$ rpki-client -vvvf rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft File: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft (raw, json) Hash identifier: dFK3qwvgqjf8dZTT6NDRTtz91RjxAnE8tu3F3wltTVc= Subject key identifier: FE:E6:01:07:02:5E:14:D6:52:F8:64:10:E4:20:A5:FA:56:30:AA:77 Authority key identifier: 21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 Certificate issuer: /CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Certificate serial: 134C3C813FDE2D1A9BB152F4492B60B303E9F143 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft Manifest number: B5 Signing time: Sun 20 Sep 2026 18:13:59 +0000 Manifest this update: Sun 20 Sep 2026 18:08:59 +0000 Manifest next update: Mon 21 Sep 2026 20:43:59 +0000 Files and hashes: 1: 3130332e3131372e3133322e302f32332d3234203d3e203231383539.roa (hash: V7xrPLp5f+XdiNXnNwOKJbYVBx4iv5pqsU5W1y0I9ac=) 2: 3130332e3131372e3133322e302f32332d3234203d3e2039363737.roa (hash: L4VMPfmAF+ujWD/W3Q/uT3gBZ3GdNZkDF1QTrHGw11I=) 3: 3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa (hash: yNF0rjdZhiThfjXcp9q9ny7hpelDoujpqo41tWTYbEo=) 4: 3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa (hash: AS3qH/RjBUke7M3rlCKwKKx7OXc4/iKqzu9OBdcpsSg=) 5: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl (hash: 9WTtbhG7WeJx5drkxRNwr1AwOAUv9D0/2mWRO+jhO/I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 08:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4c:3c:81:3f:de:2d:1a:9b:b1:52:f4:49:2b:60:b3:03:e9:f1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Validity Not Before: Sep 20 18:08:59 2026 GMT Not After : Sep 21 20:43:59 2026 GMT Subject: CN=FEE60107025E14D652F86410E420A5FA5630AA77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:85:ec:2c:df:08:f5:3d:b0:ed:dd:5e:ad: 67:71:e6:0a:20:2b:29:4c:6b:9d:4e:bb:b9:37:19: c1:54:ce:ff:d9:4f:42:f5:51:ef:6c:9e:23:e9:c5: 1d:e8:63:62:b5:17:9e:5a:4b:bb:44:7a:e5:81:88: c8:15:21:f8:1d:b3:39:77:4a:09:1f:ed:35:62:72: 99:88:1a:01:16:0c:9f:93:d9:81:ef:fd:1e:9b:2c: ec:91:4a:a7:6d:ca:e3:2e:87:56:cf:40:1a:08:3d: de:d0:ed:66:e3:ff:5c:b6:8c:2b:91:46:c0:11:fe: f7:2e:3e:25:7d:32:d7:ce:97:fe:46:78:1f:81:b2: 38:81:5e:0b:41:60:9b:ae:c3:d5:df:a7:70:f1:e4: 67:1d:b4:f1:37:af:d5:8e:29:17:da:4d:d3:8c:c0: c4:21:ec:2d:27:9b:93:7d:fc:c3:0f:03:d3:d9:86: 23:4e:59:52:a9:72:15:ac:dc:93:f1:35:a0:6c:a6: 0c:d9:5a:28:99:1d:94:c5:71:35:a8:7f:fd:f7:db: fb:79:27:6c:e1:44:3d:cf:ac:88:ad:b8:d7:54:49: 82:2b:63:f3:2b:7e:26:5b:56:37:ce:ed:f5:69:b1: c1:ad:d6:d8:5c:fa:b5:3c:13:a7:39:7f:f7:8e:30: 7c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E6:01:07:02:5E:14:D6:52:F8:64:10:E4:20:A5:FA:56:30:AA:77 X509v3 Authority Key Identifier: keyid:21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c6:c7:be:fa:b3:cf:ac:51:e1:4f:75:63:78:b4:27:ea:ff: b7:e8:4a:95:d5:67:a9:47:8d:9a:65:38:fe:ed:10:32:d7:37: 35:c1:0b:ca:94:80:46:72:1e:36:18:c3:2c:11:e0:3c:df:b4: 7f:1a:de:56:0a:f0:9f:c1:17:e2:f8:ab:81:28:85:32:92:25: 9e:82:95:f8:4a:5d:38:98:1f:fc:2b:d7:2b:1f:d2:63:da:0c: 2d:b7:d0:e0:9d:63:18:3a:d8:4d:b7:49:a9:09:50:4e:2a:fc: 04:ee:40:4a:3c:37:44:ae:21:da:7a:80:70:c9:94:2d:5f:3e: e5:02:ba:66:2c:44:12:58:74:cf:90:8e:d5:6e:6f:72:30:e3: 10:9e:e3:6c:4f:3c:51:4c:ad:a3:e1:35:63:67:d4:97:2a:da: 08:1e:d8:81:75:3c:11:f9:f5:75:45:8f:4d:8d:78:46:dd:91: ec:05:76:ec:ed:b2:2f:b5:55:13:01:2c:9b:63:78:35:fd:de: 0f:99:f0:e6:0c:87:3c:66:50:c6:2d:d0:9c:d1:41:d2:61:f9: 24:17:8f:2a:71:0f:62:64:60:46:f4:e8:47:70:d8:9e:e4:6c: 05:a0:39:62:dc:18:d3:e3:b2:8d:97:cf:66:58:34:a6:de:16: af:cd:2b:ca -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUE0w8gT/eLRqbsVL0SStgswPp8UMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQz RkNGQjVCMzAeFw0yNjA5MjAxODA4NTlaFw0yNjA5MjEyMDQzNTlaMDMxMTAvBgNV BAMTKEZFRTYwMTA3MDI1RTE0RDY1MkY4NjQxMEU0MjBBNUZBNTYzMEFBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0woXsLN8I9T2w7d1erWdx5gog KylMa51Ou7k3GcFUzv/ZT0L1Ue9sniPpxR3oY2K1F55aS7tEeuWBiMgVIfgdszl3 Sgkf7TVicpmIGgEWDJ+T2YHv/R6bLOyRSqdtyuMuh1bPQBoIPd7Q7Wbj/1y2jCuR RsAR/vcuPiV9MtfOl/5GeB+BsjiBXgtBYJuuw9Xfp3Dx5GcdtPE3r9WOKRfaTdOM wMQh7C0nm5N9/MMPA9PZhiNOWVKpchWs3JPxNaBspgzZWiiZHZTFcTWof/332/t5 J2zhRD3PrIituNdUSYIrY/MrfiZbVjfO7fVpscGt1thc+rU8E6c5f/eOMHxtAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU/uYBBwJeFNZS+GQQ5CCl+lYwqncwHwYDVR0j BBgwFoAUIbYtYOGrU4A7IpzPg8F5/T/PtbMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAv MjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yMUI2MkQ2MEUxQUI1MzgwM0IyMjlDQ0Y4M0MxNzlG RDNGQ0ZCNUIzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAvMjFCNjJENjBFMUFCNTM4MDNC MjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEzGx776s8+sUeFPdWN4 tCfq/7foSpXVZ6lHjZplOP7tEDLXNzXBC8qUgEZyHjYYwywR4DzftH8a3lYK8J/B F+L4q4EohTKSJZ6ClfhKXTiYH/wr1ysf0mPaDC230OCdYxg62E23SakJUE4q/ATu QEo8N0SuIdp6gHDJlC1fPuUCumYsRBJYdM+QjtVub3Iw4xCe42xPPFFMraPhNWNn 1Jcq2gge2IF1PBH59XVFj02NeEbdkewFduztsi+1VRMBLJtjeDX93g+Z8OYMhzxm UMYt0JzRQdJh+SQXjypxD2JkYEb06Edw2J7kbAWgOWLcGNPjso2Xz2ZYNKbeFq/N K8o= -----END CERTIFICATE-----Generated at Sun Sep 20 22:34:56 2026 by rpki-client