$ rpki-client -vvvf rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft File: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft (raw, json) Hash identifier: Vnr1FiTumz7efgWq+nFfVRQIpS3Jucj6PpgY7OJGoVU= Subject key identifier: DA:4C:AE:9A:A7:47:6B:B8:B9:E1:59:79:F3:1D:40:B7:09:09:DD:18 Authority key identifier: 4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F Certificate issuer: /CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F Certificate serial: 0901FA7ADC4D690903BAFE94B3EA6F1ADBA5600D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft Manifest number: B2 Signing time: Sun 20 Sep 2026 16:39:58 +0000 Manifest this update: Sun 20 Sep 2026 16:34:58 +0000 Manifest next update: Mon 21 Sep 2026 20:16:58 +0000 Files and hashes: 1: 3230332e36352e3132382e302f31392d3139203d3e2034373832.roa (hash: mjDMiNdATFHdMEjP66ppJ/Z0/1InOOtWemdYwazOi5A=) 2: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl (hash: dDnUGIVJxFf4HY9SDwbqXSqRUaWKJkqwECQZisST+0k=) 3: 3230332e36352e302e302f31372d3137203d3e2034373832.roa (hash: aPv3bOG1weQWYPDGkDtRVOrTNA4jAzlE7y9bBkzaAf8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 20:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:01:fa:7a:dc:4d:69:09:03:ba:fe:94:b3:ea:6f:1a:db:a5:60:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F Validity Not Before: Sep 20 16:34:58 2026 GMT Not After : Sep 21 20:16:58 2026 GMT Subject: CN=DA4CAE9AA7476BB8B9E15979F31D40B70909DD18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1f:84:0c:5a:ff:f2:61:a6:c7:56:45:ac:50: 24:8b:3a:10:89:86:b8:4d:e2:77:01:9d:bb:6e:49: f9:7c:be:4e:d9:6d:e5:4c:42:74:6d:05:ef:2b:aa: d9:39:9f:28:0d:37:26:2f:ad:db:73:79:22:8b:db: 25:54:b7:54:4b:ed:e0:06:67:5d:cc:ca:db:1e:c9: 53:9b:d6:5b:28:6e:ab:d5:54:ad:28:83:d6:2a:39: f1:eb:4f:35:0f:bf:a3:08:5a:54:ca:dd:91:cf:55: 80:32:4d:de:99:7c:bb:6e:a7:d8:0f:e9:ef:a1:92: d1:f2:25:71:c7:e8:32:2b:3a:a3:a0:de:d7:b6:84: 46:26:af:de:0a:ce:a1:af:ae:18:be:20:46:d7:9b: 5f:2d:b2:13:8f:57:10:46:dc:e1:29:14:ec:1e:74: e9:e8:43:66:e9:04:7d:c4:ae:f9:e0:8e:e7:17:30: 7c:dc:ea:9a:ba:06:a8:da:fa:5a:19:a8:75:e6:0a: 46:56:51:ec:fe:65:9f:14:d2:a4:91:ae:07:3b:ce: b8:b3:e9:64:8e:4d:5e:07:72:e2:e4:e2:28:dd:9d: ec:18:b6:8b:15:36:a6:e7:43:a6:33:cf:c5:09:91: 7a:24:d4:f0:77:4f:d8:e9:30:0d:fe:a3:12:09:1e: d0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4C:AE:9A:A7:47:6B:B8:B9:E1:59:79:F3:1D:40:B7:09:09:DD:18 X509v3 Authority Key Identifier: keyid:4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:44:ec:bc:a0:0f:22:7c:49:7b:c9:fc:cd:9b:69:b7:14:ef: 75:16:21:48:dc:f2:cb:cc:bd:8d:24:db:74:ef:b3:70:75:a5: 96:54:d7:ff:b1:6d:01:55:90:35:be:13:83:20:7a:f0:c5:29: 2a:de:26:1e:4e:6a:06:3d:d5:bb:99:5e:d2:a4:e9:f0:e8:80: 24:14:ee:2d:1a:29:2e:b0:62:d6:d0:f5:6d:aa:6c:7c:5d:0d: 40:73:7b:ca:6f:f0:09:b5:07:e6:2e:78:8f:2b:7c:e6:d7:52: d1:2f:38:ac:c3:23:a5:49:aa:16:1b:35:51:5b:6d:c6:95:77: 48:4d:34:f7:56:70:f5:65:c7:7e:e8:7d:91:de:3c:77:45:b1: 70:d6:11:73:2c:c1:f3:28:f3:dd:72:9a:f2:54:7c:ff:94:20: 03:6f:5b:da:e8:20:35:33:35:10:ee:b3:61:d4:fe:36:41:36: dd:b7:4f:88:bb:a3:23:3a:35:91:20:3e:58:28:fe:c2:94:4a: 54:99:18:cd:ee:e2:9f:18:d8:df:af:ab:aa:e5:49:98:77:a4: 85:c1:20:1e:f9:f4:8a:87:1d:d3:80:cf:6b:68:ae:cd:28:73: f6:08:ab:44:93:f3:96:61:3a:dd:6c:64:05:87:f6:a2:c0:8a: de:24:cc:89 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCQH6etxNaQkDuv6Us+pvGtulYA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMz OUI4MTQ1RjAeFw0yNjA5MjAxNjM0NThaFw0yNjA5MjEyMDE2NThaMDMxMTAvBgNV BAMTKERBNENBRTlBQTc0NzZCQjhCOUUxNTk3OUYzMUQ0MEI3MDkwOUREMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaH4QMWv/yYabHVkWsUCSLOhCJ hrhN4ncBnbtuSfl8vk7ZbeVMQnRtBe8rqtk5nygNNyYvrdtzeSKL2yVUt1RL7eAG Z13MytseyVOb1lsobqvVVK0og9YqOfHrTzUPv6MIWlTK3ZHPVYAyTd6ZfLtup9gP 6e+hktHyJXHH6DIrOqOg3te2hEYmr94KzqGvrhi+IEbXm18tshOPVxBG3OEpFOwe dOnoQ2bpBH3ErvngjucXMHzc6pq6Bqja+loZqHXmCkZWUez+ZZ8U0qSRrgc7zriz 6WSOTV4HcuLk4ijdnewYtosVNqbnQ6Yzz8UJkXok1PB3T9jpMA3+oxIJHtCBAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU2kyumqdHa7i54Vl58x1AtwkJ3RgwHwYDVR0j BBgwFoAUTX+s9eSGHa9FXzG8rrt2Ezm4FF8wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRI TkVULzAvNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RDdGQUNGNUU0ODYxREFGNDU1RjMxQkNB RUJCNzYxMzM5QjgxNDVGLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRITkVULzAvNEQ3RkFD RjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACtE 7LygDyJ8SXvJ/M2babcU73UWIUjc8svMvY0k23Tvs3B1pZZU1/+xbQFVkDW+E4Mg evDFKSreJh5OagY91buZXtKk6fDogCQU7i0aKS6wYtbQ9W2qbHxdDUBze8pv8Am1 B+YueI8rfObXUtEvOKzDI6VJqhYbNVFbbcaVd0hNNPdWcPVlx37ofZHePHdFsXDW EXMswfMo891ymvJUfP+UIANvW9roIDUzNRDus2HU/jZBNt23T4i7oyM6NZEgPlgo /sKUSlSZGM3u4p8Y2N+vq6rlSZh3pIXBIB759IqHHdOAz2tors0oc/YIq0ST85Zh Ot1sZAWH9qLAit4kzIk= -----END CERTIFICATE-----Generated at Mon Sep 21 12:15:40 2026 by rpki-client