$ rpki-client -vvvf rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft File: D2F622A04A47823AB003C84A0427E20441C8BE5E.mft (raw, json) Hash identifier: V6ujpbiJVWYlprenj8/9QpKP4XPFvrU/D+vhgHCOvvc= Subject key identifier: 51:CA:3C:9D:7E:D8:F0:F1:E4:A0:BD:CD:1D:70:B1:C3:0B:A4:B6:B1 Authority key identifier: D2:F6:22:A0:4A:47:82:3A:B0:03:C8:4A:04:27:E2:04:41:C8:BE:5E Certificate issuer: /CN=D2F622A04A47823AB003C84A0427E20441C8BE5E Certificate serial: 046CAF3288DB05E53BA88B2F2C96343DF015E9DF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D2F622A04A47823AB003C84A0427E20441C8BE5E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft Manifest number: B2 Signing time: Tue 22 Sep 2026 04:28:38 +0000 Manifest this update: Tue 22 Sep 2026 04:23:38 +0000 Manifest next update: Wed 23 Sep 2026 07:36:38 +0000 Files and hashes: 1: 3130332e39392e3134322e302f32332d3332203d3e20313331363432.roa (hash: rL2ri6udnHer5sw3p78xlE4EFTw2M/n/E1Kn2KyLNqI=) 2: D2F622A04A47823AB003C84A0427E20441C8BE5E.crl (hash: rUJFflkCdcBvFjDIk5BQ9GuTojqdv3s7zgRfjWSMsZE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.crl rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D2F622A04A47823AB003C84A0427E20441C8BE5E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6c:af:32:88:db:05:e5:3b:a8:8b:2f:2c:96:34:3d:f0:15:e9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2F622A04A47823AB003C84A0427E20441C8BE5E Validity Not Before: Sep 22 04:23:38 2026 GMT Not After : Sep 23 07:36:38 2026 GMT Subject: CN=51CA3C9D7ED8F0F1E4A0BDCD1D70B1C30BA4B6B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d2:b5:46:c9:bc:23:33:74:4d:98:17:6e:ab: e1:b6:51:a7:f1:a2:b2:87:7d:b6:46:36:83:c8:0f: 43:a4:83:01:d6:75:28:5b:6d:c1:93:c1:f8:14:2e: cd:ab:ba:af:c7:4b:73:c7:9b:a7:5a:b5:86:0d:b7: d1:c5:5c:a0:79:e3:ba:b2:c0:5c:de:bc:fb:fd:50: 4a:9e:67:f6:77:93:d4:0d:4d:02:96:4a:02:c6:5c: 7e:1b:fc:af:67:63:65:23:30:e3:dc:81:91:81:1a: f9:de:9d:4f:0c:f2:1a:ef:e6:62:0a:2d:93:cb:25: 84:4b:7a:2a:5b:24:e0:5e:39:88:f9:30:08:1f:0f: f1:ec:05:5f:af:60:7e:64:bb:f2:b6:5a:b5:05:0a: dd:a1:42:7e:69:e9:58:53:68:68:7d:70:7a:b1:97: 89:ff:d5:e0:d4:f2:e4:a3:f6:0c:56:4a:67:b4:72: 3d:f0:63:ed:b6:9b:ac:8e:c6:be:ad:2e:d8:9f:76: 8d:f0:2c:f2:e7:4d:10:ae:93:61:fc:c7:30:f2:a8: 4f:a5:88:07:e9:7f:c1:dd:0e:c5:a4:57:4c:9f:25: 41:7a:10:ff:6c:6f:e3:8d:76:e5:ce:a1:8f:3d:65: fc:42:cc:12:e8:f7:f9:49:78:5e:43:95:b5:57:77: 90:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CA:3C:9D:7E:D8:F0:F1:E4:A0:BD:CD:1D:70:B1:C3:0B:A4:B6:B1 X509v3 Authority Key Identifier: keyid:D2:F6:22:A0:4A:47:82:3A:B0:03:C8:4A:04:27:E2:04:41:C8:BE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D2F622A04A47823AB003C84A0427E20441C8BE5E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c9:4f:8c:c0:38:84:52:1d:3c:35:68:cd:71:63:ad:a1:58: 93:a9:82:82:5e:91:07:29:5d:9d:78:7f:ca:69:2c:49:ce:eb: a8:d3:a6:53:bd:33:36:6f:49:f5:2a:b1:93:61:2f:82:0a:dc: 6a:f0:bc:c5:5f:e0:a7:81:9c:56:9f:ad:13:20:c5:47:7d:a5: be:b8:9f:c2:d4:ca:91:e7:78:47:2b:8a:17:28:e8:b9:76:f5: e4:bd:5f:cc:be:04:17:a0:35:cc:9a:e1:76:32:8c:db:ac:0b: 22:bd:6d:32:9e:f3:df:f5:d4:7b:83:0b:9e:2a:9b:3b:ef:1d: 90:25:bb:76:39:49:0a:be:ad:65:bb:9e:b5:b3:da:83:24:0f: b6:96:9f:01:00:a2:df:59:9d:c8:85:da:fc:26:0c:22:3a:ad: 4b:d5:2f:0f:2a:9b:79:d8:2a:bd:c0:f4:01:ed:ee:3f:d2:26: 15:dc:53:82:32:20:69:2a:a5:f0:6b:24:1f:6f:71:6f:85:b4: 53:59:88:f7:1b:bd:c4:c9:c4:21:ec:1c:69:01:10:00:72:5f: f3:f9:92:5b:46:b2:29:29:c2:13:b6:61:31:7d:19:7a:be:25: d8:57:c3:ba:a1:f2:1f:68:34:bf:b3:09:77:d3:35:63:98:a5: 27:78:11:21 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUBGyvMojbBeU7qIsvLJY0PfAV6d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJGNjIyQTA0QTQ3ODIzQUIwMDNDODRBMDQyN0UyMDQ0 MUM4QkU1RTAeFw0yNjA5MjIwNDIzMzhaFw0yNjA5MjMwNzM2MzhaMDMxMTAvBgNV BAMTKDUxQ0EzQzlEN0VEOEYwRjFFNEEwQkRDRDFENzBCMUMzMEJBNEI2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS0rVGybwjM3RNmBduq+G2Uafx orKHfbZGNoPID0OkgwHWdShbbcGTwfgULs2ruq/HS3PHm6datYYNt9HFXKB547qy wFzevPv9UEqeZ/Z3k9QNTQKWSgLGXH4b/K9nY2UjMOPcgZGBGvnenU8M8hrv5mIK LZPLJYRLeipbJOBeOYj5MAgfD/HsBV+vYH5ku/K2WrUFCt2hQn5p6VhTaGh9cHqx l4n/1eDU8uSj9gxWSme0cj3wY+22m6yOxr6tLtifdo3wLPLnTRCuk2H8xzDyqE+l iAfpf8HdDsWkV0yfJUF6EP9sb+ONduXOoY89ZfxCzBLo9/lJeF5DlbVXd5DdAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUUco8nX7Y8PHkoL3NHXCxwwuktrEwHwYDVR0j BBgwFoAU0vYioEpHgjqwA8hKBCfiBEHIvl4wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFVBTkdE RVhJQS8wL0QyRjYyMkEwNEE0NzgyM0FCMDAzQzg0QTA0MjdFMjA0NDFDOEJFNUUu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvRDJGNjIyQTA0QTQ3ODIzQUIwMDNDODRB MDQyN0UyMDQ0MUM4QkU1RS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hVQU5HREVYSUEvMC9EMkY2 MjJBMDRBNDc4MjNBQjAwM0M4NEEwNDI3RTIwNDQxQzhCRTVFLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA b8lPjMA4hFIdPDVozXFjraFYk6mCgl6RByldnXh/ymksSc7rqNOmU70zNm9J9Sqx k2EvggrcavC8xV/gp4GcVp+tEyDFR32lvrifwtTKked4RyuKFyjouXb15L1fzL4E F6A1zJrhdjKM26wLIr1tMp7z3/XUe4MLniqbO+8dkCW7djlJCr6tZbuetbPagyQP tpafAQCi31mdyIXa/CYMIjqtS9UvDyqbedgqvcD0Ae3uP9ImFdxTgjIgaSql8Gsk H29xb4W0U1mI9xu9xMnEIewcaQEQAHJf8/mSW0ayKSnCE7ZhMX0Zer4l2FfDuqHy H2g0v7MJd9M1Y5ilJ3gRIQ== -----END CERTIFICATE-----Generated at Tue Sep 22 07:51:04 2026 by rpki-client