$ rpki-client -vvvf rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft File: B5BCB843FC62D50C018D67AAECEC768693B898BB.mft (raw, json) Hash identifier: SbushZKiRB1w+oIv+7FC/3aICXCNuG3qxtLGmkvyq7M= Subject key identifier: 9D:B2:3A:1A:D1:F8:50:86:C1:04:18:CF:6E:60:75:9F:CA:24:F9:89 Authority key identifier: B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB Certificate issuer: /CN=B5BCB843FC62D50C018D67AAECEC768693B898BB Certificate serial: 2F83600BF6A82BFAFFD915737ED37448B0F1DE9B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft Manifest number: 0101 Signing time: Sun 15 Nov 2026 10:22:56 +0000 Manifest this update: Sun 15 Nov 2026 10:17:56 +0000 Manifest next update: Mon 16 Nov 2026 13:01:56 +0000 Files and hashes: 1: 3135372e32302e3133342e302f32332d3234203d3e203332353935.roa (hash: 2miGNbONfgJVnuMX1O6Xis0X2QHCKO3xHvx8nDoW3Q0=) 2: 3135372e32302e3133342e302f32342d3234203d3e20343030363138.roa (hash: XXKYaMUQ9ja5C/x9TwazrmKnnlLWSfJb+JMU6MAgrIw=) 3: 3135372e32302e3133352e302f32342d3234203d3e20313431303031.roa (hash: WOYBOovAsDkyK43+ASCyGIyOHFzLI6jt6PTK/EFmDKY=) 4: B5BCB843FC62D50C018D67AAECEC768693B898BB.crl (hash: BEsRt8TfmYOJeAYEaR5mwkDIZSQhoqm0E7F5nEu4Dh4=) 5: 3135372e32302e3133352e302f32342d3234203d3e20313339333538.roa (hash: NLBte/Xngt5YiZc1cKE0ofpG8JJd20KTmhuGOcBYInE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:83:60:0b:f6:a8:2b:fa:ff:d9:15:73:7e:d3:74:48:b0:f1:de:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5BCB843FC62D50C018D67AAECEC768693B898BB Validity Not Before: Nov 15 10:17:56 2026 GMT Not After : Nov 16 13:01:56 2026 GMT Subject: CN=9DB23A1AD1F85086C10418CF6E60759FCA24F989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:1d:f4:c1:07:11:45:62:53:d8:1d:74:22: 94:cf:cd:99:05:bf:a0:22:79:f1:1d:42:d0:35:da: d2:6f:5e:b1:29:22:0f:bf:55:26:63:6c:0b:8a:0f: 18:cf:7c:14:ce:a0:53:81:7d:5b:7e:77:37:c4:cb: 82:37:b7:92:1a:64:a5:f2:27:18:bb:4e:1e:5a:6b: 70:27:95:d6:b8:0d:9f:fc:df:98:2d:9c:67:37:19: bb:c7:3b:51:8a:e2:ef:f3:9b:db:63:3b:87:bd:44: 9d:46:7d:a4:f9:c5:64:30:ea:ba:ce:44:41:26:8a: 29:49:89:14:bc:58:e9:0f:4f:1e:3f:56:b9:b6:4b: f2:38:22:36:f4:e4:88:4c:be:e2:1d:fd:d3:68:c9: 7a:da:1e:89:b5:8b:82:45:46:b4:a9:80:ba:b9:ba: 1f:18:68:fb:c5:0b:64:30:bc:ac:77:7a:0a:fc:fc: 22:ed:02:6b:f4:93:42:0a:be:82:8b:29:68:e3:cc: 30:1a:db:82:b6:41:67:e2:87:15:5e:84:61:33:e2: cf:e8:71:65:44:9d:09:5a:eb:c1:e0:91:2d:2f:5a: 83:7d:ff:97:74:b2:5d:ea:e2:0a:ab:f3:c3:5f:a3: c1:ef:bd:9d:95:55:00:32:b7:45:8e:d2:09:5d:8b: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B2:3A:1A:D1:F8:50:86:C1:04:18:CF:6E:60:75:9F:CA:24:F9:89 X509v3 Authority Key Identifier: keyid:B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b0:65:02:1b:ac:62:7a:7e:25:2a:3c:ed:73:b6:05:a9:45: 1c:f2:da:64:8f:16:f2:59:76:6a:d8:1d:de:07:36:a3:34:fc: 14:4a:54:04:37:94:34:0e:b4:40:cb:11:20:73:c6:20:46:7f: fd:75:03:f8:6e:fe:9b:45:35:c0:4d:9c:5c:c8:a4:60:c8:19: 44:32:da:bb:41:ca:0d:e7:30:e9:f0:c3:eb:44:5d:ee:1b:12: 53:f5:89:0b:a1:13:42:c2:53:2c:e4:82:6b:a7:11:dc:36:73: 20:a1:48:75:f2:93:3d:78:a1:79:a9:89:2f:f7:46:7b:01:06: 3a:b3:4d:a9:d4:d8:0d:c6:f8:4a:bf:35:23:2f:16:0d:19:95: f8:00:28:03:31:bb:30:9e:32:f3:9c:46:f1:6c:e7:73:77:a1: 7e:46:79:1c:51:3d:80:bb:fe:64:2b:16:bc:11:c6:7f:24:fe: 6b:56:8f:d7:1e:29:07:c2:d8:68:59:4c:57:50:a0:8a:a5:bb: 30:39:fb:4b:af:2a:b4:8d:d4:bd:84:a6:a4:91:ba:7a:3c:54: b4:d3:d6:46:0f:96:6f:fc:31:61:43:c1:45:b4:56:93:78:e2: 10:2c:eb:02:27:10:f9:1c:00:a0:d1:ea:04:80:ae:c3:eb:07: d6:5e:93:1d -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUL4NgC/aoK/r/2RVzftN0SLDx3pswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVCQ0I4NDNGQzYyRDUwQzAxOEQ2N0FBRUNFQzc2ODY5 M0I4OThCQjAeFw0yNjExMTUxMDE3NTZaFw0yNjExMTYxMzAxNTZaMDMxMTAvBgNV BAMTKDlEQjIzQTFBRDFGODUwODZDMTA0MThDRjZFNjA3NTlGQ0EyNEY5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWGh30wQcRRWJT2B10IpTPzZkF v6AiefEdQtA12tJvXrEpIg+/VSZjbAuKDxjPfBTOoFOBfVt+dzfEy4I3t5IaZKXy Jxi7Th5aa3Anlda4DZ/835gtnGc3GbvHO1GK4u/zm9tjO4e9RJ1GfaT5xWQw6rrO REEmiilJiRS8WOkPTx4/Vrm2S/I4Ijb05IhMvuId/dNoyXraHom1i4JFRrSpgLq5 uh8YaPvFC2QwvKx3egr8/CLtAmv0k0IKvoKLKWjjzDAa24K2QWfihxVehGEz4s/o cWVEnQla68HgkS0vWoN9/5d0sl3q4gqr88Nfo8HvvZ2VVQAyt0WO0gldiykhAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUnbI6GtH4UIbBBBjPbmB1n8ok+YkwHwYDVR0j BBgwFoAUtby4Q/xi1QwBjWeq7Ox2hpO4mLswDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTTJOSU0v MS9CNUJDQjg0M0ZDNjJENTBDMDE4RDY3QUFFQ0VDNzY4NjkzQjg5OEJCLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I1QkNCODQzRkM2MkQ1MEMwMThENjdBQUVDRUM3 Njg2OTNCODk4QkIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NMk5JTS8xL0I1QkNCODQzRkM2MkQ1 MEMwMThENjdBQUVDRUM3Njg2OTNCODk4QkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVsGUCG6xien4l Kjztc7YFqUUc8tpkjxbyWXZq2B3eBzajNPwUSlQEN5Q0DrRAyxEgc8YgRn/9dQP4 bv6bRTXATZxcyKRgyBlEMtq7QcoN5zDp8MPrRF3uGxJT9YkLoRNCwlMs5IJrpxHc NnMgoUh18pM9eKF5qYkv90Z7AQY6s02p1NgNxvhKvzUjLxYNGZX4ACgDMbswnjLz nEbxbOdzd6F+RnkcUT2Au/5kKxa8EcZ/JP5rVo/XHikHwthoWUxXUKCKpbswOftL ryq0jdS9hKakkbp6PFS009ZGD5Zv/DFhQ8FFtFaTeOIQLOsCJxD5HACg0eoEgK7D 6wfWXpMd -----END CERTIFICATE-----Generated at Sun Nov 15 22:03:23 2026 by rpki-client