$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft File: 4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft (raw, json) Hash identifier: XKl/lm4yhyWlwgID2Bqw6aNILubmtXFA+ulyfZPez5w= Subject key identifier: 7A:2B:3E:22:1E:BA:40:FA:47:6C:AC:16:FF:24:14:FA:52:FF:FD:A7 Authority key identifier: 46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8 Certificate issuer: /CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8 Certificate serial: 75C604611814F1EF02E1B53A7AFD6A2E52C2E355 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft Manifest number: B7 Signing time: Wed 23 Sep 2026 08:37:04 +0000 Manifest this update: Wed 23 Sep 2026 08:32:04 +0000 Manifest next update: Thu 24 Sep 2026 12:14:04 +0000 Files and hashes: 1: 323430313a393765303a3a2f34382d3438203d3e20313331313437.roa (hash: p8UsvXIz5WgkEXh1nf22VVGfO3Td54MJiWuDiLo2EHQ=) 2: 4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl (hash: W9BalzA8iaz7VUxlNIrGFvakmpykY10f2UynJ0FB7vc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c6:04:61:18:14:f1:ef:02:e1:b5:3a:7a:fd:6a:2e:52:c2:e3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8 Validity Not Before: Sep 23 08:32:04 2026 GMT Not After : Sep 24 12:14:04 2026 GMT Subject: CN=7A2B3E221EBA40FA476CAC16FF2414FA52FFFDA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:91:dd:8f:d1:fe:3f:05:ef:bf:85:72:59:d2: 28:5b:37:f4:81:89:bf:1a:ca:c6:b6:2e:d2:21:23: e2:03:91:bf:76:ea:dd:87:ef:68:4f:df:cf:64:2c: ff:a1:90:54:49:e7:18:c1:92:3e:ec:20:d9:ff:68: b7:dd:15:d4:73:c0:8a:ac:5b:9f:f4:47:7a:e6:80: b2:f6:a0:bb:3b:c0:53:fd:b1:d1:90:7f:29:1f:14: 4e:a7:90:55:9f:4a:5f:26:37:de:e8:d3:86:5a:e0: 56:8b:e0:d2:53:82:6f:56:07:f7:72:e3:d1:93:2b: 71:58:c3:56:3d:af:b6:9f:a4:20:d6:07:8d:db:05: 82:5f:fd:40:44:b4:2f:a3:87:10:5c:14:e2:da:4c: 91:f3:2a:60:28:4c:e3:d2:38:40:63:6e:48:89:bc: b7:37:51:58:f2:7c:35:76:0c:32:32:57:a9:96:4c: 95:b2:80:93:25:a1:30:0d:56:0b:b9:0a:48:6c:15: 93:29:96:54:e3:f9:d3:cc:4d:48:32:ca:d3:10:ab: 8b:8f:3c:f2:ab:f3:27:d9:86:24:98:3c:ea:da:0a: ec:ef:99:51:ed:f3:f9:e4:93:fc:60:57:91:05:3d: 8d:7b:02:00:9c:6d:86:3f:1c:e2:cd:30:1a:e3:91: 8c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2B:3E:22:1E:BA:40:FA:47:6C:AC:16:FF:24:14:FA:52:FF:FD:A7 X509v3 Authority Key Identifier: keyid:46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d6:12:4a:b7:5e:47:f9:d8:50:f6:0c:b8:8a:21:bd:f2:27: 0c:5c:4a:56:c0:ca:f1:e1:7d:53:2b:63:bf:33:10:3c:71:7a: 7b:b9:c8:c1:9e:1b:98:52:49:9f:4d:9c:de:66:ac:fa:b4:dd: e8:20:81:21:88:e0:75:4c:7f:89:02:18:38:7c:5c:4b:25:6f: bf:45:49:d6:a9:cd:fa:62:14:a6:27:ae:6e:7e:bf:09:7b:b1: d0:c4:2d:d3:8a:d3:af:2f:4f:cf:b6:25:70:36:0d:3c:9d:81: 17:3c:92:ab:85:4c:d7:27:f7:84:5e:41:9c:5b:a6:34:93:51: bd:6c:ea:fa:ce:33:ba:b1:23:22:02:af:86:6a:ac:a9:55:2a: 6d:10:7b:b7:79:24:b8:e2:b9:c7:af:f1:e3:24:6f:d1:b9:97: fd:15:97:30:6a:8a:64:ff:c6:f3:4e:5d:cc:4f:5c:28:13:2e: bf:dc:6c:00:a9:2a:af:07:73:49:a8:b8:d7:ff:d5:6c:55:d8: 05:a9:a9:bf:5d:cd:82:1d:9d:d4:fc:c3:2a:30:f0:87:55:f3: fc:b6:a9:fb:bd:ff:d0:4b:01:9e:28:dd:f6:02:82:62:c6:db: 6d:a7:a5:7a:58:29:0f:72:4d:1d:dd:7f:cc:2d:c7:40:d8:e9: aa:95:cf:3f -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUdcYEYRgU8e8C4bU6ev1qLlLC41UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY3MkNDMUZFMjcwOEU4ODJDN0M3QUM5RjAxNkM5QzUz NTAzMDFCODAeFw0yNjA5MjMwODMyMDRaFw0yNjA5MjQxMjE0MDRaMDMxMTAvBgNV BAMTKDdBMkIzRTIyMUVCQTQwRkE0NzZDQUMxNkZGMjQxNEZBNTJGRkZEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvkd2P0f4/Be+/hXJZ0ihbN/SB ib8aysa2LtIhI+IDkb926t2H72hP389kLP+hkFRJ5xjBkj7sINn/aLfdFdRzwIqs W5/0R3rmgLL2oLs7wFP9sdGQfykfFE6nkFWfSl8mN97o04Za4FaL4NJTgm9WB/dy 49GTK3FYw1Y9r7afpCDWB43bBYJf/UBEtC+jhxBcFOLaTJHzKmAoTOPSOEBjbkiJ vLc3UVjyfDV2DDIyV6mWTJWygJMloTANVgu5CkhsFZMpllTj+dPMTUgyytMQq4uP PPKr8yfZhiSYPOraCuzvmVHt8/nkk/xgV5EFPY17AgCcbYY/HOLNMBrjkYyhAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUeis+Ih66QPpHbKwW/yQU+lL//acwHwYDVR0j BBgwFoAURnLMH+JwjogsfHrJ8BbJxTUDAbgwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v MC80NjcyQ0MxRkUyNzA4RTg4MkM3QzdBQzlGMDE2QzlDNTM1MDMwMUI4LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzQ2NzJDQzFGRTI3MDhFODgyQzdDN0FDOUYwMTZD OUM1MzUwMzAxQjguY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8wLzQ2NzJDQzFGRTI3MDhF ODgyQzdDN0FDOUYwMTZDOUM1MzUwMzAxQjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAk1hJKt15H+dhQ 9gy4iiG98icMXEpWwMrx4X1TK2O/MxA8cXp7ucjBnhuYUkmfTZzeZqz6tN3oIIEh iOB1TH+JAhg4fFxLJW+/RUnWqc36YhSmJ65ufr8Je7HQxC3TitOvL0/PtiVwNg08 nYEXPJKrhUzXJ/eEXkGcW6Y0k1G9bOr6zjO6sSMiAq+GaqypVSptEHu3eSS44rnH r/HjJG/RuZf9FZcwaopk/8bzTl3MT1woEy6/3GwAqSqvB3NJqLjX/9VsVdgFqam/ Xc2CHZ3U/MMqMPCHVfP8tqn7vf/QSwGeKN32AoJixtttp6V6WCkPck0d3X/MLcdA 2Omqlc8/ -----END CERTIFICATE-----Generated at Wed Sep 23 16:27:06 2026 by rpki-client