$ rpki-client -vvvf rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft File: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft (raw, json) Hash identifier: DJ8HXnSedyZRkBFmHocCYZLXMWbHS50AWFhYyeNRSbc= Subject key identifier: 5B:02:00:3A:65:C1:F3:82:6A:E1:21:FD:B2:ED:FF:BC:BC:37:68:B7 Authority key identifier: 5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E Certificate issuer: /CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Certificate serial: 28B482FC0CC0B6FA2E352EDD54584E27063F4AE9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft Manifest number: 0100 Signing time: Sun 15 Nov 2026 13:46:39 +0000 Manifest this update: Sun 15 Nov 2026 13:41:39 +0000 Manifest next update: Mon 16 Nov 2026 17:40:39 +0000 Files and hashes: 1: 3130332e3133302e34382e302f32322d3234203d3e2037343832.roa (hash: 1XWO79v70d0DECH7Xj/kPutEjOsPSVEabfarX+KunFQ=) 2: 3130332e3133302e34382e302f32322d3234203d3e2039393232.roa (hash: aCIxecjNLFEVzEOiCgmZ0K9yJGY1pe87ewnv5AFzkXs=) 3: 323430333a623334303a3a2f33322d3332203d3e2037343832.roa (hash: hiAMshIFeOvfI56eDRx+E/hRaz9fkWvi1Lc3t0AuAEM=) 4: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl (hash: GL1lCEymUyWLmPHoQc9sn4FhSaPAT3qekeF4bgQ2SBA=) 5: 323430333a623334303a3a2f33322d3332203d3e2039393232.roa (hash: gstqBh9leADrly9mEk8JDvYH97tC5t4YGpfgybnlAak=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b4:82:fc:0c:c0:b6:fa:2e:35:2e:dd:54:58:4e:27:06:3f:4a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Validity Not Before: Nov 15 13:41:39 2026 GMT Not After : Nov 16 17:40:39 2026 GMT Subject: CN=5B02003A65C1F3826AE121FDB2EDFFBCBC3768B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:bf:a6:77:dc:e0:72:db:ce:71:41:e5:f8: d6:9b:1a:24:40:5b:5c:82:5f:76:fc:16:2b:08:c7: 75:62:33:81:69:4b:30:fb:09:37:0f:d6:6e:1a:10: 53:d3:a9:24:47:41:6d:2f:e5:c3:a5:8a:b4:4a:f5: f4:c6:07:12:bd:bb:4c:d9:ac:5f:0e:64:f5:09:47: e1:d9:06:fd:b4:1f:53:7e:97:80:2c:67:ba:ce:bd: 3f:79:1c:47:98:4c:53:67:a5:69:8d:28:78:62:36: c5:24:3f:a9:51:a4:9a:68:c0:6c:59:ae:33:00:32: 8f:24:8d:29:8a:c2:dd:c3:5b:42:d2:f8:6d:8a:57: 90:a8:b0:74:24:99:30:cc:29:cc:f4:35:6c:a9:24: 4a:86:b2:0a:52:61:5d:8e:1f:b3:22:07:04:53:e7: b5:28:c7:83:41:a1:f9:e6:f1:c5:69:6f:33:99:c5: 3d:5a:27:cb:81:9d:69:66:08:26:c0:c6:42:b6:47: 16:35:cb:73:4b:93:27:a2:bf:ea:dc:e2:91:7d:7d: 46:c0:ed:11:d3:20:03:95:4c:fb:bb:f3:6c:c1:56: 7f:75:f6:e9:8e:65:e8:32:63:b2:d4:8e:79:fa:5e: 87:24:2b:8e:50:47:9f:30:a4:af:db:a3:6f:55:86: 24:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:02:00:3A:65:C1:F3:82:6A:E1:21:FD:B2:ED:FF:BC:BC:37:68:B7 X509v3 Authority Key Identifier: keyid:5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:b1:71:f6:17:a1:10:10:4a:2e:f0:02:4c:2e:e3:61:f2:6a: f9:0f:ed:42:af:14:0e:9b:c1:89:be:77:33:09:25:6c:8b:4f: 73:da:e4:28:bd:80:a7:37:b7:c2:63:f5:63:c5:b2:5e:7c:14: 16:34:b2:df:c9:3c:7e:f9:33:f5:cb:b7:98:eb:fa:72:db:7e: bc:8c:f9:15:22:1b:05:1c:ed:d1:65:63:fe:04:6e:2b:aa:88: 05:88:17:a1:9f:85:63:39:7e:82:f1:43:f7:17:89:af:ff:c8: 97:b6:86:b9:43:bb:0f:f1:97:22:a9:04:22:0b:df:fa:32:cd: b7:f1:3c:a2:cc:24:71:07:47:f2:f1:a6:0c:00:61:a4:aa:fa: e3:e0:5a:96:73:54:15:11:44:2f:c8:f6:83:57:49:3c:64:5c: 2d:0c:3f:dc:58:fb:ed:46:d3:c5:90:50:29:ec:0f:06:61:de: 58:29:5b:a8:6e:f5:49:94:1a:b7:1a:5f:d8:78:c7:78:43:23: 5f:08:24:0c:f2:6f:ae:ec:31:cd:1e:9f:35:47:e0:df:b7:86: 08:60:a6:99:c4:7b:75:98:de:03:11:ee:3b:a0:70:df:b9:b9: 6e:c5:be:a6:f5:de:6b:89:3e:41:30:2c:49:0c:45:29:14:26: f5:fc:9c:ce -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUKLSC/AzAtvouNS7dVFhOJwY/SukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVD NTg4QkE5RTAeFw0yNjExMTUxMzQxMzlaFw0yNjExMTYxNzQwMzlaMDMxMTAvBgNV BAMTKDVCMDIwMDNBNjVDMUYzODI2QUUxMjFGREIyRURGRkJDQkMzNzY4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xL+md9zgctvOcUHl+NabGiRA W1yCX3b8FisIx3ViM4FpSzD7CTcP1m4aEFPTqSRHQW0v5cOlirRK9fTGBxK9u0zZ rF8OZPUJR+HZBv20H1N+l4AsZ7rOvT95HEeYTFNnpWmNKHhiNsUkP6lRpJpowGxZ rjMAMo8kjSmKwt3DW0LS+G2KV5CosHQkmTDMKcz0NWypJEqGsgpSYV2OH7MiBwRT 57Uox4NBofnm8cVpbzOZxT1aJ8uBnWlmCCbAxkK2RxY1y3NLkyeiv+rc4pF9fUbA 7RHTIAOVTPu782zBVn919umOZegyY7LUjnn6XockK45QR58wpK/bo29VhiSXAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUWwIAOmXB84Jq4SH9su3/vLw3aLcwHwYDVR0j BBgwFoAUWivuJDlbNvT/qVdT9nMVFcWIup4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVU LzAvNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS81QTJCRUUyNDM5NUIzNkY0RkZBOTU3NTNGNjcz MTUxNUM1ODhCQTlFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVULzAvNUEyQkVFMjQzOTVC MzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALyxcfYXoRAQ Si7wAkwu42HyavkP7UKvFA6bwYm+dzMJJWyLT3Pa5Ci9gKc3t8Jj9WPFsl58FBY0 st/JPH75M/XLt5jr+nLbfryM+RUiGwUc7dFlY/4EbiuqiAWIF6GfhWM5foLxQ/cX ia//yJe2hrlDuw/xlyKpBCIL3/oyzbfxPKLMJHEHR/LxpgwAYaSq+uPgWpZzVBUR RC/I9oNXSTxkXC0MP9xY++1G08WQUCnsDwZh3lgpW6hu9UmUGrcaX9h4x3hDI18I JAzyb67sMc0enzVH4N+3hghgppnEe3WY3gMR7jugcN+5uW7Fvqb13muJPkEwLEkM RSkUJvX8nM4= -----END CERTIFICATE-----Generated at Sun Nov 15 16:35:56 2026 by rpki-client