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURC QVNFLzAvQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9CRUQ3MjVDNDEzQzdBNDM2RjVBMjAwRjIw N0YzQ0IzQTdBOUUwNURBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURCQVNFLzAvQkVENzI1 QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKBl X3YjENtLyBB8Csx9iNIqm5peyAWZYP/vLm++kivY1dA+A4PVS4j5AuKF70em+hLE pi1dvkCdHCkpW0iP1uSeTUBpMYVf43bm9sAVXqxqQ806chVo3+sNTq0XsNDEFISI 27Gko+pTcPsIarw28bTwDvNiA0OV2EAkJMEXoaIjjCMLkn4kwLW5E4f2obrsBcEy i6zg5jMt31xmx1nJ1T8hjQN+gV3kmPwJSgoO3Tvcr7JF3r6BsUX8x6IbXHnS1ZK+ OgUL4unEHWJ9SuRnJeJBDSFgWlyIqR+yJowpH3Eg1e+9EuH2BQFw/aCl1e34y0mr 3UHt6a4KdEpHQtLZ7AI= -----END CERTIFICATE-----Generated at Sun Nov 15 17:10:49 2026 by rpki-client