$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft File: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json) Hash identifier: 5N93qkNlW/c35711Upao29af4XeJk45ruZBnOehCCX8= Subject key identifier: D7:5A:21:CF:28:53:A3:85:15:8B:86:BC:41:FA:29:25:97:5B:72:73 Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05 Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005 Certificate serial: 2AAB6E819B0E8685F4DBA3335FC29E2DF4983541 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft Manifest number: 02D0 Signing time: Thu 05 Nov 2026 00:46:13 +0000 Manifest this update: Thu 05 Nov 2026 00:41:13 +0000 Manifest next update: Fri 06 Nov 2026 02:18:13 +0000 Files and hashes: 1: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=) 2: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=) 3: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=) 4: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=) 5: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=) 6: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=) 7: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=) 8: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=) 9: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: 5IRsN9ajcUydESgfRwVPAofV3elSTUyX8mYPJ9/y5GU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 02:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ab:6e:81:9b:0e:86:85:f4:db:a3:33:5f:c2:9e:2d:f4:98:35:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005 Validity Not Before: Nov 5 00:41:13 2026 GMT Not After : Nov 6 02:18:13 2026 GMT Subject: CN=D75A21CF2853A385158B86BC41FA2925975B7273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:9d:50:03:69:c1:fe:3d:de:3c:85:9f:98: f8:3c:8c:0b:9e:38:c7:21:d6:a8:2a:fa:d0:9c:c8: f6:52:c8:d3:b8:8d:22:1e:ad:24:22:1b:8e:14:e8: 14:8d:ec:f1:f8:7b:bb:a5:fd:e5:d6:d9:81:fb:d6: 75:43:b8:22:3b:59:b6:5a:d2:18:b8:25:0a:02:8c: ca:7b:33:ad:88:88:3c:29:19:13:5e:08:96:42:60: 37:46:cd:bd:46:c8:03:a8:2e:3c:52:c3:df:4f:70: 91:7c:e6:6f:15:0b:2d:3f:22:29:26:55:dd:0a:27: 2f:40:d2:49:bb:be:7d:33:cf:8b:80:a5:ca:44:cf: e3:76:0e:16:5f:d3:bf:d5:bf:27:91:e4:23:eb:b7: 4a:72:22:17:3f:0b:79:66:f3:df:7a:81:ea:cd:24: c5:a8:ac:86:8f:d1:37:eb:a0:6f:56:a7:5e:bb:72: ee:59:7b:73:c9:16:19:03:f8:f0:0c:5c:06:74:77: a4:c7:03:99:00:22:fb:72:28:cf:37:dd:6c:54:6e: 86:b0:a3:22:5e:2d:bb:60:df:11:ae:00:0d:52:37: f3:9d:02:02:4c:37:34:5e:be:d2:e9:4f:e0:91:4e: 01:f4:d0:4c:03:2a:7e:24:12:ce:eb:a9:4a:1f:49: bd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5A:21:CF:28:53:A3:85:15:8B:86:BC:41:FA:29:25:97:5B:72:73 X509v3 Authority Key Identifier: keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a8:47:7e:9b:22:6e:ca:7c:97:b4:2d:01:83:cb:10:88:e5: 1d:c2:37:0b:bd:f0:c6:50:9d:cc:48:79:b0:1c:e2:70:33:19: 6b:58:97:80:37:09:96:4f:4d:73:0a:72:71:1e:07:3e:e4:85: 33:43:01:35:0c:d9:0e:ab:23:ce:7f:b0:c4:44:03:e3:8d:92: 39:a6:33:ba:e3:02:a6:7d:ea:c5:9e:f9:33:e9:01:92:f1:24: de:27:62:04:00:91:0a:43:c9:4b:43:fd:d9:86:af:db:70:53: f1:01:31:6e:db:21:b9:b6:49:5b:7b:b6:6f:06:22:77:1a:72: 2c:05:78:f9:da:6a:02:f8:46:d4:29:72:c8:e9:38:e8:e1:bd: 20:b2:98:8e:bd:6d:dd:7d:c5:b3:99:10:2e:15:30:31:31:fa: a7:da:39:68:15:9d:ac:63:a8:cd:ed:1b:16:59:a3:33:9d:88: 18:36:0e:38:af:79:15:96:5c:ad:b2:be:e2:65:38:8e:c2:53: 5c:fd:ec:83:13:1f:5d:8b:ad:ee:ff:0f:dc:40:0f:36:46:c3: b1:db:15:20:ce:cc:a0:3a:78:48:cd:98:86:e3:6b:3c:3e:d9: a7:12:b6:4a:02:80:ce:07:67:0a:9b:c1:ab:63:75:6a:d0:40: 35:7a:29:09 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUKqtugZsOhoX026MzX8KeLfSYNUEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDNDlCQUUyNDMw QkVFQzM1NEMxQjE0RjIyNkU3NjFGQzlCRENGMDA1MB4XDTI2MTEwNTAwNDExM1oX DTI2MTEwNjAyMTgxM1owMzExMC8GA1UEAxMoRDc1QTIxQ0YyODUzQTM4NTE1OEI4 NkJDNDFGQTI5MjU5NzVCNzI3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANAInVADacH+Pd48hZ+Y+DyMC544xyHWqCr60JzI9lLI07iNIh6tJCIbjhTo FI3s8fh7u6X95dbZgfvWdUO4IjtZtlrSGLglCgKMynszrYiIPCkZE14IlkJgN0bN vUbIA6guPFLD309wkXzmbxULLT8iKSZV3QonL0DSSbu+fTPPi4ClykTP43YOFl/T v9W/J5HkI+u3SnIiFz8LeWbz33qB6s0kxaisho/RN+ugb1anXrty7ll7c8kWGQP4 8AxcBnR3pMcDmQAi+3IozzfdbFRuhrCjIl4tu2DfEa4ADVI3850CAkw3NF6+0ulP 4JFOAfTQTAMqfiQSzuupSh9JvcECAwEAAaOCAf8wggH7MB0GA1UdDgQWBBTXWiHP KFOjhRWLhrxB+ikll1tyczAfBgNVHSMEGDAWgBTEm64kML7sNUwbFPIm52H8m9zw BTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzMvQzQ5QkFFMjQzMEJFRUMzNTRDMUIx NEYyMjZFNzYxRkM5QkRDRjAwNS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveEp1dUpEQy03RFZNR3hUeUp1ZGhfSnZj OEFVLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8zL0M0OUJBRTI0MzBCRUVDMzU0QzFC MTRGMjI2RTc2MUZDOUJEQ0YwMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuqEd+myJuynyXtC0Bg8sQ iOUdwjcLvfDGUJ3MSHmwHOJwMxlrWJeANwmWT01zCnJxHgc+5IUzQwE1DNkOqyPO f7DERAPjjZI5pjO64wKmferFnvkz6QGS8STeJ2IEAJEKQ8lLQ/3Zhq/bcFPxATFu 2yG5tklbe7ZvBiJ3GnIsBXj52moC+EbUKXLI6Tjo4b0gspiOvW3dfcWzmRAuFTAx Mfqn2jloFZ2sY6jN7RsWWaMznYgYNg44r3kVllytsr7iZTiOwlNc/eyDEx9di63u /w/cQA82RsOx2xUgzsygOnhIzZiG42s8PtmnErZKAoDOB2cKm8GrY3Vq0EA1eikJ -----END CERTIFICATE-----Generated at Thu Nov 5 19:23:46 2026 by rpki-client