$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft File: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft (raw, json) Hash identifier: VCnooUlOkCzlx519MAEHkbezt9ZWECkkZBI3enOWEqM= Subject key identifier: 76:96:15:3D:F2:90:B0:D5:36:32:82:03:62:8E:E9:6A:3D:4F:FD:44 Authority key identifier: D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90 Certificate issuer: /CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90 Certificate serial: 44BBEB999C35901E418EE50F68938A908D1A854D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft Manifest number: B4 Signing time: Mon 21 Sep 2026 18:31:53 +0000 Manifest this update: Mon 21 Sep 2026 18:26:53 +0000 Manifest next update: Tue 22 Sep 2026 19:06:53 +0000 Files and hashes: 1: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl (hash: cP8gYQYJKE8kbNSVAQJ+83V/4aVDssmFSPV6tjztHtM=) 2: 3130332e3132362e38382e302f32322d3234203d3e203138303436.roa (hash: WYxsc8T18C1jcbx9ZCaeGlpS/rFD1h17zovXNmt5VJk=) 3: 3130332e3132362e38382e302f32342d3234203d3e203438303234.roa (hash: Sd6Q7YbX3hdrc0mji0ubguZvwyQj1Zh6EbmfJzdspl4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:bb:eb:99:9c:35:90:1e:41:8e:e5:0f:68:93:8a:90:8d:1a:85:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90 Validity Not Before: Sep 21 18:26:53 2026 GMT Not After : Sep 22 19:06:53 2026 GMT Subject: CN=7696153DF290B0D536328203628EE96A3D4FFD44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:22:6a:92:b7:a5:e2:67:7c:43:1e:9d:10:8e: d9:02:ae:77:da:4a:57:c7:51:eb:b8:69:76:60:60: 85:ea:68:d3:9c:1d:68:3a:36:01:19:70:fb:3f:35: 98:f5:de:3c:18:0c:91:90:35:37:ef:be:3d:5b:df: 17:58:3d:23:5f:56:d1:8d:99:bf:00:41:be:30:e4: a9:75:ee:8c:5e:1a:1a:f5:b3:ba:9b:4f:ea:e2:49: 88:f1:61:e8:f2:ef:75:76:3e:c4:35:b0:15:17:c2: 9d:22:f7:fa:52:8a:7f:ac:f8:03:c8:5f:9e:eb:e1: 87:c3:3a:b3:a1:e3:df:01:13:86:92:8e:73:13:82: 4e:d9:5e:2c:ad:66:11:6e:c4:eb:f8:86:2b:03:2a: 5c:4a:78:41:04:fd:77:d3:e1:09:5c:98:68:d7:b7: 6c:b3:e3:ce:02:d2:45:b7:24:cb:3c:20:12:5e:32: 66:8a:0e:c3:bd:eb:f2:15:7a:3e:e6:89:0e:be:a6: de:db:f1:ec:e6:cd:af:4f:c1:9f:f3:91:b5:8a:f2: 27:e8:fa:2a:9d:f2:88:28:84:d2:58:b2:86:c1:05: 1d:ff:28:af:aa:5d:b1:77:ff:f5:9e:1d:a2:46:e0: 2e:5c:92:cc:a9:f5:c1:34:fd:86:50:3d:b0:59:4f: 87:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:96:15:3D:F2:90:B0:D5:36:32:82:03:62:8E:E9:6A:3D:4F:FD:44 X509v3 Authority Key Identifier: keyid:D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ca:7e:7a:fc:87:02:0e:ac:2b:97:fd:23:3f:fb:88:6a:76: f4:e6:8f:be:44:8c:13:bd:e8:f5:15:a9:42:c1:59:42:11:c6: dc:0d:18:5a:50:45:44:99:c9:e1:99:e5:07:af:76:2c:b9:02: c1:be:64:cf:10:f2:c1:39:91:64:3a:e5:73:9b:86:f1:32:e2: a4:4e:26:b8:cd:1e:f3:b3:01:c7:40:cd:1e:1c:31:4f:5f:76: ad:04:84:6f:18:f4:f8:8d:01:51:0b:1d:b0:a5:74:28:02:de: 5c:e5:ba:52:cd:72:10:48:7e:4d:02:6c:13:b8:6b:15:1f:67: 78:15:65:12:74:12:77:fb:b7:a4:ab:14:83:f4:19:dc:7f:59: 18:de:d5:ba:13:4f:f4:d0:6d:99:6c:f7:02:f9:9c:a7:ac:5e: 96:40:98:63:2c:fe:c8:7d:c7:43:e5:4c:6b:8a:70:3d:47:45: 2a:33:b8:33:57:6d:d0:5b:f1:23:15:91:f0:01:d0:99:f3:58: d4:8c:98:5b:c9:94:a9:41:74:26:55:bc:97:87:be:21:d3:68: de:c1:85:3e:55:30:b5:b4:52:4a:e5:1c:75:bb:85:57:ae:ba: d3:df:56:10:10:62:d7:6b:cd:11:1c:ab:96:1a:be:4d:02:db: d1:49:47:4b -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIURLvrmZw1kB5BjuUPaJOKkI0ahU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFBRTMzMzgwMzVCRkNBN0M0RTg2RkJDMjgxQTFGREYw QkU2OUI5MDAeFw0yNjA5MjExODI2NTNaFw0yNjA5MjIxOTA2NTNaMDMxMTAvBgNV BAMTKDc2OTYxNTNERjI5MEIwRDUzNjMyODIwMzYyOEVFOTZBM0Q0RkZENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnImqSt6XiZ3xDHp0QjtkCrnfa SlfHUeu4aXZgYIXqaNOcHWg6NgEZcPs/NZj13jwYDJGQNTfvvj1b3xdYPSNfVtGN mb8AQb4w5Kl17oxeGhr1s7qbT+riSYjxYejy73V2PsQ1sBUXwp0i9/pSin+s+API X57r4YfDOrOh498BE4aSjnMTgk7ZXiytZhFuxOv4hisDKlxKeEEE/XfT4QlcmGjX t2yz484C0kW3JMs8IBJeMmaKDsO96/IVej7miQ6+pt7b8ezmza9PwZ/zkbWK8ifo +iqd8ogohNJYsobBBR3/KK+qXbF3//WeHaJG4C5cksyp9cE0/YZQPbBZT4c7AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUdpYVPfKQsNU2MoIDYo7paj1P/UQwHwYDVR0j BBgwFoAU0a4zOANb/KfE6G+8KBof3wvmm5AwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hBTkdG VS8wL0QxQUUzMzM4MDM1QkZDQTdDNEU4NkZCQzI4MUExRkRGMEJFNjlCOTAuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvRDFBRTMzMzgwMzVCRkNBN0M0RTg2RkJDMjgx QTFGREYwQkU2OUI5MC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NIQU5HRlUvMC9EMUFFMzMzODAz NUJGQ0E3QzRFODZGQkMyODFBMUZERjBCRTY5QjkwLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncp+evyH Ag6sK5f9Iz/7iGp29OaPvkSME73o9RWpQsFZQhHG3A0YWlBFRJnJ4ZnlB692LLkC wb5kzxDywTmRZDrlc5uG8TLipE4muM0e87MBx0DNHhwxT192rQSEbxj0+I0BUQsd sKV0KALeXOW6Us1yEEh+TQJsE7hrFR9neBVlEnQSd/u3pKsUg/QZ3H9ZGN7VuhNP 9NBtmWz3Avmcp6xelkCYYyz+yH3HQ+VMa4pwPUdFKjO4M1dt0FvxIxWR8AHQmfNY 1IyYW8mUqUF0JlW8l4e+IdNo3sGFPlUwtbRSSuUcdbuFV666099WEBBi12vNERyr lhq+TQLb0UlHSw== -----END CERTIFICATE-----Generated at Tue Sep 22 01:34:23 2026 by rpki-client