$ rpki-client -vvvf rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft File: BD49467776DCA7472F88470782DAD5722E5AFE49.mft (raw, json) Hash identifier: YyV/DYB08GzLwzwwpYinQlJMsJ1Oxahk5eS4Vqew+4Q= Subject key identifier: 0F:8E:7F:00:81:4D:F2:BB:8D:74:AA:9F:1F:31:A9:48:F2:17:78:2B Authority key identifier: BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49 Certificate issuer: /CN=BD49467776DCA7472F88470782DAD5722E5AFE49 Certificate serial: 651BAA82EA7EE62E9BDBEEEC1A83FA67D35DF77A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft Manifest number: BA Signing time: Wed 23 Sep 2026 16:28:14 +0000 Manifest this update: Wed 23 Sep 2026 16:23:14 +0000 Manifest next update: Thu 24 Sep 2026 18:27:14 +0000 Files and hashes: 1: 3230322e3132362e36342e302f32322d3234203d3e2033343632.roa (hash: JSztXJfkuE++Rr44bJxraDVeK0vJ1Z2LCKTFE+mnoSo=) 2: 3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa (hash: O4tFAGNoujrjTe1QFIiUNSL1btHs7X9nG4rNOC2WBrk=) 3: 3130332e3133322e3135362e302f32322d3234203d3e2033343632.roa (hash: VPf6uIakoYZwsPqscjmnQeuLXrwksi5sXN8VBO8l4Lc=) 4: 3230322e3132362e36342e302f32302d3234203d3e203233363735.roa (hash: xFZEcb1Fw2/MAZxDxH/3wq6F1a0AY71y22CkSbZ45UA=) 5: BD49467776DCA7472F88470782DAD5722E5AFE49.crl (hash: 7i0Wa7AWX3nELqd1vXJIO1Ah2xHIgm09H1KgA23w2lY=) 6: 3230322e3132362e36342e302f32302d3234203d3e2033343632.roa (hash: pv9lagNPR6ISK4mgr1r0U+d2oQ424uEiHyejWXcDKkg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1b:aa:82:ea:7e:e6:2e:9b:db:ee:ec:1a:83:fa:67:d3:5d:f7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD49467776DCA7472F88470782DAD5722E5AFE49 Validity Not Before: Sep 23 16:23:14 2026 GMT Not After : Sep 24 18:27:14 2026 GMT Subject: CN=0F8E7F00814DF2BB8D74AA9F1F31A948F217782B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:0e:66:f7:68:05:0d:d3:f0:c0:c7:3c:0c: ec:be:50:2c:85:48:d0:fb:09:b9:66:20:b9:48:31: 98:0d:d3:7e:68:7b:4e:de:73:93:3d:71:3a:66:05: d0:e9:7a:8a:90:02:5d:d9:38:ce:a3:74:c0:7c:14: 53:9e:15:30:ef:85:b3:84:49:d0:5b:63:e9:d4:58: c1:64:62:6f:45:28:35:bb:89:2f:18:b7:33:7a:ee: 56:fc:72:b7:d6:95:17:7a:24:6d:f4:6c:0d:ff:32: 52:6f:d9:f5:2d:4d:cc:89:b5:08:47:92:22:4e:8f: 50:07:5e:8a:2a:4c:88:f3:14:e4:3a:e7:33:92:bd: c2:3a:e9:91:35:f8:9c:c0:68:b3:cd:af:91:2c:86: 08:76:9d:f6:30:df:ca:dd:b2:71:02:6f:25:5b:e9: 5c:93:19:fc:f6:82:63:96:9f:01:f7:58:8e:f1:d4: b8:18:8d:41:04:a2:0b:c1:26:dd:46:95:bf:d8:fc: c8:37:90:57:60:2c:42:06:04:29:72:c4:2c:b4:ce: bd:68:96:91:36:8c:d1:f1:4e:5f:99:d3:a2:4b:7f: de:05:2e:7c:3c:de:cf:27:0a:e9:87:63:a3:00:08: 7a:9d:2b:f9:75:29:71:4b:3d:36:b2:3e:03:7f:5b: d9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8E:7F:00:81:4D:F2:BB:8D:74:AA:9F:1F:31:A9:48:F2:17:78:2B X509v3 Authority Key Identifier: keyid:BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:74:18:54:e6:d8:d2:13:96:1b:b7:d9:1b:a5:c6:9d:58:ab: a9:bf:1e:55:9d:f2:2f:a3:de:71:a7:47:b1:9e:2b:6b:2b:23: c5:35:19:24:f7:4e:bb:51:fe:2d:38:8f:4e:18:90:cd:84:5f: bf:97:0f:38:e8:42:32:38:92:be:26:88:56:4d:e0:d0:b3:95: fa:8e:c6:a5:d1:35:c6:63:ad:46:fd:da:ef:54:a8:ae:1d:4a: 14:35:1c:38:0c:ea:67:8c:ec:4e:26:60:ba:2a:6c:03:33:9b: c9:28:89:fa:2d:c7:82:64:22:7a:81:7b:78:e6:ba:c3:b9:73: eb:dc:05:ad:9b:6f:2c:aa:7f:be:7c:2b:c1:8b:04:f2:75:33: 8b:67:07:0e:97:da:21:69:3d:5a:37:af:5b:4b:5c:38:35:e5: 53:ce:31:cf:91:8a:88:8e:f5:b2:d9:e5:8a:10:02:65:19:7c: cd:f3:fd:ca:94:00:f6:f1:61:49:ab:ae:a3:0b:ba:26:cf:11: 94:3b:d2:0e:a9:28:8a:14:4a:fe:9b:ca:60:a7:d7:25:ae:0b: d5:46:7b:8c:6e:06:f2:c3:f7:88:98:4a:4b:18:ea:5d:b5:fc: b4:41:b4:27:02:41:39:d1:12:f8:1c:7b:f7:61:33:73:4b:e7: 98:39:65:f4 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUZRuqgup+5i6b2+7sGoP6Z9Nd93owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ0OTQ2Nzc3NkRDQTc0NzJGODg0NzA3ODJEQUQ1NzIy RTVBRkU0OTAeFw0yNjA5MjMxNjIzMTRaFw0yNjA5MjQxODI3MTRaMDMxMTAvBgNV BAMTKDBGOEU3RjAwODE0REYyQkI4RDc0QUE5RjFGMzFBOTQ4RjIxNzc4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmA5m92gFDdPwwMc8DOy+UCyF SND7CblmILlIMZgN035oe07ec5M9cTpmBdDpeoqQAl3ZOM6jdMB8FFOeFTDvhbOE SdBbY+nUWMFkYm9FKDW7iS8YtzN67lb8crfWlRd6JG30bA3/MlJv2fUtTcyJtQhH kiJOj1AHXooqTIjzFOQ65zOSvcI66ZE1+JzAaLPNr5Eshgh2nfYw38rdsnECbyVb 6VyTGfz2gmOWnwH3WI7x1LgYjUEEogvBJt1Glb/Y/Mg3kFdgLEIGBClyxCy0zr1o lpE2jNHxTl+Z06JLf94FLnw83s8nCumHY6MACHqdK/l1KXFLPTayPgN/W9kXAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUD45/AIFN8ruNdKqfHzGpSPIXeCswHwYDVR0j BBgwFoAUvUlGd3bcp0cviEcHgtrVci5a/kkwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFNNQy8w L0JENDk0Njc3NzZEQ0E3NDcyRjg4NDcwNzgyREFENTcyMkU1QUZFNDkuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQkQ0OTQ2Nzc3NkRDQTc0NzJGODg0NzA3ODJEQUQ1 NzIyRTVBRkU0OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RTTUMvMC9CRDQ5NDY3Nzc2RENBNzQ3 MkY4ODQ3MDc4MkRBRDU3MjJFNUFGRTQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXQYVObY0hOWG7fZ G6XGnVirqb8eVZ3yL6PecadHsZ4raysjxTUZJPdOu1H+LTiPThiQzYRfv5cPOOhC MjiSviaIVk3g0LOV+o7GpdE1xmOtRv3a71Sorh1KFDUcOAzqZ4zsTiZguipsAzOb ySiJ+i3HgmQieoF7eOa6w7lz69wFrZtvLKp/vnwrwYsE8nUzi2cHDpfaIWk9Wjev W0tcODXlU84xz5GKiI71stnlihACZRl8zfP9ypQA9vFhSauuowu6Js8RlDvSDqko ihRK/pvKYKfXJa4L1UZ7jG4G8sP3iJhKSxjqXbX8tEG0JwJBOdES+Bx792Ezc0vn mDll9A== -----END CERTIFICATE-----Generated at Thu Sep 24 00:33:20 2026 by rpki-client