$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft File: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft (raw, json) Hash identifier: gx21VtUm6jz2iyawd1kKsELOf5tq4K/gyk5oewkIBBc= Subject key identifier: CD:38:AF:1F:B2:4A:34:A2:46:91:2A:E6:31:A1:9D:CD:D6:89:A7:F7 Authority key identifier: D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90 Certificate issuer: /CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90 Certificate serial: 5046F710E43A2714F6C1E2D9C669DB40DB761832 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft Manifest number: B5 Signing time: Tue 22 Sep 2026 11:11:27 +0000 Manifest this update: Tue 22 Sep 2026 11:06:27 +0000 Manifest next update: Wed 23 Sep 2026 13:07:27 +0000 Files and hashes: 1: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl (hash: TvUjDMV67c2JgfGRDSOsz4VDntkTc6rUiDb6BF4LsyU=) 2: 3130332e3132362e38382e302f32322d3234203d3e203138303436.roa (hash: WYxsc8T18C1jcbx9ZCaeGlpS/rFD1h17zovXNmt5VJk=) 3: 3130332e3132362e38382e302f32342d3234203d3e203438303234.roa (hash: Sd6Q7YbX3hdrc0mji0ubguZvwyQj1Zh6EbmfJzdspl4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:46:f7:10:e4:3a:27:14:f6:c1:e2:d9:c6:69:db:40:db:76:18:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90 Validity Not Before: Sep 22 11:06:27 2026 GMT Not After : Sep 23 13:07:27 2026 GMT Subject: CN=CD38AF1FB24A34A246912AE631A19DCDD689A7F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fd:a0:3f:38:f2:c8:66:0c:91:3a:fb:e7:29: df:04:c7:c1:57:82:70:12:58:5f:af:8a:3f:8f:d5: 96:2a:fe:09:1f:11:04:9d:50:d1:91:e4:6f:0e:79: fc:23:ec:50:68:0d:72:2c:b1:ef:f9:71:f7:6a:dc: 57:bd:b3:27:59:9c:f5:ab:7e:c9:2b:69:76:80:53: 66:bc:2a:00:e2:2d:c8:57:88:95:25:6c:31:2d:4a: 82:2f:bb:34:b6:79:28:d0:14:05:34:68:36:10:aa: 22:7f:55:da:88:52:f7:82:6a:b6:39:e8:fd:7b:6c: 59:1b:82:9f:96:41:5c:be:c1:c7:d0:6b:1d:06:1e: 5c:2a:13:93:54:6a:d5:74:37:30:80:65:02:e1:db: ce:a2:d9:f0:24:f8:90:64:e8:28:1b:80:22:0b:4e: c6:f8:f4:46:c7:73:d4:e5:58:f6:80:a8:c7:67:21: d5:da:4f:9a:ed:26:00:28:ba:81:f3:8e:82:51:46: 5d:77:56:a4:a0:02:53:c9:1e:9f:17:13:79:88:79: 00:cf:18:c3:c1:8e:ff:49:65:cd:a3:8a:09:f5:93: 3a:e8:2c:3c:b6:9f:11:7e:5e:71:c6:f8:64:fd:d0: d8:f7:0f:76:76:af:c6:29:eb:de:fe:aa:9e:0e:26: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:38:AF:1F:B2:4A:34:A2:46:91:2A:E6:31:A1:9D:CD:D6:89:A7:F7 X509v3 Authority Key Identifier: keyid:D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:1a:eb:a9:fe:e7:5d:0a:45:3c:a4:30:e3:a5:2d:b0:f1:c9: ca:27:3d:d9:d5:31:b4:aa:60:4a:5c:c6:ee:87:f6:2b:6b:39: 53:9c:94:f1:01:85:2f:fe:78:df:00:fd:c3:8f:44:92:9d:77: af:45:fe:ef:fc:4a:83:73:bf:a8:f8:c2:9b:83:db:68:49:71: 31:74:e2:2b:33:82:ad:73:78:80:52:b7:2f:6c:ad:14:f0:cc: ba:3e:3a:e0:70:96:10:31:0d:cd:da:5e:3e:81:42:75:a1:30: 14:8e:fc:8a:75:62:27:5a:a9:c2:83:59:2f:c9:e6:39:b1:43: f6:a5:38:3a:2b:43:b4:54:35:6a:c5:1c:01:f5:79:b5:19:ef: 75:15:f9:55:7b:4c:0c:f3:9f:84:7b:bf:1a:5f:ab:0c:33:7a: a9:5d:14:7c:39:6b:77:d9:a7:dd:27:a4:4d:a0:4d:d1:99:03: c0:ec:d5:c6:3b:03:5a:a8:32:a0:e9:35:0d:fc:e9:6f:df:f0: 46:16:2c:e9:20:98:38:05:0f:4a:f0:f1:23:69:eb:17:e3:7e: 0b:78:67:9b:60:24:e8:d3:08:27:d7:c7:12:91:67:da:b2:eb: 8a:86:ac:14:8b:2b:01:18:17:e3:55:23:a1:14:bd:ff:84:6c: c7:6d:95:2b -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUUEb3EOQ6JxT2weLZxmnbQNt2GDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFBRTMzMzgwMzVCRkNBN0M0RTg2RkJDMjgxQTFGREYw QkU2OUI5MDAeFw0yNjA5MjIxMTA2MjdaFw0yNjA5MjMxMzA3MjdaMDMxMTAvBgNV BAMTKENEMzhBRjFGQjI0QTM0QTI0NjkxMkFFNjMxQTE5RENERDY4OUE3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/aA/OPLIZgyROvvnKd8Ex8FX gnASWF+vij+P1ZYq/gkfEQSdUNGR5G8Oefwj7FBoDXIsse/5cfdq3Fe9sydZnPWr fskraXaAU2a8KgDiLchXiJUlbDEtSoIvuzS2eSjQFAU0aDYQqiJ/VdqIUveCarY5 6P17bFkbgp+WQVy+wcfQax0GHlwqE5NUatV0NzCAZQLh286i2fAk+JBk6CgbgCIL Tsb49EbHc9TlWPaAqMdnIdXaT5rtJgAouoHzjoJRRl13VqSgAlPJHp8XE3mIeQDP GMPBjv9JZc2jign1kzroLDy2nxF+XnHG+GT90Nj3D3Z2r8Yp697+qp4OJjiRAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUzTivH7JKNKJGkSrmMaGdzdaJp/cwHwYDVR0j BBgwFoAU0a4zOANb/KfE6G+8KBof3wvmm5AwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hBTkdG VS8wL0QxQUUzMzM4MDM1QkZDQTdDNEU4NkZCQzI4MUExRkRGMEJFNjlCOTAuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvRDFBRTMzMzgwMzVCRkNBN0M0RTg2RkJDMjgx QTFGREYwQkU2OUI5MC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NIQU5HRlUvMC9EMUFFMzMzODAz NUJGQ0E3QzRFODZGQkMyODFBMUZERjBCRTY5QjkwLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvBrrqf7n XQpFPKQw46UtsPHJyic92dUxtKpgSlzG7of2K2s5U5yU8QGFL/543wD9w49Ekp13 r0X+7/xKg3O/qPjCm4PbaElxMXTiKzOCrXN4gFK3L2ytFPDMuj464HCWEDENzdpe PoFCdaEwFI78inViJ1qpwoNZL8nmObFD9qU4OitDtFQ1asUcAfV5tRnvdRX5VXtM DPOfhHu/Gl+rDDN6qV0UfDlrd9mn3SekTaBN0ZkDwOzVxjsDWqgyoOk1Dfzpb9/w RhYs6SCYOAUPSvDxI2nrF+N+C3hnm2Ak6NMIJ9fHEpFn2rLrioasFIsrARgX41Uj oRS9/4Rsx22VKw== -----END CERTIFICATE-----Generated at Tue Sep 22 16:36:47 2026 by rpki-client