$ rpki-client -vvvf rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft File: CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft (raw, json) Hash identifier: m6GAAvfnyfgj0sc38mATjwp+6SAoQVv8PMdx99mK9rs= Subject key identifier: 59:74:60:13:01:AA:45:83:03:4F:DB:0D:8D:44:44:8C:24:72:B5:53 Authority key identifier: CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F Certificate issuer: /CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F Certificate serial: 49DCAEAD3981F4D48086E6D80514C1649EF32318 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft Manifest number: B3 Signing time: Mon 21 Sep 2026 16:02:35 +0000 Manifest this update: Mon 21 Sep 2026 15:57:35 +0000 Manifest next update: Tue 22 Sep 2026 18:58:35 +0000 Files and hashes: 1: 3130332e3133302e38342e302f32322d3234203d3e20313331363037.roa (hash: kLXIxum1hjICq0/XMBssYAH4VJErk8HWH+ctM17UVM0=) 2: CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl (hash: mjPBVsQKwA11tx8YnwADA+HDJ8YSLF1NVbnM0TDmaKQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:dc:ae:ad:39:81:f4:d4:80:86:e6:d8:05:14:c1:64:9e:f3:23:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F Validity Not Before: Sep 21 15:57:35 2026 GMT Not After : Sep 22 18:58:35 2026 GMT Subject: CN=5974601301AA4583034FDB0D8D44448C2472B553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bb:95:32:69:03:0b:62:f8:50:94:78:d4:a6: 3a:9c:57:73:9d:3f:38:5c:04:8b:de:fa:fb:15:74: 43:ed:f8:0d:af:f0:9a:18:d3:bb:c7:c7:b3:19:6b: a7:f6:9c:af:fa:16:a1:af:bb:61:c2:6c:e2:90:ae: 75:a1:3c:a5:90:70:32:d1:db:c1:48:51:0d:57:5c: ee:d7:a1:0f:8b:5b:4b:c5:8d:0e:9c:3c:71:d4:76: 34:26:1f:52:90:34:41:ae:3b:e3:fb:1d:4a:a7:07: 2a:3a:bc:c2:ca:63:96:58:33:1f:9c:44:9b:f0:d3: 59:a3:e5:eb:99:3e:81:74:7c:42:59:7c:33:5f:9c: d5:d2:12:bd:b8:02:9f:0c:e8:3c:dd:5e:54:16:3a: a2:5b:19:39:bf:f9:9e:3b:20:23:fa:0d:b9:5d:a9: d7:7f:96:16:5d:e8:9e:24:a9:9b:e4:92:38:b5:56: 26:25:d5:20:c6:83:98:4a:ab:b4:ff:b8:30:25:e2: 8b:be:91:9a:43:ce:10:98:24:b0:0c:98:fc:dc:b6: 7e:2e:94:ea:36:be:b9:7e:a2:7c:7f:ca:78:33:97: 37:ea:2f:87:8b:cd:e2:f5:ab:88:14:a6:78:04:3f: 1a:15:78:1d:8f:88:5a:8b:0f:b9:68:41:4c:08:27: 93:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:74:60:13:01:AA:45:83:03:4F:DB:0D:8D:44:44:8C:24:72:B5:53 X509v3 Authority Key Identifier: keyid:CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:71:16:25:6e:c2:1c:cb:3c:08:67:3c:79:34:fc:75:38:a6: ae:bd:3b:9e:bc:02:4c:fc:a8:2f:3c:0f:3d:44:92:af:60:d9: 47:e2:06:51:ff:b8:b1:ef:bd:ae:32:ba:a4:b0:78:59:58:2b: 9d:28:24:33:b8:ee:1c:83:45:b5:c0:1a:b4:6d:cc:2e:a2:4d: e3:12:d4:9c:dd:00:d3:3a:63:0b:c7:e4:26:eb:14:c4:3a:f9: b5:00:7e:4f:7f:bf:5b:8b:ac:b6:f3:00:2e:c3:fc:72:33:a2: cf:bf:fb:9e:c3:41:d2:1f:0c:85:6e:d5:17:4a:9e:a9:43:62: 76:2a:54:60:be:b0:5c:cb:d5:0b:94:96:26:39:bd:92:c0:6d: e3:7a:a9:27:71:24:25:07:25:b1:08:09:3f:57:6c:1d:6f:4c: a0:58:67:9e:40:92:a4:64:25:eb:7f:45:03:44:8c:df:3c:b3: 12:10:e8:aa:bc:db:b6:96:14:81:14:41:3c:49:49:44:fc:7d: 60:d0:bd:82:73:d2:f9:e5:2a:11:43:80:0b:44:8a:51:e6:02: c6:48:15:fb:22:03:9f:03:ae:f3:e2:b6:fd:46:e3:21:37:7e: f5:e2:cf:d9:b9:ad:99:2d:c8:fc:c1:fb:64:5a:05:6d:b3:a0: 01:94:b2:8e -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUSdyurTmB9NSAhubYBRTBZJ7zIxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U5ODVDNzhDNkI1Nzg1MDc3MDJERURCMUMzOTlCMkY5 OUNCM0I0RjAeFw0yNjA5MjExNTU3MzVaFw0yNjA5MjIxODU4MzVaMDMxMTAvBgNV BAMTKDU5NzQ2MDEzMDFBQTQ1ODMwMzRGREIwRDhENDQ0NDhDMjQ3MkI1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYu5UyaQMLYvhQlHjUpjqcV3Od PzhcBIve+vsVdEPt+A2v8JoY07vHx7MZa6f2nK/6FqGvu2HCbOKQrnWhPKWQcDLR 28FIUQ1XXO7XoQ+LW0vFjQ6cPHHUdjQmH1KQNEGuO+P7HUqnByo6vMLKY5ZYMx+c RJvw01mj5euZPoF0fEJZfDNfnNXSEr24Ap8M6DzdXlQWOqJbGTm/+Z47ICP6Dbld qdd/lhZd6J4kqZvkkji1ViYl1SDGg5hKq7T/uDAl4ou+kZpDzhCYJLAMmPzctn4u lOo2vrl+onx/yngzlzfqL4eLzeL1q4gUpngEPxoVeB2PiFqLD7loQUwIJ5ObAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUWXRgEwGqRYMDT9sNjUREjCRytVMwHwYDVR0j BBgwFoAUzphceMa1eFB3At7bHDmbL5nLO08wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRUhIS1kv MC9DRTk4NUM3OEM2QjU3ODUwNzcwMkRFREIxQzM5OUIyRjk5Q0IzQjRGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0NFOTg1Qzc4QzZCNTc4NTA3NzAyREVEQjFDMzk5 QjJGOTlDQjNCNEYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FSEhLWS8wL0NFOTg1Qzc4QzZCNTc4 NTA3NzAyREVEQjFDMzk5QjJGOTlDQjNCNEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNcRYlbsIcyzwI Zzx5NPx1OKauvTuevAJM/KgvPA89RJKvYNlH4gZR/7ix772uMrqksHhZWCudKCQz uO4cg0W1wBq0bcwuok3jEtSc3QDTOmMLx+Qm6xTEOvm1AH5Pf79bi6y28wAuw/xy M6LPv/uew0HSHwyFbtUXSp6pQ2J2KlRgvrBcy9ULlJYmOb2SwG3jeqkncSQlByWx CAk/V2wdb0ygWGeeQJKkZCXrf0UDRIzfPLMSEOiqvNu2lhSBFEE8SUlE/H1g0L2C c9L55SoRQ4ALRIpR5gLGSBX7IgOfA67z4rb9RuMhN3714s/Zua2ZLcj8wftkWgVt s6ABlLKO -----END CERTIFICATE-----Generated at Tue Sep 22 07:12:05 2026 by rpki-client