$ rpki-client -vvvf rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft File: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft (raw, json) Hash identifier: dC+RzgZ1+HdvtKkI30UVu1/kEcjy4y5xM0zDL2lj3b8= Subject key identifier: CE:CD:FF:3B:7F:EF:39:11:A2:99:CE:12:22:79:8B:D8:04:CD:33:A7 Authority key identifier: E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44 Certificate issuer: /CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44 Certificate serial: 2FE04602AE4E3F3429CB3A39A426A486C30B793F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft Manifest number: B6 Signing time: Mon 21 Sep 2026 13:27:15 +0000 Manifest this update: Mon 21 Sep 2026 13:22:15 +0000 Manifest next update: Tue 22 Sep 2026 16:31:15 +0000 Files and hashes: 1: 3230322e3132332e3132342e302f32332d3234203d3e20313331363636.roa (hash: G254ASDsdEOL8B4Bo3zdknO7xdbQNcKopBri7j6oisI=) 2: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl (hash: B1nSqiN+khns6JSBO7TCqA0dCh1PgS8Ie48xVUWJYO8=) 3: 3130332e3134342e33342e302f32332d3234203d3e20313331363636.roa (hash: Wv08z2tY7w2z0229EEvjyYYNTE6epIRCshOK3YEh39Y=) 4: 3231312e37362e3139302e302f32332d3234203d3e20313331363636.roa (hash: dIKzwOV/Rg8kX37DO7rzZtMhciZlDJrIMJrJMoEYC/o=) 5: 323430353a363434303a3a2f33322d3332203d3e20313331363636.roa (hash: QB2gyR5XQYs4MfGBjgJf/jtuHKKTmEl5qfrVI5ynL/A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e0:46:02:ae:4e:3f:34:29:cb:3a:39:a4:26:a4:86:c3:0b:79:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44 Validity Not Before: Sep 21 13:22:15 2026 GMT Not After : Sep 22 16:31:15 2026 GMT Subject: CN=CECDFF3B7FEF3911A299CE1222798BD804CD33A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:57:61:65:41:9f:2e:15:57:7c:14:4f:b0: 3b:00:1d:b7:24:a1:a8:a3:b0:4f:48:35:b8:92:c3: 04:1d:53:92:40:73:c6:80:09:3f:79:1a:27:5d:08: 2a:c5:95:03:29:5a:18:46:a6:03:b6:f6:75:a5:7b: 30:e6:0f:1e:eb:59:c6:9a:3b:39:da:47:0b:21:27: 75:f4:fb:e8:98:2b:05:62:83:7e:03:db:a0:fd:64: db:9c:34:9d:14:ba:bb:e0:12:46:f7:70:fe:61:72: 2e:9a:55:38:ea:cf:0f:64:20:dc:1d:81:8a:3e:1c: f1:c4:a6:6b:ab:88:32:6b:23:b1:9e:38:e0:80:39: 74:13:48:15:1c:16:bd:18:83:89:0f:e8:77:f0:03: 94:d3:4e:20:5f:d6:28:32:b9:16:77:7f:e6:51:e3: df:85:90:0c:b6:c8:14:7f:8b:fc:02:bd:b8:02:42: be:0d:b1:5e:d3:61:dd:5e:8d:63:5b:97:f8:e6:14: ed:c3:cf:8e:db:b2:c2:26:a1:62:13:2d:be:a8:d7: 62:fe:54:14:77:10:65:76:99:cf:20:bb:a7:a2:fc: db:77:0b:20:d4:7b:38:33:16:24:b2:ae:2c:4c:8b: 70:67:cb:bf:66:a9:4c:83:9b:73:33:1d:7d:c9:fe: 36:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CD:FF:3B:7F:EF:39:11:A2:99:CE:12:22:79:8B:D8:04:CD:33:A7 X509v3 Authority Key Identifier: keyid:E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:88:50:11:54:6b:82:f7:68:63:86:92:0c:33:19:77:af:c8: d4:a5:48:bb:e2:de:0c:30:7e:7c:10:67:98:fe:32:d0:ee:75: bc:ff:b1:ac:3a:0e:3a:c7:6e:66:2d:7e:2c:24:ba:d3:6f:17: ba:d1:8a:ea:7b:71:ad:0d:fa:9a:ad:5f:77:5e:08:76:fe:f9: 19:bc:08:a8:cc:8f:ef:5f:c6:34:f6:6e:64:b8:9f:68:91:11: 4d:bd:68:79:52:f9:05:95:c8:94:8e:3c:be:39:71:7f:f0:c1: 2c:90:75:d3:bf:ca:38:bb:b1:1a:d8:6c:90:fe:ad:25:b3:4b: b3:46:47:d1:52:ca:9a:7c:03:ea:48:0f:b7:8a:ff:d6:7d:63: 86:cd:21:98:3c:ef:3f:5a:1e:1b:24:36:fd:c6:a0:b6:52:14: 71:af:2f:db:e8:46:ad:60:d8:48:e2:c3:20:67:6a:b6:fc:32: c9:b7:bc:fa:3d:6e:2d:69:b7:f4:86:c5:57:10:02:a0:d4:d2: a2:d4:32:17:3d:87:67:04:c5:91:e7:ad:c3:65:e6:a0:00:f9: 9c:f5:90:60:56:8b:96:08:d3:59:cc:10:12:d0:d5:b1:8e:ea: db:58:c0:38:45:63:ae:a7:e0:25:42:b4:9a:a8:ab:4b:8a:37: fc:04:97:01 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUL+BGAq5OPzQpyzo5pCakhsMLeT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDI2QzA5NDQ5Q0VCNEVFNUZEN0NDMjAwQjA3M0NB NTNCQ0E0NDAeFw0yNjA5MjExMzIyMTVaFw0yNjA5MjIxNjMxMTVaMDMxMTAvBgNV BAMTKENFQ0RGRjNCN0ZFRjM5MTFBMjk5Q0UxMjIyNzk4QkQ4MDRDRDMzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCitVdhZUGfLhVXfBRPsDsAHbck oaijsE9INbiSwwQdU5JAc8aACT95GiddCCrFlQMpWhhGpgO29nWlezDmDx7rWcaa OznaRwshJ3X0++iYKwVig34D26D9ZNucNJ0UurvgEkb3cP5hci6aVTjqzw9kINwd gYo+HPHEpmuriDJrI7GeOOCAOXQTSBUcFr0Yg4kP6HfwA5TTTiBf1igyuRZ3f+ZR 49+FkAy2yBR/i/wCvbgCQr4NsV7TYd1ejWNbl/jmFO3Dz47bssImoWITLb6o12L+ VBR3EGV2mc8gu6ei/Nt3CyDUezgzFiSyrixMi3Bny79mqUyDm3MzHX3J/jaxAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUzs3/O3/vORGimc4SInmL2ATNM6cwHwYDVR0j BBgwFoAU6H0mwJRJzrTuX9fMIAsHPKU7ykQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFNULzAv RTg3RDI2QzA5NDQ5Q0VCNEVFNUZEN0NDMjAwQjA3M0NBNTNCQ0E0NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9FODdEMjZDMDk0NDlDRUI0RUU1RkQ3Q0MyMDBCMDcz Q0E1M0JDQTQ0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFNULzAvRTg3RDI2QzA5NDQ5Q0VCNEVF NUZEN0NDMjAwQjA3M0NBNTNCQ0E0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABiIUBFUa4L3aGOGkgwz GXevyNSlSLvi3gwwfnwQZ5j+MtDudbz/saw6DjrHbmYtfiwkutNvF7rRiup7ca0N +pqtX3deCHb++Rm8CKjMj+9fxjT2bmS4n2iREU29aHlS+QWVyJSOPL45cX/wwSyQ ddO/yji7sRrYbJD+rSWzS7NGR9FSypp8A+pID7eK/9Z9Y4bNIZg87z9aHhskNv3G oLZSFHGvL9voRq1g2EjiwyBnarb8Msm3vPo9bi1pt/SGxVcQAqDU0qLUMhc9h2cE xZHnrcNl5qAA+Zz1kGBWi5YI01nMEBLQ1bGO6ttYwDhFY66n4CVCtJqoq0uKN/wE lwE= -----END CERTIFICATE-----Generated at Mon Sep 21 20:52:12 2026 by rpki-client