$ rpki-client -vvf rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft File: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft (raw, json) Hash identifier: SDE0n/9Tt6m51Cr8YyXFCoepr/v7voh/GpNMJTwbIDM= Subject key identifier: BE:EA:45:1E:4A:39:D3:2D:76:6A:0B:B5:0A:3A:60:EF:45:E8:02:6A Authority key identifier: 85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 Certificate issuer: /CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Certificate serial: 404EBC15D6D9759133BC2645B89F73C7135C8F65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft Manifest number: 30 Signing time: Fri 12 Jun 2026 13:31:49 +0000 Manifest this update: Fri 12 Jun 2026 13:26:49 +0000 Manifest next update: Sat 13 Jun 2026 15:39:49 +0000 Files and hashes: 1: 3130332e3233342e38302e302f32322d3234203d3e203137373130.roa (hash: uqLuHrrFZUmLWpdnoJCaLRe1oXTuRusUvNya24FB8bg=) 2: 36312e35372e3232342e302f32302d3234203d3e203137373130.roa (hash: X08v+g23C1Fx8BQtKNgspF5UjPkGFKh01lY2BRa8ypo=) 3: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl (hash: kEMKszdtJLLI8EF+p0dPXgcap+y519QuQ7AwJhbTcl8=) 4: 3130332e3233342e38312e302f32342d3234203d3e203137373130.roa (hash: Zvu3k5iDBaX9iOQpea8Ybb+zcrWBht3qRGl2nLlRl/o=) 5: 3135302e3130372e36342e302f32322d3234203d3e203137373130.roa (hash: n+v5o9SBdWVqA5qvRZf6BeSCSFLkZj6roCOPAhBcFqM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 15:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4e:bc:15:d6:d9:75:91:33:bc:26:45:b8:9f:73:c7:13:5c:8f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Validity Not Before: Jun 12 13:26:49 2026 GMT Not After : Jun 13 15:39:49 2026 GMT Subject: CN=BEEA451E4A39D32D766A0BB50A3A60EF45E8026A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:00:2f:58:52:dc:79:9b:6a:e7:a6:e5:fc: c1:07:0d:02:a0:11:ff:c1:a0:af:28:cf:7d:72:6a: 9e:b7:70:cf:94:b6:f9:db:e2:95:b9:ee:e9:03:be: c2:97:43:bd:13:00:b9:d4:b2:90:a3:82:97:5c:55: 6b:cf:0e:3e:bc:cb:f4:85:0d:b8:06:6b:17:50:e1: 9f:72:2b:95:18:f7:d5:4f:59:9e:f6:bf:8f:a1:90: 9d:8d:9a:35:f5:c9:a8:79:b3:c2:dd:c7:bb:eb:6e: d1:64:8c:97:ad:54:8e:52:a9:b8:b8:68:44:43:3f: e2:d1:46:19:4d:f0:2c:f2:fe:3f:25:56:79:0c:f8: 27:95:e7:da:31:23:4c:87:d3:84:d3:90:af:4c:be: 56:21:45:42:84:5b:12:4a:a4:35:0f:3e:58:9d:5c: a8:90:46:bd:b1:1e:c3:21:e7:41:ed:c0:ad:8f:d4: f2:c6:c1:a7:9e:70:1f:84:d2:67:d7:f9:c3:3c:8d: aa:eb:2e:28:b6:9d:96:66:be:5f:c0:b7:7a:e3:2a: 0b:48:ca:14:35:ec:45:c0:26:60:2c:4c:c6:c7:8d: f9:cb:d2:e7:44:c4:c8:27:16:8d:f6:91:e7:8c:4f: d7:a0:da:e4:34:77:cd:9c:c4:2d:d3:92:33:4d:4c: 96:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EA:45:1E:4A:39:D3:2D:76:6A:0B:B5:0A:3A:60:EF:45:E8:02:6A X509v3 Authority Key Identifier: keyid:85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:54:f3:02:6b:47:32:39:20:28:7c:83:76:6a:5e:0a:f4:68: f7:81:27:9f:86:58:72:09:a0:99:2a:4d:bd:25:ea:69:e5:c7: 17:14:df:62:41:1c:67:99:90:ee:7c:90:62:c7:a0:c3:19:75: c5:22:bb:ee:55:29:98:75:3f:ef:d7:32:4d:93:82:20:c2:9b: 77:30:7c:7a:3b:e2:58:c0:09:70:ff:72:c2:41:b2:2a:07:2e: 5e:73:d9:55:8a:87:58:4e:76:f7:ba:a4:bd:d1:c6:85:35:69: 8c:b3:a4:e8:ae:a9:cf:1d:36:db:27:c7:18:e9:fc:11:65:8a: fc:5e:1d:cb:fc:e7:05:48:7f:fe:c2:1f:3b:7e:50:19:98:1c: 53:d5:f9:d3:bf:ed:0a:d8:b5:ed:93:e7:b6:1e:fd:da:fb:f6: 6b:2c:91:ea:2a:e5:a8:1a:bf:c1:b3:9b:19:96:86:cf:48:be: 43:06:d8:fd:e2:4a:07:c2:15:3d:aa:10:fd:50:3f:74:65:76: a1:06:a4:06:90:e0:63:a3:a7:af:ea:43:d2:26:35:c0:d7:2c: c6:50:75:72:d8:02:51:ac:40:10:b6:be:b2:07:65:ff:2c:52: 09:9a:1e:c6:5e:97:f1:51:83:63:46:0e:4c:cd:66:3c:e7:3b: ec:dc:b1:c7 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUQE68FdbZdZEzvCZFuJ9zxxNcj2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAz RDk0NTU4NTAeFw0yNjA2MTIxMzI2NDlaFw0yNjA2MTMxNTM5NDlaMDMxMTAvBgNV BAMTKEJFRUE0NTFFNEEzOUQzMkQ3NjZBMEJCNTBBM0E2MEVGNDVFODAyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk9wAvWFLceZtq56bl/MEHDQKg Ef/BoK8oz31yap63cM+Utvnb4pW57ukDvsKXQ70TALnUspCjgpdcVWvPDj68y/SF DbgGaxdQ4Z9yK5UY99VPWZ72v4+hkJ2NmjX1yah5s8Ldx7vrbtFkjJetVI5Sqbi4 aERDP+LRRhlN8Czy/j8lVnkM+CeV59oxI0yH04TTkK9MvlYhRUKEWxJKpDUPPlid XKiQRr2xHsMh50HtwK2P1PLGwaeecB+E0mfX+cM8jarrLii2nZZmvl/At3rjKgtI yhQ17EXAJmAsTMbHjfnL0udExMgnFo32keeMT9eg2uQ0d82cxC3TkjNNTJaHAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUvupFHko50y12agu1Cjpg70XoAmowHwYDVR0j BBgwFoAUhXomhNfbyJznhOTfFvGhwD2UVYUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVU LzAvODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84NTdBMjY4NEQ3REJDODlDRTc4NEU0REYxNkYx QTFDMDNEOTQ1NTg1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVULzAvODU3QTI2ODREN0RC Qzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJlU8wJrRzI5 ICh8g3ZqXgr0aPeBJ5+GWHIJoJkqTb0l6mnlxxcU32JBHGeZkO58kGLHoMMZdcUi u+5VKZh1P+/XMk2TgiDCm3cwfHo74ljACXD/csJBsioHLl5z2VWKh1hOdve6pL3R xoU1aYyzpOiuqc8dNtsnxxjp/BFlivxeHcv85wVIf/7CHzt+UBmYHFPV+dO/7QrY te2T57Ye/dr79msskeoq5agav8GzmxmWhs9IvkMG2P3iSgfCFT2qEP1QP3RldqEG pAaQ4GOjp6/qQ9ImNcDXLMZQdXLYAlGsQBC2vrIHZf8sUgmaHsZel/FRg2NGDkzN ZjznO+zcscc= -----END CERTIFICATE-----Generated at Sat Jun 13 09:05:38 2026 by rpki-client