$ rpki-client -vvvf rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft File: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft (raw, json) Hash identifier: QTgKOysthEFCiDyTvMj7svlKiy5VeNUQN2VdGL3HcHM= Subject key identifier: 23:C2:BB:7F:B9:11:9F:06:0F:78:F9:B8:95:54:AC:A3:06:AE:DF:A2 Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Certificate serial: 4EFD64CC755DE7E256E0C6F3F83EAE281040062F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft Manifest number: B8 Signing time: Sun 20 Sep 2026 11:14:19 +0000 Manifest this update: Sun 20 Sep 2026 11:09:19 +0000 Manifest next update: Mon 21 Sep 2026 12:43:19 +0000 Files and hashes: 1: 3130332e3232372e3232352e302f32342d3234203d3e20313438393936.roa (hash: 3Fs3YXCHVhPim686QjSLVypvleRfB5cNa4r0sVni22s=) 2: 3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa (hash: cQkjcrDW6Cw958N6gtJjxyd/adphXQyJjpPcfgZ5xG4=) 3: 3130332e3137372e33322e302f32342d3234203d3e20323134343332.roa (hash: 2YaoD0V9MTmYaytjBdN3g/2JltFPIOscJRsxuw7e/EQ=) 4: 3130332e3232372e3232342e302f32332d3234203d3e20313334383233.roa (hash: GuzN1ophfvX5EgHLKpJRkwlqpD4JGNW35OZ+ZCoqD78=) 5: 3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa (hash: qkqrj9/N2V1M+ri4JRAjh2Xtl5l0eXftPC6OL0jPaCQ=) 6: 3130332e3232372e3232342e302f32332d3234203d3e20313438393936.roa (hash: Pe+GfCAU9CJUhyX0GcmCiKMiXy/uVxymKcKinAclsuQ=) 7: 3130332e3137372e33322e302f32332d3234203d3e203338303432.roa (hash: xPDyINdFmufQbNbHGWy0zvLscglHenPHYxlwfT+v00s=) 8: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl (hash: hsUl6rohAi9L4sbnKNw3h3zhN22VB85C1ceajNLaP4g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:fd:64:cc:75:5d:e7:e2:56:e0:c6:f3:f8:3e:ae:28:10:40:06:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Validity Not Before: Sep 20 11:09:19 2026 GMT Not After : Sep 21 12:43:19 2026 GMT Subject: CN=23C2BB7FB9119F060F78F9B89554ACA306AEDFA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:d0:e5:e6:37:b4:02:f6:ac:f7:0a:45:e2: 39:8b:1c:3a:31:78:98:44:62:5b:1a:b5:ce:41:34: 27:ec:50:1b:e2:7d:b3:4c:65:7c:a9:49:48:5a:80: a7:70:45:23:69:19:2b:3d:09:f0:6b:69:44:e2:50: f9:4b:b7:b5:06:34:69:ca:78:dd:02:8e:6a:3e:50: 55:15:5c:7f:07:c3:0f:ba:51:c0:4b:f1:e7:84:49: 18:9e:e1:77:27:f3:8a:57:f5:fe:85:c5:4b:18:fd: d5:ae:b7:c4:8e:c8:72:07:b1:e2:7b:36:45:61:2f: 66:73:85:91:20:7e:e1:ea:00:ad:51:31:0f:a4:82: 2b:8a:e7:d0:1e:b3:d9:8f:ee:81:a2:2c:86:ba:c8: 90:ed:d5:25:d2:a5:da:b0:80:58:01:31:10:7a:27: f2:a7:74:e2:c4:11:75:34:49:bf:10:e9:08:82:aa: f7:e9:a6:82:90:90:28:68:e1:54:70:d2:5a:41:20: 94:0d:92:b8:da:00:67:d1:5c:39:a3:c7:cd:1c:0d: bb:31:d3:68:7e:5c:4c:fa:cd:f8:b4:02:59:96:fa: 7e:de:b8:f2:3c:f9:79:45:7a:ee:82:77:70:a9:ef: 8a:28:74:81:ad:a2:77:c8:61:e5:ef:82:b4:64:b1: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C2:BB:7F:B9:11:9F:06:0F:78:F9:B8:95:54:AC:A3:06:AE:DF:A2 X509v3 Authority Key Identifier: keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:95:27:b4:87:35:ac:9d:ae:f5:73:f8:70:aa:cb:0f:54:51: 03:de:0f:1e:76:b0:9a:0c:47:1c:db:2d:3c:da:4e:eb:30:87: 7a:58:f1:c0:f7:a7:6b:27:16:74:0c:e0:e7:5a:40:2a:0d:a4: a2:97:63:0b:64:4c:91:ca:e9:1a:e8:29:31:9b:d0:ce:8d:e5: 8c:94:67:6b:b1:b5:e4:7b:28:46:65:8f:43:2e:b2:7f:44:dc: 41:c7:9b:bc:ea:d4:79:b3:6e:34:1f:cb:9e:3d:e4:fd:f9:bf: 10:12:28:02:56:0c:6b:c6:c8:1a:fa:93:89:04:3d:7c:17:df: da:90:88:bb:7f:37:1f:5c:d7:4f:26:1d:f5:3e:89:73:ac:38: e3:4a:4c:b6:76:a4:fe:c1:81:40:8b:12:dc:9d:2c:46:db:5a: 94:99:54:ba:ec:9a:87:4d:15:63:4e:67:99:a7:c6:e3:ae:c7: 46:df:d8:b4:0e:96:45:1d:09:0f:5e:71:06:40:62:43:64:0c: 6a:a3:f1:b3:68:58:f4:55:1a:e5:82:a7:82:30:24:93:29:aa: cf:c1:85:c6:23:89:1c:41:d0:18:be:74:11:33:9e:cd:fa:b4: 09:c0:c7:c2:0a:f3:62:77:2c:6e:cb:41:cc:8e:3c:29:d0:96: 81:c8:7a:23 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUTv1kzHVd5+JW4Mbz+D6uKBBABi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MjdFNEU1M0JBNTE3QkJDNUM3OThDRjBEM0FGODcw Mzc1QzBCMDAeFw0yNjA5MjAxMTA5MTlaFw0yNjA5MjExMjQzMTlaMDMxMTAvBgNV BAMTKDIzQzJCQjdGQjkxMTlGMDYwRjc4RjlCODk1NTRBQ0EzMDZBRURGQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy59Dl5je0Avas9wpF4jmLHDox eJhEYlsatc5BNCfsUBvifbNMZXypSUhagKdwRSNpGSs9CfBraUTiUPlLt7UGNGnK eN0Cjmo+UFUVXH8Hww+6UcBL8eeESRie4Xcn84pX9f6FxUsY/dWut8SOyHIHseJ7 NkVhL2ZzhZEgfuHqAK1RMQ+kgiuK59Aes9mP7oGiLIa6yJDt1SXSpdqwgFgBMRB6 J/KndOLEEXU0Sb8Q6QiCqvfppoKQkCho4VRw0lpBIJQNkrjaAGfRXDmjx80cDbsx 02h+XEz6zfi0AlmW+n7euPI8+XlFeu6Cd3Cp74oodIGtonfIYeXvgrRksVN7AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUI8K7f7kRnwYPePm4lVSsowau36IwHwYDVR0j BBgwFoAUp4J+TlO6UXu8XHmM8NOvhwN1wLAwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1DUlMv MC9BNzgyN0U0RTUzQkE1MTdCQkM1Qzc5OENGMEQzQUY4NzAzNzVDMEIwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0E3ODI3RTRFNTNCQTUxN0JCQzVDNzk4Q0YwRDNB Rjg3MDM3NUMwQjAuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTUNSUy8wL0E3ODI3RTRFNTNCQTUx N0JCQzVDNzk4Q0YwRDNBRjg3MDM3NUMwQjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCElSe0hzWsna71 c/hwqssPVFED3g8edrCaDEcc2y082k7rMId6WPHA96drJxZ0DODnWkAqDaSil2ML ZEyRyuka6Ckxm9DOjeWMlGdrsbXkeyhGZY9DLrJ/RNxBx5u86tR5s240H8uePeT9 +b8QEigCVgxrxsga+pOJBD18F9/akIi7fzcfXNdPJh31PolzrDjjSky2dqT+wYFA ixLcnSxG21qUmVS67JqHTRVjTmeZp8bjrsdG39i0DpZFHQkPXnEGQGJDZAxqo/Gz aFj0VRrlgqeCMCSTKarPwYXGI4kcQdAYvnQRM57N+rQJwMfCCvNidyxuy0HMjjwp 0JaByHoj -----END CERTIFICATE-----Generated at Mon Sep 21 03:33:26 2026 by rpki-client