$ rpki-client -vvvf rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft File: 164EB710D7AA83CB67EE2E709B4F195437239363.mft (raw, json) Hash identifier: D8sS+SkHc71t9lf5n10vUFSgEDPeiywBk/pdkM89zzg= Subject key identifier: 4A:C5:15:4B:94:14:E4:A5:15:F9:FA:F7:45:32:9D:23:3C:E8:CF:AE Authority key identifier: 16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63 Certificate issuer: /CN=164EB710D7AA83CB67EE2E709B4F195437239363 Certificate serial: 084E355B410736C1AA7B3ECB938AB7F245491723 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft Manifest number: B2 Signing time: Sun 20 Sep 2026 23:54:42 +0000 Manifest this update: Sun 20 Sep 2026 23:49:42 +0000 Manifest next update: Tue 22 Sep 2026 02:47:42 +0000 Files and hashes: 1: 164EB710D7AA83CB67EE2E709B4F195437239363.crl (hash: d/kw1tfS7CrkpqPJ/0p9eUCIBFWbAY5244o/8DjK3t8=) 2: 323430363a3330303a3a2f33322d3332203d3e2033343632.roa (hash: Mx2hdpo1JSD9a9oOTPfRMGnVumGCxyTkbl1EN6cIp8s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4e:35:5b:41:07:36:c1:aa:7b:3e:cb:93:8a:b7:f2:45:49:17:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=164EB710D7AA83CB67EE2E709B4F195437239363 Validity Not Before: Sep 20 23:49:42 2026 GMT Not After : Sep 22 02:47:42 2026 GMT Subject: CN=4AC5154B9414E4A515F9FAF745329D233CE8CFAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:45:da:e5:a0:7a:d1:5f:25:f0:f8:8e:d5:6b: df:5d:3d:c4:0f:27:c1:2c:44:67:af:1d:a1:7f:58: 39:8a:2f:53:2d:c7:78:07:7a:c2:0a:6e:0e:6d:3e: f4:28:db:d5:20:77:95:6e:3c:24:ba:d0:e0:68:e8: 2e:a3:b0:59:d5:48:87:50:2d:b0:d9:83:3e:1c:0c: c5:c4:37:d7:9a:bb:d8:95:e6:1b:92:32:c9:88:ea: e9:0e:12:5f:fe:9b:c1:85:48:fd:dd:47:53:77:0c: 67:25:a1:d7:fa:3f:67:6b:34:87:36:fc:45:13:b2: 6a:6e:b3:09:93:6d:3e:db:64:59:0c:c0:58:86:fe: 62:10:f3:b2:3b:1d:31:b2:6a:da:01:c6:33:86:68: 5c:0b:3e:fc:e3:cf:60:97:23:bb:a3:37:11:b5:24: 07:e9:7c:22:8d:10:0b:9f:8c:10:be:61:d8:c7:a8: 2f:77:2e:73:43:00:1f:ee:f2:b6:8f:9d:e8:35:a7: 9e:1e:26:92:d1:0f:71:f6:57:b2:d6:32:ab:7c:8b: e0:cb:22:62:b8:9e:d4:28:41:80:97:c9:ec:ab:7f: 1a:14:0b:32:a3:d0:5d:d3:77:60:5b:63:7c:9a:a8: 5e:de:e0:5f:8d:70:cf:5c:cb:d7:e8:2a:13:0b:4e: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C5:15:4B:94:14:E4:A5:15:F9:FA:F7:45:32:9D:23:3C:E8:CF:AE X509v3 Authority Key Identifier: keyid:16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:10:9d:8b:26:16:fd:db:eb:e3:2e:5e:cc:ce:65:f1:ec:d3: 72:85:70:50:32:de:a2:40:82:48:a9:d0:c4:82:ea:9d:3d:32: d1:7e:78:7e:36:cc:29:6a:cf:99:6a:cd:22:98:c6:3c:60:41: ce:49:ba:14:85:08:2b:0e:fe:a6:8b:a7:8b:f0:f7:1e:8f:f1: d7:9d:a9:fd:32:c3:3e:2c:f4:90:06:41:3a:ac:32:8d:2a:64: fc:13:be:76:84:10:ed:5d:e9:b8:5a:1e:a2:7e:a5:62:cc:b8: f0:9b:57:8f:48:e5:cd:2f:85:c0:da:e2:3e:26:7d:91:23:14: 50:b3:90:80:37:d3:79:65:cf:73:06:ae:12:4e:e1:07:c9:c0: a8:49:42:7a:a7:2d:aa:6b:66:cf:77:cc:c2:85:7a:56:74:61: 83:74:5c:d1:b0:fa:fa:5c:2b:d0:b3:83:4b:d1:a3:10:ab:85: 22:4f:b6:39:e1:75:5d:1f:3c:a6:28:a9:b4:38:da:b5:ca:d9: 06:a2:e4:02:98:29:af:9a:bc:fb:f6:ed:60:22:ec:34:d1:02: f3:7a:a1:54:ee:56:d3:5f:5e:09:47:c6:f4:67:4b:57:53:c6: fd:cc:28:fb:43:11:8c:ba:bb:9a:9e:b3:a7:2b:02:75:06:1e: 07:b2:a5:e7 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUCE41W0EHNsGqez7Lk4q38kVJFyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0RUI3MTBEN0FBODNDQjY3RUUyRTcwOUI0RjE5NTQz NzIzOTM2MzAeFw0yNjA5MjAyMzQ5NDJaFw0yNjA5MjIwMjQ3NDJaMDMxMTAvBgNV BAMTKDRBQzUxNTRCOTQxNEU0QTUxNUY5RkFGNzQ1MzI5RDIzM0NFOENGQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRdrloHrRXyXw+I7Va99dPcQP J8EsRGevHaF/WDmKL1Mtx3gHesIKbg5tPvQo29Ugd5VuPCS60OBo6C6jsFnVSIdQ LbDZgz4cDMXEN9eau9iV5huSMsmI6ukOEl/+m8GFSP3dR1N3DGclodf6P2drNIc2 /EUTsmpuswmTbT7bZFkMwFiG/mIQ87I7HTGyatoBxjOGaFwLPvzjz2CXI7ujNxG1 JAfpfCKNEAufjBC+YdjHqC93LnNDAB/u8raPneg1p54eJpLRD3H2V7LWMqt8i+DL ImK4ntQoQYCXyeyrfxoUCzKj0F3Td2BbY3yaqF7e4F+NcM9cy9foKhMLTunPAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUSsUVS5QU5KUV+fr3RTKdIzzoz64wHwYDVR0j BBgwFoAUFk63ENeqg8tn7i5wm08ZVDcjk2MwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1BVU0VS LzAvMTY0RUI3MTBEN0FBODNDQjY3RUUyRTcwOUI0RjE5NTQzNzIzOTM2My5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8xNjRFQjcxMEQ3QUE4M0NCNjdFRTJFNzA5QjRG MTk1NDM3MjM5MzYzLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1BVU0VSLzAvMTY0RUI3MTBEN0FB ODNDQjY3RUUyRTcwOUI0RjE5NTQzNzIzOTM2My5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG8QnYsmFv3b 6+MuXszOZfHs03KFcFAy3qJAgkip0MSC6p09MtF+eH42zClqz5lqzSKYxjxgQc5J uhSFCCsO/qaLp4vw9x6P8dedqf0ywz4s9JAGQTqsMo0qZPwTvnaEEO1d6bhaHqJ+ pWLMuPCbV49I5c0vhcDa4j4mfZEjFFCzkIA303llz3MGrhJO4QfJwKhJQnqnLapr Zs93zMKFelZ0YYN0XNGw+vpcK9Czg0vRoxCrhSJPtjnhdV0fPKYoqbQ42rXK2Qai 5AKYKa+avPv27WAi7DTRAvN6oVTuVtNfXglHxvRnS1dTxv3MKPtDEYy6u5qes6cr AnUGHgeypec= -----END CERTIFICATE-----Generated at Mon Sep 21 21:18:09 2026 by rpki-client