$ rpki-client -vvvf rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft File: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft (raw, json) Hash identifier: e2AgFGMasmKHOPUCQA7+k7YJNRFGl2C6Q6z9EdYGK1E= Subject key identifier: 4A:52:0E:F3:2E:E6:75:5D:B3:7A:AC:CF:D5:9E:7A:21:E5:14:94:48 Authority key identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 Certificate issuer: /CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Certificate serial: 3D4AA7B2345564F0452B837B331DE384B80C8A1C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft Manifest number: B3 Signing time: Sun 20 Sep 2026 13:34:35 +0000 Manifest this update: Sun 20 Sep 2026 13:29:35 +0000 Manifest next update: Mon 21 Sep 2026 17:30:35 +0000 Files and hashes: 1: 3136302e3139312e342e302f32332d3234203d3e203338303432.roa (hash: uC4SAyffO7EbE3rGS0jHS6n7C39qBWkfFa7uUUduW8s=) 2: 3136302e3139312e342e302f32332d3234203d3e20313438393936.roa (hash: WDQ6isA31vRFBEKAPNTN2h03bliS7XG3+ZDUsxu5ekM=) 3: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl (hash: 8Dq01rYUedjL2N0opjsUFJMAvsypzJ3HrZOoLpkmXhQ=) 4: 3136302e3139312e342e302f32332d3234203d3e20313334383233.roa (hash: MvSn3+N3E0x49y2zyFZseXhPFbhPYX7FDxa/hvK0XxA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 15:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4a:a7:b2:34:55:64:f0:45:2b:83:7b:33:1d:e3:84:b8:0c:8a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Validity Not Before: Sep 20 13:29:35 2026 GMT Not After : Sep 21 17:30:35 2026 GMT Subject: CN=4A520EF32EE6755DB37AACCFD59E7A21E5149448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:95:2e:b1:9c:43:05:17:db:bb:9a:9b:1f: 6d:63:bf:59:15:81:9d:68:70:9b:0e:ed:e6:1d:58: 3a:6a:ea:88:f4:62:e3:eb:78:38:09:50:6c:5e:69: 3e:4a:b9:af:78:20:38:46:cd:c8:e6:2b:4f:b6:9d: 05:d7:5a:77:04:43:09:6e:31:f6:be:e9:97:06:70: 4c:61:8d:d6:40:12:95:20:ea:6f:4d:09:1a:b4:63: ac:07:aa:bb:6d:41:75:83:29:f1:a8:d5:89:8f:81: 42:15:85:98:29:4d:cb:10:2d:ed:c5:9e:c4:11:41: 4c:68:17:f8:c1:f6:a8:9a:0a:0d:76:41:31:8d:94: 24:dc:f6:61:cf:50:e5:4d:54:12:c2:6f:7d:93:c6: 26:c0:02:b5:8c:85:d8:b6:3f:7a:76:20:17:43:b5: 8f:94:40:c5:55:71:99:85:49:ba:66:e5:d8:b3:dc: 7b:59:a4:78:9f:98:dd:16:30:c5:85:2f:e8:32:44: 35:16:c8:59:55:88:dd:46:b6:c1:7a:c2:51:b1:b9: 2e:c6:a6:ae:79:c0:76:32:92:aa:47:9e:91:93:e5: 0e:34:21:fa:a7:35:6e:aa:09:9c:5f:ce:76:86:a4: cd:8b:21:85:19:67:ca:52:46:1c:51:1a:c2:9c:5c: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:52:0E:F3:2E:E6:75:5D:B3:7A:AC:CF:D5:9E:7A:21:E5:14:94:48 X509v3 Authority Key Identifier: keyid:EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7c:64:ad:50:5e:5a:f4:2e:a9:2b:12:78:64:d8:76:08:68: 84:57:e7:bc:70:e1:1e:25:2c:92:27:84:4e:7f:e7:f1:f9:e6: c1:da:ac:d1:fc:42:e0:05:e2:ba:8a:44:3c:01:b6:ba:c1:8b: 88:76:fb:f6:e1:3a:16:52:5f:f9:93:9a:15:74:9d:b5:e4:04: e0:23:3f:e2:af:23:a0:8f:a2:eb:1e:a3:ec:e8:67:37:6d:9f: f9:1e:81:b4:97:c1:a7:a0:8c:5c:c2:21:9c:df:97:ee:00:34: 5d:39:01:d2:eb:9f:d1:51:ba:ad:3a:4d:80:45:d7:9f:7f:84: 90:50:82:80:59:4f:7d:c2:96:f2:57:14:24:4d:da:d0:bb:6a: 13:f9:2d:cf:4b:03:52:7b:0b:9f:18:45:31:e8:c1:45:ab:9d: a8:ce:9e:6e:90:16:49:34:9c:2c:93:61:a0:5f:28:33:06:df: 8d:89:ac:5f:51:49:60:3b:68:5b:aa:47:37:99:09:98:7d:2a: af:c9:29:04:bf:79:4b:38:c3:d1:2e:00:a9:16:1c:42:53:71: 93:53:90:84:bf:7c:59:85:56:a5:4c:26:b4:f3:7e:aa:b3:27: dd:0f:40:d4:80:d6:f8:14:46:b2:27:cf:fe:ef:8b:7b:e7:b7: 10:02:b9:92 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUPUqnsjRVZPBFK4N7Mx3jhLgMihwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYxRDEwNDg0RUZBNzlBQkMwMThGQTBFRkE3RjNCMEMx NkVFNDNBNzAeFw0yNjA5MjAxMzI5MzVaFw0yNjA5MjExNzMwMzVaMDMxMTAvBgNV BAMTKDRBNTIwRUYzMkVFNjc1NURCMzdBQUNDRkQ1OUU3QTIxRTUxNDk0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GJUusZxDBRfbu5qbH21jv1kV gZ1ocJsO7eYdWDpq6oj0YuPreDgJUGxeaT5Kua94IDhGzcjmK0+2nQXXWncEQwlu Mfa+6ZcGcExhjdZAEpUg6m9NCRq0Y6wHqrttQXWDKfGo1YmPgUIVhZgpTcsQLe3F nsQRQUxoF/jB9qiaCg12QTGNlCTc9mHPUOVNVBLCb32TxibAArWMhdi2P3p2IBdD tY+UQMVVcZmFSbpm5diz3HtZpHifmN0WMMWFL+gyRDUWyFlViN1GtsF6wlGxuS7G pq55wHYykqpHnpGT5Q40IfqnNW6qCZxfznaGpM2LIYUZZ8pSRhxRGsKcXPmlAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUSlIO8y7mdV2zeqzP1Z56IeUUlEgwHwYDVR0j BBgwFoAU7x0QSE76eavAGPoO+n87DBbuQ6cwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1ZS0wv MC9FRjFEMTA0ODRFRkE3OUFCQzAxOEZBMEVGQTdGM0IwQzE2RUU0M0E3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0VGMUQxMDQ4NEVGQTc5QUJDMDE4RkEwRUZBN0Yz QjBDMTZFRTQzQTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTVlLTC8wL0VGMUQxMDQ4NEVGQTc5 QUJDMDE4RkEwRUZBN0YzQjBDMTZFRTQzQTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAefGStUF5a9C6p KxJ4ZNh2CGiEV+e8cOEeJSySJ4ROf+fx+ebB2qzR/ELgBeK6ikQ8Aba6wYuIdvv2 4ToWUl/5k5oVdJ215ATgIz/iryOgj6LrHqPs6Gc3bZ/5HoG0l8GnoIxcwiGc35fu ADRdOQHS65/RUbqtOk2ARdeff4SQUIKAWU99wpbyVxQkTdrQu2oT+S3PSwNSewuf GEUx6MFFq52ozp5ukBZJNJwsk2GgXygzBt+NiaxfUUlgO2hbqkc3mQmYfSqvySkE v3lLOMPRLgCpFhxCU3GTU5CEv3xZhValTCa0836qsyfdD0DUgNb4FEayJ8/+74t7 57cQArmS -----END CERTIFICATE-----Generated at Sun Sep 20 22:34:43 2026 by rpki-client