$ rpki-client -vvvf rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft File: 1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft (raw, json) Hash identifier: LpapjMVQzFEiCqNr+g43n+MsjQ+LkZMo0jjDgHlqdiE= Subject key identifier: 82:85:0F:AB:E0:4D:25:6B:05:F5:30:F5:CF:E3:FF:D6:43:74:C2:1C Authority key identifier: 1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94 Certificate issuer: /CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694 Certificate serial: 095E1B61CED35590E2D7D32F8BD1B3ACEA489E52 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft Manifest number: B5 Signing time: Mon 21 Sep 2026 11:17:03 +0000 Manifest this update: Mon 21 Sep 2026 11:12:03 +0000 Manifest next update: Tue 22 Sep 2026 13:11:03 +0000 Files and hashes: 1: 323430343a363363303a3a2f33322d3438203d3e20313331363435.roa (hash: IKYmTXcs/sxSdeZ8soPiKcin23Vsg+QkfcjhBMnj+D8=) 2: 1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl (hash: DZOI1uzzS/6CElNMYpHCuvC8s8a3SmyrKHD6kkuxYQA=) 3: 3130332e3133342e3132302e302f32322d3234203d3e20313331363435.roa (hash: 5YtP4S/SL4qMiPP6SO95f1XxJCbpmMediEjct/tVRs0=) 4: 3230322e3134382e3230382e302f32332d3234203d3e20313331363435.roa (hash: G2OLOqYyK8DpocEbNmGZNRoqNscoouK3uCmhiiODaHA=) 5: 3230322e3132332e3132362e302f32332d3234203d3e20313331363435.roa (hash: X5pJ+pB5W852b19TEIzFlXBOz+DsW3q2s1s2BmWLs78=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5e:1b:61:ce:d3:55:90:e2:d7:d3:2f:8b:d1:b3:ac:ea:48:9e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694 Validity Not Before: Sep 21 11:12:03 2026 GMT Not After : Sep 22 13:11:03 2026 GMT Subject: CN=82850FABE04D256B05F530F5CFE3FFD64374C21C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:61:6a:23:db:bb:9c:9e:c5:81:aa:23:cd:76: 97:a9:64:b3:ca:85:cd:f3:c9:ee:3c:fa:14:02:7b: a3:8a:bd:4a:d4:b7:07:cb:e2:7e:1c:1d:e7:60:bd: 82:b4:a2:ad:06:75:9a:5d:a8:66:38:ae:d4:a1:6c: e8:56:08:d3:ec:40:f3:e4:d3:4f:eb:42:ca:12:de: 0c:bc:89:6d:ea:16:47:11:da:e5:27:51:1c:16:96: 81:79:f3:b8:5a:e2:16:07:21:61:ed:da:3b:8a:25: fa:15:e9:9b:f7:58:3e:64:2d:7f:41:e4:a4:aa:ed: bb:02:20:a7:f1:33:ab:a5:94:f3:6d:96:25:08:54: 09:95:6f:d4:52:5c:7b:10:3c:7e:8e:50:c5:0a:36: 2d:58:16:c1:19:ac:87:76:b7:18:30:aa:7e:cc:b1: 92:eb:41:99:7e:da:fd:6b:a7:18:f9:9c:b8:1e:ba: b3:8d:74:7f:2a:d0:36:23:15:8f:b3:cf:a0:5c:5d: 02:4a:f5:76:1d:9f:79:3e:ca:86:f9:20:48:0a:3d: b7:df:a7:93:d0:b5:66:5c:7f:e3:52:a1:42:ae:86: aa:53:bf:fb:95:c7:19:96:d9:9a:41:29:1f:a2:cd: 81:16:ec:65:71:8e:4a:71:e3:e0:fe:e0:29:22:19: 09:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:85:0F:AB:E0:4D:25:6B:05:F5:30:F5:CF:E3:FF:D6:43:74:C2:1C X509v3 Authority Key Identifier: keyid:1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:94:05:eb:84:3b:8e:80:2f:2d:ba:6d:d6:7b:3b:ab:c7:7e: fa:9c:39:2d:0e:e8:98:c7:80:4c:de:2b:2d:2b:99:17:e6:25: d1:58:d5:79:4e:e5:9b:3c:15:10:e3:a9:e6:14:0f:12:2f:ca: 54:b8:48:47:f3:c3:4a:00:68:67:dd:77:42:d6:c2:7e:7c:7d: 8d:89:7a:18:07:e0:39:d3:ee:bd:54:f5:12:32:ab:d7:61:64: ef:b9:42:01:6f:7c:19:63:a1:3e:57:67:63:42:6b:e7:cc:a3: 35:d0:e7:af:3d:8d:d8:bf:4a:ee:94:5e:68:e8:a8:ca:c3:0e: da:13:9e:94:b1:56:ba:6b:05:a5:2b:cb:76:8f:8d:07:42:6d: 46:88:a6:b3:7a:5f:20:ea:c9:e3:42:28:5e:28:32:c3:65:d3: bf:9e:6e:12:ad:1e:c3:96:40:af:d8:c8:7f:3d:b2:f9:8d:3b: 62:85:91:cb:fd:96:24:9c:2a:be:64:7f:a7:02:8c:7f:db:fa: d8:f3:5d:c9:e8:30:da:b2:82:d9:11:3e:f0:53:26:18:64:0b: e5:2b:01:cf:5c:57:7f:47:ec:3f:25:98:59:29:8d:35:1d:5b: 8e:1b:25:78:4f:06:25:66:f2:ea:ee:89:6f:e4:6f:e5:03:35: f2:ff:68:a0 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUCV4bYc7TVZDi19Mvi9GzrOpInlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNDE5NzczRDFFMTVFRUZENkNBMkJCNEU1MERCRUY3 NEFCOTY5NDAeFw0yNjA5MjExMTEyMDNaFw0yNjA5MjIxMzExMDNaMDMxMTAvBgNV BAMTKDgyODUwRkFCRTA0RDI1NkIwNUY1MzBGNUNGRTNGRkQ2NDM3NEMyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYWoj27ucnsWBqiPNdpepZLPK hc3zye48+hQCe6OKvUrUtwfL4n4cHedgvYK0oq0GdZpdqGY4rtShbOhWCNPsQPPk 00/rQsoS3gy8iW3qFkcR2uUnURwWloF587ha4hYHIWHt2juKJfoV6Zv3WD5kLX9B 5KSq7bsCIKfxM6ullPNtliUIVAmVb9RSXHsQPH6OUMUKNi1YFsEZrId2txgwqn7M sZLrQZl+2v1rpxj5nLgeurONdH8q0DYjFY+zz6BcXQJK9XYdn3k+yob5IEgKPbff p5PQtWZcf+NSoUKuhqpTv/uVxxmW2ZpBKR+izYEW7GVxjkpx4+D+4CkiGQnFAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUgoUPq+BNJWsF9TD1z+P/1kN0whwwHwYDVR0j BBgwFoAUG/QZdz0eFe79bKK7TlDb73SrlpQwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tDTy8w LzFCRjQxOTc3M0QxRTE1RUVGRDZDQTJCQjRFNTBEQkVGNzRBQjk2OTQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMUJGNDE5NzczRDFFMTVFRUZENkNBMkJCNEU1MERC RUY3NEFCOTY5NC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tLQ08vMC8xQkY0MTk3NzNEMUUxNUVF RkQ2Q0EyQkI0RTUwREJFRjc0QUI5Njk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZQF64Q7joAvLbpt 1ns7q8d++pw5LQ7omMeATN4rLSuZF+Yl0VjVeU7lmzwVEOOp5hQPEi/KVLhIR/PD SgBoZ913QtbCfnx9jYl6GAfgOdPuvVT1EjKr12Fk77lCAW98GWOhPldnY0Jr58yj NdDnrz2N2L9K7pReaOioysMO2hOelLFWumsFpSvLdo+NB0JtRoims3pfIOrJ40Io Xigyw2XTv55uEq0ew5ZAr9jIfz2y+Y07YoWRy/2WJJwqvmR/pwKMf9v62PNdyegw 2rKC2RE+8FMmGGQL5SsBz1xXf0fsPyWYWSmNNR1bjhsleE8GJWby6u6Jb+Rv5QM1 8v9ooA== -----END CERTIFICATE-----Generated at Tue Sep 22 07:49:15 2026 by rpki-client