$ rpki-client -vvvf rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft File: 9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft (raw, json) Hash identifier: O8W2ypkMy5W2CKzS7Jv8ona0M9vwmPiUTASEx9LSTv4= Subject key identifier: F8:BB:86:14:A4:FB:BA:7D:A5:C5:5A:C0:49:CB:FA:FA:A4:B8:97:35 Authority key identifier: 9D:00:7D:37:3F:38:1C:CA:59:6E:CE:20:FC:27:E8:D7:F7:2B:D5:C2 Certificate issuer: /CN=9D007D373F381CCA596ECE20FC27E8D7F72BD5C2 Certificate serial: 047494C30448F7086C985934949ACBF3829DC854 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft Manifest number: B4 Signing time: Mon 21 Sep 2026 02:15:01 +0000 Manifest this update: Mon 21 Sep 2026 02:10:01 +0000 Manifest next update: Tue 22 Sep 2026 05:16:01 +0000 Files and hashes: 1: 323430363a663334303a3a2f33322d3634203d3e203338383432.roa (hash: dPU2RCL9922koNIK4EbftiZXNxbxs5ADbxLPZLggc34=) 2: 3130332e3136302e3232362e302f32332d3234203d3e20313331363539.roa (hash: E3rZgHSz1Z/QlxuFQ/uZkBfovj2HHfCX638SO+t2sg0=) 3: 3130332e3136302e3232362e302f32332d3234203d3e203338383432.roa (hash: fXBUwxrpMNifp4MO+znwtVxrCjA2c4pDgmAW0x6+dMc=) 4: 9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl (hash: vLpov5jQZV7dgEd4Vo+nd6tmC2NLx+geYqycitkve0o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:74:94:c3:04:48:f7:08:6c:98:59:34:94:9a:cb:f3:82:9d:c8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D007D373F381CCA596ECE20FC27E8D7F72BD5C2 Validity Not Before: Sep 21 02:10:01 2026 GMT Not After : Sep 22 05:16:01 2026 GMT Subject: CN=F8BB8614A4FBBA7DA5C55AC049CBFAFAA4B89735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:83:58:f2:5b:55:97:43:f0:30:99:d6:3d:93: a8:d1:82:73:27:1b:fe:25:f7:65:54:64:79:f3:f3: f8:8b:77:35:ee:39:c2:8f:fd:b5:5a:88:40:23:be: 48:99:86:29:46:f0:fe:48:5d:f3:ea:19:7c:21:dc: 8d:43:1f:ab:82:cf:84:b2:9a:68:5c:44:65:86:cd: c4:a4:1c:a0:d2:ae:5a:5f:70:1c:4c:56:4e:47:99: c0:37:2d:14:5c:b6:b0:c9:2c:d2:15:07:ee:13:73: ef:29:97:6f:a8:9c:9f:20:34:b5:b4:f8:ba:6b:85: e9:b6:a0:a0:25:31:2c:02:5f:07:9c:4c:2a:7a:37: 3e:81:41:ee:9a:2a:72:e6:b7:02:79:15:d8:fb:9f: d5:79:68:e7:3b:c5:9a:22:0b:55:03:4c:c2:5e:0f: 3f:fc:af:1c:58:b2:a4:fa:ed:34:1f:9d:d9:a5:91: 84:f9:fb:d8:c9:b2:ab:18:ed:f4:36:9b:a9:ab:cd: b0:0d:76:07:f1:c6:ec:35:a3:d7:e6:46:49:fc:d5: 46:1e:36:3c:53:a7:4b:5b:32:bb:87:91:e0:a8:e3: 7f:d8:c1:a3:a6:be:59:d8:50:54:9b:fc:7a:cc:50: b5:de:02:e5:2a:99:9d:a7:09:db:a4:88:e1:6a:6d: 93:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BB:86:14:A4:FB:BA:7D:A5:C5:5A:C0:49:CB:FA:FA:A4:B8:97:35 X509v3 Authority Key Identifier: keyid:9D:00:7D:37:3F:38:1C:CA:59:6E:CE:20:FC:27:E8:D7:F7:2B:D5:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:be:72:68:3b:df:10:94:81:8b:24:f7:9d:fe:b3:c2:60:93: 36:f1:60:de:ba:6a:3c:3e:de:89:f4:eb:5e:d3:25:98:83:c6: da:0f:ae:a4:6d:85:94:83:0e:9b:47:4b:b2:eb:5a:e0:90:6c: 32:0b:5f:bc:28:b8:44:49:ee:3e:78:7a:84:20:dd:0c:23:a1: cd:9c:ca:d8:27:b9:75:51:ca:78:23:14:66:2a:90:ee:d2:d4: 37:9b:08:43:ef:4b:ed:dc:c5:02:a3:42:f7:14:b4:04:71:5b: 3a:4a:97:f3:2d:9d:98:06:42:69:41:bf:d8:84:cf:4b:6d:00: af:c4:7a:b4:51:eb:b6:fa:3d:db:ef:55:a6:12:76:72:c7:f2: 73:96:f5:7f:b6:1b:2d:33:f9:80:b2:b2:39:5f:5e:6d:ef:e6: 62:59:5f:56:2a:79:00:34:38:65:cc:0e:6c:10:29:12:47:d2: 8d:91:cb:2f:f3:61:3f:4d:2d:ae:36:a1:7c:4b:0e:02:f8:05: e2:07:51:04:e4:d6:10:d6:f9:59:67:fd:81:14:a5:f3:48:d6: 27:80:b9:5a:a7:82:2f:8c:d1:ba:36:e0:33:10:d8:85:5e:d2: 70:38:37:0d:e4:ce:3f:a7:96:59:b7:bd:66:07:94:7e:7c:3a: fb:7a:f6:10 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUBHSUwwRI9whsmFk0lJrL84KdyFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMDdEMzczRjM4MUNDQTU5NkVDRTIwRkMyN0U4RDdG NzJCRDVDMjAeFw0yNjA5MjEwMjEwMDFaFw0yNjA5MjIwNTE2MDFaMDMxMTAvBgNV BAMTKEY4QkI4NjE0QTRGQkJBN0RBNUM1NUFDMDQ5Q0JGQUZBQTRCODk3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgg1jyW1WXQ/AwmdY9k6jRgnMn G/4l92VUZHnz8/iLdzXuOcKP/bVaiEAjvkiZhilG8P5IXfPqGXwh3I1DH6uCz4Sy mmhcRGWGzcSkHKDSrlpfcBxMVk5HmcA3LRRctrDJLNIVB+4Tc+8pl2+onJ8gNLW0 +Lprhem2oKAlMSwCXwecTCp6Nz6BQe6aKnLmtwJ5Fdj7n9V5aOc7xZoiC1UDTMJe Dz/8rxxYsqT67TQfndmlkYT5+9jJsqsY7fQ2m6mrzbANdgfxxuw1o9fmRkn81UYe NjxTp0tbMruHkeCo43/YwaOmvlnYUFSb/HrMULXeAuUqmZ2nCdukiOFqbZP/AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU+LuGFKT7un2lxVrAScv6+qS4lzUwHwYDVR0j BBgwFoAUnQB9Nz84HMpZbs4g/Cfo1/cr1cIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE5TTkVU LzAvOUQwMDdEMzczRjM4MUNDQTU5NkVDRTIwRkMyN0U4RDdGNzJCRDVDMi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS85RDAwN0QzNzNGMzgxQ0NBNTk2RUNFMjBGQzI3 RThEN0Y3MkJENUMyLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE5TTkVULzAvOUQwMDdEMzczRjM4 MUNDQTU5NkVDRTIwRkMyN0U4RDdGNzJCRDVDMi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFq+cmg73xCU gYsk953+s8JgkzbxYN66ajw+3on0617TJZiDxtoPrqRthZSDDptHS7LrWuCQbDIL X7wouERJ7j54eoQg3Qwjoc2cytgnuXVRyngjFGYqkO7S1DebCEPvS+3cxQKjQvcU tARxWzpKl/MtnZgGQmlBv9iEz0ttAK/EerRR67b6PdvvVaYSdnLH8nOW9X+2Gy0z +YCysjlfXm3v5mJZX1YqeQA0OGXMDmwQKRJH0o2Ryy/zYT9NLa42oXxLDgL4BeIH UQTk1hDW+Vln/YEUpfNI1ieAuVqngi+M0bo24DMQ2IVe0nA4Nw3kzj+nllm3vWYH lH58Ovt69hA= -----END CERTIFICATE-----Generated at Mon Sep 21 18:56:06 2026 by rpki-client