$ rpki-client -vvvf rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft File: B5BCB843FC62D50C018D67AAECEC768693B898BB.mft (raw, json) Hash identifier: +bUTnO3VjCMCJQ3Z7X4VLtqb+ruzExUUPl6zUzHTIGo= Subject key identifier: 37:AC:21:C3:4E:50:E4:CC:28:98:34:66:CB:7E:D9:37:F5:A9:3C:93 Authority key identifier: B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB Certificate issuer: /CN=B5BCB843FC62D50C018D67AAECEC768693B898BB Certificate serial: 32A434247305C84AC8036B99686A17FA09A9EA77 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft Manifest number: B7 Signing time: Mon 21 Sep 2026 05:00:50 +0000 Manifest this update: Mon 21 Sep 2026 04:55:50 +0000 Manifest next update: Tue 22 Sep 2026 08:52:50 +0000 Files and hashes: 1: B5BCB843FC62D50C018D67AAECEC768693B898BB.crl (hash: ESnrMHGlDTK+ecBHDFbBdPR11FR8vsdemEEL2hnCur8=) 2: 3135372e32302e3133352e302f32342d3234203d3e20313339333538.roa (hash: NLBte/Xngt5YiZc1cKE0ofpG8JJd20KTmhuGOcBYInE=) 3: 3135372e32302e3133342e302f32332d3234203d3e203332353935.roa (hash: 2miGNbONfgJVnuMX1O6Xis0X2QHCKO3xHvx8nDoW3Q0=) 4: 3135372e32302e3133342e302f32342d3234203d3e20343030363138.roa (hash: XXKYaMUQ9ja5C/x9TwazrmKnnlLWSfJb+JMU6MAgrIw=) 5: 3135372e32302e3133352e302f32342d3234203d3e20313431303031.roa (hash: WOYBOovAsDkyK43+ASCyGIyOHFzLI6jt6PTK/EFmDKY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 08:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a4:34:24:73:05:c8:4a:c8:03:6b:99:68:6a:17:fa:09:a9:ea:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5BCB843FC62D50C018D67AAECEC768693B898BB Validity Not Before: Sep 21 04:55:50 2026 GMT Not After : Sep 22 08:52:50 2026 GMT Subject: CN=37AC21C34E50E4CC28983466CB7ED937F5A93C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5a:33:bd:b3:cc:65:91:f4:b6:d1:aa:90:74: ae:95:52:75:84:39:15:ab:c2:02:06:31:7b:ff:87: 12:7b:a4:90:ca:46:6d:45:f5:93:89:b2:4f:1c:13: d6:6f:5e:d0:05:c4:41:6c:b3:65:7b:00:df:90:9f: d8:33:f6:a4:f5:3b:10:02:22:72:85:86:27:2b:d3: 6e:6e:1b:ff:88:54:58:a6:9f:61:ce:43:72:87:78: d6:1a:c7:da:21:a0:2e:98:12:bd:8f:89:65:46:04: cb:96:6f:a9:7c:9c:0e:1d:92:d4:d3:4d:97:78:a5: bf:b2:3b:e8:24:fd:7a:cd:64:8a:57:39:43:32:ef: d4:17:be:51:9b:46:ec:ae:1f:de:b1:b8:eb:c1:b5: fe:d2:97:1a:ba:f5:88:37:9e:58:72:31:f0:ff:f1: 70:91:1d:26:f1:02:70:06:d3:b4:51:c9:ce:31:a9: ec:ab:52:4b:f4:98:d0:e0:de:80:42:4a:4e:21:eb: a5:2d:62:7f:47:30:47:2e:83:2e:7d:6a:93:b7:91: 6f:3a:1b:7e:f8:f7:01:78:78:28:25:cd:23:93:2d: c1:bb:e4:40:e2:93:9a:d7:70:8d:ff:04:bb:51:9a: ac:14:4d:e4:98:27:d1:fe:c3:9f:05:ba:db:96:29: 33:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AC:21:C3:4E:50:E4:CC:28:98:34:66:CB:7E:D9:37:F5:A9:3C:93 X509v3 Authority Key Identifier: keyid:B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:06:8b:34:14:f5:76:9c:fb:55:39:1a:77:61:34:7f:72:98: 9f:5f:89:14:6d:a6:eb:a3:3c:7d:94:7e:c3:4d:23:98:e2:94: f0:b2:c6:ec:44:37:db:97:a4:45:80:a7:6e:c8:7b:7f:c2:32: 78:ce:5f:0b:57:96:bd:e1:49:7e:b3:4d:fb:8e:60:bf:c8:bb: 74:e9:f2:cd:3a:c8:92:19:a0:5c:b7:b9:62:ae:1a:b1:a7:36: 46:8b:6e:be:95:95:a1:58:95:cb:17:13:17:6e:b3:33:79:ce: a3:93:31:0a:9c:31:e2:b9:d3:b6:81:7e:89:53:ac:7b:ee:ce: d7:b2:31:05:19:c9:1a:e1:9c:9c:86:06:7a:13:cc:f5:5f:ac: 7d:d3:74:9f:06:a2:39:c7:c9:43:ec:82:34:7e:47:22:3c:3d: 9e:f5:f7:dc:cb:9e:f2:d3:39:7e:32:a1:5f:6b:2c:d7:f8:f1: 93:08:42:27:fe:3b:e8:5f:9c:bf:aa:c7:cf:9d:a8:93:57:5b: 26:33:67:b0:1a:48:ce:62:3c:2f:b0:de:31:70:b5:3a:eb:ad: b1:57:7d:77:ad:2e:73:86:61:23:e9:28:f0:aa:72:41:b3:56: d2:01:2a:31:47:60:25:19:54:24:7f:69:2d:90:ca:06:43:a4: 46:29:1c:9b -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUMqQ0JHMFyErIA2uZaGoX+gmp6ncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVCQ0I4NDNGQzYyRDUwQzAxOEQ2N0FBRUNFQzc2ODY5 M0I4OThCQjAeFw0yNjA5MjEwNDU1NTBaFw0yNjA5MjIwODUyNTBaMDMxMTAvBgNV BAMTKDM3QUMyMUMzNEU1MEU0Q0MyODk4MzQ2NkNCN0VEOTM3RjVBOTNDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSWjO9s8xlkfS20aqQdK6VUnWE ORWrwgIGMXv/hxJ7pJDKRm1F9ZOJsk8cE9ZvXtAFxEFss2V7AN+Qn9gz9qT1OxAC InKFhicr025uG/+IVFimn2HOQ3KHeNYax9ohoC6YEr2PiWVGBMuWb6l8nA4dktTT TZd4pb+yO+gk/XrNZIpXOUMy79QXvlGbRuyuH96xuOvBtf7Slxq69Yg3nlhyMfD/ 8XCRHSbxAnAG07RRyc4xqeyrUkv0mNDg3oBCSk4h66UtYn9HMEcugy59apO3kW86 G3749wF4eCglzSOTLcG75EDik5rXcI3/BLtRmqwUTeSYJ9H+w58FutuWKTOZAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUN6whw05Q5MwomDRmy37ZN/WpPJMwHwYDVR0j BBgwFoAUtby4Q/xi1QwBjWeq7Ox2hpO4mLswDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTTJOSU0v MS9CNUJDQjg0M0ZDNjJENTBDMDE4RDY3QUFFQ0VDNzY4NjkzQjg5OEJCLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I1QkNCODQzRkM2MkQ1MEMwMThENjdBQUVDRUM3 Njg2OTNCODk4QkIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NMk5JTS8xL0I1QkNCODQzRkM2MkQ1 MEMwMThENjdBQUVDRUM3Njg2OTNCODk4QkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBBos0FPV2nPtV ORp3YTR/cpifX4kUbabrozx9lH7DTSOY4pTwssbsRDfbl6RFgKduyHt/wjJ4zl8L V5a94Ul+s037jmC/yLt06fLNOsiSGaBct7lirhqxpzZGi26+lZWhWJXLFxMXbrMz ec6jkzEKnDHiudO2gX6JU6x77s7XsjEFGcka4ZychgZ6E8z1X6x903SfBqI5x8lD 7II0fkciPD2e9ffcy57y0zl+MqFfayzX+PGTCEIn/jvoX5y/qsfPnaiTV1smM2ew GkjOYjwvsN4xcLU6662xV313rS5zhmEj6SjwqnJBs1bSASoxR2AlGVQkf2ktkMoG Q6RGKRyb -----END CERTIFICATE-----Generated at Mon Sep 21 17:36:32 2026 by rpki-client