$ rpki-client -vvvf rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft File: 8DFE241B6B56425D05308D6CF84E530F0AD99312.mft (raw, json) Hash identifier: n7eLbgZlRAxsCPpx9l3EkTXC9OEyS1khfC2DEcKnI7g= Subject key identifier: 18:BA:02:6B:C3:2A:44:E9:2D:64:17:56:93:D5:52:EE:77:98:19:F0 Authority key identifier: 8D:FE:24:1B:6B:56:42:5D:05:30:8D:6C:F8:4E:53:0F:0A:D9:93:12 Certificate issuer: /CN=8DFE241B6B56425D05308D6CF84E530F0AD99312 Certificate serial: 44C8B8FC69513365AFF2D5DC9173FA13CBE94289 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft Manifest number: B5 Signing time: Mon 21 Sep 2026 21:32:14 +0000 Manifest this update: Mon 21 Sep 2026 21:27:14 +0000 Manifest next update: Tue 22 Sep 2026 22:22:14 +0000 Files and hashes: 1: 3130332e3135392e3230362e302f32332d3234203d3e203331393732.roa (hash: eK6+/TDh22lTbQdbALPHM65FmvpRbot7SqYBFf/0Vc0=) 2: 8DFE241B6B56425D05308D6CF84E530F0AD99312.crl (hash: 468c9JWJ+TRoSLN6YaAavoUEYYPlh0/fyGVFO3aoJFA=) 3: 3130332e3135392e3230362e302f32332d3234203d3e20313332333639.roa (hash: Njq8PYL4sI6Vl6OpGpULpdTiodD6fNVPkIMKZbxgiBg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.crl rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c8:b8:fc:69:51:33:65:af:f2:d5:dc:91:73:fa:13:cb:e9:42:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DFE241B6B56425D05308D6CF84E530F0AD99312 Validity Not Before: Sep 21 21:27:14 2026 GMT Not After : Sep 22 22:22:14 2026 GMT Subject: CN=18BA026BC32A44E92D64175693D552EE779819F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:0b:ab:f4:02:8e:d0:d9:bb:73:00:72:86: 74:65:8d:2f:27:a6:a0:05:65:4b:04:3f:39:d2:cd: 36:66:dd:c9:a5:f9:3b:66:de:0d:15:d6:5f:e9:d3: 47:93:fa:93:db:3d:52:6a:2a:f7:96:57:fa:a8:be: fa:14:9a:42:d5:0a:70:9b:f7:a5:70:b9:a4:d3:2f: 92:87:0f:2f:9e:2a:24:26:34:cd:e4:ee:d3:89:40: c0:ee:7e:f5:88:e7:30:03:fa:34:30:29:49:d2:8a: fb:a2:31:44:82:6a:91:9b:ed:5a:02:15:db:70:b3: 09:eb:48:e2:18:54:a4:80:3f:79:98:52:21:d3:fb: 4f:0e:83:fd:47:e0:b9:e9:96:0e:2d:fb:73:0d:18: ef:4e:29:84:c3:cf:da:28:ac:8f:13:6b:13:90:7a: 49:7c:4b:57:f4:4f:30:02:1e:4f:cd:14:30:91:b0: 9b:6e:6e:c6:ff:46:46:6c:f9:de:55:4a:57:10:a8: 75:0f:85:19:b3:30:ba:03:6f:56:45:f8:e9:5e:21: ce:7c:e6:a8:5d:4f:28:5f:f5:82:01:f4:56:18:75: 8a:e2:c0:74:56:c3:4d:a1:82:2d:1a:3c:57:a6:46: 96:33:0e:1f:88:e0:32:a9:bc:78:db:5e:1e:f2:4f: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BA:02:6B:C3:2A:44:E9:2D:64:17:56:93:D5:52:EE:77:98:19:F0 X509v3 Authority Key Identifier: keyid:8D:FE:24:1B:6B:56:42:5D:05:30:8D:6C:F8:4E:53:0F:0A:D9:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:27:83:22:67:4f:9a:3b:45:87:08:c5:78:f9:3f:bc:bf:d5: bb:24:62:36:27:93:be:3d:1c:3e:50:f8:09:ee:ce:9d:b1:5f: c8:f5:90:5c:34:78:8a:3c:43:a1:e6:92:bd:9b:2e:84:5b:bd: 28:f4:de:83:60:07:2f:22:dd:fb:09:15:0e:17:71:1d:69:3b: 86:30:1a:b2:93:df:c2:af:7f:24:9a:c9:05:02:5f:6e:cf:4b: 36:69:c5:af:8a:b2:05:c5:45:10:e8:ae:de:96:e7:53:a4:77: 1a:17:7b:43:c8:12:13:de:8e:fb:ea:ba:ea:38:4f:05:54:31: e7:e6:96:d6:ce:d7:23:d3:6f:6a:97:69:51:24:b0:f1:57:8d: 16:8d:2a:58:45:65:f0:7e:20:10:99:0a:44:7c:46:24:71:58: e2:d0:a6:bd:ae:14:a0:45:ea:15:55:f7:e1:83:6e:9a:2b:50: e5:d0:af:58:2b:76:6b:29:70:2b:30:51:e3:27:3a:5a:45:cc: 4f:0e:50:3f:1c:a6:6d:79:92:46:9a:ff:1b:7b:33:2f:39:27: 87:fe:05:7d:01:f1:d6:f0:6c:f2:82:c8:ce:ea:4c:c0:58:1c: 8a:60:9d:bc:7f:72:98:c8:ee:67:4e:85:b7:33:ba:e6:e7:1c: 06:0b:1d:49 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIURMi4/GlRM2Wv8tXckXP6E8vpQokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERGRTI0MUI2QjU2NDI1RDA1MzA4RDZDRjg0RTUzMEYw QUQ5OTMxMjAeFw0yNjA5MjEyMTI3MTRaFw0yNjA5MjIyMjIyMTRaMDMxMTAvBgNV BAMTKDE4QkEwMjZCQzMyQTQ0RTkyRDY0MTc1NjkzRDU1MkVFNzc5ODE5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgYwur9AKO0Nm7cwByhnRljS8n pqAFZUsEPznSzTZm3cml+Ttm3g0V1l/p00eT+pPbPVJqKveWV/qovvoUmkLVCnCb 96VwuaTTL5KHDy+eKiQmNM3k7tOJQMDufvWI5zAD+jQwKUnSivuiMUSCapGb7VoC FdtwswnrSOIYVKSAP3mYUiHT+08Og/1H4Lnplg4t+3MNGO9OKYTDz9oorI8TaxOQ ekl8S1f0TzACHk/NFDCRsJtubsb/RkZs+d5VSlcQqHUPhRmzMLoDb1ZF+OleIc58 5qhdTyhf9YIB9FYYdYriwHRWw02hgi0aPFemRpYzDh+I4DKpvHjbXh7yT80dAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUGLoCa8MqROktZBdWk9VS7neYGfAwHwYDVR0j BBgwFoAUjf4kG2tWQl0FMI1s+E5TDwrZkxIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFROUy8w LzhERkUyNDFCNkI1NjQyNUQwNTMwOEQ2Q0Y4NEU1MzBGMEFEOTkzMTIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOERGRTI0MUI2QjU2NDI1RDA1MzA4RDZDRjg0RTUz MEYwQUQ5OTMxMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RUTlMvMC84REZFMjQxQjZCNTY0MjVE MDUzMDhENkNGODRFNTMwRjBBRDk5MzEyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSeDImdPmjtFhwjF ePk/vL/VuyRiNieTvj0cPlD4Ce7OnbFfyPWQXDR4ijxDoeaSvZsuhFu9KPTeg2AH LyLd+wkVDhdxHWk7hjAaspPfwq9/JJrJBQJfbs9LNmnFr4qyBcVFEOiu3pbnU6R3 Ghd7Q8gSE96O++q66jhPBVQx5+aW1s7XI9NvapdpUSSw8VeNFo0qWEVl8H4gEJkK RHxGJHFY4tCmva4UoEXqFVX34YNumitQ5dCvWCt2aylwKzBR4yc6WkXMTw5QPxym bXmSRpr/G3szLzknh/4FfQHx1vBs8oLIzupMwFgcimCdvH9ymMjuZ06FtzO65ucc BgsdSQ== -----END CERTIFICATE-----Generated at Tue Sep 22 10:26:15 2026 by rpki-client