$ rpki-client -vvvf rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft File: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft (raw, json) Hash identifier: SPnJMM2rEPVQ87J9+eYFH3qaVyBZFOJYyGaedkVwaOI= Subject key identifier: C6:27:2E:FF:05:4E:4E:F7:EE:A1:21:C7:23:20:D0:9C:F7:A9:CC:60 Authority key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA Certificate issuer: /CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Certificate serial: 7612D8B60A70A0B19C6506321FF2373DE0EAB8E5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft Manifest number: BB Signing time: Wed 23 Sep 2026 23:54:15 +0000 Manifest this update: Wed 23 Sep 2026 23:49:15 +0000 Manifest next update: Fri 25 Sep 2026 00:09:15 +0000 Files and hashes: 1: 323430373a653463303a3a2f34382d3438203d3e20313532363134.roa (hash: vgzFcwGEYe/SuHzv/bradPPbtlCxt1g9+kfxNVcgqL0=) 2: 3130332e3137332e39342e302f32342d3234203d3e2039393230.roa (hash: LLLHTnX1lDVfIT/USPcy8uRSK7AEjVy8r3OHlXaKRtA=) 3: 323430373a653463303a313a3a2f34382d3438203d3e2039393230.roa (hash: SPZzDHWF7IOGU0RefkHatr6T+UuWJ43wu5dvfPsUlBc=) 4: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl (hash: rWKJEJeUHfh+pl3UGYLMUAC/Km4rwJoVzyjUXcdHA0w=) 5: 323430373a653463303a31303a3a2f34382d3438203d3e20323138363939.roa (hash: 5NPYn896f6cSL35NtV5sGfz6luML+FwCVhmlOoiZn4A=) 6: 3130332e3137332e39342e302f32332d3234203d3e2039393230.roa (hash: 4AY9mKhgxxuuSl6y1Sy2exIP/SFNw2gXcIDmergV1Y0=) 7: 3130332e3137332e39342e302f32332d3234203d3e20313532363134.roa (hash: DFwmEzDSWwn1n/LKb3VnZN0eid9zGs6vXBGXUYxrvVE=) 8: 3130332e3137332e39352e302f32342d3234203d3e2039393230.roa (hash: GRWZ7hnM+/dWxb1R4FqblAJoXVc3WKwBr5Lvm8NY3Iw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:12:d8:b6:0a:70:a0:b1:9c:65:06:32:1f:f2:37:3d:e0:ea:b8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Validity Not Before: Sep 23 23:49:15 2026 GMT Not After : Sep 25 00:09:15 2026 GMT Subject: CN=C6272EFF054E4EF7EEA121C72320D09CF7A9CC60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:e2:11:da:fd:16:a7:98:c3:ac:12:c3:33: 03:07:ba:31:b2:73:29:74:85:32:f2:27:18:cc:6a: 81:4a:e5:a4:c6:93:73:ca:eb:56:42:40:33:70:61: c9:9c:05:46:c6:c9:51:a0:b6:6b:bc:63:e1:6e:d3: 1e:43:24:9d:ad:1c:ea:18:2e:c9:5a:a6:f4:08:55: 19:60:88:c0:a3:dd:1a:82:20:f5:51:41:41:32:f7: 5a:36:68:1c:d7:f5:8e:d5:55:67:e0:e2:3d:d2:0a: a4:48:84:77:c6:3d:b7:45:3b:16:c5:4c:d3:d2:2d: c6:dd:6b:ed:77:a0:0f:5f:ac:45:66:5c:57:79:e4: 3b:de:89:42:3a:db:fa:78:a7:da:22:b4:9c:36:05: 55:0b:73:fe:c5:91:74:b3:aa:91:51:7b:f2:d9:56: 3c:a5:7b:86:79:f3:20:6b:73:ae:e8:6c:23:c4:a7: 94:1d:36:8d:a8:7e:bc:7b:36:f1:81:ae:9c:9e:7b: 45:ae:b3:70:bb:6d:d9:d0:c7:e3:bf:9d:3f:2f:d3: f7:d6:09:5d:cc:97:ba:75:56:29:18:95:36:09:f2: 91:d1:29:9a:ab:6c:22:4d:5b:9c:74:03:0b:6e:f4: 94:22:e7:d3:b2:4b:e2:e2:9b:cb:03:28:10:a5:1e: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:27:2E:FF:05:4E:4E:F7:EE:A1:21:C7:23:20:D0:9C:F7:A9:CC:60 X509v3 Authority Key Identifier: keyid:41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5a:6c:cd:92:6c:f3:ad:ff:28:bc:3d:15:d1:4e:6e:98:5d: a4:ed:89:a6:a8:a3:a6:f2:7b:69:b9:f4:92:d4:ec:d4:6f:be: 91:47:ab:c2:bc:a4:4c:78:7d:e9:d3:a5:f0:5b:bf:36:99:27: b7:8d:0b:7b:2b:95:32:d5:62:42:25:73:d1:75:68:28:20:53: 30:6c:d0:d0:2d:4d:fe:5a:8b:32:20:94:1d:13:e3:9c:ff:1d: dd:7c:64:b2:71:a9:eb:6d:d3:e5:8f:ac:3c:03:c9:bc:eb:95: aa:36:4e:6c:44:5f:ce:b5:42:f0:c7:3f:94:6f:c4:ef:44:2e: 3c:80:81:87:05:26:0c:76:46:b2:87:b3:ea:05:a9:e0:5a:52: c0:6f:c6:cf:89:62:d7:da:12:d4:da:1d:4c:f8:66:4b:28:ff: 61:63:be:6b:02:c1:bb:c7:23:ed:93:9a:4b:80:84:47:92:50: fa:e2:de:56:18:00:63:37:4f:ca:fb:d1:d6:71:32:79:8b:e5: 1a:55:18:1c:36:b9:7d:44:41:b1:bc:8e:78:10:9b:7f:51:c6: 33:10:82:75:41:25:fb:ca:a6:0f:52:c8:8f:8a:26:55:1d:f0: 16:5d:bc:8d:90:97:67:4b:e1:d9:11:23:d4:6f:e4:c5:ff:7c: 00:86:b0:be -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUdhLYtgpwoLGcZQYyH/I3PeDquOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFCRUI2NTY2OEUxNjQ5RURFOTcyOEU0RkY0ODU5MUZB MEM1ODJCQTAeFw0yNjA5MjMyMzQ5MTVaFw0yNjA5MjUwMDA5MTVaMDMxMTAvBgNV BAMTKEM2MjcyRUZGMDU0RTRFRjdFRUExMjFDNzIzMjBEMDlDRjdBOUNDNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7eIR2v0Wp5jDrBLDMwMHujGy cyl0hTLyJxjMaoFK5aTGk3PK61ZCQDNwYcmcBUbGyVGgtmu8Y+Fu0x5DJJ2tHOoY LslapvQIVRlgiMCj3RqCIPVRQUEy91o2aBzX9Y7VVWfg4j3SCqRIhHfGPbdFOxbF TNPSLcbda+13oA9frEVmXFd55DveiUI62/p4p9oitJw2BVULc/7FkXSzqpFRe/LZ Vjyle4Z58yBrc67obCPEp5QdNo2ofrx7NvGBrpyee0Wus3C7bdnQx+O/nT8v0/fW CV3Ml7p1VikYlTYJ8pHRKZqrbCJNW5x0Awtu9JQi59OyS+Lim8sDKBClHjc3AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUxicu/wVOTvfuoSHHIyDQnPepzGAwHwYDVR0j BBgwFoAUQb62VmjhZJ7elyjk/0hZH6DFgrowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVNUVkMv MC80MUJFQjY1NjY4RTE2NDlFREU5NzI4RTRGRjQ4NTkxRkEwQzU4MkJBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzQxQkVCNjU2NjhFMTY0OUVERTk3MjhFNEZGNDg1 OTFGQTBDNTgyQkEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JU1RWQy8wLzQxQkVCNjU2NjhFMTY0 OUVERTk3MjhFNEZGNDg1OTFGQTBDNTgyQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWWmzNkmzzrf8o vD0V0U5umF2k7YmmqKOm8ntpufSS1OzUb76RR6vCvKRMeH3p06XwW782mSe3jQt7 K5Uy1WJCJXPRdWgoIFMwbNDQLU3+WosyIJQdE+Oc/x3dfGSycanrbdPlj6w8A8m8 65WqNk5sRF/OtULwxz+Ub8TvRC48gIGHBSYMdkayh7PqBangWlLAb8bPiWLX2hLU 2h1M+GZLKP9hY75rAsG7xyPtk5pLgIRHklD64t5WGABjN0/K+9HWcTJ5i+UaVRgc Nrl9REGxvI54EJt/UcYzEIJ1QSX7yqYPUsiPiiZVHfAWXbyNkJdnS+HZESPUb+TF /3wAhrC+ -----END CERTIFICATE-----Generated at Thu Sep 24 12:34:19 2026 by rpki-client