$ rpki-client -vvvf rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft File: 59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft (raw, json) Hash identifier: 8rRcf00f7fdmeVwWct+r95N+FNs+kzNdoqYNB3Mso5Q= Subject key identifier: CA:8D:43:E6:17:01:B7:AC:17:94:E6:1F:51:84:6A:56:7B:C3:9F:7D Authority key identifier: 59:DA:68:B6:23:93:24:DC:D6:FD:0C:8F:E9:94:9E:2F:7D:E1:FF:D8 Certificate issuer: /CN=59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8 Certificate serial: 7D5A40C3BC349D75CB357264EDC2A44379832C44 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft Manifest number: B2 Signing time: Mon 21 Sep 2026 10:51:58 +0000 Manifest this update: Mon 21 Sep 2026 10:46:58 +0000 Manifest next update: Tue 22 Sep 2026 13:18:58 +0000 Files and hashes: 1: 3231312e37362e3134342e302f32302d3234203d3e203138303435.roa (hash: XB6CWToOXl9Eprx8O0GqXMHxNfa/u9YN/n5hJCm5JGA=) 2: 59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl (hash: Tsbm1rtcSi6kBDlTtdqQUQt2r4bWX6jbpkDHLLfKLAQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5a:40:c3:bc:34:9d:75:cb:35:72:64:ed:c2:a4:43:79:83:2c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8 Validity Not Before: Sep 21 10:46:58 2026 GMT Not After : Sep 22 13:18:58 2026 GMT Subject: CN=CA8D43E61701B7AC1794E61F51846A567BC39F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:85:af:01:e5:f1:52:de:64:50:a5:d3:e0: a9:45:54:fb:d1:4d:cb:09:d4:7a:9b:a0:93:47:48: 65:57:a9:09:14:04:1f:a2:0a:e6:27:9e:b8:9a:63: 31:21:19:7f:14:4d:96:28:7b:93:70:93:ad:da:1f: 0d:66:70:5b:a1:93:aa:e9:90:71:f7:35:31:79:99: d0:21:8d:38:e4:13:8c:2b:41:1a:da:4d:0c:9e:85: 5c:d7:1a:1b:96:84:29:8c:31:d3:c3:cd:b4:e3:1a: 31:2c:c7:b8:fa:be:2c:13:55:97:31:1b:be:11:c7: f4:40:4f:89:e6:bc:5f:9e:42:58:2a:9e:d2:df:5f: fe:5f:9c:52:17:05:92:82:f4:78:50:96:fa:0d:70: ad:5f:d8:86:3a:04:34:74:1c:03:80:0e:b7:79:18: 9b:34:d5:93:4d:aa:4f:db:0d:83:bd:f0:ae:32:7b: 66:d0:10:63:98:00:c4:bd:30:f0:bb:59:fc:5a:b7: 8f:db:92:ec:cf:07:56:16:cf:c8:f9:58:6e:e5:2b: 51:86:e7:74:63:06:5d:fe:e6:8c:9c:31:fd:c6:bd: 2f:51:a9:97:34:78:cd:f4:52:2e:7f:88:05:47:f9: 70:e7:6c:bf:19:3a:98:95:29:6d:13:d8:fb:62:06: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8D:43:E6:17:01:B7:AC:17:94:E6:1F:51:84:6A:56:7B:C3:9F:7D X509v3 Authority Key Identifier: keyid:59:DA:68:B6:23:93:24:DC:D6:FD:0C:8F:E9:94:9E:2F:7D:E1:FF:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a5:d5:bb:60:49:da:f1:31:c3:ca:6d:d9:d3:68:69:58:c9: f8:c4:73:c3:06:64:b5:fb:20:7f:6d:94:34:f4:ae:12:8a:3c: 28:53:50:2c:5b:6e:11:6a:9a:3a:a2:8e:a8:31:d6:6c:c1:57: 39:03:a5:46:ee:b1:ea:28:2b:a9:df:71:48:c4:9f:75:cd:f7: c7:62:60:cb:be:e2:7a:bf:56:86:70:3f:23:15:2e:10:4d:a0: 05:a1:a1:53:41:21:32:e2:95:7c:30:c5:a3:d2:31:48:0a:80: df:20:1a:86:c9:4b:c6:1d:65:d1:c2:21:5f:ea:28:25:bd:96: d0:e3:85:39:dd:d3:66:34:39:bd:38:0b:0e:43:fc:0b:da:8e: 72:13:6d:45:c4:6f:99:e6:ad:1f:16:6b:52:91:86:d9:a6:b0: cc:a1:c0:5a:a4:40:f2:44:dc:82:ea:6b:72:97:25:24:52:b9: f7:06:71:fb:20:31:72:db:3c:0c:4d:84:07:24:24:f4:7e:67: e0:45:84:7b:ac:09:d5:71:39:bb:7a:b7:ee:fe:68:b7:af:20: b3:e8:f7:f2:b4:b6:fc:fd:a3:66:62:16:a1:04:c3:32:08:35: fd:24:02:40:7d:c4:c8:bb:6c:d6:7f:53:35:0a:0f:12:e5:ea: a7:99:0a:3e -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUfVpAw7w0nXXLNXJk7cKkQ3mDLEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlEQTY4QjYyMzkzMjREQ0Q2RkQwQzhGRTk5NDlFMkY3 REUxRkZEODAeFw0yNjA5MjExMDQ2NThaFw0yNjA5MjIxMzE4NThaMDMxMTAvBgNV BAMTKENBOEQ0M0U2MTcwMUI3QUMxNzk0RTYxRjUxODQ2QTU2N0JDMzlGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/4WvAeXxUt5kUKXT4KlFVPvR TcsJ1HqboJNHSGVXqQkUBB+iCuYnnriaYzEhGX8UTZYoe5Nwk63aHw1mcFuhk6rp kHH3NTF5mdAhjTjkE4wrQRraTQyehVzXGhuWhCmMMdPDzbTjGjEsx7j6viwTVZcx G74Rx/RAT4nmvF+eQlgqntLfX/5fnFIXBZKC9HhQlvoNcK1f2IY6BDR0HAOADrd5 GJs01ZNNqk/bDYO98K4ye2bQEGOYAMS9MPC7Wfxat4/bkuzPB1YWz8j5WG7lK1GG 53RjBl3+5oycMf3GvS9RqZc0eM30Ui5/iAVH+XDnbL8ZOpiVKW0T2PtiBm2lAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUyo1D5hcBt6wXlOYfUYRqVnvDn30wHwYDVR0j BBgwFoAUWdpotiOTJNzW/QyP6ZSeL33h/9gwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lOT1BB Qy8wLzU5REE2OEI2MjM5MzI0RENENkZEMEM4RkU5OTQ5RTJGN0RFMUZGRDguY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTlEQTY4QjYyMzkzMjREQ0Q2RkQwQzhGRTk5 NDlFMkY3REUxRkZEOC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NJTk9QQUMvMC81OURBNjhCNjIz OTMyNERDRDZGRDBDOEZFOTk0OUUyRjdERTFGRkQ4Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6XVu2BJ 2vExw8pt2dNoaVjJ+MRzwwZktfsgf22UNPSuEoo8KFNQLFtuEWqaOqKOqDHWbMFX OQOlRu6x6igrqd9xSMSfdc33x2Jgy77ier9WhnA/IxUuEE2gBaGhU0EhMuKVfDDF o9IxSAqA3yAahslLxh1l0cIhX+ooJb2W0OOFOd3TZjQ5vTgLDkP8C9qOchNtRcRv meatHxZrUpGG2aawzKHAWqRA8kTcguprcpclJFK59wZx+yAxcts8DE2EByQk9H5n 4EWEe6wJ1XE5u3q37v5ot68gs+j38rS2/P2jZmIWoQTDMgg1/SQCQH3EyLts1n9T NQoPEuXqp5kKPg== -----END CERTIFICATE-----Generated at Mon Sep 21 23:56:20 2026 by rpki-client