$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft File: 9F4621BE2CEB15DD74809D52692588598490FABF.mft (raw, json) Hash identifier: esR4cAssbpiC4ALGSqB5isyOvosJ9bHbZJ/cpHVC+xI= Subject key identifier: 28:48:85:5F:B4:37:C1:BF:5D:4A:BA:1F:78:34:80:35:AD:59:DF:3C Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF Certificate issuer: /CN=9F4621BE2CEB15DD74809D52692588598490FABF Certificate serial: 218C86AD8FC874CCCFFE88F363D3654BEFEE27CA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft Manifest number: C7 Signing time: Mon 21 Sep 2026 12:22:05 +0000 Manifest this update: Mon 21 Sep 2026 12:17:05 +0000 Manifest next update: Tue 22 Sep 2026 15:47:05 +0000 Files and hashes: 1: 3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa (hash: Om14eoHT5IhomeKnYkvjKpVL1HxviUxm8BBB1REH3/4=) 2: 3130332e3133372e3234362e302f32332d3332203d3e20313331363432.roa (hash: taJQRTDQ90UxXadAvWM0GS41DZC0w4SutBUxh10g3Ls=) 3: 3130332e32332e3130382e302f32332d3332203d3e20313331363432.roa (hash: /zyY4xHrRSNJrzW1F2W6rj36r/peZFfh4+++ESxgZwc=) 4: 9F4621BE2CEB15DD74809D52692588598490FABF.crl (hash: qGikIgw7VLxhCCroMufjkSwuQYEH4/G3eq7OdUq43Yo=) 5: 323430353a636463303a3a2f33322d313234203d3e20313331363432.roa (hash: B+rZIPiEbFPdUxH0aia2ffpZrMmBBOdtjQ5TGrFZI/g=) 6: 3231312e37362e3137362e302f32332d3332203d3e20313331363432.roa (hash: Neacdwz6usPvpnxdcJO7WdPsbmwrbKBYPAqd9PXlS3o=) 7: 3130332e32332e3130382e302f32332d3332203d3e203138313738.roa (hash: UFS/Hr7FRpvvD37ViC5Fa6JcMEvAh98z7iSjnL//iSs=) 8: 3230322e3134382e3232322e302f32332d3332203d3e20313331363432.roa (hash: QSozWjihGPRSxS1l+02abUaaKtc4iDRAVQB/oWLei3c=) 9: 3130332e3134382e37322e302f32332d3332203d3e20313331363432.roa (hash: OLaMU17HmXpsMBlzaeBhODO2N7nOliRaF32TUtfckJg=) 10: 3130332e32332e3130382e302f32332d3332203d3e20313532363131.roa (hash: T1ghJeZqoDyoS6h4+88UDs/OcvRqZ8RuQoLYvkNX8NQ=) 11: 3130332e3135372e34322e302f32332d3332203d3e20313331363432.roa (hash: spfGeWFJdUeuEjJPQ+8MnYaXyZJ0WumSmDpey5VZQ7o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8c:86:ad:8f:c8:74:cc:cf:fe:88:f3:63:d3:65:4b:ef:ee:27:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF Validity Not Before: Sep 21 12:17:05 2026 GMT Not After : Sep 22 15:47:05 2026 GMT Subject: CN=2848855FB437C1BF5D4ABA1F78348035AD59DF3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:2d:d6:c9:7b:34:ea:0d:4c:df:ed:51:7f: c1:a8:8d:cd:3d:4b:94:c9:dc:79:f7:a3:0d:53:84: fd:f0:6b:f7:ce:c3:89:43:99:7c:00:f8:65:55:fd: 41:9b:89:73:28:7d:7f:89:e7:68:02:80:0f:80:df: 98:cf:d3:e8:99:48:9f:8f:0f:72:b1:64:02:19:05: 7e:7a:74:f2:0e:62:16:9a:77:36:dc:ed:de:5a:20: 02:1f:57:c1:5f:0e:c1:10:b3:cb:75:b3:ef:41:b2: 4a:64:d7:fa:d9:10:a5:66:ce:39:0e:25:0d:28:17: 2d:32:c8:92:78:06:37:6d:a6:f2:d1:fc:f5:99:b6: e0:8a:49:e1:c8:fc:67:aa:34:9f:d5:67:26:c3:ca: a1:2c:4b:c3:a8:05:22:9d:7d:7d:4b:c2:a4:50:cf: 8c:5c:fa:35:00:22:70:6a:b8:0f:20:8b:09:8d:36: 7a:3e:5b:d6:c2:65:35:1f:e2:99:66:72:81:e5:03: 57:4a:14:68:86:8d:83:7c:12:00:f6:1f:38:9b:f3: f1:ea:b5:1f:a3:4a:80:38:1e:84:27:fe:ab:cc:af: 3b:0e:e6:37:71:a1:9d:fc:6e:66:b4:75:85:45:29: 62:34:94:5e:d5:19:b9:c1:61:dc:84:65:8b:48:91: ad:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:48:85:5F:B4:37:C1:BF:5D:4A:BA:1F:78:34:80:35:AD:59:DF:3C X509v3 Authority Key Identifier: keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ed:cc:5e:df:84:30:65:a3:06:a8:83:fa:a8:63:f2:15:94: 3d:ad:fb:d5:b4:4b:3a:58:60:dd:dc:f8:86:b0:44:91:c4:28: 2f:a4:5a:b4:60:09:b6:e8:0b:ef:91:fd:ee:b0:68:60:59:80: a8:f0:ed:44:39:30:75:bf:b9:b1:af:dc:0b:23:0c:00:de:90: 5e:fc:2f:3e:28:8b:41:08:b6:e6:5f:4a:20:a4:c6:d9:58:64: ba:e6:96:7b:fe:24:e5:70:b7:02:9c:77:9c:c5:9b:34:d4:69: 28:85:ce:ee:65:38:21:20:96:8a:7c:e5:07:a0:5b:a1:42:4c: da:d6:73:74:27:c7:26:22:11:4d:85:1c:db:40:cb:8b:50:18: 6f:6b:1a:30:c5:7f:1e:ff:5b:c8:68:b6:d8:18:3e:68:74:38: 9b:51:d9:71:1d:10:de:64:0e:01:c8:86:b6:bd:09:5a:ea:1c: 61:90:d8:44:6a:37:9a:b9:b6:42:42:77:56:2e:3d:01:63:01: 8d:19:14:de:9a:d5:68:58:71:72:eb:ff:d3:5c:61:1d:4d:df: ae:8f:54:a0:84:34:4f:f8:13:84:a7:05:72:87:bb:bf:09:47: 46:c6:30:83:55:6f:62:d8:05:e3:72:c0:46:84:87:a6:3c:77: ed:57:de:c7 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUIYyGrY/IdMzP/ojzY9NlS+/uJ8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4 NDkwRkFCRjAeFw0yNjA5MjExMjE3MDVaFw0yNjA5MjIxNTQ3MDVaMDMxMTAvBgNV BAMTKDI4NDg4NTVGQjQzN0MxQkY1RDRBQkExRjc4MzQ4MDM1QUQ1OURGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5iC3WyXs06g1M3+1Rf8Gojc09 S5TJ3Hn3ow1ThP3wa/fOw4lDmXwA+GVV/UGbiXMofX+J52gCgA+A35jP0+iZSJ+P D3KxZAIZBX56dPIOYhaadzbc7d5aIAIfV8FfDsEQs8t1s+9Bskpk1/rZEKVmzjkO JQ0oFy0yyJJ4BjdtpvLR/PWZtuCKSeHI/GeqNJ/VZybDyqEsS8OoBSKdfX1LwqRQ z4xc+jUAInBquA8giwmNNno+W9bCZTUf4plmcoHlA1dKFGiGjYN8EgD2Hzib8/Hq tR+jSoA4HoQn/qvMrzsO5jdxoZ38bma0dYVFKWI0lF7VGbnBYdyEZYtIka3BAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUKEiFX7Q3wb9dSrofeDSANa1Z3zwwHwYDVR0j BBgwFoAUn0YhvizrFd10gJ1SaSWIWYSQ+r8wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAv OUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4NDkwRkFCRi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RjQ2MjFCRTJDRUIxNURENzQ4MDlENTI2OTI1ODg1 OTg0OTBGQUJGLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAvOUY0NjIxQkUyQ0VCMTVERDc0 ODA5RDUyNjkyNTg4NTk4NDkwRkFCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKTtzF7fhDBlowaog/qo Y/IVlD2t+9W0SzpYYN3c+IawRJHEKC+kWrRgCbboC++R/e6waGBZgKjw7UQ5MHW/ ubGv3AsjDADekF78Lz4oi0EItuZfSiCkxtlYZLrmlnv+JOVwtwKcd5zFmzTUaSiF zu5lOCEglop85QegW6FCTNrWc3QnxyYiEU2FHNtAy4tQGG9rGjDFfx7/W8hottgY Pmh0OJtR2XEdEN5kDgHIhra9CVrqHGGQ2ERqN5q5tkJCd1YuPQFjAY0ZFN6a1WhY cXLr/9NcYR1N366PVKCENE/4E4SnBXKHu78JR0bGMINVb2LYBeNywEaEh6Y8d+1X 3sc= -----END CERTIFICATE-----Generated at Tue Sep 22 05:49:59 2026 by rpki-client