$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/III/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.mft File: Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.mft (raw, json) Hash identifier: mhL7CVSQB38f0p/VbSaa9Dhc36PiyvyJOHngRsjyNTs= Subject key identifier: F8:59:36:5F:31:1B:D5:27:94:B5:4A:F1:0F:83:6C:A1:01:EA:0F:48 Authority key identifier: 57:3F:B8:56:7C:A1:ED:ED:29:EC:81:72:38:E6:8E:20:F2:1B:CD:75 Certificate issuer: /CN=573FB8567CA1EDED29EC817238E68E20F21BCD75 Certificate serial: 60 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/III/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.mft Manifest number: 5C Signing time: Sat 18 Apr 2026 22:03:08 +0000 Manifest this update: Sat 18 Apr 2026 22:03:08 +0000 Manifest next update: Mon 20 Apr 2026 22:03:08 +0000 Files and hashes: 1: Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.crl (hash: DOwMtXCyCOR0AkCLnKH2xzShehzccfQ0nrkdPmRXbfo=) 2: tbS3w6XLB0m7dmwDdalwAb7fOaU.roa (hash: TpfRiYbFsp9EnkMwrDnhH+7NtlNUBx7b+/IzDltb3NU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/III/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/III/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 13:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573FB8567CA1EDED29EC817238E68E20F21BCD75 Validity Not Before: Apr 18 22:03:08 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F859365F311BD52794B54AF10F836CA101EA0F48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f6:2d:4a:a3:b3:2a:7b:de:e8:2f:34:5e:73: 9d:b6:6c:63:59:ca:1d:79:a8:db:9e:fe:ae:4f:bf: 77:6d:60:c5:7a:0c:6a:da:0b:dd:f5:64:d7:66:6c: f3:45:a9:d4:eb:a1:a7:0e:36:74:64:1b:74:48:89: 4a:be:cd:6b:a4:c9:e6:f9:02:e7:57:92:3d:6c:a9: 3c:c2:21:57:75:f9:7c:c3:fa:21:62:3d:3a:4d:bc: f8:fd:40:cc:9b:7c:da:ad:90:b3:e2:79:dd:55:a1: d1:4c:e6:79:6f:66:d1:f5:ab:40:e5:39:f1:56:c2: 00:7f:c2:5e:23:bd:e7:b2:07:2d:01:d1:ca:b8:1f: ed:2e:4e:1b:f8:92:12:d1:eb:fa:f8:35:d3:68:1b: ed:c1:26:ed:89:18:70:e0:7d:cc:3c:6a:8f:1d:d4: 27:e6:81:75:c1:13:96:12:9c:f4:fa:df:23:56:ab: 56:2a:72:a4:a1:f8:c3:bc:b7:5a:b1:e5:26:7f:bd: fc:6e:41:30:cf:8b:67:41:a1:a8:b6:c2:7d:1c:39: ef:a2:47:fc:5c:4e:d3:c5:19:95:c6:34:be:a4:9f: 8f:ca:ec:a7:4b:a6:07:ab:d0:33:c0:85:ff:e0:a0: f5:46:6d:68:95:d9:84:9d:64:9e:30:78:49:7c:04: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:59:36:5F:31:1B:D5:27:94:B5:4A:F1:0F:83:6C:A1:01:EA:0F:48 X509v3 Authority Key Identifier: keyid:57:3F:B8:56:7C:A1:ED:ED:29:EC:81:72:38:E6:8E:20:F2:1B:CD:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/III/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/III/Vz-4Vnyh7e0p7IFyOOaOIPIbzXU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:c4:7f:77:62:48:23:88:12:38:3c:ae:8c:d3:5c:56:0c:36: 37:27:b6:9c:fd:32:bf:af:cf:c0:3f:78:09:4f:6b:86:0a:e3: 02:31:fb:05:a8:0f:cf:53:8f:5f:41:1d:98:0f:2d:1c:15:27: ac:37:db:1b:e5:27:6d:8d:70:9f:7e:56:ab:c1:c2:70:10:f2: 17:a3:4a:70:54:23:3b:0c:7b:87:df:95:64:72:35:41:86:ba: 82:bf:bd:3c:36:1e:81:16:01:24:b3:a8:ea:73:f1:a0:67:07: 20:4b:dd:b5:0c:d8:fb:96:a8:8a:16:74:bb:a6:da:47:77:ce: 29:11:97:da:6b:0a:c0:49:85:d6:4d:d2:be:c9:7e:78:3e:0b: 05:43:8a:1d:c5:19:0b:7f:34:17:f0:91:ad:f1:93:51:28:2d: 32:85:f6:ee:6f:cf:83:ef:d1:e3:b7:bb:d7:ce:b3:ad:61:c3: 34:56:90:db:d1:83:a4:9a:8d:be:35:71:bc:05:1f:32:73:d5: b5:90:cc:2e:e1:9c:0c:52:74:6f:67:32:14:e4:5a:b6:8e:ca: 98:f1:0b:1c:f2:82:c5:3f:58:39:ed:18:90:4d:17:0a:c4:91: d2:fc:29:ec:77:db:1b:ae:8b:56:16:17:49:c3:81:02:81:a2: 18:00:f2:f1 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NzNG Qjg1NjdDQTFFREVEMjlFQzgxNzIzOEU2OEUyMEYyMUJDRDc1MB4XDTI2MDQxODIy MDMwOFoXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoRjg1OTM2NUYzMTFCRDUy Nzk0QjU0QUYxMEY4MzZDQTEwMUVBMEY0ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN/2LUqjsyp73ugvNF5znbZsY1nKHXmo257+rk+/d21gxXoMatoL 3fVk12Zs80Wp1Ouhpw42dGQbdEiJSr7Na6TJ5vkC51eSPWypPMIhV3X5fMP6IWI9 Ok28+P1AzJt82q2Qs+J53VWh0UzmeW9m0fWrQOU58VbCAH/CXiO957IHLQHRyrgf 7S5OG/iSEtHr+vg102gb7cEm7YkYcOB9zDxqjx3UJ+aBdcETlhKc9PrfI1arVipy pKH4w7y3WrHlJn+9/G5BMM+LZ0GhqLbCfRw576JH/FxO08UZlcY0vqSfj8rsp0um B6vQM8CF/+Cg9UZtaJXZhJ1knjB4SXwENekCAwEAAaOCAgEwggH9MB0GA1UdDgQW BBT4WTZfMRvVJ5S1SvEPg2yhAeoPSDAfBgNVHSMEGDAWgBRXP7hWfKHt7SnsgXI4 5o4g8hvNdTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGA1UdHwRSMFAwTqBM oEqGSHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JSUkvVnot NFZueWg3ZTBwN0lGeU9PYU9JUElielhVLmNybDBgBggrBgEFBQcBAQRUMFIwUAYI KwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9W ei00Vm55aDdlMHA3SUZ5T09hT0lQSWJ6WFUuY2VyMA4GA1UdDwEB/wQEAwIHgDCB mQYIKwYBBQUHAQsEgYwwgYkwVAYIKwYBBQUHMAuGSHJzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS9JSUkvVnotNFZueWg3ZTBwN0lGeU9PYU9JUEli elhVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/ BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAKTEf3diSCOI Ejg8rozTXFYMNjcntpz9Mr+vz8A/eAlPa4YK4wIx+wWoD89Tj19BHZgPLRwVJ6w3 2xvlJ22NcJ9+VqvBwnAQ8hejSnBUIzsMe4fflWRyNUGGuoK/vTw2HoEWASSzqOpz 8aBnByBL3bUM2PuWqIoWdLum2kd3zikRl9prCsBJhdZN0r7Jfng+CwVDih3FGQt/ NBfwka3xk1EoLTKF9u5vz4Pv0eO3u9fOs61hwzRWkNvRg6Sajb41cbwFHzJz1bWQ zC7hnAxSdG9nMhTkWraOypjxCxzygsU/WDntGJBNFwrEkdL8Kex32xuui1YWF0nD gQKBohgA8vE= -----END CERTIFICATE-----Generated at Sun Apr 19 11:01:38 2026 by rpki-client