$ rpki-client -vvvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft File: BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json) Hash identifier: Mbv6fKrN/NA7PV+UGZrv3j1sBHO+naJ89z3QENxUXoc= Subject key identifier: 0B:C7:3B:85:34:13:2D:FA:93:8D:0C:5D:60:75:16:1B:D9:DC:45:B6 Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D Certificate issuer: /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Certificate serial: 22FDE3B4166713D47C473DA6F417E3C7B7F2881E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft Manifest number: 0118 Signing time: Sun 15 Nov 2026 09:12:50 +0000 Manifest this update: Sun 15 Nov 2026 09:07:50 +0000 Manifest next update: Mon 16 Nov 2026 10:11:50 +0000 Files and hashes: 1: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=) 2: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=) 3: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=) 4: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=) 5: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: m77MsMZ/TAJ8PBefKEwgloxC2ov12DCl9U01Fl5ZHDY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fd:e3:b4:16:67:13:d4:7c:47:3d:a6:f4:17:e3:c7:b7:f2:88:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Validity Not Before: Nov 15 09:07:50 2026 GMT Not After : Nov 16 10:11:50 2026 GMT Subject: CN=0BC73B8534132DFA938D0C5D6075161BD9DC45B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:82:56:07:cb:14:6f:05:12:0e:42:92:a6: f6:d7:57:80:18:42:4a:9c:53:f0:de:f7:77:66:32: 04:12:80:9b:c6:bc:eb:14:28:52:3d:24:8e:9e:1c: 7d:5f:87:b4:8d:58:eb:bf:49:51:bd:de:8e:0e:a8: 46:58:25:dd:12:0b:eb:2b:1a:fa:c1:c0:e1:90:da: aa:e1:55:8f:3f:10:05:72:ee:ed:8f:5f:0e:ed:f7: b0:3f:79:32:57:7f:e3:dd:85:36:49:6c:1f:e7:3f: 2c:bb:28:31:44:a2:95:d9:e1:52:c0:cb:71:20:5c: 73:3b:f1:81:93:5a:c8:b5:7b:4f:01:e8:68:e7:89: b1:55:3c:1b:ae:26:84:fa:14:0f:ec:a4:cb:bb:e1: 7b:2e:f5:88:3a:b9:09:de:d3:90:df:ef:85:e0:ce: 2a:b6:e4:13:71:4f:b5:04:05:12:c6:ee:5c:be:84: d1:90:b0:7f:50:47:3c:86:39:d1:a1:68:2c:c9:ae: cd:45:28:aa:eb:13:93:ed:b5:37:5e:0a:03:19:ee: 25:25:05:1b:e5:04:b0:29:01:ab:99:79:aa:81:22: a3:c0:0b:85:74:c1:ae:ba:16:bb:69:23:54:a8:cb: 9e:07:8b:fc:c3:c2:df:c7:30:0a:68:52:30:3e:d6: 64:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C7:3B:85:34:13:2D:FA:93:8D:0C:5D:60:75:16:1B:D9:DC:45:B6 X509v3 Authority Key Identifier: keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:8a:05:bc:51:a1:7b:7a:84:65:2c:40:fd:8c:ad:2f:8c:6a: 7c:5f:fd:0b:e2:06:c8:b7:70:c3:c4:82:77:e1:88:fc:09:e6: 9f:46:1f:41:2a:56:cf:b5:b5:71:20:47:ac:20:fb:b4:67:0d: 7b:bd:50:8b:a2:81:80:98:31:ed:7a:5c:a9:3d:1c:14:4e:fe: 8f:c6:4f:76:0d:f4:2b:5c:37:45:37:b3:73:0e:8f:00:17:13: c8:7f:67:af:a3:29:64:9e:9d:6f:f9:fc:b2:53:ed:9c:24:d0: 11:74:fa:8c:25:7f:b8:5b:1c:1b:7a:8e:84:9a:4a:b5:b8:61: c2:d6:f7:21:d4:58:32:c9:be:28:0e:b8:6b:d1:c3:65:b0:02: 81:7b:21:d9:6b:8b:b9:58:cf:e0:b2:76:ab:83:c7:77:7d:38: a6:68:91:56:9f:28:d4:be:c6:45:04:41:4a:59:bf:ba:b7:0d: 36:07:00:0e:26:ac:c6:17:a3:90:29:07:89:40:b1:17:43:be: 48:7d:26:c1:ca:0e:78:8d:87:33:63:2f:b6:62:1a:e6:ec:34: ea:7a:05:69:df:83:8c:54:23:7b:36:0e:74:8e:5c:4a:6a:23: 6b:55:5d:41:a6:f2:e4:33:f0:9b:f0:4e:82:6c:4c:df:71:47: 3d:79:48:4c -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUIv3jtBZnE9R8Rz2m9Bfjx7fyiB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5 RjY0OEY2RDAeFw0yNjExMTUwOTA3NTBaFw0yNjExMTYxMDExNTBaMDMxMTAvBgNV BAMTKDBCQzczQjg1MzQxMzJERkE5MzhEMEM1RDYwNzUxNjFCRDlEQzQ1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSYJWB8sUbwUSDkKSpvbXV4AY QkqcU/De93dmMgQSgJvGvOsUKFI9JI6eHH1fh7SNWOu/SVG93o4OqEZYJd0SC+sr GvrBwOGQ2qrhVY8/EAVy7u2PXw7t97A/eTJXf+PdhTZJbB/nPyy7KDFEopXZ4VLA y3EgXHM78YGTWsi1e08B6GjnibFVPBuuJoT6FA/spMu74Xsu9Yg6uQne05Df74Xg ziq25BNxT7UEBRLG7ly+hNGQsH9QRzyGOdGhaCzJrs1FKKrrE5PttTdeCgMZ7iUl BRvlBLApAauZeaqBIqPAC4V0wa66FrtpI1Soy54Hi/zDwt/HMApoUjA+1mTrAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUC8c7hTQTLfqTjQxdYHUWG9ncRbYwHwYDVR0j BBgwFoAUvcdxXSn05DGY1ZMVtxZ07p9kj20wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO LzEvQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMy9CREM3NzE1RDI5RjRFNDMxOThENTkzMTVCNzE2 NzRFRTlGNjQ4RjZELmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElOLzEvQkRDNzcxNUQyOUY0 RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALKKBbxRoXt6 hGUsQP2MrS+Manxf/QviBsi3cMPEgnfhiPwJ5p9GH0EqVs+1tXEgR6wg+7RnDXu9 UIuigYCYMe16XKk9HBRO/o/GT3YN9CtcN0U3s3MOjwAXE8h/Z6+jKWSenW/5/LJT 7Zwk0BF0+owlf7hbHBt6joSaSrW4YcLW9yHUWDLJvigOuGvRw2WwAoF7Idlri7lY z+CydquDx3d9OKZokVafKNS+xkUEQUpZv7q3DTYHAA4mrMYXo5ApB4lAsRdDvkh9 JsHKDniNhzNjL7ZiGubsNOp6BWnfg4xUI3s2DnSOXEpqI2tVXUGm8uQz8JvwToJs TN9xRz15SEw= -----END CERTIFICATE-----Generated at Sun Nov 15 22:27:21 2026 by rpki-client