$ rpki-client -vvvf rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft File: AAED3548B647C9B95804411BAB19736F229C5A54.mft (raw, json) Hash identifier: P4RcEWWcDVRh5QnpH07FyyWcbCUoq7NsayCQGnKtzR0= Subject key identifier: 23:DE:B9:2B:CE:64:B8:8F:48:F4:07:79:3F:71:A2:D5:83:87:87:8F Authority key identifier: AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54 Certificate issuer: /CN=AAED3548B647C9B95804411BAB19736F229C5A54 Certificate serial: 39FFD21278B83FCF1312FCC71BD0D111939848FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft Manifest number: B3 Signing time: Sun 20 Sep 2026 21:19:26 +0000 Manifest this update: Sun 20 Sep 2026 21:14:26 +0000 Manifest next update: Tue 22 Sep 2026 00:58:26 +0000 Files and hashes: 1: 3231312e37362e302e302f31392d3139203d3e2037343738.roa (hash: kS4UeB9bSZUO5PaEgviQEGNKSk9y0LCLxXLeAUQgMz0=) 2: AAED3548B647C9B95804411BAB19736F229C5A54.crl (hash: Ix6YQ5dY7U8CTe0BQQXHKjVcYP04gDk5JYPxsJcZX5o=) 3: 3231302e3234342e3139322e302f31392d3230203d3e2037343738.roa (hash: W335AiMtYbmtyFJ/6qInNtRm+Ld5a3fuzl0Q/nTZ7Xs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ff:d2:12:78:b8:3f:cf:13:12:fc:c7:1b:d0:d1:11:93:98:48:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAED3548B647C9B95804411BAB19736F229C5A54 Validity Not Before: Sep 20 21:14:26 2026 GMT Not After : Sep 22 00:58:26 2026 GMT Subject: CN=23DEB92BCE64B88F48F407793F71A2D58387878F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5b:b2:57:0b:37:80:5f:9e:c2:40:90:55:0b: d2:36:52:38:f4:21:52:04:95:6d:dc:f6:74:bc:53: c9:4a:ae:20:1d:0a:75:8c:6c:66:60:4b:34:ec:9a: 7c:d4:00:60:a9:26:1e:2c:52:db:13:75:b5:a1:a7: b5:8b:d8:a5:29:03:25:36:95:a2:de:81:16:1d:c5: f3:cd:59:83:56:2e:e6:a0:f1:fc:e6:fa:d7:a6:6b: d1:52:2d:22:42:bd:6f:0c:e9:11:c7:e4:97:7a:2c: 15:ae:da:ab:ac:9f:a4:16:f5:4c:c0:5a:76:b2:f7: c4:a8:9b:21:d9:68:7d:fa:d5:07:7f:db:b5:ae:37: 8a:c8:04:e7:2f:05:2a:a7:8e:97:e2:c1:0e:50:d0: b8:1c:cc:1d:20:fe:8f:e3:04:b0:7a:52:bf:33:f2: a5:1c:6b:11:70:69:b8:96:39:52:af:9d:06:d8:bd: ad:c8:03:14:5b:55:ea:ea:39:25:5e:b9:06:be:9e: a8:e3:e7:21:62:60:8b:87:ea:67:df:6e:6a:5b:27: 23:31:00:5a:f1:99:e1:7f:4d:02:32:19:83:fb:38: 49:40:00:e9:15:f2:5c:f3:41:30:4f:19:9c:9a:92: 61:64:25:af:25:a7:a2:ea:d9:77:57:59:4c:03:af: 53:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DE:B9:2B:CE:64:B8:8F:48:F4:07:79:3F:71:A2:D5:83:87:87:8F X509v3 Authority Key Identifier: keyid:AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a6:f5:69:40:53:44:79:9d:56:19:c9:d7:8d:cd:d7:0f:4d: a4:35:ac:e1:59:6e:18:ce:08:33:be:a6:40:66:d7:86:d9:a8: 98:c8:11:31:d3:c3:47:e9:c2:07:c5:48:68:9c:fb:db:08:8e: e6:18:da:a8:6f:8f:30:b0:ad:64:6d:fd:7d:d8:7c:dc:86:80: 7e:3b:6e:20:f7:c5:be:9c:28:4b:35:6b:fa:57:c4:97:2a:b0: f3:66:a8:25:53:a1:53:63:34:4a:32:96:4c:8d:c5:85:d8:d1: e1:13:37:32:dc:36:8a:64:0a:36:86:a4:14:65:db:bf:a3:a6: 60:7b:ef:90:1a:b7:e7:15:cb:35:28:96:39:c3:49:0b:6e:3c: cc:50:fe:5c:76:43:f0:57:6f:ac:60:df:98:f9:84:42:75:2b: 74:06:b0:a2:05:8e:24:3f:ed:66:83:ff:bb:d6:2d:8c:64:e3: 7b:ae:e3:65:16:86:36:9d:ac:c9:5c:09:0f:2b:0b:46:d6:8e: 37:d1:8d:3f:14:5d:db:4d:52:40:d5:99:bf:a9:b3:e0:30:ed: 84:aa:89:0c:6e:02:81:13:74:e8:b8:e5:1d:a8:4e:3b:d1:99: 96:04:01:4a:84:fc:5e:09:a8:94:26:d7:a5:77:3c:f5:9c:2e: 98:01:f7:59 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUOf/SEni4P88TEvzHG9DREZOYSPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYy MjlDNUE1NDAeFw0yNjA5MjAyMTE0MjZaFw0yNjA5MjIwMDU4MjZaMDMxMTAvBgNV BAMTKDIzREVCOTJCQ0U2NEI4OEY0OEY0MDc3OTNGNzFBMkQ1ODM4Nzg3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgW7JXCzeAX57CQJBVC9I2Ujj0 IVIElW3c9nS8U8lKriAdCnWMbGZgSzTsmnzUAGCpJh4sUtsTdbWhp7WL2KUpAyU2 laLegRYdxfPNWYNWLuag8fzm+tema9FSLSJCvW8M6RHH5Jd6LBWu2qusn6QW9UzA Wnay98SomyHZaH361Qd/27WuN4rIBOcvBSqnjpfiwQ5Q0LgczB0g/o/jBLB6Ur8z 8qUcaxFwabiWOVKvnQbYva3IAxRbVerqOSVeuQa+nqjj5yFiYIuH6mffbmpbJyMx AFrxmeF/TQIyGYP7OElAAOkV8lzzQTBPGZyakmFkJa8lp6Lq2XdXWUwDr1NLAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUI965K85kuI9I9Ad5P3Gi1YOHh48wHwYDVR0j BBgwFoAUqu01SLZHyblYBEEbqxlzbyKcWlQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAv QUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9BQUVEMzU0OEI2NDdDOUI5NTgwNDQxMUJBQjE5NzM2 RjIyOUM1QTU0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAvQUFFRDM1NDhCNjQ3QzlCOTU4 MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJmm9WlAU0R5nVYZydeN zdcPTaQ1rOFZbhjOCDO+pkBm14bZqJjIETHTw0fpwgfFSGic+9sIjuYY2qhvjzCw rWRt/X3YfNyGgH47biD3xb6cKEs1a/pXxJcqsPNmqCVToVNjNEoylkyNxYXY0eET NzLcNopkCjaGpBRl27+jpmB775Aat+cVyzUoljnDSQtuPMxQ/lx2Q/BXb6xg35j5 hEJ1K3QGsKIFjiQ/7WaD/7vWLYxk43uu42UWhjadrMlcCQ8rC0bWjjfRjT8UXdtN UkDVmb+ps+Aw7YSqiQxuAoETdOi45R2oTjvRmZYEAUqE/F4JqJQm16V3PPWcLpgB 91k= -----END CERTIFICATE-----Generated at Mon Sep 21 11:41:41 2026 by rpki-client