$ rpki-client -vvvf rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft File: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft (raw, json) Hash identifier: w+HWtCcNCtOIWRWVZOugIdra4LFB2I5dfd57VNcN7lc= Subject key identifier: 4B:39:D4:9B:C7:20:95:1B:6D:D1:30:87:F0:C6:02:52:55:7B:1C:31 Authority key identifier: 5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E Certificate issuer: /CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Certificate serial: 735F9FF88741C81BAF5F4D38CE4EC220E6862EBB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft Manifest number: B9 Signing time: Wed 23 Sep 2026 05:46:44 +0000 Manifest this update: Wed 23 Sep 2026 05:41:44 +0000 Manifest next update: Thu 24 Sep 2026 05:49:44 +0000 Files and hashes: 1: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl (hash: sjSAiz3+FTy/HS0boUDZMXY/M5Z2DnuiZtt25P9TLrM=) 2: 3130332e3133302e34382e302f32322d3234203d3e2037343832.roa (hash: 1XWO79v70d0DECH7Xj/kPutEjOsPSVEabfarX+KunFQ=) 3: 3130332e3133302e34382e302f32322d3234203d3e2039393232.roa (hash: aCIxecjNLFEVzEOiCgmZ0K9yJGY1pe87ewnv5AFzkXs=) 4: 323430333a623334303a3a2f33322d3332203d3e2037343832.roa (hash: hiAMshIFeOvfI56eDRx+E/hRaz9fkWvi1Lc3t0AuAEM=) 5: 323430333a623334303a3a2f33322d3332203d3e2039393232.roa (hash: gstqBh9leADrly9mEk8JDvYH97tC5t4YGpfgybnlAak=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5f:9f:f8:87:41:c8:1b:af:5f:4d:38:ce:4e:c2:20:e6:86:2e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Validity Not Before: Sep 23 05:41:44 2026 GMT Not After : Sep 24 05:49:44 2026 GMT Subject: CN=4B39D49BC720951B6DD13087F0C60252557B1C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a3:94:08:09:63:1d:f4:6e:1f:8f:c0:63:31: 89:33:75:a2:91:a5:fa:3d:98:04:1f:2b:27:ea:aa: b3:01:28:d2:9c:39:db:cf:b7:eb:48:35:4a:a8:e9: 8f:53:8a:39:22:a4:10:29:fd:9a:c2:eb:7c:81:e6: 81:0e:e3:f8:1c:5e:6a:8b:97:ff:e8:84:d7:d1:d7: f8:0f:a6:9e:72:b2:c1:ed:e4:bb:0d:3b:2a:a1:f4: 7c:c2:2b:11:95:44:82:9f:f3:87:45:55:a2:87:e8: d4:0c:0d:2e:89:d1:c7:bf:48:43:d5:38:06:55:bd: d8:d0:8b:e3:d2:78:08:0f:b3:2e:73:ab:c4:15:b6: 53:3d:5c:cb:da:27:17:90:fd:58:16:35:43:8b:63: 07:45:8e:ea:25:69:67:a7:af:01:94:12:7e:21:bc: 81:59:01:42:a4:d5:0c:f2:47:3b:d7:9d:a2:33:ce: 01:6c:ff:f4:56:b9:e4:9b:0f:de:4f:58:ad:2d:8e: ac:84:f6:99:7e:3f:d2:68:a3:55:67:36:1d:db:83: 64:68:74:be:47:55:4a:8b:31:a2:1d:dd:c3:15:3a: 78:f4:8d:65:a0:b7:f8:90:62:7d:0e:1a:23:96:cc: a5:0e:3e:a3:87:5e:43:db:8d:42:02:c3:13:2d:a0: c2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:39:D4:9B:C7:20:95:1B:6D:D1:30:87:F0:C6:02:52:55:7B:1C:31 X509v3 Authority Key Identifier: keyid:5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7b:ad:15:c1:62:28:a2:f2:0d:cf:e4:42:8c:2f:31:f1:26: 7d:87:f5:7e:7e:48:a2:30:68:bd:50:c6:99:d8:54:4d:17:cc: b3:15:c8:e8:25:7d:23:a3:6b:30:9f:ae:09:a1:69:35:93:86: c2:bf:e9:c3:c3:6e:02:ff:cb:1c:9a:af:8a:31:d9:74:d7:78: 4e:0c:8a:59:a9:94:e8:ab:2d:6f:6c:cb:99:8c:d9:8e:3a:74: 02:01:50:bb:01:36:8e:46:69:bb:96:25:4c:2c:08:7a:9c:e2: 9d:04:e3:af:23:2c:57:25:56:34:b4:02:ba:4d:6e:66:ae:88: 0f:03:00:6a:75:60:ed:d1:f6:2e:42:d2:8d:06:df:10:47:6b: 8c:60:5e:e9:c3:e6:de:d1:2f:5e:1a:64:77:94:80:be:19:7b: 23:29:6c:f3:08:df:89:94:81:1c:ba:29:16:ea:30:02:b6:32: 9a:44:05:7f:fe:24:47:4a:c4:a3:4e:4d:db:a3:c2:6e:be:c3: 85:ff:41:72:8d:c3:35:50:1c:4d:b7:cb:49:ef:a2:89:2a:49: fe:43:62:94:c1:f8:1f:4a:59:02:b4:0c:ea:70:f8:9c:47:d0: 6c:e6:17:af:fa:fb:81:89:0a:3d:6a:43:cc:ed:ef:4c:4a:17: 68:f0:4c:c5 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUc1+f+IdByBuvX004zk7CIOaGLrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVD NTg4QkE5RTAeFw0yNjA5MjMwNTQxNDRaFw0yNjA5MjQwNTQ5NDRaMDMxMTAvBgNV BAMTKDRCMzlENDlCQzcyMDk1MUI2REQxMzA4N0YwQzYwMjUyNTU3QjFDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUo5QICWMd9G4fj8BjMYkzdaKR pfo9mAQfKyfqqrMBKNKcOdvPt+tINUqo6Y9TijkipBAp/ZrC63yB5oEO4/gcXmqL l//ohNfR1/gPpp5yssHt5LsNOyqh9HzCKxGVRIKf84dFVaKH6NQMDS6J0ce/SEPV OAZVvdjQi+PSeAgPsy5zq8QVtlM9XMvaJxeQ/VgWNUOLYwdFjuolaWenrwGUEn4h vIFZAUKk1QzyRzvXnaIzzgFs//RWueSbD95PWK0tjqyE9pl+P9Joo1VnNh3bg2Ro dL5HVUqLMaId3cMVOnj0jWWgt/iQYn0OGiOWzKUOPqOHXkPbjUICwxMtoMJVAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUSznUm8cglRtt0TCH8MYCUlV7HDEwHwYDVR0j BBgwFoAUWivuJDlbNvT/qVdT9nMVFcWIup4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVU LzAvNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS81QTJCRUUyNDM5NUIzNkY0RkZBOTU3NTNGNjcz MTUxNUM1ODhCQTlFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVULzAvNUEyQkVFMjQzOTVC MzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF97rRXBYiii 8g3P5EKMLzHxJn2H9X5+SKIwaL1QxpnYVE0XzLMVyOglfSOjazCfrgmhaTWThsK/ 6cPDbgL/yxyar4ox2XTXeE4MilmplOirLW9sy5mM2Y46dAIBULsBNo5GabuWJUws CHqc4p0E468jLFclVjS0ArpNbmauiA8DAGp1YO3R9i5C0o0G3xBHa4xgXunD5t7R L14aZHeUgL4ZeyMpbPMI34mUgRy6KRbqMAK2MppEBX/+JEdKxKNOTdujwm6+w4X/ QXKNwzVQHE23y0nvookqSf5DYpTB+B9KWQK0DOpw+JxH0GzmF6/6+4GJCj1qQ8zt 70xKF2jwTMU= -----END CERTIFICATE-----Generated at Wed Sep 23 07:13:05 2026 by rpki-client