$ rpki-client -vvvf rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft File: 55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft (raw, json) Hash identifier: lSvYJB4JEOiNCMkyM47YkF/qCu5957ZzAStJGGghzNw= Subject key identifier: BA:27:76:B4:66:D1:A8:E9:42:0E:0D:B9:BD:E1:71:01:B3:21:E9:C6 Authority key identifier: 55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97 Certificate issuer: /CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697 Certificate serial: 34CFD22D39EB21FEDF9AFE67B88CF9FC48CAA59F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer Subject info access: rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 05:26:44 +0000 Manifest this update: Fri 25 Sep 2026 05:21:44 +0000 Manifest next update: Sat 26 Sep 2026 07:32:44 +0000 Files and hashes: 1: 55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl (hash: JxxRhlixAMg4JBMQdJoss2hcoBP7mBU8ZqhsVK0JDeQ=) 2: 3130332e3132372e3233372e302f32342d3234203d3e203633383937.roa (hash: hLL+Q2dyswUs44c6qgjOFEnwxGdXH4rlp2JBE4jLeaI=) 3: 323430303a343436303a3a2f33322d3332203d3e203633383937.roa (hash: E17SRJCOW39t5BmRtT7oN3GTu5stDbJU5j3SmVWuYIY=) 4: 3130332e3137382e33372e302f32342d3234203d3e203633383937.roa (hash: dBLtMtWolWPZlDBlQNEYLj3mkdf7gjz7o7zCR6CwyI8=) 5: 3130332e3137382e33362e302f32342d3234203d3e203633383937.roa (hash: 2azY5QpqkCNrePgWVeAMiXZ5eEir6bAcf/jcts5dKaA=) 6: 3130332e3137382e33362e302f32332d3233203d3e203633383937.roa (hash: TrUjkrPBuZfmFYv7xRBVx68uC1wSPuSMTE2msjPc8Oc=) 7: 3130332e3132372e3233382e302f32342d3234203d3e20323038393332.roa (hash: nt3GnjyC68uevHd0pUpAVGqFmziCH3936csURlgKs7c=) 8: 3130332e3132372e3233392e302f32342d3234203d3e203633383937.roa (hash: RXB9NbnwUCoIODvg6FbjUt5jkhMEopd79EmJGHVqbuA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:cf:d2:2d:39:eb:21:fe:df:9a:fe:67:b8:8c:f9:fc:48:ca:a5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697 Validity Not Before: Sep 25 05:21:44 2026 GMT Not After : Sep 26 07:32:44 2026 GMT Subject: CN=BA2776B466D1A8E9420E0DB9BDE17101B321E9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f3:d1:84:4a:ed:33:ec:18:f3:c6:84:99:86: ae:61:24:ab:d8:31:37:2c:33:5a:1e:e7:80:4a:29: d3:92:ec:e1:70:92:c5:c4:55:5f:41:ef:a8:85:e6: d6:37:e2:d6:a0:3b:6a:8c:f8:ce:fc:39:ae:7c:26: 6a:86:88:a9:c8:73:77:da:ce:f1:c6:ce:d8:f9:a9: b6:9f:7e:9c:cf:fe:52:3b:75:72:db:25:5d:f2:73: cd:75:b9:48:67:2f:60:1d:84:94:1a:d5:94:73:36: 07:45:d1:5a:64:ce:69:b4:2c:2e:c7:04:1f:dd:ed: 63:2e:c9:a0:d0:4d:4d:47:42:fa:58:5c:62:eb:03: c6:d1:e2:e8:d8:75:39:b6:2b:34:3c:4c:4e:8d:05: 57:af:8a:e9:81:b5:7b:da:a6:dd:17:a4:c4:88:14: 88:d8:be:1f:4f:a3:8a:5a:c1:66:1c:d5:ca:39:40: 6b:ca:4c:91:bc:51:fa:8f:61:d9:b0:d1:89:d8:ff: 08:07:2c:45:c0:d8:90:f5:b6:4a:bd:13:9f:f0:1d: 62:78:fa:a8:f1:2b:5c:07:6a:12:04:c0:aa:13:8e: dd:6d:a5:53:d8:58:05:36:cd:ba:e2:cf:dc:dc:8b: e0:1b:d6:31:80:f6:58:9c:35:94:11:8b:8e:c4:c1: f2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:27:76:B4:66:D1:A8:E9:42:0E:0D:B9:BD:E1:71:01:B3:21:E9:C6 X509v3 Authority Key Identifier: keyid:55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:0b:e8:92:a8:78:56:a3:7d:b0:a9:87:f9:68:cb:28:4f:f7: fa:ac:47:90:c5:f4:09:74:80:a6:cb:aa:3d:fd:48:a7:34:c8: 76:f1:4a:09:78:c5:cc:cc:51:76:c6:a4:32:f2:b2:36:52:85: a9:dc:5f:fb:a8:5d:12:61:7b:a0:b0:f3:b1:92:bd:b2:b4:27: 8d:36:ba:c0:c0:75:bf:85:0b:af:3c:66:3a:09:ec:01:17:37: 06:1b:c9:5f:ee:a6:22:f8:d1:56:46:6d:f0:20:99:b1:75:b8: a1:53:d4:5a:e9:b3:63:18:f7:1a:c4:29:a2:1b:58:cb:37:9d: 60:e1:f1:db:53:da:22:54:52:c2:77:58:aa:3a:5d:be:18:b0: db:c7:03:8c:b9:49:5f:79:3f:b6:12:2e:d1:07:85:d9:94:fc: 92:c3:75:8b:1f:86:34:4f:57:98:8b:c7:11:3e:3e:c0:b2:00: 44:5f:5e:68:df:a2:b3:5e:5a:3a:ba:e5:c6:e1:3b:8e:37:94: 58:b5:fd:11:ef:00:9a:17:31:65:f1:a6:03:05:70:07:e9:ba: e7:62:e7:11:86:91:9f:fe:ca:25:a2:9e:60:3b:3f:60:75:67: 05:79:ac:9e:f1:ea:b8:3c:21:fd:5a:1a:c9:db:ca:d1:b6:d2: 86:59:46:b8 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUNM/SLTnrIf7fmv5nuIz5/EjKpZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwNDJFNDE2QUREQzAzQTUxNjRBN0JGRkRGRjJDM0JG Mjg1RTY5NzAeFw0yNjA5MjUwNTIxNDRaFw0yNjA5MjYwNzMyNDRaMDMxMTAvBgNV BAMTKEJBMjc3NkI0NjZEMUE4RTk0MjBFMERCOUJERTE3MTAxQjMyMUU5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV89GESu0z7BjzxoSZhq5hJKvY MTcsM1oe54BKKdOS7OFwksXEVV9B76iF5tY34tagO2qM+M78Oa58JmqGiKnIc3fa zvHGztj5qbaffpzP/lI7dXLbJV3yc811uUhnL2AdhJQa1ZRzNgdF0Vpkzmm0LC7H BB/d7WMuyaDQTU1HQvpYXGLrA8bR4ujYdTm2KzQ8TE6NBVeviumBtXvapt0XpMSI FIjYvh9Po4pawWYc1co5QGvKTJG8UfqPYdmw0YnY/wgHLEXA2JD1tkq9E5/wHWJ4 +qjxK1wHahIEwKoTjt1tpVPYWAU2zbriz9zci+Ab1jGA9licNZQRi47EwfJfAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUuid2tGbRqOlCDg25veFxAbMh6cYwHwYDVR0j BBgwFoAUVQQuQWrdwDpRZKe//f8sO/KF5pcwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVk9DT00v MC81NTA0MkU0MTZBRERDMDNBNTE2NEE3QkZGREZGMkMzQkYyODVFNjk3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzU1MDQyRTQxNkFEREMwM0E1MTY0QTdCRkZERkYy QzNCRjI4NUU2OTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WT0NPTS8wLzU1MDQyRTQxNkFEREMw M0E1MTY0QTdCRkZERkYyQzNCRjI4NUU2OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClC+iSqHhWo32w qYf5aMsoT/f6rEeQxfQJdICmy6o9/UinNMh28UoJeMXMzFF2xqQy8rI2UoWp3F/7 qF0SYXugsPOxkr2ytCeNNrrAwHW/hQuvPGY6CewBFzcGG8lf7qYi+NFWRm3wIJmx dbihU9Ra6bNjGPcaxCmiG1jLN51g4fHbU9oiVFLCd1iqOl2+GLDbxwOMuUlfeT+2 Ei7RB4XZlPySw3WLH4Y0T1eYi8cRPj7AsgBEX15o36KzXlo6uuXG4TuON5RYtf0R 7wCaFzFl8aYDBXAH6brnYucRhpGf/solop5gOz9gdWcFeaye8eq4PCH9WhrJ28rR ttKGWUa4 -----END CERTIFICATE-----Generated at Fri Sep 25 09:57:57 2026 by rpki-client