$ rpki-client -vvvf rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft File: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft (raw, json) Hash identifier: TxhHngS+7RJsEyFe8LuIBiezFLTIk9FSlxc2+0u2rb4= Subject key identifier: 55:88:F4:7D:5E:E1:4A:54:94:D8:E5:43:3D:DB:A9:3C:0B:99:D9:91 Authority key identifier: 42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 Certificate issuer: /CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Certificate serial: 65A4609058A018CD74C2C7E60BC0759F4FD23EAC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft Manifest number: B6 Signing time: Tue 22 Sep 2026 21:25:44 +0000 Manifest this update: Tue 22 Sep 2026 21:20:44 +0000 Manifest next update: Wed 23 Sep 2026 22:50:44 +0000 Files and hashes: 1: 3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa (hash: U1mFwcarBwcENEkbti0C1yVEmBtDzRAAAqYz8mcIUOg=) 2: 323430353a653463303a3a2f33322d3634203d3e20313331363737.roa (hash: 81X32lIDsqpLyEd5Xpy3ESJVHUbt39R1tegiSMqE1PY=) 3: 323430353a653463303a3a2f33322d3634203d3e20313331363734.roa (hash: R5XmHRGNRbL/JzVgicSjGM6c3avdhtCi9gHhhibn8Iw=) 4: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl (hash: G2jUHRWh4VndMrALPz2KG5fCdQSKyuwqjNZ13r9AnTQ=) 5: 3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa (hash: GSRooEfHneMScmMay9/suUawwfISd9M2Zp/oSqWxd5c=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a4:60:90:58:a0:18:cd:74:c2:c7:e6:0b:c0:75:9f:4f:d2:3e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Validity Not Before: Sep 22 21:20:44 2026 GMT Not After : Sep 23 22:50:44 2026 GMT Subject: CN=5588F47D5EE14A5494D8E5433DDBA93C0B99D991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:27:55:a0:28:4c:39:6e:d9:c3:42:c9:02: 3f:79:1c:e9:64:79:69:b3:b1:c9:bf:a5:fc:66:f1: 4c:30:78:53:da:39:76:26:e9:1e:ec:2e:04:36:55: 16:34:5e:70:28:4e:26:04:f3:05:40:6d:2d:77:d6: fc:56:ca:a6:0c:44:82:6c:0e:b5:bd:c8:b8:ec:f0: e8:d3:46:99:bd:6b:e7:24:9e:bc:d5:80:b0:0d:c9: 77:97:39:c1:f9:8f:54:d2:b6:fc:3b:4d:b6:b8:fc: 9d:4a:99:b7:9c:78:b4:4c:d8:40:6d:08:ec:6a:a7: 9e:87:48:ed:c8:9d:7f:68:4d:14:3f:6e:33:66:35: 7a:f1:f8:12:5b:da:50:f9:5f:4f:b6:f1:5e:f1:31: 80:46:f1:c1:e1:56:a0:8f:e7:a2:6e:6b:00:d2:84: 4f:5d:24:ce:d6:02:0b:93:67:21:1d:92:5c:c8:97: 4e:27:2f:d9:fa:b8:bc:42:c7:96:4b:9d:30:9e:4c: 59:8c:b7:6a:2e:f5:9d:41:63:7b:66:42:e6:f4:dd: 88:82:a0:03:1f:e1:e6:42:e3:77:e6:d6:7a:de:60: 8c:b4:81:ed:1c:cc:33:8d:24:70:42:17:7c:cf:71: dd:49:13:c7:b9:2d:1b:b3:87:e6:93:c4:56:e3:a9: 14:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:88:F4:7D:5E:E1:4A:54:94:D8:E5:43:3D:DB:A9:3C:0B:99:D9:91 X509v3 Authority Key Identifier: keyid:42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:82:6f:99:ef:51:e6:35:ae:38:82:1c:c4:7d:f6:91:4e:20: 42:0f:44:63:bf:25:3f:17:31:3a:1e:e8:fe:1f:a8:09:ba:ca: f5:28:dd:62:a4:67:95:e2:59:ac:4e:f5:ef:44:cd:d7:a4:8d: 78:eb:0c:50:f5:26:18:cd:6e:c0:69:3e:b8:97:73:6e:a0:fb: 2a:dc:4f:cf:2c:37:22:88:21:1a:98:33:0d:f7:23:32:f7:a7: 63:69:a8:bd:c2:4b:b4:f5:a9:e3:64:94:c8:4e:80:8a:59:b3: d7:5c:38:5d:0e:df:78:18:54:e0:22:77:fd:70:10:90:39:26: 16:76:fe:96:d5:d4:80:c5:71:0e:fc:52:35:26:25:09:29:d8: 66:9a:c9:f5:e8:77:82:75:21:96:c8:db:fd:43:8c:fa:19:64: de:72:94:7b:ce:d5:e5:78:15:0e:7c:c9:48:e0:7e:19:58:33: f2:10:ef:bd:4a:4f:12:5f:86:e4:35:59:b3:58:29:e6:43:fa: 38:98:43:af:6e:19:b8:f4:25:63:72:f3:90:43:ce:c0:75:b5: 77:a5:ee:09:db:1b:d5:82:0e:bd:72:25:ae:2f:62:49:84:df: cf:a3:54:7f:ff:0d:06:95:90:c9:24:ae:cc:91:e9:2b:30:b6: d0:7e:22:f8 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUZaRgkFigGM10wsfmC8B1n0/SPqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1RTA4REVB ODYyMDE2MjAeFw0yNjA5MjIyMTIwNDRaFw0yNjA5MjMyMjUwNDRaMDMxMTAvBgNV BAMTKDU1ODhGNDdENUVFMTRBNTQ5NEQ4RTU0MzNEREJBOTNDMEI5OUQ5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/CdVoChMOW7Zw0LJAj95HOlk eWmzscm/pfxm8UwweFPaOXYm6R7sLgQ2VRY0XnAoTiYE8wVAbS131vxWyqYMRIJs DrW9yLjs8OjTRpm9a+cknrzVgLANyXeXOcH5j1TStvw7Tba4/J1KmbeceLRM2EBt COxqp56HSO3InX9oTRQ/bjNmNXrx+BJb2lD5X0+28V7xMYBG8cHhVqCP56JuawDS hE9dJM7WAguTZyEdklzIl04nL9n6uLxCx5ZLnTCeTFmMt2ou9Z1BY3tmQub03YiC oAMf4eZC43fm1nreYIy0ge0czDONJHBCF3zPcd1JE8e5LRuzh+aTxFbjqRQzAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUVYj0fV7hSlSU2OVDPdupPAuZ2ZEwHwYDVR0j BBgwFoAUQsf3jp/aALnKPi0d314I3qhiAWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTkZP Ui8wLzQyQzdGNzhFOUZEQTAwQjlDQTNFMkQxRERGNUUwOERFQTg2MjAxNjIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1 RTA4REVBODYyMDE2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL09QRU5GT1IvMC80MkM3Rjc4RTlG REEwMEI5Q0EzRTJEMURERjVFMDhERUE4NjIwMTYyLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoJvme9R 5jWuOIIcxH32kU4gQg9EY78lPxcxOh7o/h+oCbrK9SjdYqRnleJZrE7170TN16SN eOsMUPUmGM1uwGk+uJdzbqD7KtxPzyw3IoghGpgzDfcjMvenY2movcJLtPWp42SU yE6Ailmz11w4XQ7feBhU4CJ3/XAQkDkmFnb+ltXUgMVxDvxSNSYlCSnYZprJ9eh3 gnUhlsjb/UOM+hlk3nKUe87V5XgVDnzJSOB+GVgz8hDvvUpPEl+G5DVZs1gp5kP6 OJhDr24ZuPQlY3LzkEPOwHW1d6XuCdsb1YIOvXIlri9iSYTfz6NUf/8NBpWQySSu zJHpKzC20H4i+A== -----END CERTIFICATE-----Generated at Wed Sep 23 01:14:04 2026 by rpki-client