$ rpki-client -vvvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft File: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json) Hash identifier: cRi60T3kdKDxviSCrvJpSfiir+GLDXUigj7X+ZWAWzU= Subject key identifier: 52:4F:56:A0:79:9C:DA:0A:84:D9:90:50:E9:15:F5:21:F0:6B:0C:40 Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Certificate serial: 51A9FBAA5390AF7F8114B839F630BB771D8D9C36 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft Manifest number: B8 Signing time: Tue 22 Sep 2026 12:51:51 +0000 Manifest this update: Tue 22 Sep 2026 12:46:51 +0000 Manifest next update: Wed 23 Sep 2026 13:10:51 +0000 Files and hashes: 1: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=) 2: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=) 3: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=) 4: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: UPG7sIs98XNXM4WJB0Xq9TX+L7Q629Y76Tr+4ciVeuU=) 5: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a9:fb:aa:53:90:af:7f:81:14:b8:39:f6:30:bb:77:1d:8d:9c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Validity Not Before: Sep 22 12:46:51 2026 GMT Not After : Sep 23 13:10:51 2026 GMT Subject: CN=524F56A0799CDA0A84D99050E915F521F06B0C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8d:93:c1:17:8c:c9:a9:d2:bf:9b:92:d7:f2: a4:ff:27:30:30:04:59:0c:47:01:e3:1b:9d:d2:25: 06:ad:aa:ed:ae:3e:3a:f8:dd:86:70:e0:d3:3e:78: 3d:b8:f1:e0:52:17:8a:a6:64:fb:8e:ea:4f:39:11: 3c:79:07:fb:e0:66:03:1b:cc:2e:e3:12:5c:de:e8: 36:68:54:97:af:f1:5c:69:31:0d:e6:3e:3f:8a:f2: 78:7f:e8:51:95:48:a2:c1:24:6f:b3:79:23:25:58: b1:de:6f:1b:d6:2a:74:0b:3c:92:49:28:c9:21:69: b9:a8:80:5b:89:92:5e:a9:72:5e:03:12:94:2a:91: 68:74:ed:b0:b9:07:e7:0a:c8:24:6e:a9:bf:eb:99: 63:e5:fe:c1:95:42:df:f5:11:60:a2:db:13:06:d2: 28:4c:be:56:bf:2f:6e:cb:13:6a:23:38:ef:42:a8: dd:dc:41:67:0f:e4:83:2f:fa:cf:0b:92:76:12:79: fd:d6:df:0d:34:7d:bb:50:28:ca:d4:1a:d3:1e:84: ff:f6:ee:3e:46:0d:aa:89:85:ad:aa:96:0b:60:3e: d0:63:0f:bf:89:1f:dc:79:c8:55:71:11:0c:e7:43: b4:bc:73:1b:92:14:af:e0:6b:98:84:c5:a8:30:d3: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4F:56:A0:79:9C:DA:0A:84:D9:90:50:E9:15:F5:21:F0:6B:0C:40 X509v3 Authority Key Identifier: keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:51:5b:c3:9c:c9:a2:2e:f9:42:ab:54:a7:8a:39:74:5e:73: 3b:68:3a:ca:f3:0c:67:f6:bf:e8:7e:1b:b9:10:51:0f:8e:68: b7:28:a7:7f:17:98:1f:ad:91:fa:76:dd:ed:6c:b8:ce:97:b8: a5:90:f1:d0:03:10:37:e4:dd:8d:80:db:0e:c2:21:84:71:84: a4:ee:40:cc:44:9d:ec:21:4f:ea:74:80:f3:61:6f:77:89:b6: bb:4d:ad:bd:09:9d:fe:d7:ef:6c:5b:e5:1f:e8:d5:18:aa:27: 14:ec:9e:79:27:dd:98:04:dd:0e:6f:d4:61:c4:77:df:0b:6c: 8e:13:63:f9:4d:69:45:8d:af:35:63:e0:7e:55:22:da:d7:f2: b4:22:af:ac:4e:96:4e:53:59:13:f7:ca:84:1e:0b:8a:62:73: 57:63:bb:c2:d7:e6:39:66:3e:a0:58:79:82:75:b4:06:cd:01: fd:a7:5b:1c:db:67:86:c7:82:4f:d6:1c:8d:76:05:db:76:53: 1a:1c:5f:7c:ff:98:f2:8b:bd:69:2a:4d:29:ba:25:fb:fd:60: 26:ff:c8:68:07:9e:1a:63:07:ca:e5:01:ff:8d:0f:4a:be:e7: 1d:da:b2:8b:a2:33:69:73:3e:1f:6e:8a:3e:9d:db:73:24:f4: 46:0f:aa:1a -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUUan7qlOQr3+BFLg59jC7dx2NnDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFDMjdENTI0 NjZBQzdFNjAeFw0yNjA5MjIxMjQ2NTFaFw0yNjA5MjMxMzEwNTFaMDMxMTAvBgNV BAMTKDUyNEY1NkEwNzk5Q0RBMEE4NEQ5OTA1MEU5MTVGNTIxRjA2QjBDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKjZPBF4zJqdK/m5LX8qT/JzAw BFkMRwHjG53SJQatqu2uPjr43YZw4NM+eD248eBSF4qmZPuO6k85ETx5B/vgZgMb zC7jElze6DZoVJev8VxpMQ3mPj+K8nh/6FGVSKLBJG+zeSMlWLHebxvWKnQLPJJJ KMkhabmogFuJkl6pcl4DEpQqkWh07bC5B+cKyCRuqb/rmWPl/sGVQt/1EWCi2xMG 0ihMvla/L27LE2ojOO9CqN3cQWcP5IMv+s8LknYSef3W3w00fbtQKMrUGtMehP/2 7j5GDaqJha2qlgtgPtBjD7+JH9x5yFVxEQznQ7S8cxuSFK/ga5iExagw04KnAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUUk9WoHmc2gqE2ZBQ6RX1IfBrDEAwHwYDVR0j BBgwFoAUTU29KLvriSCzeqYEisJ9UkZqx+YwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VDVU5F VC8wLzRENERCRDI4QkJFQjg5MjBCMzdBQTYwNDhBQzI3RDUyNDY2QUM3RTYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFD MjdENTI0NjZBQzdFNi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NFQ1VORVQvMC80RDREQkQyOEJC RUI4OTIwQjM3QUE2MDQ4QUMyN0Q1MjQ2NkFDN0U2Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlFbw5zJ oi75QqtUp4o5dF5zO2g6yvMMZ/a/6H4buRBRD45otyinfxeYH62R+nbd7Wy4zpe4 pZDx0AMQN+TdjYDbDsIhhHGEpO5AzESd7CFP6nSA82Fvd4m2u02tvQmd/tfvbFvl H+jVGKonFOyeeSfdmATdDm/UYcR33wtsjhNj+U1pRY2vNWPgflUi2tfytCKvrE6W TlNZE/fKhB4LimJzV2O7wtfmOWY+oFh5gnW0Bs0B/adbHNtnhseCT9YcjXYF23ZT GhxffP+Y8ou9aSpNKbol+/1gJv/IaAeeGmMHyuUB/40PSr7nHdqyi6IzaXM+H26K Pp3bcyT0Rg+qGg== -----END CERTIFICATE-----Generated at Tue Sep 22 22:55:02 2026 by rpki-client