$ rpki-client -vvvf rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft File: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft (raw, json) Hash identifier: YVMq0Yfl0jI5X9CZ33GvG2qVl43b3bHPx+ZTt9rEHSE= Subject key identifier: EC:37:B3:7B:84:DA:2C:1B:09:BC:FD:47:C4:E3:18:2E:F4:71:8A:7B Authority key identifier: 85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 Certificate issuer: /CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Certificate serial: 30AA282603039A31D5820D55EFE1C7EB997C1A2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft Manifest number: B6 Signing time: Mon 21 Sep 2026 01:04:53 +0000 Manifest this update: Mon 21 Sep 2026 00:59:53 +0000 Manifest next update: Tue 22 Sep 2026 04:40:53 +0000 Files and hashes: 1: 3130332e3233342e38302e302f32322d3234203d3e203137373130.roa (hash: uqLuHrrFZUmLWpdnoJCaLRe1oXTuRusUvNya24FB8bg=) 2: 3135302e3130372e36342e302f32322d3234203d3e203137373130.roa (hash: n+v5o9SBdWVqA5qvRZf6BeSCSFLkZj6roCOPAhBcFqM=) 3: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl (hash: RrylcHA9d6nH00j43wv5QCH/paA+JgGPQGPf6ujT7sE=) 4: 36312e35372e3232342e302f32302d3234203d3e203137373130.roa (hash: X08v+g23C1Fx8BQtKNgspF5UjPkGFKh01lY2BRa8ypo=) 5: 3130332e3233342e38312e302f32342d3234203d3e203137373130.roa (hash: Zvu3k5iDBaX9iOQpea8Ybb+zcrWBht3qRGl2nLlRl/o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:aa:28:26:03:03:9a:31:d5:82:0d:55:ef:e1:c7:eb:99:7c:1a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Validity Not Before: Sep 21 00:59:53 2026 GMT Not After : Sep 22 04:40:53 2026 GMT Subject: CN=EC37B37B84DA2C1B09BCFD47C4E3182EF4718A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:6f:13:76:cc:ec:3b:82:2e:9e:09:da:58: 45:34:f7:0f:21:be:e0:fa:8b:cf:cf:04:bb:b7:85: 48:1a:8a:95:6d:d4:0f:da:b1:eb:6d:89:ca:80:03: bb:7f:7f:08:f0:84:c4:e1:7c:27:4e:a4:0d:ac:11: 99:e2:c8:70:a5:b0:4a:ed:21:a6:a4:13:78:f6:10: 05:cf:ea:06:6f:fe:1b:42:80:07:d4:a8:25:00:d2: 78:66:10:73:69:56:94:45:a9:8d:d5:1a:e6:a0:c8: b2:5e:c4:c5:37:66:75:e4:f2:3d:c8:79:83:de:11: a5:db:ff:28:85:6c:f9:61:66:4e:9c:2f:e9:35:9e: 61:4d:d9:6e:d9:65:0b:6f:e3:7c:62:6c:81:5d:7e: 48:b7:a3:db:0e:00:9c:26:fb:89:14:7f:bc:4b:17: 50:d1:a6:c2:a7:bf:7a:a9:45:4d:cd:92:db:ef:15: 61:1c:af:c1:44:61:53:4a:08:9f:ba:7e:a2:bb:c0: 80:b2:f8:53:2c:6c:46:9f:f1:15:2c:7e:be:bf:56: 20:ac:9d:6e:49:c0:af:38:31:14:9d:5a:74:47:82: a5:ec:c9:98:35:80:f0:21:19:fc:5e:d7:9d:37:7d: ed:e7:6d:45:56:d2:f8:6a:3e:fa:18:95:8b:af:dd: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:37:B3:7B:84:DA:2C:1B:09:BC:FD:47:C4:E3:18:2E:F4:71:8A:7B X509v3 Authority Key Identifier: keyid:85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3c:6c:54:cc:36:9e:6d:24:c1:04:69:c9:1d:c2:09:7c:44: b4:1b:66:60:c2:3b:03:28:2c:36:d3:45:c6:b7:6e:ad:e5:41: 06:40:17:7f:53:50:1d:75:18:2f:0d:4c:f0:c0:a4:9b:e0:32: 9f:7b:9e:e1:c4:30:4f:e0:da:13:6c:dd:c6:85:2c:cd:e7:81: 55:bb:d2:1e:51:76:e5:c9:c7:6c:ca:20:44:47:7c:62:3b:11: a6:7a:ce:92:ba:5a:10:ab:db:c5:65:3e:a5:55:15:d5:57:5d: d7:56:21:9b:f6:2f:6d:1c:4f:11:5b:8f:53:8c:41:64:72:e2: 7e:31:18:88:a5:f8:32:e6:e1:e3:f3:7f:41:2a:2a:52:36:bc: e0:d3:ea:28:04:dd:12:92:31:ef:6f:76:da:36:45:12:be:bc: a0:cb:3d:14:3e:af:15:24:12:d4:50:a3:99:e3:0b:4d:84:55: 69:ec:a1:fd:d5:da:32:c8:c3:f7:85:f7:47:93:38:5c:dd:ed: 37:25:5c:d2:09:8c:a4:d3:54:98:e1:00:1d:ad:71:bc:09:75: 74:0f:07:bf:c6:da:27:21:e3:da:96:dc:a9:c6:14:46:c6:26: d8:8d:5e:a1:4c:19:fa:7e:05:64:cf:de:db:c1:ad:49:49:1a: bd:f6:09:8b -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUMKooJgMDmjHVgg1V7+HH65l8Gi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAz RDk0NTU4NTAeFw0yNjA5MjEwMDU5NTNaFw0yNjA5MjIwNDQwNTNaMDMxMTAvBgNV BAMTKEVDMzdCMzdCODREQTJDMUIwOUJDRkQ0N0M0RTMxODJFRjQ3MThBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDm8TdszsO4IungnaWEU09w8h vuD6i8/PBLu3hUgaipVt1A/asetticqAA7t/fwjwhMThfCdOpA2sEZniyHClsErt IaakE3j2EAXP6gZv/htCgAfUqCUA0nhmEHNpVpRFqY3VGuagyLJexMU3ZnXk8j3I eYPeEaXb/yiFbPlhZk6cL+k1nmFN2W7ZZQtv43xibIFdfki3o9sOAJwm+4kUf7xL F1DRpsKnv3qpRU3NktvvFWEcr8FEYVNKCJ+6fqK7wICy+FMsbEaf8RUsfr6/ViCs nW5JwK84MRSdWnRHgqXsyZg1gPAhGfxe1503fe3nbUVW0vhqPvoYlYuv3UXRAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU7Deze4TaLBsJvP1HxOMYLvRxinswHwYDVR0j BBgwFoAUhXomhNfbyJznhOTfFvGhwD2UVYUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVU LzAvODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84NTdBMjY4NEQ3REJDODlDRTc4NEU0REYxNkYx QTFDMDNEOTQ1NTg1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVULzAvODU3QTI2ODREN0RC Qzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABg8bFTMNp5t JMEEackdwgl8RLQbZmDCOwMoLDbTRca3bq3lQQZAF39TUB11GC8NTPDApJvgMp97 nuHEME/g2hNs3caFLM3ngVW70h5RduXJx2zKIERHfGI7EaZ6zpK6WhCr28VlPqVV FdVXXddWIZv2L20cTxFbj1OMQWRy4n4xGIil+DLm4ePzf0EqKlI2vODT6igE3RKS Me9vdto2RRK+vKDLPRQ+rxUkEtRQo5njC02EVWnsof3V2jLIw/eF90eTOFzd7Tcl XNIJjKTTVJjhAB2tcbwJdXQPB7/G2ich49qW3KnGFEbGJtiNXqFMGfp+BWTP3tvB rUlJGr32CYs= -----END CERTIFICATE-----Generated at Mon Sep 21 05:37:28 2026 by rpki-client