$ rpki-client -vvvf rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft File: D31DE8192962A403BB6809455D9C0776F79CC527.mft (raw, json) Hash identifier: nm8jsHzIrylwPg9eJRGLfTpCvmqonspHO6ZSdu5bJlc= Subject key identifier: 49:2E:62:23:63:EB:27:4E:5D:87:58:2F:9A:A5:C2:6E:F1:F8:50:24 Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527 Certificate serial: 3DBF4C86C1D210C32DC23CBF77134DC5479C6CE1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft Manifest number: BA Signing time: Mon 21 Sep 2026 14:42:22 +0000 Manifest this update: Mon 21 Sep 2026 14:37:22 +0000 Manifest next update: Tue 22 Sep 2026 17:06:22 +0000 Files and hashes: 1: D31DE8192962A403BB6809455D9C0776F79CC527.crl (hash: tYPmLD5cqWEe3dJRpCIrE/T6qXlKeuGcE8XKJtoEaQY=) 2: 36312e35362e32352e302f32342d3234203d3e203138343131.roa (hash: qLfcOZVogzNc0fPW8DS0BFg+aXm72rn141irJHfF/2A=) 3: 36312e35362e32342e302f32342d3234203d3e203138343131.roa (hash: 4W+qJBNLOJOWIRvtB6qDddjGArtbipAJUnwCauAbtiw=) 4: 36312e35362e31382e302f32342d3234203d3e203138343131.roa (hash: gjwd7BV9O1873cFPhEXU/7D/wbFE9dSEUv4zzhFHYw8=) 5: 3131392e33302e31362e302f32302d3230203d3e203138343131.roa (hash: VDIgNrS0Bj4C/eZLO2BtqOoH9/X324CutCA0RmZUaVs=) 6: 3131392e33302e31362e302f32302d3234203d3e203138343131.roa (hash: b/aL5o5ZJ2+jJ6WA1q4dCKtGxzeUgsNC1ybEW3+mJZY=) 7: 36312e35362e32362e302f32342d3234203d3e203138343131.roa (hash: nzkDFeWq9DKB8SnYVh/zKHjUR7e4Y9fE95qdnDZlMiI=) 8: 36312e35362e31362e302f32302d3230203d3e203138343131.roa (hash: cpOU01Iw58/YmjLPrJqeRjungi3bbe0B4tFLVOzxjxc=) 9: 36312e35362e31362e302f32302d3234203d3e203138343131.roa (hash: OaBE8mWI96DAhvnsCUNb1Lo3ZA5eC1WiiVCLBOSaZW4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:bf:4c:86:c1:d2:10:c3:2d:c2:3c:bf:77:13:4d:c5:47:9c:6c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527 Validity Not Before: Sep 21 14:37:22 2026 GMT Not After : Sep 22 17:06:22 2026 GMT Subject: CN=492E622363EB274E5D87582F9AA5C26EF1F85024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8a:44:de:d7:f9:b4:85:cf:dc:4b:7a:0e:98: f7:1e:88:e1:35:68:e9:c9:6c:a3:75:81:8d:b4:05: 1f:2d:f5:06:a4:3d:a8:a4:85:9b:8f:75:e2:4a:ed: b0:08:f6:1d:10:a6:7e:cd:02:1c:f6:d4:d9:62:d0: bb:72:8b:9e:dc:16:02:58:f5:93:cf:c5:e4:57:1a: 88:d6:03:72:a0:fc:e3:85:8a:07:58:11:08:b5:28: 0b:8f:83:b1:59:fe:d3:f3:f0:2c:ab:80:d6:09:a4: e1:ca:53:83:83:75:fb:a3:73:bb:e5:21:b9:b8:08: bf:2d:40:1f:3b:04:9d:4c:86:b1:28:a3:d5:56:45: 9d:a0:0c:94:64:fa:31:9a:b2:48:1c:3f:36:78:09: 59:60:78:00:5f:94:04:a8:23:a3:ef:4f:60:23:fc: 5d:eb:cc:fb:dc:a4:27:ee:10:93:96:e4:e6:0f:a7: 22:47:71:f0:fd:28:22:8b:92:2a:db:e1:d5:52:9d: 0c:8a:f5:d5:f2:ea:32:f1:22:85:7f:d4:f9:4a:96: fb:ff:42:30:2f:f5:71:03:a3:81:e0:11:fc:b2:31: 8b:4a:ef:47:e5:95:2e:f6:b1:cb:58:b2:b4:6c:1b: 7f:7a:42:48:8d:44:46:ab:d2:a8:69:89:a7:9e:c2: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2E:62:23:63:EB:27:4E:5D:87:58:2F:9A:A5:C2:6E:F1:F8:50:24 X509v3 Authority Key Identifier: keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:58:bf:9f:51:a5:fc:d6:76:c6:6c:c3:b7:48:71:93:88:28: e1:c3:de:f3:74:9c:81:33:5a:f1:6f:85:b6:26:7f:ab:61:da: ae:3f:9a:76:3d:74:3f:13:7f:59:96:f5:9e:52:45:8a:ff:92: 26:04:87:7e:9d:3c:b4:49:f5:17:99:21:fd:88:0f:62:a0:9d: 1e:15:99:84:5a:aa:7b:4f:44:05:fb:38:86:38:fa:e7:10:f2: f3:c2:e7:32:d6:8d:80:9d:09:c5:0f:c7:19:60:0d:58:33:2d: 28:71:ae:36:93:92:55:ab:12:74:3b:72:0b:8a:43:a2:ab:7c: ac:c2:97:1c:b7:12:77:12:46:a4:99:08:88:1a:2c:fd:2e:94: 75:24:e4:be:8f:e4:4e:54:b7:7a:8c:23:64:20:78:67:35:ba: 2f:5d:37:1b:bb:3e:17:39:11:75:40:48:33:4f:e1:ee:55:c0: f7:53:9a:c7:5f:3c:b9:53:53:d3:23:70:71:20:1d:8d:0a:78: 49:df:ae:35:0e:09:2b:dc:92:34:da:0b:82:97:3e:31:e9:4d: 41:60:92:ef:7c:d7:57:f2:1d:00:e0:50:ce:f4:7e:19:af:86: e1:f0:e1:ff:f4:40:f1:80:72:17:70:ae:3b:32:50:42:98:41: 80:02:d2:79 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUPb9MhsHSEMMtwjy/dxNNxUecbOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxREU4MTkyOTYyQTQwM0JCNjgwOTQ1NUQ5QzA3NzZG NzlDQzUyNzAeFw0yNjA5MjExNDM3MjJaFw0yNjA5MjIxNzA2MjJaMDMxMTAvBgNV BAMTKDQ5MkU2MjIzNjNFQjI3NEU1RDg3NTgyRjlBQTVDMjZFRjFGODUwMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyikTe1/m0hc/cS3oOmPceiOE1 aOnJbKN1gY20BR8t9QakPaikhZuPdeJK7bAI9h0Qpn7NAhz21Nli0Ltyi57cFgJY 9ZPPxeRXGojWA3Kg/OOFigdYEQi1KAuPg7FZ/tPz8CyrgNYJpOHKU4ODdfujc7vl Ibm4CL8tQB87BJ1MhrEoo9VWRZ2gDJRk+jGaskgcPzZ4CVlgeABflASoI6PvT2Aj /F3rzPvcpCfuEJOW5OYPpyJHcfD9KCKLkirb4dVSnQyK9dXy6jLxIoV/1PlKlvv/ QjAv9XEDo4HgEfyyMYtK70fllS72sctYsrRsG396QkiNREar0qhpiaeewrqlAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUSS5iI2PrJ05dh1gvmqXCbvH4UCQwHwYDVR0j BBgwFoAU0x3oGSlipAO7aAlFXZwHdvecxScwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRURUTlMv MC9EMzFERTgxOTI5NjJBNDAzQkI2ODA5NDU1RDlDMDc3NkY3OUNDNTI3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0QzMURFODE5Mjk2MkE0MDNCQjY4MDk0NTVEOUMw Nzc2Rjc5Q0M1MjcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FRFROUy8wL0QzMURFODE5Mjk2MkE0 MDNCQjY4MDk0NTVEOUMwNzc2Rjc5Q0M1MjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyWL+fUaX81nbG bMO3SHGTiCjhw97zdJyBM1rxb4W2Jn+rYdquP5p2PXQ/E39ZlvWeUkWK/5ImBId+ nTy0SfUXmSH9iA9ioJ0eFZmEWqp7T0QF+ziGOPrnEPLzwucy1o2AnQnFD8cZYA1Y My0oca42k5JVqxJ0O3ILikOiq3yswpcctxJ3EkakmQiIGiz9LpR1JOS+j+ROVLd6 jCNkIHhnNbovXTcbuz4XORF1QEgzT+HuVcD3U5rHXzy5U1PTI3BxIB2NCnhJ3641 Dgkr3JI02guClz4x6U1BYJLvfNdX8h0A4FDO9H4Zr4bh8OH/9EDxgHIXcK47MlBC mEGAAtJ5 -----END CERTIFICATE-----Generated at Tue Sep 22 10:26:17 2026 by rpki-client