$ rpki-client -vvvf rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft File: 2D50476E80CFF23F1675B2EF9B63BB103C893243.mft (raw, json) Hash identifier: qjJYEtwlGNFTV+uh8nOPLyi3sn5bF5E/mdAWngX5NY4= Subject key identifier: 1D:7E:8B:49:16:D2:3B:29:23:5B:16:96:A5:67:03:9C:A8:11:4B:5B Authority key identifier: 2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43 Certificate issuer: /CN=2D50476E80CFF23F1675B2EF9B63BB103C893243 Certificate serial: 40E1C4E8E0D6E3742976254F869A526CF14E111F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft Manifest number: B3 Signing time: Mon 21 Sep 2026 07:51:35 +0000 Manifest this update: Mon 21 Sep 2026 07:46:35 +0000 Manifest next update: Tue 22 Sep 2026 11:03:35 +0000 Files and hashes: 1: 2D50476E80CFF23F1675B2EF9B63BB103C893243.crl (hash: L4GQBEUWj2pnst+pstgV9tKY7OwpSmabdmtNe6G3HZc=) 2: 3130332e3138332e3135342e302f32332d3234203d3e2037343833.roa (hash: nxCey52fLbG4LlN5x0FYINGVY7pYCO3Y1zJpZMqwSeA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 11:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e1:c4:e8:e0:d6:e3:74:29:76:25:4f:86:9a:52:6c:f1:4e:11:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D50476E80CFF23F1675B2EF9B63BB103C893243 Validity Not Before: Sep 21 07:46:35 2026 GMT Not After : Sep 22 11:03:35 2026 GMT Subject: CN=1D7E8B4916D23B29235B1696A567039CA8114B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e8:9a:63:92:15:fe:97:0f:63:e4:9b:a0:c6: ed:a9:2f:cf:6b:c0:8f:d9:1d:67:16:ff:05:4c:58: b6:c0:71:80:d7:99:94:28:47:e7:74:cf:f2:b6:b3: 4d:d3:47:2d:ed:52:82:cf:03:9e:44:06:44:d3:f7: b6:d1:36:e4:4e:25:c0:07:2c:97:1d:72:f5:19:77: f1:5e:71:83:2d:e6:f0:f2:fa:f9:b2:48:6d:ce:fc: 15:be:69:fc:ab:b1:17:3b:73:9c:20:98:ba:be:f8: 45:74:42:c3:bf:ae:61:43:de:8f:1e:29:2f:43:d4: 1c:21:e8:84:74:4c:12:70:5e:1f:a6:d3:89:a8:20: 46:28:1c:f3:da:5f:e2:8e:2c:86:74:bd:47:91:22: 11:c4:1f:46:c2:86:0e:c6:ff:92:9f:c3:12:a2:cd: cc:b7:de:66:2d:71:c4:ba:c1:27:29:d3:60:cd:16: 7f:ad:b0:7f:bf:84:47:d4:9b:bf:71:85:e8:10:8e: 33:72:26:1c:1d:04:51:9f:cd:09:74:d8:58:df:d9: b7:6e:13:fa:5e:a7:ff:5f:e2:42:65:ed:6e:25:78: 68:45:e1:6b:68:22:50:1e:50:e7:75:41:81:c4:5d: 52:5b:bc:a7:1e:41:1f:86:b7:8f:f5:e8:5e:9d:a1: 3a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:8B:49:16:D2:3B:29:23:5B:16:96:A5:67:03:9C:A8:11:4B:5B X509v3 Authority Key Identifier: keyid:2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:72:c4:04:1a:62:bc:0e:76:4f:cb:9b:99:85:e0:db:b0:78: 09:9f:9f:46:2e:df:3e:1a:e2:3f:63:54:2b:0d:03:7c:24:b7: 7c:81:72:1e:67:50:d6:b0:d2:c9:7f:0c:85:7f:f2:1a:24:a3: 7a:ff:11:38:8c:f0:da:a4:96:1c:3d:33:63:18:ca:d4:77:d5: e2:10:e0:7f:ea:fd:31:a2:ae:55:1d:b9:c2:46:68:b8:4e:d8: 67:d7:9e:4e:e3:25:16:99:b6:82:11:85:eb:17:a2:21:a5:3b: 89:69:3e:60:01:ac:9e:21:40:f3:30:5b:ae:84:71:e6:43:28: 6c:d4:92:be:29:7d:74:9c:47:7b:b5:29:9e:88:de:9b:78:16: 3b:62:3a:9b:c6:1e:7c:aa:24:57:4d:32:f1:b1:3b:3e:73:e3: 27:72:e7:62:25:91:1d:82:eb:dd:58:e7:03:96:44:35:b6:1d: d9:15:dd:25:59:b9:e0:32:d6:fa:1d:d3:50:9e:96:50:e3:6e: 83:ae:ba:ea:37:1a:9b:44:ba:39:14:54:5f:b5:f7:b3:cb:d4: c9:57:8e:d9:65:e8:a2:05:7d:0f:83:e7:95:c8:4a:8f:2f:77: 0b:e3:30:8e:98:e9:cc:13:f3:74:e6:31:9b:49:bc:cf:7d:37: 67:4e:14:c2 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUQOHE6ODW43QpdiVPhppSbPFOER8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MDQ3NkU4MENGRjIzRjE2NzVCMkVGOUI2M0JCMTAz Qzg5MzI0MzAeFw0yNjA5MjEwNzQ2MzVaFw0yNjA5MjIxMTAzMzVaMDMxMTAvBgNV BAMTKDFEN0U4QjQ5MTZEMjNCMjkyMzVCMTY5NkE1NjcwMzlDQTgxMTRCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc6JpjkhX+lw9j5Jugxu2pL89r wI/ZHWcW/wVMWLbAcYDXmZQoR+d0z/K2s03TRy3tUoLPA55EBkTT97bRNuROJcAH LJcdcvUZd/FecYMt5vDy+vmySG3O/BW+afyrsRc7c5wgmLq++EV0QsO/rmFD3o8e KS9D1Bwh6IR0TBJwXh+m04moIEYoHPPaX+KOLIZ0vUeRIhHEH0bChg7G/5KfwxKi zcy33mYtccS6wScp02DNFn+tsH+/hEfUm79xhegQjjNyJhwdBFGfzQl02Fjf2bdu E/pep/9f4kJl7W4leGhF4WtoIlAeUOd1QYHEXVJbvKceQR+Gt4/16F6doTrNAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUHX6LSRbSOykjWxaWpWcDnKgRS1swHwYDVR0j BBgwFoAULVBHboDP8j8WdbLvm2O7EDyJMkMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1lWQy8w LzJENTA0NzZFODBDRkYyM0YxNjc1QjJFRjlCNjNCQjEwM0M4OTMyNDMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMkQ1MDQ3NkU4MENGRjIzRjE2NzVCMkVGOUI2M0JC MTAzQzg5MzI0My5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NZVkMvMC8yRDUwNDc2RTgwQ0ZGMjNG MTY3NUIyRUY5QjYzQkIxMDNDODkzMjQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHLEBBpivA52T8ub mYXg27B4CZ+fRi7fPhriP2NUKw0DfCS3fIFyHmdQ1rDSyX8MhX/yGiSjev8ROIzw 2qSWHD0zYxjK1HfV4hDgf+r9MaKuVR25wkZouE7YZ9eeTuMlFpm2ghGF6xeiIaU7 iWk+YAGsniFA8zBbroRx5kMobNSSvil9dJxHe7Upnojem3gWO2I6m8YefKokV00y 8bE7PnPjJ3LnYiWRHYLr3VjnA5ZENbYd2RXdJVm54DLW+h3TUJ6WUONug6666jca m0S6ORRUX7X3s8vUyVeO2WXoogV9D4PnlchKjy93C+MwjpjpzBPzdOYxm0m8z303 Z04Uwg== -----END CERTIFICATE-----Generated at Tue Sep 22 04:10:23 2026 by rpki-client