$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft File: 71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json) Hash identifier: XcPTLM+WRYP52AhQBiWNpgQ9fUDjzazFwXGwrJ2rqbM= Subject key identifier: AB:BB:6D:81:88:D5:0C:75:68:2A:B1:8A:A2:86:BF:62:4F:60:B7:60 Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 Certificate issuer: /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Certificate serial: 1A05A9E8634E982DEBDEDD5CF31625001CF8A6C0 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft Manifest number: 028F Signing time: Mon 21 Sep 2026 03:05:36 +0000 Manifest this update: Mon 21 Sep 2026 03:00:36 +0000 Manifest next update: Tue 22 Sep 2026 04:35:36 +0000 Files and hashes: 1: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=) 2: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=) 3: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: WaioRYqhOhAAZL7NeLL2aafyp66TdiKJSxS3qI8VyIM=) 4: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:05:a9:e8:63:4e:98:2d:eb:de:dd:5c:f3:16:25:00:1c:f8:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019 Validity Not Before: Sep 21 03:00:36 2026 GMT Not After : Sep 22 04:35:36 2026 GMT Subject: CN=ABBB6D8188D50C75682AB18AA286BF624F60B760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:3a:0d:7f:59:bc:f5:a4:85:db:ed:e0:83: 11:25:2d:40:d1:5d:3f:0c:58:c4:4d:7e:78:9d:9e: 20:a5:78:c6:81:38:e1:f8:1e:6f:73:6b:39:05:af: 43:a4:ea:d0:92:42:43:20:65:a2:d7:30:b5:b9:9a: 63:8e:96:72:6e:08:75:9d:b5:f9:eb:f5:14:5e:ac: 05:d2:63:93:d4:65:41:c5:a9:52:07:28:b1:3a:ef: b4:b5:84:b1:1f:6d:6b:81:d7:7d:e5:ef:80:cf:d4: a2:94:3e:13:9a:b6:db:1b:e4:c5:d5:bb:b6:37:20: fb:35:97:c8:cc:79:bc:09:aa:ef:38:8e:1e:9d:26: 85:6a:9d:44:2c:88:64:26:f3:ab:fa:b3:21:5b:5f: df:58:4d:5c:c8:7d:1e:d9:0e:55:9e:63:20:07:70: 6d:a3:c1:2b:af:f6:d2:6b:e2:01:30:63:72:e5:2b: 46:77:cb:b3:bb:30:14:c1:1c:4d:38:af:83:46:ca: af:24:65:17:a6:27:65:78:69:69:4a:9d:c5:ee:e6: 7a:2f:bf:a2:53:85:76:77:c7:66:64:86:56:8e:c8: 25:2c:dc:2d:a4:79:de:3a:9b:47:ce:35:36:ce:a0: a5:75:01:98:23:4a:48:be:37:9e:e1:cb:ad:b4:03: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BB:6D:81:88:D5:0C:75:68:2A:B1:8A:A2:86:BF:62:4F:60:B7:60 X509v3 Authority Key Identifier: keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:f4:74:e3:45:32:ad:99:7c:4e:1b:90:9a:5c:1f:90:22:9b: a7:12:de:01:fb:6d:a8:66:cc:5b:d9:13:cd:b4:20:ec:92:3b: b2:bc:43:9d:f9:04:4c:d5:eb:f5:01:b4:85:b0:27:19:71:2e: ac:e2:87:0f:e5:20:18:ac:01:b5:4e:44:22:d1:87:39:d0:07: d2:28:c7:89:21:c8:8a:7f:19:eb:a8:c7:88:cf:99:dc:6a:14: 49:ba:b8:70:ad:12:7f:b3:85:a6:c7:f0:84:2e:d8:93:23:58: 5b:05:0d:8c:96:1c:e0:df:4c:15:cc:33:ab:db:15:2e:1f:d9: 68:7d:c0:17:9c:24:6c:1e:b3:22:c1:ae:19:c0:e0:26:80:dc: 32:8a:77:ee:4a:d3:78:80:30:b4:64:f1:e5:de:cf:35:4e:f0: fc:12:0a:d2:af:7b:f3:a4:57:28:1e:fa:19:56:3b:53:80:04: ff:ba:40:cb:0d:94:c3:80:66:47:d3:e9:89:df:9c:97:6f:f3: 77:5f:82:45:43:f7:5a:a7:c5:7a:ca:cf:d9:71:02:e1:e8:53: 35:20:f6:46:dc:c6:c0:2e:c4:0a:58:8b:53:96:66:67:b6:09: 54:5d:d8:d8:94:c1:b0:16:9a:80:c9:dd:8c:35:8d:a6:70:2b: fa:a9:58:1b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUGgWp6GNOmC3r3t1c8xYlABz4psAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyg3MTUyNTk3MkUz QzExNTNERTUzMDU0Nzk4RjUxQTVCRDU1Qzc1MDE5MB4XDTI2MDkyMTAzMDAzNloX DTI2MDkyMjA0MzUzNlowMzExMC8GA1UEAxMoQUJCQjZEODE4OEQ1MEM3NTY4MkFC MThBQTI4NkJGNjI0RjYwQjc2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzeOg1/Wbz1pIXb7eCDESUtQNFdPwxYxE1+eJ2eIKV4xoE44fgeb3NrOQWv Q6Tq0JJCQyBlotcwtbmaY46Wcm4IdZ21+ev1FF6sBdJjk9RlQcWpUgcosTrvtLWE sR9ta4HXfeXvgM/UopQ+E5q22xvkxdW7tjcg+zWXyMx5vAmq7ziOHp0mhWqdRCyI ZCbzq/qzIVtf31hNXMh9HtkOVZ5jIAdwbaPBK6/20mviATBjcuUrRnfLs7swFMEc TTivg0bKryRlF6YnZXhpaUqdxe7mei+/olOFdnfHZmSGVo7IJSzcLaR53jqbR841 Ns6gpXUBmCNKSL43nuHLrbQDMcECAwEAAaOCAf8wggH7MB0GA1UdDgQWBBSru22B iNUMdWgqsYqihr9iT2C3YDAfBgNVHSMEGDAWgBRxUlly48EVPeUwVHmPUaW9VcdQ GTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzIvNzE1MjU5NzJFM0MxMTUzREU1MzA1 NDc5OEY1MUE1QkQ1NUM3NTAxOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYx RDY2MTFFMkIyQ0Q4QjdDNzJGRDFGRjIvY1ZKWmN1UEJGVDNsTUZSNWoxR2x2VlhI VUJrLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8yLzcxNTI1OTcyRTNDMTE1M0RFNTMw NTQ3OThGNTFBNUJENTVDNzUwMTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDN9HTjRTKtmXxOG5CaXB+Q IpunEt4B+22oZsxb2RPNtCDskjuyvEOd+QRM1ev1AbSFsCcZcS6s4ocP5SAYrAG1 TkQi0Yc50AfSKMeJIciKfxnrqMeIz5ncahRJurhwrRJ/s4Wmx/CELtiTI1hbBQ2M lhzg30wVzDOr2xUuH9lofcAXnCRsHrMiwa4ZwOAmgNwyinfuStN4gDC0ZPHl3s81 TvD8EgrSr3vzpFcoHvoZVjtTgAT/ukDLDZTDgGZH0+mJ35yXb/N3X4JFQ/dap8V6 ys/ZcQLh6FM1IPZG3MbALsQKWItTlmZntglUXdjYlMGwFpqAyd2MNY2mcCv6qVgb -----END CERTIFICATE-----Generated at Mon Sep 21 12:47:33 2026 by rpki-client