$ rpki-client -vvf rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft File: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft (raw, json) Hash identifier: Zi0KgHDV2zNmBcrU/nfbZhVWDUXSldsYSy646PmmGFs= Subject key identifier: 46:CA:7B:BE:9D:39:D8:4C:0E:32:EF:E6:03:C5:62:38:25:BC:EA:E8 Authority key identifier: 85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 Certificate issuer: /CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Certificate serial: 6D51E73CBE00DD3656726660036AEEE788A57C2D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft Manifest number: 6D Signing time: Tue 28 Jul 2026 07:02:46 +0000 Manifest this update: Tue 28 Jul 2026 06:57:46 +0000 Manifest next update: Wed 29 Jul 2026 09:56:46 +0000 Files and hashes: 1: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl (hash: 9fBUSoiDORpzCvKcZDzk64UiTBghO40a4NkRfqBczzQ=) 2: 36312e35372e3232342e302f32302d3234203d3e203137373130.roa (hash: X08v+g23C1Fx8BQtKNgspF5UjPkGFKh01lY2BRa8ypo=) 3: 3135302e3130372e36342e302f32322d3234203d3e203137373130.roa (hash: n+v5o9SBdWVqA5qvRZf6BeSCSFLkZj6roCOPAhBcFqM=) 4: 3130332e3233342e38302e302f32322d3234203d3e203137373130.roa (hash: uqLuHrrFZUmLWpdnoJCaLRe1oXTuRusUvNya24FB8bg=) 5: 3130332e3233342e38312e302f32342d3234203d3e203137373130.roa (hash: Zvu3k5iDBaX9iOQpea8Ybb+zcrWBht3qRGl2nLlRl/o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:51:e7:3c:be:00:dd:36:56:72:66:60:03:6a:ee:e7:88:a5:7c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Validity Not Before: Jul 28 06:57:46 2026 GMT Not After : Jul 29 09:56:46 2026 GMT Subject: CN=46CA7BBE9D39D84C0E32EFE603C5623825BCEAE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:cb:fd:80:cf:bf:48:cd:cc:07:c2:ac:f5: b4:fb:af:ed:30:b2:a9:4e:df:2d:2b:af:34:f2:8a: ac:3c:e3:06:f6:31:65:9f:9c:a2:53:da:b2:86:b3: b9:49:5b:61:b6:16:d6:4c:6a:c6:ba:ee:1b:ed:19: a4:49:d3:a5:00:3d:f1:98:27:87:b2:b2:f8:41:bc: d1:bb:42:aa:ba:c8:cc:86:73:85:a7:46:39:31:71: a3:79:48:49:20:95:cb:a0:36:62:88:b2:b6:cf:3f: 84:88:6f:a2:77:56:02:5e:9e:d8:88:87:6c:96:76: df:9b:e2:63:88:8b:2e:ad:bd:aa:f0:58:99:a1:c9: 1b:84:e0:99:01:c4:9a:a8:f5:43:d4:23:d7:61:1a: e6:6b:bb:58:9d:41:42:00:0d:32:52:ae:f3:17:11: 82:91:b2:6f:fa:66:d4:7d:83:49:73:96:7b:fa:42: fc:d7:17:c2:48:19:4a:1f:22:3f:b5:18:f0:74:47: fa:9f:a0:3e:e3:f2:db:74:b3:98:57:53:b7:b6:2c: 4a:3c:d0:57:f3:98:1b:96:da:fe:b4:08:25:ac:a7: 46:ee:32:9c:8f:5b:fa:be:44:f8:9e:ae:6a:d3:7f: 56:60:41:ff:ac:11:46:46:28:12:91:c9:2e:4a:b9: c6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CA:7B:BE:9D:39:D8:4C:0E:32:EF:E6:03:C5:62:38:25:BC:EA:E8 X509v3 Authority Key Identifier: keyid:85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:27:f9:7b:e8:5b:f0:84:38:ec:b5:d5:da:b4:fc:89:02:de: c6:a0:7a:0e:d1:55:d5:38:62:87:af:20:f6:b6:f1:c3:bf:e7: 55:d3:fb:8d:33:f1:44:90:bc:24:78:97:64:3a:6e:f9:09:90: b3:45:ef:86:70:4f:ef:f5:0d:73:9c:7f:f4:6f:b6:08:65:8e: 5a:e4:80:2c:a1:a0:21:85:ba:c9:64:9b:c4:e4:49:fe:ec:16: ed:5f:19:62:da:a8:64:c4:ff:ab:86:c4:0a:80:0b:51:6e:09: f0:7d:65:8c:5c:31:51:8c:e7:21:5f:eb:c5:fc:46:90:c1:cf: 1c:8f:f7:5d:71:e4:ca:49:15:4c:d8:fc:53:f3:2f:ca:fc:b3: 17:65:29:47:58:ba:15:12:ba:0c:b6:2b:fd:9c:81:15:99:21: 26:34:5f:1f:a1:27:b3:0f:15:0e:33:0d:61:d2:5c:01:7e:c0: 9a:68:d3:e3:3d:7a:e8:95:c0:13:be:fa:52:99:13:3d:7e:bb: 13:19:43:57:cf:07:f3:3d:a4:15:e7:7d:5d:00:5e:de:60:d7: d6:17:09:5c:64:85:b5:0c:1e:5f:9a:13:fe:07:36:b7:51:53: f0:90:63:d4:f0:a5:da:f0:94:89:54:bd:d3:2b:3b:18:9b:84: 2f:8e:a8:b1 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUbVHnPL4A3TZWcmZgA2ru54ilfC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAz RDk0NTU4NTAeFw0yNjA3MjgwNjU3NDZaFw0yNjA3MjkwOTU2NDZaMDMxMTAvBgNV BAMTKDQ2Q0E3QkJFOUQzOUQ4NEMwRTMyRUZFNjAzQzU2MjM4MjVCQ0VBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Y8v9gM+/SM3MB8Ks9bT7r+0w sqlO3y0rrzTyiqw84wb2MWWfnKJT2rKGs7lJW2G2FtZMasa67hvtGaRJ06UAPfGY J4eysvhBvNG7Qqq6yMyGc4WnRjkxcaN5SEkglcugNmKIsrbPP4SIb6J3VgJentiI h2yWdt+b4mOIiy6tvarwWJmhyRuE4JkBxJqo9UPUI9dhGuZru1idQUIADTJSrvMX EYKRsm/6ZtR9g0lzlnv6QvzXF8JIGUofIj+1GPB0R/qfoD7j8tt0s5hXU7e2LEo8 0FfzmBuW2v60CCWsp0buMpyPW/q+RPiermrTf1ZgQf+sEUZGKBKRyS5KucYrAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQURsp7vp052EwOMu/mA8ViOCW86ugwHwYDVR0j BBgwFoAUhXomhNfbyJznhOTfFvGhwD2UVYUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVU LzAvODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84NTdBMjY4NEQ3REJDODlDRTc4NEU0REYxNkYx QTFDMDNEOTQ1NTg1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVULzAvODU3QTI2ODREN0RC Qzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADAn+XvoW/CE OOy11dq0/IkC3sageg7RVdU4YoevIPa28cO/51XT+40z8USQvCR4l2Q6bvkJkLNF 74ZwT+/1DXOcf/RvtghljlrkgCyhoCGFuslkm8TkSf7sFu1fGWLaqGTE/6uGxAqA C1FuCfB9ZYxcMVGM5yFf68X8RpDBzxyP911x5MpJFUzY/FPzL8r8sxdlKUdYuhUS ugy2K/2cgRWZISY0Xx+hJ7MPFQ4zDWHSXAF+wJpo0+M9euiVwBO++lKZEz1+uxMZ Q1fPB/M9pBXnfV0AXt5g19YXCVxkhbUMHl+aE/4HNrdRU/CQY9TwpdrwlIlUvdMr OxibhC+OqLE= -----END CERTIFICATE-----Generated at Tue Jul 28 21:50:24 2026 by rpki-client