$ rpki-client -vvvf rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft File: C4FE0149FC774090A5B6304E8968380A1F1B0426.mft (raw, json) Hash identifier: Zz0IVqAKtynFcjsCDSp8d7ld0RZ8phDS7acetzew1uQ= Subject key identifier: D0:D3:C6:C7:D4:B8:8D:CF:C2:46:9B:64:9F:56:5D:AF:69:2F:4A:EA Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 Certificate issuer: /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Certificate serial: 5B8372835A3D6128B076CEDE6F656457D582D047 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft Manifest number: B6 Signing time: Tue 22 Sep 2026 14:27:22 +0000 Manifest this update: Tue 22 Sep 2026 14:22:22 +0000 Manifest next update: Wed 23 Sep 2026 16:30:22 +0000 Files and hashes: 1: C4FE0149FC774090A5B6304E8968380A1F1B0426.crl (hash: IOcEFtnRU5D3i8KPwWmJWrhA+21QStIDRxKPWnXi/X4=) 2: 323430373a643234303a3a2f33322d3438203d3e203138343238.roa (hash: rBUhV/xvRZeEelrs2jyNJogNIGW8G/cMNY2z96YxdgM=) 3: 3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa (hash: RmocfnFYGeRr/aQ5L4jWeV+BcjwmA5Wox7nbUvuA0XQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:83:72:83:5a:3d:61:28:b0:76:ce:de:6f:65:64:57:d5:82:d0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Validity Not Before: Sep 22 14:22:22 2026 GMT Not After : Sep 23 16:30:22 2026 GMT Subject: CN=D0D3C6C7D4B88DCFC2469B649F565DAF692F4AEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:e3:89:04:ec:08:d5:7a:05:fd:13:50:43: 65:03:a7:63:12:9d:fc:f3:63:e5:ec:cb:1e:bc:bb: 2a:79:04:63:10:85:22:6c:e6:d4:a0:d7:d2:f8:bb: 94:ad:81:70:0c:20:04:24:c4:19:65:8f:91:7f:75: 40:a1:5e:23:60:6a:d8:e6:d9:27:ac:b7:e2:f3:2a: 20:b2:5f:eb:cd:20:b3:cc:f7:31:d5:33:4f:59:11: d8:e2:95:e2:4e:d7:87:76:06:18:26:e5:c6:63:aa: a2:7d:1d:f7:99:63:5f:9f:dd:a8:78:f7:07:26:fd: ed:97:67:fe:52:3f:96:40:af:7a:1e:40:9e:ce:3b: de:5b:13:b6:4f:05:9d:8a:35:dd:e0:28:ff:52:e1: 03:28:c7:b8:82:ce:9f:ed:52:ea:78:30:a7:8a:3b: bd:9d:f4:d1:4d:23:24:60:80:5b:c4:11:9d:25:5a: 3e:a5:21:90:9d:a5:80:2a:5a:9b:01:ac:f5:b9:75: a2:93:78:82:e3:73:50:be:bb:6e:e9:ca:6b:ec:95: 57:03:cd:4c:5b:0c:c2:8d:89:e8:34:f9:30:c2:f2: c1:ec:95:13:5c:89:8b:61:0e:7c:df:8d:c0:18:1d: 05:04:2b:c7:7a:88:18:2d:95:17:35:39:1d:38:20: 9a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D3:C6:C7:D4:B8:8D:CF:C2:46:9B:64:9F:56:5D:AF:69:2F:4A:EA X509v3 Authority Key Identifier: keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9b:33:38:3b:be:49:66:0b:7f:d4:59:df:8d:6f:db:1c:c8: 38:75:d2:a7:da:61:ac:69:cd:bf:62:95:9b:a9:c8:d2:48:5b: b4:58:97:9d:d5:22:2f:31:61:9f:81:b8:10:b6:82:ae:2f:1b: da:44:06:16:d1:8a:cc:46:26:ba:a3:63:4b:91:e6:01:08:67: 11:4c:f0:f0:17:7a:72:7a:aa:ec:8d:3f:27:e0:c3:d4:6d:78: 19:32:08:3d:2e:cf:85:4d:b1:33:b7:fe:61:75:3b:9d:92:6a: 39:8d:af:55:13:0f:e6:14:5b:7a:d1:6e:04:39:0e:9a:0f:b1: 78:a8:5f:0f:97:75:d9:66:0e:75:5f:f7:8e:87:c2:83:f5:c0: 63:eb:95:d9:50:17:37:f8:d9:74:b8:c9:af:64:31:ce:e0:73: 31:4b:b5:be:da:83:3d:0e:4d:d7:fd:ca:f9:47:ae:a3:0c:c4: 61:ce:03:b6:0e:a9:6b:d2:cd:ab:17:93:c7:20:c5:66:8c:31: 6a:59:95:73:79:ec:fc:31:92:50:8d:ac:fa:81:9f:ea:ca:91: b3:72:de:f6:24:b1:18:61:cb:62:0a:5a:87:4f:38:4d:60:03: d3:f7:5a:ba:2f:33:5d:4d:08:4b:af:f6:a3:fb:9b:c6:f8:9c: 8c:9a:50:46 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUW4Nyg1o9YSiwds7eb2VkV9WC0EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGRTAxNDlGQzc3NDA5MEE1QjYzMDRFODk2ODM4MEEx RjFCMDQyNjAeFw0yNjA5MjIxNDIyMjJaFw0yNjA5MjMxNjMwMjJaMDMxMTAvBgNV BAMTKEQwRDNDNkM3RDRCODhEQ0ZDMjQ2OUI2NDlGNTY1REFGNjkyRjRBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDuOJBOwI1XoF/RNQQ2UDp2MS nfzzY+Xsyx68uyp5BGMQhSJs5tSg19L4u5StgXAMIAQkxBllj5F/dUChXiNgatjm 2Sest+LzKiCyX+vNILPM9zHVM09ZEdjileJO14d2Bhgm5cZjqqJ9HfeZY1+f3ah4 9wcm/e2XZ/5SP5ZAr3oeQJ7OO95bE7ZPBZ2KNd3gKP9S4QMox7iCzp/tUup4MKeK O72d9NFNIyRggFvEEZ0lWj6lIZCdpYAqWpsBrPW5daKTeILjc1C+u27pymvslVcD zUxbDMKNieg0+TDC8sHslRNciYthDnzfjcAYHQUEK8d6iBgtlRc1OR04IJqFAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU0NPGx9S4jc/CRptkn1Zdr2kvSuowHwYDVR0j BBgwFoAUxP4BSfx3QJCltjBOiWg4Ch8bBCYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUVSQ1lD QVQvMC9DNEZFMDE0OUZDNzc0MDkwQTVCNjMwNEU4OTY4MzgwQTFGMUIwNDI2LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0M0RkUwMTQ5RkM3NzQwOTBBNUI2MzA0RTg5 NjgzODBBMUYxQjA0MjYuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NRVJDWUNBVC8wL0M0RkUwMTQ5 RkM3NzQwOTBBNUI2MzA0RTg5NjgzODBBMUYxQjA0MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKmzM4 O75JZgt/1FnfjW/bHMg4ddKn2mGsac2/YpWbqcjSSFu0WJed1SIvMWGfgbgQtoKu LxvaRAYW0YrMRia6o2NLkeYBCGcRTPDwF3pyeqrsjT8n4MPUbXgZMgg9Ls+FTbEz t/5hdTudkmo5ja9VEw/mFFt60W4EOQ6aD7F4qF8Pl3XZZg51X/eOh8KD9cBj65XZ UBc3+Nl0uMmvZDHO4HMxS7W+2oM9Dk3X/cr5R66jDMRhzgO2Dqlr0s2rF5PHIMVm jDFqWZVzeez8MZJQjaz6gZ/qypGzct72JLEYYctiClqHTzhNYAPT91q6LzNdTQhL r/aj+5vG+JyMmlBG -----END CERTIFICATE-----Generated at Tue Sep 22 18:08:23 2026 by rpki-client