$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft File: 385249635956536ABAE4461A37AC4824F9DC8FD6.mft (raw, json) Hash identifier: taAPckjxcNCZPgrrqRda90xgY/tHYuAMwA2GO6ZeW4o= Subject key identifier: 45:E2:DD:5E:B7:F9:45:51:A0:11:DF:8E:D5:12:8A:4E:92:E9:1B:CB Authority key identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6 Certificate issuer: /CN=385249635956536ABAE4461A37AC4824F9DC8FD6 Certificate serial: 5B8A7A504463ACAB60CF4A03FF775CC6E89BC67A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft Manifest number: B9 Signing time: Sun 20 Sep 2026 14:59:46 +0000 Manifest this update: Sun 20 Sep 2026 14:54:46 +0000 Manifest next update: Mon 21 Sep 2026 16:16:46 +0000 Files and hashes: 1: 3136352e3130312e32382e302f32332d3234203d3e2037353336.roa (hash: MDQ0MQpqvOnP3tGAXbdXYndg5XorOFrBiv2BjsmWQz0=) 2: 3136352e3130312e32392e302f32342d3234203d3e203136353039.roa (hash: yjG8MYF6nfrkwkNu+HFEW+1IrLrwkYkIiZ19QyWO3Dk=) 3: 3136352e3130312e32382e302f32332d3234203d3e20313532363236.roa (hash: btNO8YG7Xa0kAdLaiC/xjh2pArbM9BSYgMB1cmgXBcM=) 4: 3136352e3130312e32382e302f32332d3234203d3e203231383539.roa (hash: R74xcd60wZBSfoy4K8X12x3wQEVRWzhx68AMGErwhDI=) 5: 3136352e3130312e32382e302f32332d3234203d3e20313331363533.roa (hash: f8Wm++qXpNxVHGZKo201vAM9Z2Uy7/WdNvruK2l9Afw=) 6: 385249635956536ABAE4461A37AC4824F9DC8FD6.crl (hash: Da5tSrne3tLHo/neR7jQWZ1fYMoaVAEBcMHi29T1OCg=) 7: 3136352e3130312e32382e302f32332d3234203d3e20323133343330.roa (hash: 35okLdMHqqFwUJOW9E0osinYU4tPIsxaiWo2zlSSj84=) 8: 3136352e3130312e32382e302f32332d3234203d3e203136353039.roa (hash: I9pglQOMH4ub5GmJQynwwln40ZQJu3vyeI2yVEXDiCY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:8a:7a:50:44:63:ac:ab:60:cf:4a:03:ff:77:5c:c6:e8:9b:c6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385249635956536ABAE4461A37AC4824F9DC8FD6 Validity Not Before: Sep 20 14:54:46 2026 GMT Not After : Sep 21 16:16:46 2026 GMT Subject: CN=45E2DD5EB7F94551A011DF8ED5128A4E92E91BCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:d6:d7:64:d7:1b:f6:18:07:d4:a1:f5:6d: 5c:50:13:d5:7d:99:e9:90:dc:fa:23:44:ec:ed:83: 15:6b:d2:1b:5c:9e:78:e7:1f:51:fa:7e:f1:7a:16: e8:2f:a4:66:93:fb:70:31:0f:94:ae:8c:fc:d1:96: 67:ae:3e:a1:9c:fd:fe:16:ad:b8:11:54:c3:80:24: 84:0b:59:92:c0:69:8c:d3:5f:60:d9:f6:9c:19:3c: ab:5b:d7:f2:57:8b:da:ae:2c:59:4e:77:42:13:33: c6:56:fc:d1:65:f2:81:34:cd:96:18:5d:88:64:b9: 5e:4a:70:ed:4b:86:d6:9c:8d:6b:22:ed:0d:f0:4a: 91:19:9d:1e:80:ac:b1:33:73:d2:dd:23:a1:d2:cc: 12:d4:fb:97:38:86:d7:81:3f:a0:ab:a5:a2:af:44: 5f:a3:91:64:06:4f:47:f0:70:69:ba:cb:2f:80:61: d7:5a:45:c7:83:c2:bc:e0:61:65:3f:9b:22:4d:60: 7a:9b:b4:63:60:d4:90:b3:3b:73:f2:e6:10:77:3f: da:c3:11:19:aa:be:ba:bb:96:d6:08:fd:90:d8:b4: 14:82:f1:f1:bb:d3:f1:87:0c:ed:da:a4:05:5e:6e: b8:67:11:ca:cd:bc:25:43:8d:5c:e7:af:95:bc:ed: eb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E2:DD:5E:B7:F9:45:51:A0:11:DF:8E:D5:12:8A:4E:92:E9:1B:CB X509v3 Authority Key Identifier: keyid:38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:64:1e:c2:5e:75:67:de:47:fa:d0:40:dc:ed:4b:06:d2:73: 6a:46:a0:f8:11:e5:24:36:09:e7:a1:c8:8e:f1:23:4c:38:30: 05:4a:9f:42:b6:48:48:8f:c0:71:19:e1:5f:9f:22:5f:5b:09: c2:8c:41:58:b9:8a:92:48:ed:05:9c:03:55:47:95:3a:38:de: a2:02:d5:9e:cd:e6:a8:f6:54:c4:d9:13:91:55:02:d7:e2:16: 6a:38:dd:01:7b:64:0d:23:82:6d:fd:05:6e:4e:1a:b2:57:93: 5c:7f:f1:5f:5c:82:71:66:4e:87:e8:69:23:d7:ae:02:37:92: 54:f1:b8:3f:ea:b2:2f:2b:4b:5b:21:54:17:7a:f5:b3:bd:cd: d8:63:e8:34:0f:4a:d8:79:2c:50:68:c3:1b:d4:ca:70:ad:05: be:c0:63:bd:60:c3:64:58:02:0a:f6:48:c2:e9:db:17:fe:d6: 46:d3:75:87:08:02:91:c4:fe:2a:1d:9e:27:ae:4f:d1:42:da: 7d:55:fe:2e:d0:07:e3:d4:86:6a:d4:be:69:0e:5f:71:51:39: d3:78:18:63:44:b4:00:b3:25:d5:d2:69:44:dd:8b:17:4f:39: c6:00:b0:c2:86:ac:8e:c2:f2:af:e6:9f:aa:e5:b2:6b:ae:2a: 48:06:22:86 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUW4p6UERjrKtgz0oD/3dcxuibxnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg1MjQ5NjM1OTU2NTM2QUJBRTQ0NjFBMzdBQzQ4MjRG OURDOEZENjAeFw0yNjA5MjAxNDU0NDZaFw0yNjA5MjExNjE2NDZaMDMxMTAvBgNV BAMTKDQ1RTJERDVFQjdGOTQ1NTFBMDExREY4RUQ1MTI4QTRFOTJFOTFCQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ONbXZNcb9hgH1KH1bVxQE9V9 memQ3PojROztgxVr0htcnnjnH1H6fvF6FugvpGaT+3AxD5SujPzRlmeuPqGc/f4W rbgRVMOAJIQLWZLAaYzTX2DZ9pwZPKtb1/JXi9quLFlOd0ITM8ZW/NFl8oE0zZYY XYhkuV5KcO1LhtacjWsi7Q3wSpEZnR6ArLEzc9LdI6HSzBLU+5c4hteBP6CrpaKv RF+jkWQGT0fwcGm6yy+AYddaRceDwrzgYWU/myJNYHqbtGNg1JCzO3Py5hB3P9rD ERmqvrq7ltYI/ZDYtBSC8fG70/GHDO3apAVebrhnEcrNvCVDjVznr5W87es5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUReLdXrf5RVGgEd+O1RKKTpLpG8swHwYDVR0j BBgwFoAUOFJJY1lWU2q65EYaN6xIJPncj9YwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURC QVNFLzEvMzg1MjQ5NjM1OTU2NTM2QUJBRTQ0NjFBMzdBQzQ4MjRGOURDOEZENi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC8zODUyNDk2MzU5NTY1MzZBQkFFNDQ2MUEz N0FDNDgyNEY5REM4RkQ2LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURCQVNFLzEvMzg1MjQ5 NjM1OTU2NTM2QUJBRTQ0NjFBMzdBQzQ4MjRGOURDOEZENi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAItk HsJedWfeR/rQQNztSwbSc2pGoPgR5SQ2CeehyI7xI0w4MAVKn0K2SEiPwHEZ4V+f Il9bCcKMQVi5ipJI7QWcA1VHlTo43qIC1Z7N5qj2VMTZE5FVAtfiFmo43QF7ZA0j gm39BW5OGrJXk1x/8V9cgnFmTofoaSPXrgI3klTxuD/qsi8rS1shVBd69bO9zdhj 6DQPSth5LFBowxvUynCtBb7AY71gw2RYAgr2SMLp2xf+1kbTdYcIApHE/iodnieu T9FC2n1V/i7QB+PUhmrUvmkOX3FROdN4GGNEtACzJdXSaUTdixdPOcYAsMKGrI7C 8q/mn6rlsmuuKkgGIoY= -----END CERTIFICATE-----Generated at Mon Sep 21 05:56:53 2026 by rpki-client