$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft File: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft (raw, json) Hash identifier: JfaWRjU/lpnr+BNx9lpiCOHbrRHtOctzfnASPN+7Mmk= Subject key identifier: CC:61:9F:3C:F1:20:F7:24:83:21:FE:20:7D:3A:1D:06:94:0E:75:4C Authority key identifier: C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05 Certificate issuer: /CN=A91BDB290000/serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005 Certificate serial: 401B0E822D30E8FBD425B181397EDAAC54B64242 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft Manifest number: 02D6 Signing time: Mon 09 Nov 2026 13:21:21 +0000 Manifest this update: Mon 09 Nov 2026 13:16:21 +0000 Manifest next update: Tue 10 Nov 2026 16:00:21 +0000 Files and hashes: 1: C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl (hash: FhjTW+p19/Il3cdzOS43U+k/sWW2FmpfHnuNgk9ovqM=) 2: 061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer (hash: etK9ChY/67xJMPxpSS2bELv6+079wOhz5Owjed+7V9s=) 3: 9F397B838061280C2F2A887AC9D64012310492D8.cer (hash: AkAR+lSILTN1pLkO4LJRfr6uv+VMbaYKmt4kHAXjuR0=) 4: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer (hash: Zo39dsWqNkolqaKhWzlf8458SfxFo6DnsdWakso6pqc=) 5: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer (hash: Wgiiza2OtZGJQUX76W3y7Jpru4jNxqcQx1dg64cWfx0=) 6: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer (hash: I5RrhNzkFBB9aTAVEwcT8m+Fq6yg/7jrMob8Rgy03bQ=) 7: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer (hash: wYdtix/LDee8ZEJGiTxD5AqF7ZWjOoSZiL6WSmE5qzo=) 8: BDC7715D29F4E43198D59315B71674EE9F648F6D.cer (hash: mHwEYS1tNelL6RV/T7poIrm2xe//+2sBhpMulCadIwE=) 9: 71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer (hash: e/12Bvs4XBSRwhh9g+zZp9qn/cEuRAq2sYTeeh5SElU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 16:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1b:0e:82:2d:30:e8:fb:d4:25:b1:81:39:7e:da:ac:54:b6:42:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=C49BAE2430BEEC354C1B14F226E761FC9BDCF005 Validity Not Before: Nov 9 13:16:21 2026 GMT Not After : Nov 10 16:00:21 2026 GMT Subject: CN=CC619F3CF120F7248321FE207D3A1D06940E754C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:db:75:c8:a5:43:e4:28:f0:aa:59:76:5a: e5:8e:65:b7:35:12:2c:8c:ee:69:7e:cd:89:83:63: 05:b9:d4:d6:0c:e3:e7:11:fb:23:6b:62:17:28:9b: 13:9e:0b:6e:15:14:d3:fb:a0:dd:dc:88:b8:09:58: 90:54:1e:5f:ca:d3:de:48:91:27:ff:a0:f5:35:e1: d9:45:d5:b0:21:63:fa:75:7d:82:b7:2e:4f:5e:2e: db:d3:80:3a:87:94:0d:00:63:30:f5:38:74:84:d1: 83:c1:9c:e4:ed:60:2a:b2:2f:b0:ee:36:47:6e:c5: 88:e7:47:f8:9a:00:ed:95:a1:ff:75:f2:d7:b2:a9: b4:03:1e:48:00:30:d4:3f:f6:e5:95:91:d4:b9:2c: 4a:f3:d4:1a:02:21:5e:3a:2b:81:9b:f3:87:c5:cf: 29:ef:27:d6:00:66:37:cd:b3:db:c3:4d:04:ce:d9: 9a:1e:9c:03:48:2e:66:c2:25:30:f7:37:db:52:1b: 40:df:ff:6d:db:ab:36:cb:45:c6:68:e3:5f:73:31: aa:d2:ae:db:a0:b6:d7:14:46:39:8f:8c:82:7c:4c: e7:59:47:d6:fa:d3:be:cd:0b:37:4e:59:81:09:b5: 77:6b:66:85:44:84:c4:fd:c6:a8:21:0e:bd:dc:f5: 3b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:61:9F:3C:F1:20:F7:24:83:21:FE:20:7D:3A:1D:06:94:0E:75:4C X509v3 Authority Key Identifier: keyid:C4:9B:AE:24:30:BE:EC:35:4C:1B:14:F2:26:E7:61:FC:9B:DC:F0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f9:c6:ca:59:84:cd:8c:42:25:da:32:50:c0:b5:07:b3:d3: 86:91:36:ee:91:70:88:d4:83:df:e2:f4:7a:8a:89:52:75:b6: 1d:7e:68:3f:2a:bc:d9:e5:40:3e:7d:c4:c9:db:66:cb:2b:a2: 73:c2:9a:2d:91:64:79:03:29:3a:65:15:6a:b6:36:2b:f6:e4: bc:ac:51:20:b6:b6:25:bd:e4:8e:44:52:ad:fc:54:0c:ce:95: 4a:2a:af:00:98:42:75:cd:99:3b:96:a7:c0:8a:5f:1c:3f:6e: cf:c7:07:a3:1f:fa:df:25:d9:0d:77:56:90:8a:af:04:b0:7f: 83:61:f2:3b:1a:a2:ac:40:68:65:90:81:c0:e2:da:c3:bd:10: e6:0b:9f:42:04:41:44:2c:af:fd:d9:a7:ac:49:35:74:c3:c0: f6:63:68:a4:ad:3f:9b:89:dc:62:ab:a6:bb:1b:ca:c9:a9:5f: 1a:40:3a:be:0e:2f:cf:04:70:4c:d2:c6:c9:c0:17:29:bd:8e: 77:20:e5:fd:89:c1:bd:da:85:38:40:82:3b:90:c3:ae:f7:3a: 97:3c:53:e7:91:fe:a3:91:01:78:5f:88:3e:00:38:c8:4e:13: 15:3e:d4:97:cb:d4:32:cc:d9:1f:b0:d1:26:d6:b4:ee:d8:74: 44:d4:5c:4c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUQBsOgi0w6PvUJbGBOX7arFS2QkIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQkRCMjkwMDAwMTEwLwYDVQQFEyhDNDlCQUUyNDMw QkVFQzM1NEMxQjE0RjIyNkU3NjFGQzlCRENGMDA1MB4XDTI2MTEwOTEzMTYyMVoX DTI2MTExMDE2MDAyMVowMzExMC8GA1UEAxMoQ0M2MTlGM0NGMTIwRjcyNDgzMjFG RTIwN0QzQTFEMDY5NDBFNzU0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9023XIpUPkKPCqWXZa5Y5ltzUSLIzuaX7NiYNjBbnU1gzj5xH7I2tiFyib E54LbhUU0/ug3dyIuAlYkFQeX8rT3kiRJ/+g9TXh2UXVsCFj+nV9grcuT14u29OA OoeUDQBjMPU4dITRg8Gc5O1gKrIvsO42R27FiOdH+JoA7ZWh/3Xy17KptAMeSAAw 1D/25ZWR1LksSvPUGgIhXjorgZvzh8XPKe8n1gBmN82z28NNBM7Zmh6cA0guZsIl MPc321IbQN//bdurNstFxmjjX3MxqtKu26C21xRGOY+MgnxM51lH1vrTvs0LN05Z gQm1d2tmhUSExP3GqCEOvdz1O68CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBTMYZ88 8SD3JIMh/iB9Oh0GlA51TDAfBgNVHSMEGDAWgBTEm64kML7sNUwbFPIm52H8m9zw BTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBLzMvQzQ5QkFFMjQzMEJFRUMzNTRDMUIx NEYyMjZFNzYxRkM5QkRDRjAwNS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveEp1dUpEQy03RFZNR3hUeUp1ZGhfSnZj OEFVLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8zL0M0OUJBRTI0MzBCRUVDMzU0QzFC MTRGMjI2RTc2MUZDOUJEQ0YwMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCL+cbKWYTNjEIl2jJQwLUH s9OGkTbukXCI1IPf4vR6iolSdbYdfmg/KrzZ5UA+fcTJ22bLK6JzwpotkWR5Ayk6 ZRVqtjYr9uS8rFEgtrYlveSORFKt/FQMzpVKKq8AmEJ1zZk7lqfAil8cP27Pxwej H/rfJdkNd1aQiq8EsH+DYfI7GqKsQGhlkIHA4trDvRDmC59CBEFELK/92aesSTV0 w8D2Y2ikrT+bidxiq6a7G8rJqV8aQDq+Di/PBHBM0sbJwBcpvY53IOX9icG92oU4 QII7kMOu9zqXPFPnkf6jkQF4X4g+ADjIThMVPtSXy9QyzNkfsNEm1rTu2HRE1FxM -----END CERTIFICATE-----Generated at Tue Nov 10 05:04:46 2026 by rpki-client