$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft File: _u9qfUSgfrkJ7anFbFkwXloFXbc.mft (raw, json) Hash identifier: PhDq2iYUO3EJRQoIO6JJoWHAlwqC3tAm039AiG7cHBM= Subject key identifier: EA:52:71:DC:95:DD:D2:AE:4A:FF:4D:1A:06:08:94:17:53:48:1B:84 Authority key identifier: FE:EF:6A:7D:44:A0:7E:B9:09:ED:A9:C5:6C:59:30:5E:5A:05:5D:B7 Certificate issuer: /CN=FEEF6A7D44A07EB909EDA9C56C59305E5A055DB7 Certificate serial: 09FE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft Manifest number: 09FE Signing time: Thu 16 Apr 2026 10:32:53 +0000 Manifest this update: Thu 16 Apr 2026 10:32:53 +0000 Manifest next update: Sat 18 Apr 2026 10:32:53 +0000 Files and hashes: 1: _u9qfUSgfrkJ7anFbFkwXloFXbc.crl (hash: 83Sxo4la4DkoMyPsYLUi1C9yTit8sIc2rc+Q7g43zKo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 11:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2558 (0x9fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEEF6A7D44A07EB909EDA9C56C59305E5A055DB7 Validity Not Before: Apr 16 10:32:53 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EA5271DC95DDD2AE4AFF4D1A0608941753481B84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:05:6f:74:a8:6c:8d:d0:25:96:c0:db:dc: f2:d5:a0:4c:28:0f:8d:87:e7:cb:3b:d7:4e:ed:24: 92:9a:e4:f4:e4:e9:bf:fd:3e:cd:58:73:8e:d2:68: 54:6d:ff:e6:18:bc:fe:e6:7e:3e:50:77:fe:04:8d: ab:d6:5d:0f:78:c1:ae:78:6d:2a:8e:5e:b3:1f:ce: 74:bb:1d:ef:08:33:e4:c1:86:bd:cb:c9:0b:de:66: 16:3e:93:23:63:8a:f5:db:7b:63:88:d0:e7:19:81: c7:d6:be:29:1e:a5:70:36:e9:bc:38:22:ee:c9:96: 53:d1:d5:45:92:6c:d3:6b:ee:bc:81:fb:e4:ad:c5: aa:db:ba:73:69:16:6d:72:c9:63:b5:48:2e:6d:f8: 30:ee:de:7e:2e:cc:09:2e:bd:7b:7c:4a:ee:f5:91: d1:4b:6c:e4:2e:d7:9f:06:ab:59:7f:9e:5d:fe:2e: 82:f6:8e:a7:4a:2d:ae:ff:1f:f3:08:f3:5f:7a:b3: af:4a:78:2b:a2:73:1f:e4:13:07:f9:29:64:d4:22: 1e:75:2c:65:95:37:08:55:16:46:48:75:fe:dc:fe: 02:10:d0:80:92:68:00:46:c8:f4:b0:0f:7e:52:af: ee:5c:79:de:fe:04:7d:c1:63:92:d2:45:8f:d7:22: 23:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:52:71:DC:95:DD:D2:AE:4A:FF:4D:1A:06:08:94:17:53:48:1B:84 X509v3 Authority Key Identifier: keyid:FE:EF:6A:7D:44:A0:7E:B9:09:ED:A9:C5:6C:59:30:5E:5A:05:5D:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:25:50:bc:29:8f:c6:d1:dc:85:b2:51:8a:ff:fb:ab:3c:57: f1:7e:6d:c1:31:3b:a4:24:93:e7:6e:db:4f:2f:9a:d8:db:08: 75:19:03:0c:51:a1:ce:12:0b:1a:76:3f:9f:2b:4a:0a:80:f4: 10:cc:c4:53:c8:0e:e3:fd:37:89:fd:ce:f8:03:e7:cc:3c:06: de:92:e5:84:00:dd:3f:c6:ab:61:3d:61:2b:90:62:b4:28:b3: a6:cb:30:df:0a:1d:fc:96:7e:e7:a0:83:7b:15:24:d1:97:bc: b2:76:e5:ab:a6:b2:a2:e0:62:5b:16:03:54:b2:75:87:2d:1b: 14:14:dd:d6:81:81:b4:7c:b9:03:cd:23:70:46:1f:7f:e0:84: 2d:22:d5:0a:be:ee:77:3e:23:f7:eb:2c:ea:72:9f:44:7e:35: bd:5f:16:40:bf:1e:4c:ad:7b:8b:f6:8e:8d:5f:4e:a5:23:6c: 96:5a:18:6f:72:a5:6e:3c:6e:b0:bd:71:f2:19:4c:3d:8a:20: 31:67:4d:c5:a4:70:ef:d4:d4:07:df:20:11:d0:4d:5e:8f:a1: a8:8b:4d:57:d0:04:c3:d0:9f:ef:88:33:73:1c:31:cf:d0:85: d6:36:c2:c9:ca:c3:f2:af:ba:ad:fd:14:11:36:1c:65:47:9a: 7d:d4:1b:e2 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkVF RjZBN0Q0NEEwN0VCOTA5RURBOUM1NkM1OTMwNUU1QTA1NURCNzAeFw0yNjA0MTYx MDMyNTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVBNTI3MURDOTVEREQy QUU0QUZGNEQxQTA2MDg5NDE3NTM0ODFCODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVbQVvdKhsjdAllsDb3PLVoEwoD42H58s7107tJJKa5PTk6b/9 Ps1Yc47SaFRt/+YYvP7mfj5Qd/4EjavWXQ94wa54bSqOXrMfznS7He8IM+TBhr3L yQveZhY+kyNjivXbe2OI0OcZgcfWvikepXA26bw4Iu7JllPR1UWSbNNr7ryB++St xarbunNpFm1yyWO1SC5t+DDu3n4uzAkuvXt8Su71kdFLbOQu158Gq1l/nl3+LoL2 jqdKLa7/H/MI8196s69KeCuicx/kEwf5KWTUIh51LGWVNwhVFkZIdf7c/gIQ0ICS aABGyPSwD35Sr+5ced7+BH3BY5LSRY/XIiMbAgMBAAGjggILMIICBzAdBgNVHQ4E FgQU6lJx3JXd0q5K/00aBgiUF1NIG4QwHwYDVR0jBBgwFoAU/u9qfUSgfrkJ7anF bFkwXloFXbcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1VBTlRJ TkcvX3U5cWZVU2dmcmtKN2FuRmJGa3dYbG9GWGJjLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9fdTlxZlVTZ2Zya0o3YW5GYkZrd1hsb0ZYYmMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HVUFOVElORy9fdTlxZlVTZ2Zya0o3 YW5GYkZrd1hsb0ZYYmMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcSVQvCmPxtHchbJRiv/7qzxX8X5twTE7pCST527bTy+a2NsIdRkDDFGhzhIL GnY/nytKCoD0EMzEU8gO4/03if3O+APnzDwG3pLlhADdP8arYT1hK5BitCizpssw 3wod/JZ+56CDexUk0Ze8snblq6ayouBiWxYDVLJ1hy0bFBTd1oGBtHy5A80jcEYf f+CELSLVCr7udz4j9+ss6nKfRH41vV8WQL8eTK17i/aOjV9OpSNslloYb3Klbjxu sL1x8hlMPYogMWdNxaRw79TUB98gEdBNXo+hqItNV9AEw9Cf74gzcxwxz9CF1jbC ycrD8q+6rf0UETYcZUeafdQb4g== -----END CERTIFICATE-----Generated at Fri Apr 17 07:53:21 2026 by rpki-client