$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft File: 385249635956536ABAE4461A37AC4824F9DC8FD6.mft (raw, json) Hash identifier: LQKGAzbZ3AmDhhp869jkkNsyrrvbP+NxCHdFhhkuxuA= Subject key identifier: 36:5B:1C:5C:FF:12:8E:DA:4E:75:44:CD:21:EA:0F:BD:CE:B5:FF:EE Authority key identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6 Certificate issuer: /CN=385249635956536ABAE4461A37AC4824F9DC8FD6 Certificate serial: 5D98087522AFA2DD9302F4F3650C5E4DA9883999 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft Manifest number: FA Signing time: Sun 08 Nov 2026 09:12:20 +0000 Manifest this update: Sun 08 Nov 2026 09:07:20 +0000 Manifest next update: Mon 09 Nov 2026 11:52:20 +0000 Files and hashes: 1: 3136352e3130312e32382e302f32332d3234203d3e20313532363236.roa (hash: btNO8YG7Xa0kAdLaiC/xjh2pArbM9BSYgMB1cmgXBcM=) 2: 3136352e3130312e32382e302f32332d3234203d3e20323133343330.roa (hash: 35okLdMHqqFwUJOW9E0osinYU4tPIsxaiWo2zlSSj84=) 3: 3136352e3130312e32382e302f32332d3234203d3e203136353039.roa (hash: I9pglQOMH4ub5GmJQynwwln40ZQJu3vyeI2yVEXDiCY=) 4: 3136352e3130312e32382e302f32332d3234203d3e2037353336.roa (hash: MDQ0MQpqvOnP3tGAXbdXYndg5XorOFrBiv2BjsmWQz0=) 5: 3136352e3130312e32382e302f32332d3234203d3e20313331363533.roa (hash: f8Wm++qXpNxVHGZKo201vAM9Z2Uy7/WdNvruK2l9Afw=) 6: 385249635956536ABAE4461A37AC4824F9DC8FD6.crl (hash: 3yrVl0ZFrIVNdJKHzdz8/V134WTK3+KPnF56kNDHxDA=) 7: 3136352e3130312e32392e302f32342d3234203d3e203136353039.roa (hash: yjG8MYF6nfrkwkNu+HFEW+1IrLrwkYkIiZ19QyWO3Dk=) 8: 3136352e3130312e32382e302f32332d3234203d3e203231383539.roa (hash: R74xcd60wZBSfoy4K8X12x3wQEVRWzhx68AMGErwhDI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 11:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:98:08:75:22:af:a2:dd:93:02:f4:f3:65:0c:5e:4d:a9:88:39:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385249635956536ABAE4461A37AC4824F9DC8FD6 Validity Not Before: Nov 8 09:07:20 2026 GMT Not After : Nov 9 11:52:20 2026 GMT Subject: CN=365B1C5CFF128EDA4E7544CD21EA0FBDCEB5FFEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b8:4b:d0:c1:93:34:b8:f7:54:40:76:b0:e7: 21:d3:5c:f9:9a:b8:97:70:93:25:0a:dc:6f:24:db: 42:da:b1:e8:da:fd:7f:bf:6d:a1:5e:59:39:17:87: 9f:4a:e6:29:19:bc:48:e1:3e:15:ea:94:4e:71:67: 14:b6:5c:81:88:1d:16:2d:1c:b6:61:aa:ee:4e:d2: 78:a3:21:36:5a:3d:42:41:fd:0a:0d:60:e1:1c:63: 5a:9f:4f:53:39:cb:e8:bb:41:01:b6:7c:15:f7:aa: b7:4d:26:5e:9c:18:bc:fe:0b:55:91:dd:ac:35:35: 62:57:a9:9e:47:06:7a:93:b6:3e:d1:f9:fd:d9:5c: d7:65:06:78:6a:cc:57:02:cd:7d:3f:6e:8d:c5:ca: c9:ce:e1:4c:4d:ee:7e:4a:00:ee:7e:a0:53:d0:f7: d3:5b:94:9f:00:30:4e:19:0e:68:f2:cc:7c:89:06: 29:99:8c:03:69:24:01:3e:05:f3:b6:6c:0c:52:61: 47:51:5f:28:76:20:8d:b6:a0:2f:91:80:27:1f:6b: 08:58:52:5f:40:0b:07:3a:c4:1c:13:bf:02:d7:a4: 5b:4c:36:b2:21:5f:4f:79:f2:81:06:ed:30:67:8e: 8f:b7:b2:35:d1:07:ca:f6:e2:87:21:44:00:c5:eb: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5B:1C:5C:FF:12:8E:DA:4E:75:44:CD:21:EA:0F:BD:CE:B5:FF:EE X509v3 Authority Key Identifier: keyid:38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c9:fd:25:ce:82:76:9a:7b:c4:61:24:b6:f2:94:71:df:01: c0:70:d2:90:19:6a:fd:23:36:c9:c2:75:79:eb:9c:fe:8d:c4: 8a:65:76:9d:76:1c:60:da:d4:41:9d:55:72:43:a2:47:67:60: 5a:19:f8:33:be:c0:a5:f6:74:3f:0a:bb:ab:20:f7:cb:14:d3: 56:aa:15:4f:e8:a9:65:a7:75:de:6a:d9:37:2c:25:b6:1e:14: d0:d1:20:2c:05:32:f1:aa:7d:35:50:0b:c7:b3:71:cd:af:44: 73:a1:51:60:c6:ed:53:f2:d5:29:96:e0:cc:6e:be:ad:e1:2f: 28:d4:45:5f:9f:37:b0:65:7a:9f:8a:d0:bb:4b:66:6f:f7:82: fe:8e:96:6d:23:49:09:97:4b:f1:57:b6:2b:54:61:9f:82:08: d0:8f:f4:f2:30:9a:bd:68:35:1b:73:a6:73:a6:7f:51:88:d5: 76:5f:e3:aa:e0:05:91:56:6b:3b:c2:ff:f2:d1:a7:80:96:ab: 85:b4:81:7a:9b:0f:85:81:c7:21:ff:62:7e:06:42:97:7e:6f: 87:50:c2:e3:3e:bd:02:1f:16:8e:c3:5a:b2:7f:64:ad:2c:2c: 00:42:a6:e6:30:6b:0f:d8:87:dd:f1:42:55:da:54:ee:51:e0: 59:87:7b:ad -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUXZgIdSKvot2TAvTzZQxeTamIOZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg1MjQ5NjM1OTU2NTM2QUJBRTQ0NjFBMzdBQzQ4MjRG OURDOEZENjAeFw0yNjExMDgwOTA3MjBaFw0yNjExMDkxMTUyMjBaMDMxMTAvBgNV BAMTKDM2NUIxQzVDRkYxMjhFREE0RTc1NDRDRDIxRUEwRkJEQ0VCNUZGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVuEvQwZM0uPdUQHaw5yHTXPma uJdwkyUK3G8k20Laseja/X+/baFeWTkXh59K5ikZvEjhPhXqlE5xZxS2XIGIHRYt HLZhqu5O0nijITZaPUJB/QoNYOEcY1qfT1M5y+i7QQG2fBX3qrdNJl6cGLz+C1WR 3aw1NWJXqZ5HBnqTtj7R+f3ZXNdlBnhqzFcCzX0/bo3FysnO4UxN7n5KAO5+oFPQ 99NblJ8AME4ZDmjyzHyJBimZjANpJAE+BfO2bAxSYUdRXyh2II22oC+RgCcfawhY Ul9ACwc6xBwTvwLXpFtMNrIhX0958oEG7TBnjo+3sjXRB8r24ochRADF6ysLAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUNlscXP8SjtpOdUTNIeoPvc61/+4wHwYDVR0j BBgwFoAUOFJJY1lWU2q65EYaN6xIJPncj9YwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURC QVNFLzEvMzg1MjQ5NjM1OTU2NTM2QUJBRTQ0NjFBMzdBQzQ4MjRGOURDOEZENi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC8zODUyNDk2MzU5NTY1MzZBQkFFNDQ2MUEz N0FDNDgyNEY5REM4RkQ2LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURCQVNFLzEvMzg1MjQ5 NjM1OTU2NTM2QUJBRTQ0NjFBMzdBQzQ4MjRGOURDOEZENi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAjJ /SXOgnaae8RhJLbylHHfAcBw0pAZav0jNsnCdXnrnP6NxIpldp12HGDa1EGdVXJD okdnYFoZ+DO+wKX2dD8Ku6sg98sU01aqFU/oqWWndd5q2TcsJbYeFNDRICwFMvGq fTVQC8ezcc2vRHOhUWDG7VPy1SmW4Mxuvq3hLyjURV+fN7Blep+K0LtLZm/3gv6O lm0jSQmXS/FXtitUYZ+CCNCP9PIwmr1oNRtzpnOmf1GI1XZf46rgBZFWazvC//LR p4CWq4W0gXqbD4WBxyH/Yn4GQpd+b4dQwuM+vQIfFo7DWrJ/ZK0sLABCpuYwaw/Y h93xQlXaVO5R4FmHe60= -----END CERTIFICATE-----Generated at Mon Nov 9 07:15:24 2026 by rpki-client