$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft File: 4F029ED27C82844F72C10999E3E77841D888E8A5.mft (raw, json) Hash identifier: YWDe9FjNkwuJAn5jBo0m1p9e3kYmbv4Hw0zZFrK++qA= Subject key identifier: 71:AB:B0:DF:45:37:F7:1F:26:3A:B3:F5:CD:A2:C8:4E:6D:03:08:68 Authority key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 Certificate issuer: /CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Certificate serial: 18A5AC7BC35CAC849D54A6A7E21BDA00E0678B22 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft Manifest number: B6 Signing time: Tue 22 Sep 2026 09:50:57 +0000 Manifest this update: Tue 22 Sep 2026 09:45:57 +0000 Manifest next update: Wed 23 Sep 2026 11:27:57 +0000 Files and hashes: 1: 3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa (hash: mrGHrLU6IhLiSFGZj4xNfph3sl5DRFLwfN+J+P0jaGY=) 2: 3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa (hash: SV9WMKCo6lqqmo4TlONcJhx+nWmHLOoLn96eGrQjUkk=) 3: 3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa (hash: UO7gvVHXWOf9xNngHpaJcF4QjHFiPZ4bxN2SGXLKeFI=) 4: 4F029ED27C82844F72C10999E3E77841D888E8A5.crl (hash: 2VpwVoAcF0NoIkw+m6mA2B1FRlqpEBk/0Ksu0EXdRxc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a5:ac:7b:c3:5c:ac:84:9d:54:a6:a7:e2:1b:da:00:e0:67:8b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Validity Not Before: Sep 22 09:45:57 2026 GMT Not After : Sep 23 11:27:57 2026 GMT Subject: CN=71ABB0DF4537F71F263AB3F5CDA2C84E6D030868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:93:b9:ff:1c:b0:ce:b7:bf:5d:bb:a2:9f:d5: a5:7e:65:d1:b5:9d:f3:25:69:9f:9a:9d:b8:02:ee: f4:2b:73:ad:e4:2a:f6:b5:d4:cd:0a:f2:d9:72:73: c2:2f:c0:db:58:ce:76:1e:41:f1:30:a8:68:2d:18: 33:0e:ee:7d:5f:4e:02:5e:0e:03:b4:e0:1d:96:10: df:93:8a:2c:ef:5b:71:23:1f:a8:8e:bc:99:a7:ed: 53:7c:ed:48:39:16:fb:2f:9d:e8:fb:a4:b9:ad:eb: dc:bd:20:59:ee:13:99:77:df:17:96:6f:33:f4:c5: 91:59:7f:45:e6:f1:6f:78:6a:34:59:52:08:34:e0: 6b:15:3a:c2:84:59:b9:d9:69:e0:c9:b1:6b:98:2b: 17:d5:db:4c:7d:21:61:0d:b7:02:09:3b:e7:66:e8: 3f:4f:a0:96:b0:eb:d0:c0:5c:05:2e:81:38:f6:2a: 6d:f8:de:02:82:60:51:5a:19:d1:ae:bb:aa:d6:4a: f0:8c:ca:01:99:d7:ce:57:ef:7c:12:99:31:48:52: 7b:d5:ab:4c:bc:e7:f4:87:e6:11:2e:86:4a:0a:8a: f7:c9:f5:60:18:5b:a8:f0:85:9d:94:a7:c3:f6:dd: c3:2b:cb:bc:ca:95:9e:0c:f9:35:3e:20:4c:8d:fa: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AB:B0:DF:45:37:F7:1F:26:3A:B3:F5:CD:A2:C8:4E:6D:03:08:68 X509v3 Authority Key Identifier: keyid:4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:be:0d:d7:72:a2:79:08:78:1c:f2:03:2e:b7:9f:ea:4e:e9: 7e:1d:09:ff:54:89:2f:99:0e:a6:c2:95:c7:10:cf:96:db:a2: 20:53:4e:9f:52:b8:80:3c:a8:a1:95:f2:21:17:31:2c:ed:17: a6:92:6a:7c:5d:c1:92:f9:ae:2c:03:08:2d:ce:8a:0d:ec:cf: 12:2c:08:d8:64:58:bb:b0:70:b4:7a:51:c6:62:5b:76:12:37: 7f:ba:e1:64:10:48:02:93:bc:00:f0:db:23:f1:0e:8a:d9:24: 2f:c6:88:73:e5:ce:b9:2e:48:cb:a3:91:e2:7f:61:58:62:9b: ab:48:6d:4e:1b:db:54:41:9e:10:9b:ee:86:d4:c8:d1:4f:7e: b3:c8:3d:b8:a6:69:e0:08:41:d9:07:77:44:63:c2:74:68:90: 48:0e:c5:5f:d4:f2:7d:f5:35:d9:41:9f:97:ce:21:eb:98:76: 19:e8:03:71:ce:73:4f:83:73:8c:f4:0a:69:9f:91:0c:10:5a: e1:31:8b:29:18:bc:ec:7b:d7:de:7c:00:cc:e9:f4:2a:df:21: 19:1d:77:9f:7e:35:a1:0f:dc:20:c0:19:63:06:f4:7d:01:db: 74:74:01:87:75:d7:6b:f2:31:a4:68:1b:0f:78:57:2f:f1:39: c6:a9:dc:02 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUGKWse8NcrISdVKan4hvaAOBniyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjlFRDI3QzgyODQ0RjcyQzEwOTk5RTNFNzc4NDFE ODg4RThBNTAeFw0yNjA5MjIwOTQ1NTdaFw0yNjA5MjMxMTI3NTdaMDMxMTAvBgNV BAMTKDcxQUJCMERGNDUzN0Y3MUYyNjNBQjNGNUNEQTJDODRFNkQwMzA4NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTk7n/HLDOt79du6Kf1aV+ZdG1 nfMlaZ+anbgC7vQrc63kKva11M0K8tlyc8IvwNtYznYeQfEwqGgtGDMO7n1fTgJe DgO04B2WEN+TiizvW3EjH6iOvJmn7VN87Ug5Fvsvnej7pLmt69y9IFnuE5l33xeW bzP0xZFZf0Xm8W94ajRZUgg04GsVOsKEWbnZaeDJsWuYKxfV20x9IWENtwIJO+dm 6D9PoJaw69DAXAUugTj2Km343gKCYFFaGdGuu6rWSvCMygGZ185X73wSmTFIUnvV q0y85/SH5hEuhkoKivfJ9WAYW6jwhZ2Up8P23cMry7zKlZ4M+TU+IEyN+kn1AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUcauw30U39x8mOrP1zaLITm0DCGgwHwYDVR0j BBgwFoAUTwKe0nyChE9ywQmZ4+d4QdiI6KUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v MS80RjAyOUVEMjdDODI4NDRGNzJDMTA5OTlFM0U3Nzg0MUQ4ODhFOEE1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzRGMDI5RUQyN0M4Mjg0NEY3MkMxMDk5OUUzRTc3 ODQxRDg4OEU4QTUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8xLzRGMDI5RUQyN0M4Mjg0 NEY3MkMxMDk5OUUzRTc3ODQxRDg4OEU4QTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2vg3XcqJ5CHgc 8gMut5/qTul+HQn/VIkvmQ6mwpXHEM+W26IgU06fUriAPKihlfIhFzEs7Remkmp8 XcGS+a4sAwgtzooN7M8SLAjYZFi7sHC0elHGYlt2Ejd/uuFkEEgCk7wA8Nsj8Q6K 2SQvxohz5c65LkjLo5Hif2FYYpurSG1OG9tUQZ4Qm+6G1MjRT36zyD24pmngCEHZ B3dEY8J0aJBIDsVf1PJ99TXZQZ+XziHrmHYZ6ANxznNPg3OM9Appn5EMEFrhMYsp GLzse9fefADM6fQq3yEZHXeffjWhD9wgwBljBvR9Adt0dAGHdddr8jGkaBsPeFcv 8TnGqdwC -----END CERTIFICATE-----Generated at Tue Sep 22 13:05:58 2026 by rpki-client