$ rpki-client -vvvf rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft File: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft (raw, json) Hash identifier: bC6MgCa9H9vN+L5nnFyVkhtOmsdubHnVRZfstZn4DXY= Subject key identifier: B5:9A:AD:4C:20:60:86:C6:AD:84:8E:8D:CA:85:2C:FE:57:5A:D6:05 Authority key identifier: E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5 Certificate issuer: /CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5 Certificate serial: 745FEDBB68E68633ED106B5547BE3EB96FBB6E29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft Manifest number: B6 Signing time: Mon 21 Sep 2026 08:21:37 +0000 Manifest this update: Mon 21 Sep 2026 08:16:37 +0000 Manifest next update: Tue 22 Sep 2026 09:49:37 +0000 Files and hashes: 1: 3130332e3136302e3138302e302f32332d3234203d3e203138303431.roa (hash: 18NWi1veGokF/mTHx158Mqd+r/PzLz4vX21G5OQonx8=) 2: 3130332e3136302e3138302e302f32332d3234203d3e20393833.roa (hash: bSmO+jTWr7YOoJ4NGhuYgKT8sLNYWbbxkJfWN+8zotE=) 3: 3130332e3136302e3138302e302f32332d3234203d3e203338313336.roa (hash: vXSGvfe4/SHzbgc1FGIm8W7fF4FtlTo17+zWJlbEFVI=) 4: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl (hash: xkT1sXwx7Qk28N5NCdg8EdRmywX74L0nikWUKm7ySZY=) 5: 3130332e3136302e3138302e302f32332d3234203d3e203536383530.roa (hash: RzAPn5btTcxQ4JmMexqs2Z3tgOn6EwRXUMKi5on2EDg=) 6: 323430363a656534303a3a2f33322d3438203d3e203138303431.roa (hash: ENdF+FZ/wshSwMngi/LeNYAxqnXtTR+JIbUWvzMtjvg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5f:ed:bb:68:e6:86:33:ed:10:6b:55:47:be:3e:b9:6f:bb:6e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5 Validity Not Before: Sep 21 08:16:37 2026 GMT Not After : Sep 22 09:49:37 2026 GMT Subject: CN=B59AAD4C206086C6AD848E8DCA852CFE575AD605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:aa:e1:35:69:07:e3:d9:7e:a7:7b:64:00: c1:92:d9:fb:fc:e4:2a:85:db:f1:1b:89:a3:cf:f4: ba:f1:7d:09:6a:d0:11:27:d5:9a:99:ac:58:38:b9: 18:fc:0e:68:25:82:bc:bf:4c:e2:e0:e4:10:59:b3: c1:76:51:fa:e0:c9:45:35:89:e8:ad:f4:9c:e7:5b: 97:7e:c4:0a:c3:21:90:92:b7:b4:bc:7b:48:45:3a: 44:c4:60:d4:94:de:8c:c0:46:51:a8:45:4f:c0:4f: 50:87:2f:0f:e9:e9:70:f6:54:1f:43:87:91:07:28: 8c:76:ad:1b:17:f2:51:4f:fe:48:41:28:f2:87:3a: e4:df:76:0e:fe:75:f3:d2:ff:17:4d:69:ad:3e:f5: 11:f3:30:ae:17:57:74:62:bf:c1:9c:53:f6:97:1e: 13:a7:51:3f:fc:21:90:68:25:45:3c:50:dc:c5:ff: ed:22:97:4b:e6:c6:52:4b:76:75:b6:d9:eb:36:ea: e5:e1:1e:37:73:a9:aa:41:ce:2e:44:6d:11:eb:15: de:b4:2f:92:07:e0:e8:68:8c:e6:10:ca:2a:0f:46: 25:2b:3a:54:a0:f3:ad:4e:0e:73:65:a4:2f:80:98: b7:12:bc:97:90:72:c6:10:85:d7:d8:81:4f:9f:1f: f9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9A:AD:4C:20:60:86:C6:AD:84:8E:8D:CA:85:2C:FE:57:5A:D6:05 X509v3 Authority Key Identifier: keyid:E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1d:54:74:90:0d:91:76:6a:ba:6e:87:84:19:33:17:45:7c: 5e:f1:e3:58:7f:c0:19:69:10:1d:8c:9d:c4:b9:d6:38:52:a2: 57:9e:c5:fa:ea:25:36:98:5a:06:7e:19:6e:d7:51:14:53:04: 7d:6f:a7:11:ff:12:5a:29:eb:8d:ae:bf:bb:00:6d:86:ef:00: ed:cc:0b:ea:00:90:6a:82:8d:78:4d:05:f4:e8:63:83:e3:91: 33:b9:26:30:b0:bf:ed:07:69:3a:e8:46:d2:00:ce:16:32:cf: 02:fc:30:78:cf:c3:1f:93:57:1a:60:e1:ef:7a:bd:7e:e5:12: 8f:fe:33:5f:19:e2:91:18:ce:2b:04:54:a0:a1:aa:68:1e:84: 14:d7:85:6b:6c:04:8a:7a:46:33:9b:ec:6d:f4:56:7e:ee:ab: 1c:b1:c6:25:5d:d5:43:6f:46:d0:2d:0c:b2:7f:c9:dc:0c:85: b8:3e:3a:4e:42:32:be:8f:74:ea:b6:b0:ff:34:99:4b:53:3d: cc:db:89:2a:f7:f5:5a:fb:74:be:73:cc:4b:95:d3:1f:63:43: a7:95:97:1e:3d:61:4d:82:ec:3d:ad:e2:6d:2a:14:76:f0:0b: f6:93:f5:bd:dd:b7:bb:39:37:7e:81:50:34:79:35:84:dd:5a: 96:06:be:af -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUdF/tu2jmhjPtEGtVR74+uW+7bikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY1Rjg3QzM0MTVCNzRERkJCQ0JFMDkwOUEzMjA4MzVF RTg4RTZFNTAeFw0yNjA5MjEwODE2MzdaFw0yNjA5MjIwOTQ5MzdaMDMxMTAvBgNV BAMTKEI1OUFBRDRDMjA2MDg2QzZBRDg0OEU4RENBODUyQ0ZFNTc1QUQ2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaH6rhNWkH49l+p3tkAMGS2fv8 5CqF2/EbiaPP9LrxfQlq0BEn1ZqZrFg4uRj8Dmglgry/TOLg5BBZs8F2UfrgyUU1 ieit9JznW5d+xArDIZCSt7S8e0hFOkTEYNSU3ozARlGoRU/AT1CHLw/p6XD2VB9D h5EHKIx2rRsX8lFP/khBKPKHOuTfdg7+dfPS/xdNaa0+9RHzMK4XV3Riv8GcU/aX HhOnUT/8IZBoJUU8UNzF/+0il0vmxlJLdnW22es26uXhHjdzqapBzi5EbRHrFd60 L5IH4OhojOYQyioPRiUrOlSg861ODnNlpC+AmLcSvJeQcsYQhdfYgU+fH/nvAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUtZqtTCBghsathI6NyoUs/lda1gUwHwYDVR0j BBgwFoAU5l+Hw0FbdN+7y+CQmjIINe6I5uUwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRVJBWUlO Rk8vMC9FNjVGODdDMzQxNUI3NERGQkJDQkUwOTA5QTMyMDgzNUVFODhFNkU1LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0U2NUY4N0MzNDE1Qjc0REZCQkNCRTA5MDlB MzIwODM1RUU4OEU2RTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FUkFZSU5GTy8wL0U2NUY4N0Mz NDE1Qjc0REZCQkNCRTA5MDlBMzIwODM1RUU4OEU2RTUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCoHVR0 kA2Rdmq6boeEGTMXRXxe8eNYf8AZaRAdjJ3EudY4UqJXnsX66iU2mFoGfhlu11EU UwR9b6cR/xJaKeuNrr+7AG2G7wDtzAvqAJBqgo14TQX06GOD45EzuSYwsL/tB2k6 6EbSAM4WMs8C/DB4z8Mfk1caYOHver1+5RKP/jNfGeKRGM4rBFSgoapoHoQU14Vr bASKekYzm+xt9FZ+7qscscYlXdVDb0bQLQyyf8ncDIW4PjpOQjK+j3TqtrD/NJlL Uz3M24kq9/Va+3S+c8xLldMfY0OnlZcePWFNguw9reJtKhR28Av2k/W93be7OTd+ gVA0eTWE3VqWBr6v -----END CERTIFICATE-----Generated at Mon Sep 21 18:05:39 2026 by rpki-client