$ rpki-client -vvvf rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft File: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft (raw, json) Hash identifier: Mq2seNzxLDmldLnvuRsKKkRSXNNxZJPiHs/KHEleAug= Subject key identifier: 6F:AA:DA:9F:58:BD:1B:00:52:FE:8B:64:71:A1:A9:0A:16:9A:7A:00 Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 Certificate issuer: /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Certificate serial: 06BFD04329284129A84CB2644E1109D54A551446 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft Manifest number: B9 Signing time: Mon 21 Sep 2026 04:45:47 +0000 Manifest this update: Mon 21 Sep 2026 04:40:47 +0000 Manifest next update: Tue 22 Sep 2026 08:12:47 +0000 Files and hashes: 1: 3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa (hash: CBt4aj49jAfK/FkdSCAEmu5FJcJ8ZBpytmS6xaMxItA=) 2: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl (hash: cm1h/1ZsnLmehpDsiSb0RTgQT0M3rK742HhCxFqcOao=) 3: 323430333a376634303a666630303a3a2f34382d3438203d3e203230343733.roa (hash: AfAX13SxCLnlMaK5dhRCuMKxU7A8dV/NgyypCpd1bdY=) 4: 323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa (hash: o6RGuHIfda02+Jk34ePKyhchsrC+xHDAy6BJ51uRReg=) 5: 323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa (hash: ZRXaYx+Nrn2iAFlJIwnl9HLp8Eud4rItrm9qIQL8K3o=) 6: 3130332e3132392e3134342e302f32342d3234203d3e2035303635.roa (hash: r6atDIqgperuF3RfaudvB73QXSoXlYlurO9YxRuzsEo=) 7: 3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa (hash: xP411/3P+QncE7UBCG9FjIpMvagWAoQKRii7/7dwrps=) 8: 3130332e3132392e3134372e302f32342d3234203d3e203230343733.roa (hash: jLHkK85y6D6I/P5jhpzcJkW6hQFZ18OruOJ4poV43Y8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:bf:d0:43:29:28:41:29:a8:4c:b2:64:4e:11:09:d5:4a:55:14:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Validity Not Before: Sep 21 04:40:47 2026 GMT Not After : Sep 22 08:12:47 2026 GMT Subject: CN=6FAADA9F58BD1B0052FE8B6471A1A90A169A7A00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c5:2f:4b:89:c8:21:99:95:78:8b:cf:81:0e: fe:bb:a4:7a:55:c1:11:ef:50:91:4a:3f:28:74:55: ae:be:08:18:b0:de:98:b2:8c:55:70:ac:2b:5f:43: 29:ee:af:01:48:e6:ca:59:5b:c3:a7:cb:ee:f9:e1: 79:d3:39:9a:37:c8:e2:18:9a:64:96:bc:83:65:3d: e1:8b:83:82:30:d7:8f:2c:b3:e2:d4:04:e0:90:f3: b2:02:b1:88:18:52:03:be:67:9d:b4:ce:ab:9e:e4: f7:66:48:e5:87:74:a7:80:f0:c7:71:26:f2:2c:c5: d4:78:d0:04:7e:e9:d3:59:b4:f3:2c:ee:46:65:33: 65:83:29:03:77:a1:8f:1e:c5:64:2f:8c:f4:cb:4f: 70:6e:f9:f0:8d:35:c8:32:c2:a2:83:ef:52:d6:cc: 5e:84:e0:97:5a:77:6c:d1:48:a8:b8:0a:7b:21:02: da:07:ae:d3:d0:94:ea:23:89:85:c9:bf:21:e7:6b: 4a:0d:be:2d:35:5b:2f:21:37:95:55:4b:73:60:4e: 65:90:5f:e9:13:e8:8a:b7:93:f5:70:95:2e:e6:ed: 4a:d3:d5:45:fa:c2:4b:c6:93:20:25:f3:1c:bf:d7: f3:81:35:f9:53:19:2a:6e:bb:d9:85:87:9f:26:6c: 0c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AA:DA:9F:58:BD:1B:00:52:FE:8B:64:71:A1:A9:0A:16:9A:7A:00 X509v3 Authority Key Identifier: keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:1f:20:f2:9c:b6:eb:0e:a6:55:90:59:f8:0b:d1:b5:b1:88: 57:a4:58:18:1f:91:3c:0b:50:82:84:d8:e3:72:cc:8b:9d:ee: 1f:37:ea:50:98:89:45:4d:9a:77:a2:2a:60:74:eb:63:3d:c3: 67:2d:e1:09:ca:46:de:88:9f:24:11:a8:25:1f:c0:a4:4d:36: b5:b2:cf:1c:74:34:b3:95:cc:60:35:30:4f:7b:31:0c:9c:bf: 5d:81:5f:f6:31:a4:8f:28:dc:54:35:6f:0f:8b:24:93:d2:f9: f3:f1:ba:77:16:1b:31:67:37:79:16:97:db:78:95:27:7c:24: 24:77:f9:b2:9a:e3:42:e7:b1:33:46:6d:f8:e4:16:2c:e9:7c: c5:88:af:64:03:62:ff:61:51:ce:64:42:8f:c8:2e:19:97:bf: 5c:4f:14:ba:a9:a9:66:ec:2e:74:01:63:71:00:83:6f:cd:04: 68:1f:cc:71:e7:44:de:1d:63:0f:e6:a8:d7:36:ac:d7:1d:76: 50:f3:e3:34:68:8c:09:81:d2:63:76:51:8a:cb:d2:e1:41:50: 20:4a:03:67:3b:76:ba:d8:7b:b1:7b:8e:fb:56:5e:4c:74:69: d3:76:96:c1:64:26:81:10:10:b2:c3:95:01:68:7b:7b:d2:84: 3d:bd:c5:08 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUBr/QQykoQSmoTLJkThEJ1UpVFEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlD Q0Y1MEVBMzAeFw0yNjA5MjEwNDQwNDdaFw0yNjA5MjIwODEyNDdaMDMxMTAvBgNV BAMTKDZGQUFEQTlGNThCRDFCMDA1MkZFOEI2NDcxQTFBOTBBMTY5QTdBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxS9LicghmZV4i8+BDv67pHpV wRHvUJFKPyh0Va6+CBiw3piyjFVwrCtfQynurwFI5spZW8Ony+754XnTOZo3yOIY mmSWvINlPeGLg4Iw148ss+LUBOCQ87ICsYgYUgO+Z520zque5PdmSOWHdKeA8Mdx JvIsxdR40AR+6dNZtPMs7kZlM2WDKQN3oY8exWQvjPTLT3Bu+fCNNcgywqKD71LW zF6E4Jdad2zRSKi4CnshAtoHrtPQlOojiYXJvyHna0oNvi01Wy8hN5VVS3NgTmWQ X+kT6Iq3k/VwlS7m7UrT1UX6wkvGkyAl8xy/1/OBNflTGSpuu9mFh58mbAw9AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUb6ran1i9GwBS/otkcaGpChaaegAwHwYDVR0j BBgwFoAUVtLiXkCf6VahSo9aXA7qacz1DqMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAv NTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS81NkQyRTI1RTQwOUZFOTU2QTE0QThGNUE1QzBFRUE2 OUNDRjUwRUEzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAvNTZEMkUyNUU0MDlGRTk1NkEx NEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK0fIPKctusOplWQWfgL 0bWxiFekWBgfkTwLUIKE2ONyzIud7h836lCYiUVNmneiKmB062M9w2ct4QnKRt6I nyQRqCUfwKRNNrWyzxx0NLOVzGA1ME97MQycv12BX/YxpI8o3FQ1bw+LJJPS+fPx uncWGzFnN3kWl9t4lSd8JCR3+bKa40LnsTNGbfjkFizpfMWIr2QDYv9hUc5kQo/I LhmXv1xPFLqpqWbsLnQBY3EAg2/NBGgfzHHnRN4dYw/mqNc2rNcddlDz4zRojAmB 0mN2UYrL0uFBUCBKA2c7drrYe7F7jvtWXkx0adN2lsFkJoEQELLDlQFoe3vShD29 xQg= -----END CERTIFICATE-----Generated at Mon Sep 21 09:16:03 2026 by rpki-client