$ rpki-client -vvvf rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft File: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft (raw, json) Hash identifier: loFhshn4gBnQQMLdlA46vn5G34Nw/2f3ZCHGExF1C2w= Subject key identifier: 63:3D:07:7F:43:E5:53:1E:9B:A6:1A:25:35:F3:9B:F2:7B:DF:70:8D Authority key identifier: 4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F Certificate issuer: /CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F Certificate serial: 1DD1ECC402D071838379D827B6719860CC4CC7F7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft Manifest number: F5 Signing time: Tue 10 Nov 2026 04:27:41 +0000 Manifest this update: Tue 10 Nov 2026 04:22:41 +0000 Manifest next update: Wed 11 Nov 2026 04:55:41 +0000 Files and hashes: 1: 3230332e36352e3132382e302f31392d3139203d3e2034373832.roa (hash: mjDMiNdATFHdMEjP66ppJ/Z0/1InOOtWemdYwazOi5A=) 2: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl (hash: /c6cQjniAnngRraSpB5w85DXuBjFDQs7aDEIdsF/t5c=) 3: 3230332e36352e302e302f31372d3137203d3e2034373832.roa (hash: aPv3bOG1weQWYPDGkDtRVOrTNA4jAzlE7y9bBkzaAf8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 02:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d1:ec:c4:02:d0:71:83:83:79:d8:27:b6:71:98:60:cc:4c:c7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F Validity Not Before: Nov 10 04:22:41 2026 GMT Not After : Nov 11 04:55:41 2026 GMT Subject: CN=633D077F43E5531E9BA61A2535F39BF27BDF708D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:df:36:fb:69:12:6f:65:fe:e4:5c:c9:c2:75: 53:fe:b5:29:f8:79:54:37:fa:03:fe:56:70:65:38: 2b:d2:b7:68:64:a4:88:b1:e9:4e:ee:a5:87:12:80: 01:52:af:53:78:44:64:7f:cf:2e:e4:cf:6f:da:a1: ad:9a:82:91:bf:b9:b2:80:1f:a4:b8:a9:9a:0b:65: bb:d4:e4:6f:70:b5:5c:c5:29:79:10:42:ac:a0:84: 51:95:2e:af:d2:bb:1f:e0:7d:67:d0:9f:be:c8:64: 93:16:3a:d7:3e:02:0e:62:0a:68:39:e5:f5:aa:5f: 7f:c0:6d:43:18:07:6e:55:b3:e2:4e:b5:94:5a:73: b3:45:0f:e9:ff:e9:7f:46:81:a1:ca:89:4d:a5:77: d6:f9:7b:21:ba:26:ec:33:5f:45:9a:42:72:4f:33: 0e:c8:e8:2c:44:54:2b:5d:e6:52:37:a8:71:3f:7e: 76:e0:35:4c:ef:f9:e2:a5:45:09:f9:8a:57:93:29: 73:7c:cb:1a:e6:3c:cb:85:d8:72:46:9d:a2:9e:61: db:dd:59:19:39:4d:ff:32:36:2a:6b:77:bd:3b:56: 68:dc:f0:0e:16:9d:aa:fc:7a:ef:b3:91:05:64:eb: 18:31:ec:e3:69:bf:0b:4e:2e:3f:19:7d:56:43:5e: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3D:07:7F:43:E5:53:1E:9B:A6:1A:25:35:F3:9B:F2:7B:DF:70:8D X509v3 Authority Key Identifier: keyid:4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:8f:18:9f:7c:ed:3a:98:a1:45:bc:ad:9f:ad:1e:53:bf:16: a0:c9:ae:9c:df:89:87:6a:06:3d:39:c5:cc:1d:4d:94:8a:1b: 53:e5:a6:9c:1f:80:18:03:2b:28:d0:0f:92:14:c6:b7:26:ba: 21:89:20:3d:6a:1d:30:54:4a:43:20:87:d7:9e:19:a6:61:a6: 9c:47:cc:ac:c1:91:1a:fb:13:91:c3:fe:4a:7c:9f:f4:82:52: b7:cc:c5:93:69:f0:f9:38:4b:00:ca:3a:17:ef:c1:eb:12:be: ae:b8:66:99:06:65:f5:88:69:1a:1e:d8:95:e0:b8:ec:45:64: 2d:6a:2c:48:cf:a9:d5:be:3f:64:d7:93:36:09:7f:3c:3e:a7: 55:02:35:6f:08:cf:17:a9:cb:db:52:7e:39:15:4f:86:0f:28: aa:c8:f0:42:de:ff:06:eb:81:3d:5c:44:11:b6:63:d6:ae:eb: 99:24:6f:d8:11:6b:2d:f6:07:cd:b5:88:9b:67:63:f0:5d:d2: 4a:99:df:b8:73:e4:51:ed:0d:62:3f:5b:e0:63:17:06:91:59: 2c:ed:9f:20:7c:bf:f9:c1:4c:9b:2f:ef:fa:60:34:8e:e0:61: 50:bb:ac:e9:2b:3c:2c:de:af:b1:ef:21:e0:08:5a:0f:15:6e: 19:e5:09:e2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUHdHsxALQcYODedgntnGYYMxMx/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMz OUI4MTQ1RjAeFw0yNjExMTAwNDIyNDFaFw0yNjExMTEwNDU1NDFaMDMxMTAvBgNV BAMTKDYzM0QwNzdGNDNFNTUzMUU5QkE2MUEyNTM1RjM5QkYyN0JERjcwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv3zb7aRJvZf7kXMnCdVP+tSn4 eVQ3+gP+VnBlOCvSt2hkpIix6U7upYcSgAFSr1N4RGR/zy7kz2/aoa2agpG/ubKA H6S4qZoLZbvU5G9wtVzFKXkQQqyghFGVLq/Sux/gfWfQn77IZJMWOtc+Ag5iCmg5 5fWqX3/AbUMYB25Vs+JOtZRac7NFD+n/6X9GgaHKiU2ld9b5eyG6JuwzX0WaQnJP Mw7I6CxEVCtd5lI3qHE/fnbgNUzv+eKlRQn5ileTKXN8yxrmPMuF2HJGnaKeYdvd WRk5Tf8yNiprd707Vmjc8A4Wnar8eu+zkQVk6xgx7ONpvwtOLj8ZfVZDXsRvAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUYz0Hf0PlUx6bpholNfOb8nvfcI0wHwYDVR0j BBgwFoAUTX+s9eSGHa9FXzG8rrt2Ezm4FF8wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRI TkVULzAvNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RDdGQUNGNUU0ODYxREFGNDU1RjMxQkNB RUJCNzYxMzM5QjgxNDVGLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRITkVULzAvNEQ3RkFD RjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALmP GJ987TqYoUW8rZ+tHlO/FqDJrpzfiYdqBj05xcwdTZSKG1PlppwfgBgDKyjQD5IU xrcmuiGJID1qHTBUSkMgh9eeGaZhppxHzKzBkRr7E5HD/kp8n/SCUrfMxZNp8Pk4 SwDKOhfvwesSvq64ZpkGZfWIaRoe2JXguOxFZC1qLEjPqdW+P2TXkzYJfzw+p1UC NW8Izxepy9tSfjkVT4YPKKrI8ELe/wbrgT1cRBG2Y9au65kkb9gRay32B821iJtn Y/Bd0kqZ37hz5FHtDWI/W+BjFwaRWSztnyB8v/nBTJsv7/pgNI7gYVC7rOkrPCze r7HvIeAIWg8VbhnlCeI= -----END CERTIFICATE-----Generated at Tue Nov 10 12:30:59 2026 by rpki-client