$ rpki-client -vvvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft File: BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json) Hash identifier: QOl8pWI0uU039oJRull+raqzRLqrgtLK5CxWd/JZIh4= Subject key identifier: F4:79:36:7D:0B:7F:D5:C1:AB:5B:5D:95:B4:15:71:67:C3:D1:7D:94 Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D Certificate issuer: /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Certificate serial: 3298AB20EFEC9A808E7C4D934E6BEBF977FDD6F5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft Manifest number: CE Signing time: Mon 21 Sep 2026 19:22:00 +0000 Manifest this update: Mon 21 Sep 2026 19:17:00 +0000 Manifest next update: Tue 22 Sep 2026 20:33:00 +0000 Files and hashes: 1: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=) 2: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=) 3: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=) 4: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: gm8IYWAMU+RkpdAUGuyqEB4NVJ2sF8T4IGz4ol1PX4I=) 5: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:98:ab:20:ef:ec:9a:80:8e:7c:4d:93:4e:6b:eb:f9:77:fd:d6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Validity Not Before: Sep 21 19:17:00 2026 GMT Not After : Sep 22 20:33:00 2026 GMT Subject: CN=F479367D0B7FD5C1AB5B5D95B4157167C3D17D94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:c1:30:17:58:23:9d:fe:54:72:88:a2:da: 0a:71:44:08:27:e3:07:ef:ab:15:67:81:ad:1f:31: 7d:b8:72:71:f1:b2:41:7b:5b:56:c5:c7:4c:7f:9f: fe:cc:31:a2:ea:dd:36:25:90:78:35:79:8e:8d:0c: 38:84:e3:f4:a7:0e:55:b4:d3:ff:e9:30:2e:62:61: 77:0f:74:fe:42:df:48:2f:3f:02:90:2b:76:21:8c: 55:e7:7a:31:78:42:7a:f9:a1:4f:8a:36:78:58:9e: 67:f3:b1:ce:ae:85:fa:ab:c5:31:1e:f4:26:0b:1d: d8:9a:7e:a2:00:fd:17:fe:5b:d3:e6:3d:0f:a6:b8: 13:15:e0:e3:ba:75:8d:2f:d8:f6:6b:b8:19:09:63: b8:8f:20:ea:82:a5:14:aa:45:a5:76:30:f5:8a:1d: 46:70:60:e5:a4:73:97:bb:a4:31:32:b4:bf:09:b7: 3f:60:9c:1e:a7:cd:7a:1a:6a:1c:20:92:f2:87:ab: 74:c2:f3:d0:39:f3:5b:b8:d8:0a:83:22:e7:c3:40: 45:0d:c6:59:c2:8f:7f:3a:4d:65:33:3b:26:93:cb: 1a:9b:7f:98:56:0f:c0:36:f1:0b:c0:40:d0:03:89: 4c:20:fa:b8:05:ee:0b:00:d1:43:67:45:1a:35:37: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:79:36:7D:0B:7F:D5:C1:AB:5B:5D:95:B4:15:71:67:C3:D1:7D:94 X509v3 Authority Key Identifier: keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:1b:05:91:e2:2b:70:64:53:9e:08:bc:d1:25:f2:93:13:d8: d6:84:81:5a:f9:69:aa:1d:8c:4c:1d:61:be:e5:bc:1f:f9:98: 2a:09:0c:f6:31:40:ff:6e:bb:10:46:1c:ab:95:ca:21:c4:74: 45:de:a5:95:86:c2:0c:7e:f0:c3:94:cc:4c:34:18:79:bd:b9: 90:84:8a:b7:a0:5d:5c:eb:d4:d6:c4:7e:18:63:02:38:91:8f: 49:27:15:06:1c:43:9d:07:2a:7f:71:77:2a:73:1c:28:f4:b4: df:10:a2:2f:a4:75:04:fd:86:28:79:6c:3a:78:03:82:fa:66: 3b:b9:c1:37:e9:2f:83:31:fe:8e:86:3f:7f:04:db:a4:0c:4b: 8b:b1:59:88:d6:c5:db:df:15:31:68:6f:2e:63:34:fc:4d:59: d3:0d:ef:6d:06:63:4b:67:00:c5:1b:d4:83:a4:eb:aa:14:62: ed:2d:bd:f5:33:05:41:33:e8:35:d3:12:98:84:af:7e:8a:9a: 74:37:31:86:e6:0c:57:4e:f9:69:02:a0:8f:66:1d:56:02:6c: d5:94:ae:d4:6d:cd:2d:e0:ff:c6:76:94:2d:4f:b7:c0:0b:8c: 44:3f:79:49:e4:83:d2:08:30:19:b1:d8:da:1a:74:1a:1d:be: 72:37:fd:86 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUMpirIO/smoCOfE2TTmvr+Xf91vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5 RjY0OEY2RDAeFw0yNjA5MjExOTE3MDBaFw0yNjA5MjIyMDMzMDBaMDMxMTAvBgNV BAMTKEY0NzkzNjdEMEI3RkQ1QzFBQjVCNUQ5NUI0MTU3MTY3QzNEMTdEOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/o8EwF1gjnf5Ucoii2gpxRAgn 4wfvqxVnga0fMX24cnHxskF7W1bFx0x/n/7MMaLq3TYlkHg1eY6NDDiE4/SnDlW0 0//pMC5iYXcPdP5C30gvPwKQK3YhjFXnejF4Qnr5oU+KNnhYnmfzsc6uhfqrxTEe 9CYLHdiafqIA/Rf+W9PmPQ+muBMV4OO6dY0v2PZruBkJY7iPIOqCpRSqRaV2MPWK HUZwYOWkc5e7pDEytL8Jtz9gnB6nzXoaahwgkvKHq3TC89A581u42AqDIufDQEUN xlnCj386TWUzOyaTyxqbf5hWD8A28QvAQNADiUwg+rgF7gsA0UNnRRo1Nxj/AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU9Hk2fQt/1cGrW12VtBVxZ8PRfZQwHwYDVR0j BBgwFoAUvcdxXSn05DGY1ZMVtxZ07p9kj20wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO LzEvQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMy9CREM3NzE1RDI5RjRFNDMxOThENTkzMTVCNzE2 NzRFRTlGNjQ4RjZELmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElOLzEvQkRDNzcxNUQyOUY0 RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJUbBZHiK3Bk U54IvNEl8pMT2NaEgVr5aaodjEwdYb7lvB/5mCoJDPYxQP9uuxBGHKuVyiHEdEXe pZWGwgx+8MOUzEw0GHm9uZCEiregXVzr1NbEfhhjAjiRj0knFQYcQ50HKn9xdypz HCj0tN8Qoi+kdQT9hih5bDp4A4L6Zju5wTfpL4Mx/o6GP38E26QMS4uxWYjWxdvf FTFoby5jNPxNWdMN720GY0tnAMUb1IOk66oUYu0tvfUzBUEz6DXTEpiEr36KmnQ3 MYbmDFdO+WkCoI9mHVYCbNWUrtRtzS3g/8Z2lC1Pt8ALjEQ/eUnkg9IIMBmx2Noa dBodvnI3/YY= -----END CERTIFICATE-----Generated at Tue Sep 22 01:52:07 2026 by rpki-client