$ rpki-client -vvvf rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft File: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft (raw, json) Hash identifier: ohPXW5K6YmXRy7tnb51zcFg/G+RJIM9cexmijlEQ5f8= Subject key identifier: 61:CC:09:7C:EE:F8:78:76:F8:0B:3F:B3:6A:F4:EB:7B:C5:23:34:D7 Authority key identifier: 2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22 Certificate issuer: /CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22 Certificate serial: 7160226EFF7C9C11D0962FA9652ADE99BD334C23 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft Manifest number: B3 Signing time: Mon 21 Sep 2026 05:00:50 +0000 Manifest this update: Mon 21 Sep 2026 04:55:50 +0000 Manifest next update: Tue 22 Sep 2026 05:56:50 +0000 Files and hashes: 1: 3130332e3134302e3233332e302f32342d3234203d3e203332323432.roa (hash: dWqlZ57qGRFx6N79EQLtYosKEY+TDhYs9JMAewBJPsQ=) 2: 3130332e3134302e3233322e302f32342d3234203d3e203332323432.roa (hash: q7dF1jX4ROfIjFDlO5sVW9hRX9k2oXkr8fjwFlVtFmE=) 3: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl (hash: Yq6r95GH+YGQUSyJ56XLF3GWJdo1bTDpoLTH9kBsXXg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:60:22:6e:ff:7c:9c:11:d0:96:2f:a9:65:2a:de:99:bd:33:4c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22 Validity Not Before: Sep 21 04:55:50 2026 GMT Not After : Sep 22 05:56:50 2026 GMT Subject: CN=61CC097CEEF87876F80B3FB36AF4EB7BC52334D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4f:82:55:f5:59:82:32:40:aa:73:d3:09:e0: 69:bb:83:25:60:ca:1f:44:ae:43:30:2e:9e:97:eb: fd:be:c6:bd:08:4a:08:15:ae:ef:d3:1d:f6:14:81: d7:a1:2d:93:bc:cf:45:dc:45:21:65:23:7c:7d:09: 22:e9:1c:6a:ab:27:c1:0b:c6:cb:a2:3b:b6:8b:b9: f8:ce:8d:84:63:0e:25:22:32:be:84:49:1d:3b:f4: f0:5f:52:1b:57:09:8c:98:46:21:85:a5:45:2b:62: 50:df:1d:40:73:23:14:24:84:0b:e9:0f:ec:9d:e9: 37:d6:11:5d:2d:98:c9:2d:2b:5c:f8:28:78:fc:8e: 3b:dd:51:0e:60:7a:00:0b:34:c1:0e:66:79:76:37: 65:db:1b:e6:b3:df:9e:08:a3:5b:fc:96:ce:8a:89: 79:0a:65:fe:21:1d:9b:b8:bd:d5:a8:ea:72:72:6c: 19:6e:ec:8c:93:fe:10:88:50:7a:93:0b:86:87:96: bf:6b:ea:0b:6d:56:b6:6c:b1:09:e0:43:18:d4:18: 4a:ac:86:6c:a8:ce:e5:a3:80:b9:60:ac:ed:6e:c8: 07:2c:29:60:ca:5f:29:9f:36:0e:50:6f:c1:b9:f2: 64:47:1c:5b:b9:b3:9f:0e:ff:a5:86:5a:74:cf:3f: 82:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CC:09:7C:EE:F8:78:76:F8:0B:3F:B3:6A:F4:EB:7B:C5:23:34:D7 X509v3 Authority Key Identifier: keyid:2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2b:b1:3b:9e:56:2b:7d:0d:c4:2f:90:ef:99:f1:c9:b5:86: a1:95:75:bf:9a:ba:73:a3:49:1c:c0:69:f8:ce:45:6d:6b:0c: f9:8e:58:c5:c7:1d:c8:af:74:29:79:85:2c:0f:7a:7f:76:26: e2:f1:07:08:c8:9d:af:3d:6a:ae:e1:cb:64:1a:0a:cc:d5:18: 14:91:13:a0:09:98:9a:da:d6:c6:62:e0:b7:e9:bd:fc:73:a4: 18:d9:29:43:54:1f:9f:5e:3b:dc:cb:e4:96:73:d7:46:b1:0b: b4:81:f2:57:55:ed:63:bb:38:be:07:0a:88:d7:26:26:f5:1f: dd:a7:4f:71:bf:6b:34:d4:98:70:3d:42:f1:df:3e:c7:db:fa: 11:dd:67:92:bd:ff:dd:a3:83:17:ef:61:8f:6c:7c:27:b5:54: 91:54:1c:c7:2e:1c:4d:df:58:d2:80:44:d0:08:f2:88:39:62: 21:68:87:de:dc:43:5b:27:78:7f:e8:41:60:85:5a:4d:4d:42: e5:0b:d8:d5:87:5b:4f:fe:f3:02:b4:ad:cb:a6:17:db:d0:34: be:0f:79:d5:ff:4f:0b:0d:72:1c:f4:8c:d2:6b:63:a0:0a:43: 91:11:6a:6a:7e:fa:ce:dd:06:b7:c4:52:a1:2d:4f:26:51:40: 7d:87:25:dc -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUcWAibv98nBHQli+pZSremb0zTCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OEZCMEFENkNCNENGREY3MzY0NzkxRDE0MzVBRDQ4 QzY3NUQyMjAeFw0yNjA5MjEwNDU1NTBaFw0yNjA5MjIwNTU2NTBaMDMxMTAvBgNV BAMTKDYxQ0MwOTdDRUVGODc4NzZGODBCM0ZCMzZBRjRFQjdCQzUyMzM0RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChT4JV9VmCMkCqc9MJ4Gm7gyVg yh9ErkMwLp6X6/2+xr0ISggVru/THfYUgdehLZO8z0XcRSFlI3x9CSLpHGqrJ8EL xsuiO7aLufjOjYRjDiUiMr6ESR079PBfUhtXCYyYRiGFpUUrYlDfHUBzIxQkhAvp D+yd6TfWEV0tmMktK1z4KHj8jjvdUQ5gegALNMEOZnl2N2XbG+az354Io1v8ls6K iXkKZf4hHZu4vdWo6nJybBlu7IyT/hCIUHqTC4aHlr9r6gttVrZssQngQxjUGEqs hmyozuWjgLlgrO1uyAcsKWDKXymfNg5Qb8G58mRHHFu5s58O/6WGWnTPP4IzAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUYcwJfO74eHb4Cz+zavTre8UjNNcwHwYDVR0j BBgwFoAULVj7CtbLTP33NkeR0UNa1IxnXSIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDTC8w LzJENThGQjBBRDZDQjRDRkRGNzM2NDc5MUQxNDM1QUQ0OEM2NzVEMjIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMkQ1OEZCMEFENkNCNENGREY3MzY0NzkxRDE0MzVB RDQ4QzY3NUQyMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0wvMC8yRDU4RkIwQUQ2Q0I0Q0ZE RjczNjQ3OTFEMTQzNUFENDhDNjc1RDIyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciuxO55WK30NxC+Q 75nxybWGoZV1v5q6c6NJHMBp+M5FbWsM+Y5YxccdyK90KXmFLA96f3Ym4vEHCMid rz1qruHLZBoKzNUYFJEToAmYmtrWxmLgt+m9/HOkGNkpQ1Qfn1473MvklnPXRrEL tIHyV1XtY7s4vgcKiNcmJvUf3adPcb9rNNSYcD1C8d8+x9v6Ed1nkr3/3aODF+9h j2x8J7VUkVQcxy4cTd9Y0oBE0AjyiDliIWiH3txDWyd4f+hBYIVaTU1C5QvY1Ydb T/7zArSty6YX29A0vg951f9PCw1yHPSM0mtjoApDkRFqan76zt0Gt8RSoS1PJlFA fYcl3A== -----END CERTIFICATE-----Generated at Mon Sep 21 12:23:34 2026 by rpki-client