$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft File: 5407824F2094BDB5E96C450A4F36563A73225CCB.mft (raw, json) Hash identifier: 0ggzxi9lVjaznMooyU4tRDxArFyayVgjzTtZS8lHjrg= Subject key identifier: B9:9D:25:6B:B8:E7:9F:E5:71:7F:B2:A6:7C:4B:0E:BA:B7:19:12:40 Authority key identifier: 54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB Certificate issuer: /CN=5407824F2094BDB5E96C450A4F36563A73225CCB Certificate serial: 742197EADB6D92B6811CC6B41D6FCC2EB5BA675C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft Manifest number: B7 Signing time: Mon 21 Sep 2026 19:37:02 +0000 Manifest this update: Mon 21 Sep 2026 19:32:02 +0000 Manifest next update: Tue 22 Sep 2026 23:31:02 +0000 Files and hashes: 1: 323430313a626136303a3a2f33322d3438203d3e203332353935.roa (hash: RBIOP3iKwRtqrSWqj44FA3/x/uVqA34IvA8ZG8hK44Q=) 2: 5407824F2094BDB5E96C450A4F36563A73225CCB.crl (hash: EevBwbXVBPXJ4ZJyglQCTR8SCVnoAQYRAuE5IiqUAQw=) 3: 323430313a626136303a3a2f33322d3438203d3e2039393233.roa (hash: 5TVrVE33kIL0XhQaO3gte1KLCXkOhF1o3uG63J4/55s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:21:97:ea:db:6d:92:b6:81:1c:c6:b4:1d:6f:cc:2e:b5:ba:67:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5407824F2094BDB5E96C450A4F36563A73225CCB Validity Not Before: Sep 21 19:32:02 2026 GMT Not After : Sep 22 23:31:02 2026 GMT Subject: CN=B99D256BB8E79FE5717FB2A67C4B0EBAB7191240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:aa:ba:b8:91:68:0c:e1:f6:2b:79:9d:0b:a3: a9:d2:da:49:d0:37:d1:8a:39:e8:e0:ba:68:34:f9: 4d:04:f9:43:dd:22:72:5f:9e:82:0a:3e:a4:b1:d2: 99:74:93:18:41:43:8b:6e:9d:dd:81:91:0c:10:54: 24:c1:bf:98:73:fe:36:a0:3b:43:ea:6b:c3:e6:45: ee:a8:6a:ae:40:47:96:a4:c6:13:aa:f5:87:43:bb: 1b:56:d4:b2:5a:5e:07:2e:31:cb:c6:88:8f:fb:7e: f0:8f:d8:ec:f8:00:54:c8:19:11:83:f5:d6:91:46: 73:68:f4:56:30:a6:f9:00:bf:c7:2d:6a:65:30:5d: d3:6c:03:f3:63:94:d4:a5:7f:00:c8:95:da:fb:ec: 66:82:37:8c:58:bb:73:3d:8d:d6:6f:01:84:cc:47: 72:8f:95:d5:d0:b0:ce:5f:8b:13:c7:57:62:19:32: d4:35:32:9c:4a:74:51:ea:96:aa:87:32:64:0e:1f: d2:45:69:b9:97:55:0d:77:a3:9e:1a:78:fd:f7:84: a7:8d:74:e5:86:54:23:43:31:cd:9d:e5:43:a9:df: 75:0d:29:6e:33:2a:6a:2e:10:9f:64:1d:f8:f2:bf: b8:ac:b7:ec:45:33:ec:b7:62:02:f2:1e:98:ec:91: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9D:25:6B:B8:E7:9F:E5:71:7F:B2:A6:7C:4B:0E:BA:B7:19:12:40 X509v3 Authority Key Identifier: keyid:54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7d:94:1f:3c:7c:e0:ae:96:26:83:3a:92:44:24:35:e4:46: f4:5c:2e:c2:da:7c:fc:68:eb:fb:d3:9d:28:96:5f:5a:19:91: 8b:1f:dc:0e:b2:6b:ed:31:b4:cd:02:c6:79:c5:9e:d3:44:d3: 65:f1:ee:d8:35:6e:e2:4c:c7:10:eb:77:cc:7c:5b:2e:b6:a9: 13:8f:58:d0:a7:5f:37:38:0f:4f:2d:5b:49:dd:8a:0e:91:7d: 42:a6:8e:51:fa:86:f5:66:9a:37:76:41:c1:ea:2c:c0:e5:44: 26:ac:fb:8f:67:f8:cd:b9:9a:90:d9:6d:2c:96:22:92:8c:99: 00:12:32:fb:7b:8f:30:7f:9c:08:38:24:74:a2:28:7f:1e:1b: 38:37:53:60:e3:03:5c:d9:32:7f:aa:3f:57:2a:c7:ec:38:10: 8c:14:f0:32:fe:de:f0:e6:67:04:c1:19:b4:0b:c9:4c:64:4b: dd:13:c3:a0:2f:2e:a5:73:a0:b0:ca:d4:b6:43:c0:37:62:63: ce:23:e0:4c:fd:07:74:84:1d:c4:3b:d5:9c:6d:77:b1:96:b4: ac:d4:b7:25:dd:f5:33:0c:a8:f0:a3:94:06:b2:6f:d5:58:40: 30:37:b0:0c:2c:14:90:26:d4:55:75:88:b6:55:71:83:3e:1f: 43:ba:f1:ac -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUdCGX6tttkraBHMa0HW/MLrW6Z1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQwNzgyNEYyMDk0QkRCNUU5NkM0NTBBNEYzNjU2M0E3 MzIyNUNDQjAeFw0yNjA5MjExOTMyMDJaFw0yNjA5MjIyMzMxMDJaMDMxMTAvBgNV BAMTKEI5OUQyNTZCQjhFNzlGRTU3MTdGQjJBNjdDNEIwRUJBQjcxOTEyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqrq4kWgM4fYreZ0Lo6nS2knQ N9GKOejgumg0+U0E+UPdInJfnoIKPqSx0pl0kxhBQ4tund2BkQwQVCTBv5hz/jag O0Pqa8PmRe6oaq5AR5akxhOq9YdDuxtW1LJaXgcuMcvGiI/7fvCP2Oz4AFTIGRGD 9daRRnNo9FYwpvkAv8ctamUwXdNsA/NjlNSlfwDIldr77GaCN4xYu3M9jdZvAYTM R3KPldXQsM5fixPHV2IZMtQ1MpxKdFHqlqqHMmQOH9JFabmXVQ13o54aeP33hKeN dOWGVCNDMc2d5UOp33UNKW4zKmouEJ9kHfjyv7ist+xFM+y3YgLyHpjskV7/AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUuZ0la7jnn+Vxf7KmfEsOurcZEkAwHwYDVR0j BBgwFoAUVAeCTyCUvbXpbEUKTzZWOnMiXMswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExF LzAvNTQwNzgyNEYyMDk0QkRCNUU5NkM0NTBBNEYzNjU2M0E3MzIyNUNDQi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS81NDA3ODI0RjIwOTRCREI1RTk2QzQ1MEE0RjM2 NTYzQTczMjI1Q0NCLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExFLzAvNTQwNzgyNEYyMDk0 QkRCNUU5NkM0NTBBNEYzNjU2M0E3MzIyNUNDQi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACF9lB88fOCu liaDOpJEJDXkRvRcLsLafPxo6/vTnSiWX1oZkYsf3A6ya+0xtM0CxnnFntNE02Xx 7tg1buJMxxDrd8x8Wy62qROPWNCnXzc4D08tW0ndig6RfUKmjlH6hvVmmjd2QcHq LMDlRCas+49n+M25mpDZbSyWIpKMmQASMvt7jzB/nAg4JHSiKH8eGzg3U2DjA1zZ Mn+qP1cqx+w4EIwU8DL+3vDmZwTBGbQLyUxkS90Tw6AvLqVzoLDK1LZDwDdiY84j 4Ez9B3SEHcQ71Zxtd7GWtKzUtyXd9TMMqPCjlAayb9VYQDA3sAwsFJAm1FV1iLZV cYM+H0O68aw= -----END CERTIFICATE-----Generated at Mon Sep 21 23:56:40 2026 by rpki-client