$ rpki-client -vvvf rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft File: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft (raw, json) Hash identifier: jA0sQB6NvypphxyDXiE9X9ydBAcT+OC24QxHVVeDJyw= Subject key identifier: 8C:FA:E7:E2:44:82:D4:7A:60:49:D0:55:55:34:EA:41:E1:41:85:46 Authority key identifier: 71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3 Certificate issuer: /CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3 Certificate serial: 6D39772D17913446239BB1E26F3B8B4967F78877 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft Manifest number: 0171 Signing time: Mon 21 Sep 2026 11:57:04 +0000 Manifest this update: Mon 21 Sep 2026 11:52:04 +0000 Manifest next update: Tue 22 Sep 2026 12:45:04 +0000 Files and hashes: 1: 323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa (hash: kPG07upBltBMpeU3lVOAGDxJPAnyCOXOCAXQZ9d58mQ=) 2: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl (hash: e1bpy9xRLLMBhFX5NjKG8jroNrVCkMxr7djfDSBGX9U=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 06:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:39:77:2d:17:91:34:46:23:9b:b1:e2:6f:3b:8b:49:67:f7:88:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3 Validity Not Before: Sep 21 11:52:04 2026 GMT Not After : Sep 22 12:45:04 2026 GMT Subject: CN=8CFAE7E24482D47A6049D0555534EA41E1418546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:87:a9:be:b9:36:45:ae:00:9d:de:d0:e9:18: d3:75:43:14:59:6c:59:71:22:af:30:58:29:60:ec: 38:65:95:43:bf:e9:d5:04:2e:2d:1e:ad:73:77:ec: 00:86:50:8b:bb:72:bf:5f:63:86:e8:97:04:ff:68: 38:5b:97:bf:1f:b0:19:4d:29:6c:1b:7e:38:9b:dd: 4b:7f:3a:bd:5e:3c:42:b0:fe:e2:8a:61:58:05:9c: ad:2c:29:cb:62:b2:be:6a:2a:a7:27:6e:c3:da:73: 41:62:b0:c7:63:df:bc:b7:50:4c:f7:ea:6b:db:d9: f8:90:9d:c4:75:1c:ea:38:9e:b6:9b:39:0a:ab:bb: e9:8a:a1:94:f3:58:a5:e7:64:14:c0:fc:a9:e8:3d: 08:2e:23:45:85:85:88:e3:e3:02:1a:18:11:e9:9a: aa:fc:63:bf:97:55:c9:d4:ff:a2:3e:cf:4d:3b:45: 80:93:f3:5d:5d:f7:1b:bf:4d:ae:50:92:60:4f:e7: d9:1e:18:97:8e:fe:da:c7:23:48:f4:f7:7f:7b:84: bb:eb:fe:88:9a:b4:18:46:fb:b8:db:2a:50:4e:ce: 01:8b:d7:08:40:91:73:aa:99:87:8a:09:5d:7a:6b: 6a:41:e7:a5:6f:3a:17:6d:31:dd:e0:4b:60:bf:f3: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FA:E7:E2:44:82:D4:7A:60:49:D0:55:55:34:EA:41:E1:41:85:46 X509v3 Authority Key Identifier: keyid:71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c3:d5:2c:f7:5d:b9:2c:fb:ae:77:39:1f:92:f1:82:89:4a: f1:35:60:61:94:58:b1:96:17:28:77:a7:9e:65:31:a1:93:9e: 62:5e:d6:eb:8e:44:ff:5b:98:6d:81:bd:55:57:60:86:ed:3f: fc:dc:79:60:97:aa:08:8a:04:57:2a:b3:be:ef:49:2c:7c:9a: 74:5c:fb:41:f2:b7:e3:f0:4f:39:98:58:a4:11:b0:54:d4:40: 1a:39:25:1b:0d:5d:a8:46:bc:ae:aa:2a:c2:a1:8a:70:5b:89: 86:fd:f7:ef:ea:00:db:d9:b2:86:01:a0:5a:51:ea:33:e3:65: e9:65:63:28:63:8c:d8:ab:26:ab:bc:d0:d0:27:29:b0:f2:90: cc:97:9b:15:d1:df:e4:d0:7a:b9:c0:e5:1a:51:2f:2b:8a:69: aa:7c:47:72:91:7a:29:20:5b:37:93:81:00:25:e4:8c:f6:88: 4a:bc:bb:0c:97:c4:82:17:5f:08:7e:aa:e2:76:b2:b6:fe:a3: 06:de:91:e3:93:e6:8e:72:a9:80:f3:40:b9:a2:b7:42:70:88: 56:8d:41:13:73:20:8b:96:07:7a:a9:96:d8:97:38:d5:4d:2a: 93:92:43:aa:50:38:8e:7d:ce:66:21:c2:46:ed:4d:48:a2:68: eb:4a:08:3f -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUbTl3LReRNEYjm7HibzuLSWf3iHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTM0MDE4NTQ3RDc3QjY1RUJDRDBGQzQ5NDFEQzgx MTNGQUVFMzAeFw0yNjA5MjExMTUyMDRaFw0yNjA5MjIxMjQ1MDRaMDMxMTAvBgNV BAMTKDhDRkFFN0UyNDQ4MkQ0N0E2MDQ5RDA1NTU1MzRFQTQxRTE0MTg1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClh6m+uTZFrgCd3tDpGNN1QxRZ bFlxIq8wWClg7DhllUO/6dUELi0erXN37ACGUIu7cr9fY4bolwT/aDhbl78fsBlN KWwbfjib3Ut/Or1ePEKw/uKKYVgFnK0sKctisr5qKqcnbsPac0FisMdj37y3UEz3 6mvb2fiQncR1HOo4nrabOQqru+mKoZTzWKXnZBTA/KnoPQguI0WFhYjj4wIaGBHp mqr8Y7+XVcnU/6I+z007RYCT811d9xu/Ta5QkmBP59keGJeO/trHI0j09397hLvr /oiatBhG+7jbKlBOzgGL1whAkXOqmYeKCV16a2pB56VvOhdtMd3gS2C/8ztjAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUjPrn4kSC1HpgSdBVVTTqQeFBhUYwHwYDVR0j BBgwFoAUceU0AYVH13tl680PxJQdyBE/ruMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv Mi83MUU1MzQwMTg1NDdENzdCNjVFQkNEMEZDNDk0MURDODExM0ZBRUUzLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zLzcxRTUzNDAxODU0N0Q3N0I2NUVCQ0QwRkM0OTQx REM4MTEzRkFFRTMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8yLzcxRTUzNDAxODU0N0Q3 N0I2NUVCQ0QwRkM0OTQxREM4MTEzRkFFRTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6w9Us9125LPuu dzkfkvGCiUrxNWBhlFixlhcod6eeZTGhk55iXtbrjkT/W5htgb1VV2CG7T/83Hlg l6oIigRXKrO+70ksfJp0XPtB8rfj8E85mFikEbBU1EAaOSUbDV2oRryuqirCoYpw W4mG/ffv6gDb2bKGAaBaUeoz42XpZWMoY4zYqyarvNDQJymw8pDMl5sV0d/k0Hq5 wOUaUS8rimmqfEdykXopIFs3k4EAJeSM9ohKvLsMl8SCF18IfqridrK2/qMG3pHj k+aOcqmA80C5ordCcIhWjUETcyCLlgd6qZbYlzjVTSqTkkOqUDiOfc5mIcJG7U1I omjrSgg/ -----END CERTIFICATE-----Generated at Mon Sep 21 16:35:17 2026 by rpki-client