$ rpki-client -vvvf rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft File: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft (raw, json) Hash identifier: vSGBBxKlMRMd5jsh1XhXy86Xohv22j1PIfjLnyPq7BU= Subject key identifier: B3:A0:F2:03:94:AA:1F:EB:BD:E4:F0:0A:22:16:DC:E5:94:6F:C2:4D Authority key identifier: 21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 Certificate issuer: /CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Certificate serial: 31301C07A447881569AEAB4663A975A18B574885 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft Manifest number: F8 Signing time: Mon 09 Nov 2026 19:18:52 +0000 Manifest this update: Mon 09 Nov 2026 19:13:52 +0000 Manifest next update: Tue 10 Nov 2026 21:40:52 +0000 Files and hashes: 1: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl (hash: dKJlJ8Rh4Ka9eu8gm6I+lVTRR/D5sp2BtNheXzT7xJE=) 2: 3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa (hash: AS3qH/RjBUke7M3rlCKwKKx7OXc4/iKqzu9OBdcpsSg=) 3: 3130332e3131372e3133322e302f32332d3234203d3e203231383539.roa (hash: V7xrPLp5f+XdiNXnNwOKJbYVBx4iv5pqsU5W1y0I9ac=) 4: 3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa (hash: yNF0rjdZhiThfjXcp9q9ny7hpelDoujpqo41tWTYbEo=) 5: 3130332e3131372e3133322e302f32332d3234203d3e2039363737.roa (hash: L4VMPfmAF+ujWD/W3Q/uT3gBZ3GdNZkDF1QTrHGw11I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 21:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:30:1c:07:a4:47:88:15:69:ae:ab:46:63:a9:75:a1:8b:57:48:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Validity Not Before: Nov 9 19:13:52 2026 GMT Not After : Nov 10 21:40:52 2026 GMT Subject: CN=B3A0F20394AA1FEBBDE4F00A2216DCE5946FC24D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:4d:05:f0:18:af:1a:25:70:9e:c8:95:a9: 15:29:e6:6f:0b:e6:24:a4:9a:49:28:63:82:dd:ee: cf:e5:c8:c6:a0:04:e6:44:ad:09:c4:93:e5:81:d6: 47:71:2b:c5:82:50:d0:92:9a:44:e4:87:fe:a4:db: e1:46:21:70:88:b9:b4:bc:b1:36:60:c0:c7:06:5d: e2:64:ff:94:8d:4a:8d:f7:28:e4:99:3f:5c:7c:6e: a3:96:01:75:0b:44:e9:e4:eb:f9:15:62:e4:3f:59: d4:86:e9:e6:58:af:c5:04:42:b7:32:eb:db:1d:d5: b4:8d:2b:b6:fa:93:56:33:e2:69:36:f7:34:6c:03: d7:e1:7d:6a:12:c7:50:0f:91:26:ce:46:d1:9b:d3: 70:61:cb:47:b5:33:3b:27:16:49:a8:58:f5:24:4f: 2c:65:73:f2:14:24:36:19:db:94:7c:11:04:07:5a: 90:52:d0:a3:3b:b7:0b:1a:aa:fc:5c:e7:fb:a4:21: 45:88:ef:f3:38:09:f7:d1:20:22:85:99:b4:59:bf: f2:40:a3:a9:31:b0:d9:c7:b5:2d:bc:a0:8f:00:ac: de:1b:d2:0b:da:b6:9b:54:62:4c:c9:9f:dd:2d:3a: b7:68:59:8c:c5:24:19:02:fd:2e:48:d7:2f:54:a1: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A0:F2:03:94:AA:1F:EB:BD:E4:F0:0A:22:16:DC:E5:94:6F:C2:4D X509v3 Authority Key Identifier: keyid:21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:7b:f5:ce:a7:91:1a:e2:8d:2a:05:27:b2:d3:61:38:94:ae: f7:f6:9f:50:4c:e6:2b:3b:6b:e3:16:0e:0f:e7:8e:d0:99:93: b9:f7:9b:cd:25:8c:bb:84:d7:54:bf:68:f5:62:cc:e5:0d:ef: 45:46:f5:26:49:5d:1f:71:43:07:67:96:5f:f4:ff:f2:f9:f1: 9e:a3:b6:a9:d4:a1:4b:64:c0:8f:3b:71:46:da:26:e4:63:d1: 8d:ab:39:b5:3e:31:3a:13:29:b6:c2:28:76:31:39:80:e7:c6: cb:83:e5:79:3b:67:2e:80:6b:21:7a:1c:e7:56:5a:f9:72:05: 6f:c5:66:c8:c4:7d:c1:16:d5:b8:bf:3f:20:ff:6b:b2:fe:2c: 2e:81:59:60:6f:f5:1c:8e:70:6e:76:7d:b7:ac:1d:38:98:55: a1:83:e8:1e:f8:97:20:4e:40:60:82:d9:b4:fb:2e:e1:3b:84: f2:be:95:b0:75:f0:63:53:42:52:0e:eb:ed:79:f8:cb:81:97: 7f:ad:3b:74:a2:8b:f5:6b:19:e7:b0:cb:5d:b5:29:26:01:d9: 39:81:8a:ec:36:ba:a3:59:0b:8e:ac:aa:dd:7a:49:33:84:c6: cf:e1:5d:83:eb:5d:19:30:e9:71:cc:ea:db:d9:26:33:99:f2: 77:9e:05:41 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUMTAcB6RHiBVprqtGY6l1oYtXSIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQz RkNGQjVCMzAeFw0yNjExMDkxOTEzNTJaFw0yNjExMTAyMTQwNTJaMDMxMTAvBgNV BAMTKEIzQTBGMjAzOTRBQTFGRUJCREU0RjAwQTIyMTZEQ0U1OTQ2RkMyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkvE0F8BivGiVwnsiVqRUp5m8L 5iSkmkkoY4Ld7s/lyMagBOZErQnEk+WB1kdxK8WCUNCSmkTkh/6k2+FGIXCIubS8 sTZgwMcGXeJk/5SNSo33KOSZP1x8bqOWAXULROnk6/kVYuQ/WdSG6eZYr8UEQrcy 69sd1bSNK7b6k1Yz4mk29zRsA9fhfWoSx1APkSbORtGb03Bhy0e1MzsnFkmoWPUk Tyxlc/IUJDYZ25R8EQQHWpBS0KM7twsaqvxc5/ukIUWI7/M4CffRICKFmbRZv/JA o6kxsNnHtS28oI8ArN4b0gvatptUYkzJn90tOrdoWYzFJBkC/S5I1y9UofPBAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUs6DyA5SqH+u95PAKIhbc5ZRvwk0wHwYDVR0j BBgwFoAUIbYtYOGrU4A7IpzPg8F5/T/PtbMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAv MjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yMUI2MkQ2MEUxQUI1MzgwM0IyMjlDQ0Y4M0MxNzlG RDNGQ0ZCNUIzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAvMjFCNjJENjBFMUFCNTM4MDNC MjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABl79c6nkRrijSoFJ7LT YTiUrvf2n1BM5is7a+MWDg/njtCZk7n3m80ljLuE11S/aPVizOUN70VG9SZJXR9x Qwdnll/0//L58Z6jtqnUoUtkwI87cUbaJuRj0Y2rObU+MToTKbbCKHYxOYDnxsuD 5Xk7Zy6AayF6HOdWWvlyBW/FZsjEfcEW1bi/PyD/a7L+LC6BWWBv9RyOcG52fbes HTiYVaGD6B74lyBOQGCC2bT7LuE7hPK+lbB18GNTQlIO6+15+MuBl3+tO3Sii/Vr Geewy121KSYB2TmBiuw2uqNZC46sqt16STOExs/hXYPrXRkw6XHM6tvZJjOZ8nee BUE= -----END CERTIFICATE-----Generated at Tue Nov 10 06:39:04 2026 by rpki-client