$ rpki-client -vvvf rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft File: 589DA145B1A822538BB2E68D892E6742B34F0701.mft (raw, json) Hash identifier: I4I8o6R4bPemxve6jYZUS1/G4nzqCsWErFD6NnZG8nQ= Subject key identifier: 70:AC:39:06:7C:91:EE:10:B3:4E:7D:53:F7:DC:9D:5C:BB:6E:FA:15 Authority key identifier: 58:9D:A1:45:B1:A8:22:53:8B:B2:E6:8D:89:2E:67:42:B3:4F:07:01 Certificate issuer: /CN=589DA145B1A822538BB2E68D892E6742B34F0701 Certificate serial: 5D79967EF5A5160FFC560347FA52FE39FFEA87CA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/589DA145B1A822538BB2E68D892E6742B34F0701.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft Manifest number: CB Signing time: Fri 09 Oct 2026 10:46:39 +0000 Manifest this update: Fri 09 Oct 2026 10:41:39 +0000 Manifest next update: Sat 10 Oct 2026 13:19:39 +0000 Files and hashes: 1: 3136312e3234382e3132382e302f32332d3234203d3e20313331363435.roa (hash: A2tEu7HgD7mnKwNZUDnZPRv7DPPNtScV1zkEjUfoaE8=) 2: 589DA145B1A822538BB2E68D892E6742B34F0701.crl (hash: rw29joEQrDmYISv5p6++aJCUuRAjg7nFEUtwseZUqCk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.crl rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/589DA145B1A822538BB2E68D892E6742B34F0701.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:79:96:7e:f5:a5:16:0f:fc:56:03:47:fa:52:fe:39:ff:ea:87:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589DA145B1A822538BB2E68D892E6742B34F0701 Validity Not Before: Oct 9 10:41:39 2026 GMT Not After : Oct 10 13:19:39 2026 GMT Subject: CN=70AC39067C91EE10B34E7D53F7DC9D5CBB6EFA15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:a8:97:b4:2f:85:ae:62:4a:8f:0b:b6:e7: 94:5f:de:21:40:57:b2:d5:4d:ea:08:41:4c:0b:ff: a9:5d:a1:23:c6:55:23:b8:1d:a4:00:f0:d3:c9:9a: 41:cd:f9:f5:1f:26:4b:9e:80:f3:0a:f0:c8:d9:b8: 4d:dc:13:38:2b:eb:60:ec:af:fd:8a:bc:6a:80:44: 23:08:98:7b:63:2b:41:52:2c:8a:46:21:4e:01:2d: 2f:2e:25:bb:5e:0f:c9:b5:63:0a:e6:46:b7:88:2d: 4d:18:34:c8:f0:ac:cb:42:2e:64:b4:99:28:60:0c: 91:9f:3f:8d:a2:72:89:59:db:13:c1:77:56:9f:66: 15:9c:c8:ad:79:b6:9c:c0:25:31:88:37:6b:28:23: 6c:a0:87:e2:cd:e3:e1:ef:21:43:2f:8a:7b:b5:4f: 71:f7:95:78:95:a9:a5:a6:d9:1c:bd:8c:c8:1c:66: a2:76:3a:91:5b:8b:50:dd:d1:e4:de:dc:dc:4f:b4: b1:33:33:f7:cc:fa:bd:03:e8:49:ad:6e:31:d8:cb: a6:dc:4a:ca:4e:37:61:aa:b7:4e:92:2a:fc:20:3d: c1:9c:2f:db:93:1f:40:3f:66:f2:b8:5a:11:59:b9: 26:98:43:5c:94:65:32:97:f9:48:8e:73:08:75:38: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AC:39:06:7C:91:EE:10:B3:4E:7D:53:F7:DC:9D:5C:BB:6E:FA:15 X509v3 Authority Key Identifier: keyid:58:9D:A1:45:B1:A8:22:53:8B:B2:E6:8D:89:2E:67:42:B3:4F:07:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/589DA145B1A822538BB2E68D892E6742B34F0701.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0f:4f:ac:3c:7b:be:34:0c:15:2f:aa:c2:75:61:0a:79:24: bf:ef:b3:53:0e:d7:80:f5:d4:be:df:0c:c7:68:34:65:fb:23: 68:5b:29:d9:10:bf:b2:a6:fb:c0:d3:f0:70:a0:a0:fa:62:86: 79:f2:06:2c:51:6b:d9:ee:eb:85:ec:c0:8f:ee:c6:68:1e:9a: 23:b8:b5:1b:39:5d:c1:2e:88:39:4c:a7:28:5b:f1:81:8d:8e: e5:34:d5:7c:14:cb:22:06:96:69:7e:86:fa:9a:56:36:8a:9e: 89:1c:95:1c:29:97:7d:d3:35:bf:1b:91:1d:22:29:a4:87:91: 81:c6:98:6f:7d:b1:34:83:ec:65:e1:01:60:9d:09:73:4a:98: 85:1f:23:97:b6:c8:0c:09:a3:52:86:b6:de:46:6e:5d:b5:a0: 7f:be:c3:55:77:f1:82:d0:96:86:9d:fa:60:bf:70:5c:15:c4: 63:1b:d1:a9:85:ee:82:0e:85:cc:3a:9a:c8:7c:04:df:53:2b: 6c:41:fd:1e:06:77:40:61:20:d2:b5:7e:22:b3:af:d5:06:c3: 41:f0:80:25:a3:80:18:0a:f1:7e:2e:31:7f:8c:93:1f:70:46: d1:00:9f:76:11:5a:47:5e:2c:44:a0:8f:ed:de:1f:cb:d2:39: fe:59:b8:50 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUXXmWfvWlFg/8VgNH+lL+Of/qh8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg5REExNDVCMUE4MjI1MzhCQjJFNjhEODkyRTY3NDJC MzRGMDcwMTAeFw0yNjEwMDkxMDQxMzlaFw0yNjEwMTAxMzE5MzlaMDMxMTAvBgNV BAMTKDcwQUMzOTA2N0M5MUVFMTBCMzRFN0Q1M0Y3REM5RDVDQkI2RUZBMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFqiXtC+FrmJKjwu255Rf3iFA V7LVTeoIQUwL/6ldoSPGVSO4HaQA8NPJmkHN+fUfJkuegPMK8MjZuE3cEzgr62Ds r/2KvGqARCMImHtjK0FSLIpGIU4BLS8uJbteD8m1YwrmRreILU0YNMjwrMtCLmS0 mShgDJGfP42icolZ2xPBd1afZhWcyK15tpzAJTGIN2soI2ygh+LN4+HvIUMvinu1 T3H3lXiVqaWm2Ry9jMgcZqJ2OpFbi1Dd0eTe3NxPtLEzM/fM+r0D6EmtbjHYy6bc SspON2Gqt06SKvwgPcGcL9uTH0A/ZvK4WhFZuSaYQ1yUZTKX+UiOcwh1OF47AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUcKw5BnyR7hCzTn1T99ydXLtu+hUwHwYDVR0j BBgwFoAUWJ2hRbGoIlOLsuaNiS5nQrNPBwEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzEv NTg5REExNDVCMUE4MjI1MzhCQjJFNjhEODkyRTY3NDJCMzRGMDcwMS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMC81ODlEQTE0NUIxQTgyMjUzOEJCMkU2OEQ4OTJFNjc0 MkIzNEYwNzAxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzEvNTg5REExNDVCMUE4MjI1MzhC QjJFNjhEODkyRTY3NDJCMzRGMDcwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ0PT6w8e740DBUvqsJ1 YQp5JL/vs1MO14D11L7fDMdoNGX7I2hbKdkQv7Km+8DT8HCgoPpihnnyBixRa9nu 64XswI/uxmgemiO4tRs5XcEuiDlMpyhb8YGNjuU01XwUyyIGlml+hvqaVjaKnokc lRwpl33TNb8bkR0iKaSHkYHGmG99sTSD7GXhAWCdCXNKmIUfI5e2yAwJo1KGtt5G bl21oH++w1V38YLQload+mC/cFwVxGMb0amF7oIOhcw6msh8BN9TK2xB/R4Gd0Bh INK1fiKzr9UGw0HwgCWjgBgK8X4uMX+Mkx9wRtEAn3YRWkdeLESgj+3eH8vSOf5Z uFA= -----END CERTIFICATE-----Generated at Fri Oct 9 16:57:52 2026 by rpki-client