$ rpki-client -vvvf rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft File: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft (raw, json) Hash identifier: KaRIU9GclB0mYDqxrCxmEmfA6NC+sWC60l1IDcpDi8w= Subject key identifier: 92:A2:6A:66:B9:E2:77:07:4C:2C:9A:6A:AD:74:2B:4C:83:76:AA:22 Authority key identifier: 7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55 Certificate issuer: /CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55 Certificate serial: 56AC14468F5E8870D220AEB74D17064345BFA2A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft Manifest number: B4 Signing time: Mon 21 Sep 2026 05:45:54 +0000 Manifest this update: Mon 21 Sep 2026 05:40:54 +0000 Manifest next update: Tue 22 Sep 2026 05:57:54 +0000 Files and hashes: 1: 7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl (hash: i5I3Zn5cs6egUB6pRwPLLLzP2ROzL06gguMMHg3V5Ww=) 2: 3230322e36362e3138342e302f32332d3234203d3e20313438393936.roa (hash: cgtaS2R5qGGSPzt0Mrg5ICT2U+6ReXnIE6A4ms4mJp0=) 3: 3230322e36362e3138342e302f32332d3234203d3e20313334383233.roa (hash: lH3p+3OX/BiDzRmprhrZQaoUetVeXRdG+n2QK86mZUo=) 4: 323430323a323865303a3a2f33322d3438203d3e2039393233.roa (hash: gHs1ooQ8UXCCXGul6QZXotFYNVwq0J8g9JJdOF3VUFM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ac:14:46:8f:5e:88:70:d2:20:ae:b7:4d:17:06:43:45:bf:a2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F7E2E5D20C748B8BE9FDE4400E023205975FD55 Validity Not Before: Sep 21 05:40:54 2026 GMT Not After : Sep 22 05:57:54 2026 GMT Subject: CN=92A26A66B9E277074C2C9A6AAD742B4C8376AA22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:5f:f4:f9:73:4d:4b:94:af:74:50:85:9b: a5:42:20:52:da:f2:4c:fd:12:a0:24:03:6a:48:d3: 9a:2f:ef:f0:97:d9:8a:b6:47:6d:2a:46:24:16:bf: d9:c4:7f:bc:61:35:c8:88:e6:75:c9:ed:2f:3b:b2: f4:cf:1d:9e:31:d9:d8:58:a1:cb:3f:35:b3:87:02: cc:09:c0:b4:22:df:ef:c0:4d:d2:ff:05:3e:10:65: 65:ff:f0:43:24:d3:4e:7b:6d:b4:8e:37:37:22:0a: 90:f9:46:a9:f2:05:ac:4c:98:84:cb:7c:bd:0a:24: 0a:3f:23:5b:2d:bf:59:d8:07:73:41:42:9f:29:85: b1:b2:33:83:6c:75:2f:9d:ae:f6:eb:94:19:15:3d: 36:bc:39:d4:8e:1c:2f:51:2b:75:eb:26:df:c8:d8: 39:75:93:f2:f8:c8:3d:c1:1b:a8:8d:86:f6:0e:0d: 57:78:2b:dc:4d:b6:4f:ba:33:80:d7:00:73:84:be: 9c:47:25:93:56:b7:bc:67:a6:7f:25:df:96:62:43: 6c:e5:52:76:e4:39:50:11:81:fb:6c:19:a5:a9:81: c3:54:88:ae:7f:79:c2:2e:a2:04:04:51:d9:7c:f7: 50:77:6b:62:9f:d5:ff:b1:11:15:da:7f:6b:63:30: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A2:6A:66:B9:E2:77:07:4C:2C:9A:6A:AD:74:2B:4C:83:76:AA:22 X509v3 Authority Key Identifier: keyid:7F:7E:2E:5D:20:C7:48:B8:BE:9F:DE:44:00:E0:23:20:59:75:FD:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPEN/0/7F7E2E5D20C748B8BE9FDE4400E023205975FD55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a3:01:5f:25:bd:d6:b1:61:b6:61:3d:a8:db:4f:7b:73:95: b6:eb:e7:1d:1b:1e:86:74:9a:80:54:f1:8e:5e:4e:4e:68:7b: 80:00:52:26:54:b7:ef:88:10:29:2e:fb:71:22:fe:7e:b0:94: 65:d6:83:03:c7:ad:95:18:5b:c8:b8:2f:0f:73:07:24:7d:ea: 1d:22:d3:2b:7e:59:9b:28:c3:84:63:44:ed:cf:a4:8e:d7:e4: 16:b0:d4:71:06:66:4c:5c:1e:ae:5a:6c:83:4c:82:a1:1f:09: b8:96:5e:29:13:5a:28:70:76:9d:cb:8e:ad:b5:69:dc:e0:44: e8:74:87:5c:b2:e6:bb:2e:1a:93:aa:52:ae:bb:5f:4b:4a:6e: c7:39:25:f1:d0:2f:fd:67:d2:52:33:c5:b7:06:f9:cc:2b:b7: 8e:ea:67:96:b4:8e:cf:c0:6d:57:fc:08:5a:62:f2:cf:ee:2d: e9:2e:c8:f9:4f:a3:12:12:c1:19:bc:ca:53:b3:27:73:13:d2: e2:58:c2:8a:47:a3:da:e5:e1:be:ca:25:fc:0c:27:4c:e8:96: 50:f2:5b:1c:ef:6e:01:a5:52:35:7d:36:ae:6b:03:2a:c3:56: 27:eb:2b:5e:9e:3e:8e:d3:81:6e:22:8a:cc:55:24:de:94:52: 16:0e:84:7a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUVqwURo9eiHDSIK63TRcGQ0W/oqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y3RTJFNUQyMEM3NDhCOEJFOUZERTQ0MDBFMDIzMjA1 OTc1RkQ1NTAeFw0yNjA5MjEwNTQwNTRaFw0yNjA5MjIwNTU3NTRaMDMxMTAvBgNV BAMTKDkyQTI2QTY2QjlFMjc3MDc0QzJDOUE2QUFENzQyQjRDODM3NkFBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfF/0+XNNS5SvdFCFm6VCIFLa 8kz9EqAkA2pI05ov7/CX2Yq2R20qRiQWv9nEf7xhNciI5nXJ7S87svTPHZ4x2dhY ocs/NbOHAswJwLQi3+/ATdL/BT4QZWX/8EMk0057bbSONzciCpD5RqnyBaxMmITL fL0KJAo/I1stv1nYB3NBQp8phbGyM4NsdS+drvbrlBkVPTa8OdSOHC9RK3XrJt/I 2Dl1k/L4yD3BG6iNhvYODVd4K9xNtk+6M4DXAHOEvpxHJZNWt7xnpn8l35ZiQ2zl UnbkOVARgftsGaWpgcNUiK5/ecIuogQEUdl891B3a2Kf1f+xERXaf2tjMLAZAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUkqJqZrnidwdMLJpqrXQrTIN2qiIwHwYDVR0j BBgwFoAUf34uXSDHSLi+n95EAOAjIFl1/VUwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTi8w LzdGN0UyRTVEMjBDNzQ4QjhCRTlGREU0NDAwRTAyMzIwNTk3NUZENTUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvN0Y3RTJFNUQyMEM3NDhCOEJFOUZERTQ0MDBFMDIz MjA1OTc1RkQ1NS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL09QRU4vMC83RjdFMkU1RDIwQzc0OEI4 QkU5RkRFNDQwMEUwMjMyMDU5NzVGRDU1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaMBXyW91rFhtmE9 qNtPe3OVtuvnHRsehnSagFTxjl5OTmh7gABSJlS374gQKS77cSL+frCUZdaDA8et lRhbyLgvD3MHJH3qHSLTK35ZmyjDhGNE7c+kjtfkFrDUcQZmTFwerlpsg0yCoR8J uJZeKRNaKHB2ncuOrbVp3OBE6HSHXLLmuy4ak6pSrrtfS0puxzkl8dAv/WfSUjPF twb5zCu3jupnlrSOz8BtV/wIWmLyz+4t6S7I+U+jEhLBGbzKU7MncxPS4ljCikej 2uXhvsol/AwnTOiWUPJbHO9uAaVSNX02rmsDKsNWJ+srXp4+jtOBbiKKzFUk3pRS Fg6Eeg== -----END CERTIFICATE-----Generated at Mon Sep 21 14:31:28 2026 by rpki-client