$ rpki-client -vvvf rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft File: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft (raw, json) Hash identifier: 32TbPOy2uRH4qoZx37Avgv2opHDhXl5XWkAg1Pb21R8= Subject key identifier: 4D:DD:55:52:1B:C2:DA:57:3C:5E:AE:13:CD:0D:8D:FA:3D:E9:35:A1 Authority key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25 Certificate issuer: /CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25 Certificate serial: 2282073B8053A67BC9F102682B0924979021BCBC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft Manifest number: B5 Signing time: Tue 22 Sep 2026 07:05:12 +0000 Manifest this update: Tue 22 Sep 2026 07:00:12 +0000 Manifest next update: Wed 23 Sep 2026 10:01:12 +0000 Files and hashes: 1: 3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa (hash: 5vM1t1el5nYZJRxVKo6mmnrOcGRvisTj4oU5YWdMajw=) 2: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl (hash: lpf7T2aChSmXuIa92coOgfDQlVfmA5cSxd/p2N5yVm8=) 3: 3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa (hash: xeGUxts4a0IBuIHgiewir0gp38fQafeLm2d3Cwvi9SE=) 4: 3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa (hash: sgvshajZGUxIlcU63EqLfebE4wegi3sti647jzuqblg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:82:07:3b:80:53:a6:7b:c9:f1:02:68:2b:09:24:97:90:21:bc:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25 Validity Not Before: Sep 22 07:00:12 2026 GMT Not After : Sep 23 10:01:12 2026 GMT Subject: CN=4DDD55521BC2DA573C5EAE13CD0D8DFA3DE935A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:22:eb:06:71:da:71:3b:66:02:db:06:e8: 1b:6a:6f:57:bf:2a:75:38:ba:b3:69:5b:60:ab:33: 92:20:a2:52:45:86:43:53:3f:e5:b7:e4:17:9d:b2: e6:8c:b9:59:7b:45:6b:a1:7c:ab:3d:b6:f3:bd:4d: 48:2b:de:92:8f:a7:34:0f:dc:4c:0e:1a:79:9b:6c: 2e:99:57:a7:07:92:2c:9c:5e:05:b4:09:b8:73:3f: 22:4e:e5:3c:65:9e:43:30:bb:45:d3:d6:57:36:1e: 28:65:0c:74:e1:1c:4a:68:a2:7d:08:bb:af:9e:4b: df:08:b8:86:69:18:45:55:5f:90:38:ff:eb:92:02: 29:48:81:47:6e:65:71:2e:99:8e:28:2d:85:fa:e5: 55:da:75:74:3f:0d:fd:af:a8:83:b2:fe:b2:fa:f7: ec:c4:7a:dd:3c:aa:53:43:75:26:fc:a2:6c:b1:e2: b0:96:b3:80:a7:7a:2e:86:3b:b3:69:1f:bf:4b:21: fe:b7:c9:b6:a2:51:14:1e:a2:5c:2d:c7:b0:eb:a1: 7c:01:6f:ac:68:9f:ce:dc:82:fb:4e:51:85:f5:d5: 0a:6f:ef:4e:6a:da:91:90:46:b2:71:6e:16:01:2b: 98:39:e0:1b:be:3d:9b:53:c1:be:1c:b1:26:54:e0: 5c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DD:55:52:1B:C2:DA:57:3C:5E:AE:13:CD:0D:8D:FA:3D:E9:35:A1 X509v3 Authority Key Identifier: keyid:D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bf:fd:9e:9b:4b:90:f7:c0:f5:f9:b7:6c:2d:48:41:ad:4f: a6:fc:52:c2:83:8d:39:bd:ee:ba:28:75:00:c8:be:36:bb:c7: 86:9f:7a:0b:44:8a:ea:5d:ab:2c:66:94:04:7c:10:2d:bc:61: 92:b0:d8:9e:a8:4e:14:5b:43:8a:36:96:37:13:5d:10:6f:88: 40:ea:02:20:ae:c2:27:c7:21:01:3a:93:7f:6c:5e:a4:35:45: cf:c5:12:dd:87:75:3d:5f:45:2b:cc:28:e0:e7:d7:66:ee:93: cd:89:d7:2a:4c:93:dd:4a:89:f3:92:d9:9e:57:26:47:f0:da: bb:5e:34:19:15:42:fa:8b:6b:da:5b:9c:12:c2:34:91:9b:ea: 2c:f1:ed:5d:08:62:65:83:bc:5e:d0:d7:e9:48:75:e6:1e:ab: 43:f5:96:ec:49:be:5b:92:17:0d:4f:c9:16:67:15:56:34:d4: 46:bb:20:ce:15:9e:dd:74:89:9c:25:44:41:52:18:54:40:db: df:49:97:91:60:a5:da:ae:db:00:fb:21:44:2a:bd:06:1b:d7: 7a:ca:60:fc:9c:96:90:1d:d9:03:cd:f7:c1:39:73:f1:bf:ac: 6b:ae:53:08:4e:01:ea:9b:84:d8:5b:e1:11:50:e0:a5:e6:5f: 6d:49:a3:01 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUIoIHO4BTpnvJ8QJoKwkkl5AhvLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkxRjZCMTdBNURGRTNCMjMzNkQxQUUzRTIzM0QxMEIy RDYyQUEyNTAeFw0yNjA5MjIwNzAwMTJaFw0yNjA5MjMxMDAxMTJaMDMxMTAvBgNV BAMTKDREREQ1NTUyMUJDMkRBNTczQzVFQUUxM0NEMEQ4REZBM0RFOTM1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3yLrBnHacTtmAtsG6Btqb1e/ KnU4urNpW2CrM5IgolJFhkNTP+W35BedsuaMuVl7RWuhfKs9tvO9TUgr3pKPpzQP 3EwOGnmbbC6ZV6cHkiycXgW0CbhzPyJO5TxlnkMwu0XT1lc2HihlDHThHEpoon0I u6+eS98IuIZpGEVVX5A4/+uSAilIgUduZXEumY4oLYX65VXadXQ/Df2vqIOy/rL6 9+zEet08qlNDdSb8omyx4rCWs4Cnei6GO7NpH79LIf63ybaiURQeolwtx7DroXwB b6xon87cgvtOUYX11Qpv705q2pGQRrJxbhYBK5g54Bu+PZtTwb4csSZU4FwBAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUTd1VUhvC2lc8Xq4TzQ2N+j3pNaEwHwYDVR0j BBgwFoAU2R9rF6Xf47IzbRrj4jPRCy1iqiUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJ LzEvRDkxRjZCMTdBNURGRTNCMjMzNkQxQUUzRTIzM0QxMEIyRDYyQUEyNS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC9EOTFGNkIxN0E1REZFM0IyMzM2RDFBRTNFMjMz RDEwQjJENjJBQTI1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJLzEvRDkxRjZCMTdBNURG RTNCMjMzNkQxQUUzRTIzM0QxMEIyRDYyQUEyNS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACu//Z6bS5D3 wPX5t2wtSEGtT6b8UsKDjTm97roodQDIvja7x4afegtEiupdqyxmlAR8EC28YZKw 2J6oThRbQ4o2ljcTXRBviEDqAiCuwifHIQE6k39sXqQ1Rc/FEt2HdT1fRSvMKODn 12buk82J1ypMk91KifOS2Z5XJkfw2rteNBkVQvqLa9pbnBLCNJGb6izx7V0IYmWD vF7Q1+lIdeYeq0P1luxJvluSFw1PyRZnFVY01Ea7IM4Vnt10iZwlREFSGFRA299J l5Fgpdqu2wD7IUQqvQYb13rKYPyclpAd2QPN98E5c/G/rGuuUwhOAeqbhNhb4RFQ 4KXmX21JowE= -----END CERTIFICATE-----Generated at Tue Sep 22 17:23:34 2026 by rpki-client