$ rpki-client -vvvf rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft File: 101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft (raw, json) Hash identifier: eXMZeBBIF+RwxgIuk2Om027qOekkppb4LxxdAtAEDVw= Subject key identifier: FF:24:8A:7D:5F:7A:D0:DE:47:30:89:3F:E9:A4:36:5F:A4:A7:B4:AF Authority key identifier: 10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4 Certificate issuer: /CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4 Certificate serial: 3C01CDA83E1CCAF4BDBE9A747A059063A456D72C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft Manifest number: FA Signing time: Tue 10 Nov 2026 05:22:49 +0000 Manifest this update: Tue 10 Nov 2026 05:17:49 +0000 Manifest next update: Wed 11 Nov 2026 07:21:49 +0000 Files and hashes: 1: 101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl (hash: uZ4pIo9TauQiU1aQEybdEHnUUa1hvXY3ecRSr42isZ4=) 2: 3130332e3133302e3132352e302f32342d3234203d3e20313331363336.roa (hash: FraePq7gvqKVgRVRs1hOCUPexz3gSr4BPRhnGrHTV3o=) 3: 3231312e37362e3138382e302f32332d3234203d3e20313331363336.roa (hash: oaNsp11upkBZ+JGYlmo3nCJ8dB+RQUZt5gJM6iJrwHk=) 4: 3130332e3133302e3132342e302f32322d3234203d3e20313331363336.roa (hash: 7MNXU7sfreKdDoH2cxg35XbGCH5NeuOsP993lyzfqsc=) 5: 3130332e3133302e3132372e302f32342d3234203d3e20313331363336.roa (hash: FnT/XgOP5REsMrJKvplqM9/TZ2tdCkQ9b4citLvn+6U=) 6: 323430333a623963303a3a2f33322d3438203d3e20313331363336.roa (hash: E288eui5EN66onNVEK7Y344pLWOHjEel/MAK2S1bEhQ=) 7: 3130332e3133302e3132362e302f32342d3234203d3e20313331363336.roa (hash: TLjcZQcFu7MKcP1kT7lAPY8o3wjcQeXfdOkLoUquYVA=) 8: 3130332e3133302e3132342e302f32342d3234203d3e20313331363336.roa (hash: VXtVToak1u7PW+U+n97OPXO4Dchb6DLpI7qRdjvNc0Q=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 07:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:01:cd:a8:3e:1c:ca:f4:bd:be:9a:74:7a:05:90:63:a4:56:d7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4 Validity Not Before: Nov 10 05:17:49 2026 GMT Not After : Nov 11 07:21:49 2026 GMT Subject: CN=FF248A7D5F7AD0DE4730893FE9A4365FA4A7B4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:f3:20:1f:70:ee:e4:98:1c:dc:e1:a5:80: a6:ec:af:c5:02:fc:8a:a4:a0:1a:23:a2:80:dc:6a: a0:6e:5b:72:b7:e8:a0:b8:ff:97:fe:2a:09:96:47: ef:06:7f:24:81:8d:9f:f7:7c:07:72:b6:8d:05:3c: 3a:3a:0f:86:32:71:ae:84:94:a1:37:76:34:d0:6a: c1:ec:78:20:6c:42:7f:97:88:9e:57:6b:18:75:6c: 85:41:d4:5a:3f:ff:d1:ee:b9:35:e2:18:08:e0:95: 50:73:2e:db:79:d1:25:a8:13:86:a4:d2:d0:b4:81: f0:7f:09:e5:d7:a9:d9:38:f4:88:51:05:66:4e:6f: 60:f0:b9:11:6a:08:21:25:db:f3:e2:21:35:ea:96: 20:a9:aa:b5:7c:cd:9b:74:cf:7b:88:94:cb:43:28: 13:d0:11:c0:0f:1a:89:d3:84:73:69:5b:85:13:b0: d3:60:9a:76:ac:47:be:38:c5:bf:99:e0:6f:15:24: 6d:c6:e3:81:e7:ce:d0:8d:5c:50:f9:b5:92:5e:b9: 79:9e:1b:a0:39:a2:a7:4d:d4:84:28:9d:61:85:5c: 74:51:26:94:8c:04:ea:59:36:0f:93:8e:2d:fa:36: 53:ac:fe:41:2e:cd:5b:2e:b7:6c:b5:d8:07:d2:db: a8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:24:8A:7D:5F:7A:D0:DE:47:30:89:3F:E9:A4:36:5F:A4:A7:B4:AF X509v3 Authority Key Identifier: keyid:10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:92:16:4f:9a:f6:03:3d:9c:62:0c:47:55:6d:c3:28:7b:08: 1c:b0:bd:4a:a4:8b:c4:d8:ff:dc:34:d5:6f:e3:18:fd:61:c2: 86:df:20:5d:61:45:4d:4b:a5:79:6d:81:94:45:b8:b2:4f:82: f8:3e:9e:c7:a0:75:a9:ce:a7:ea:75:bc:0e:fd:32:fa:b3:b0: 40:39:51:13:c7:f0:40:1f:58:1a:90:5c:7c:18:fa:79:49:92: d6:56:bb:5b:be:fb:16:09:e0:bc:d5:3b:12:d6:53:55:64:4e: 49:0a:79:cd:ee:85:a7:09:47:69:ff:df:2d:c9:e2:f5:45:87: 15:7e:4d:f7:6e:97:35:ce:8e:33:9f:4a:75:c6:a0:2f:88:fd: 7f:82:cd:74:05:5b:8b:9a:42:55:5b:d9:1b:47:3a:ed:c0:44: 9e:9e:bf:5f:3b:f3:64:58:70:5e:37:42:1c:02:34:91:bc:a2: 64:df:53:3f:7a:78:ff:81:a1:ff:30:e1:cc:25:65:73:b3:58: a3:48:c2:69:41:d3:04:37:cc:c4:5c:a8:b7:83:26:70:f3:52: 81:cc:e8:d5:5c:2d:36:6a:b9:4a:94:f0:9f:ee:47:db:9f:d6: 01:94:b2:da:8b:80:ef:41:92:a5:5c:1f:b2:23:95:cb:18:89: 2a:e4:96:d6 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUPAHNqD4cyvS9vpp0egWQY6RW1ywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAxQjBBN0Y5MEQ1ODczMUU5NjE4REM0MzI0MzhDOEJG REIyOEFGNDAeFw0yNjExMTAwNTE3NDlaFw0yNjExMTEwNzIxNDlaMDMxMTAvBgNV BAMTKEZGMjQ4QTdENUY3QUQwREU0NzMwODkzRkU5QTQzNjVGQTRBN0I0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz9vMgH3Du5Jgc3OGlgKbsr8UC /IqkoBojooDcaqBuW3K36KC4/5f+KgmWR+8GfySBjZ/3fAdyto0FPDo6D4Yyca6E lKE3djTQasHseCBsQn+XiJ5Xaxh1bIVB1Fo//9HuuTXiGAjglVBzLtt50SWoE4ak 0tC0gfB/CeXXqdk49IhRBWZOb2DwuRFqCCEl2/PiITXqliCpqrV8zZt0z3uIlMtD KBPQEcAPGonThHNpW4UTsNNgmnasR744xb+Z4G8VJG3G44HnztCNXFD5tZJeuXme G6A5oqdN1IQonWGFXHRRJpSMBOpZNg+Tji36NlOs/kEuzVsut2y12AfS26jlAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU/ySKfV960N5HMIk/6aQ2X6SntK8wHwYDVR0j BBgwFoAUEBsKf5DVhzHpYY3EMkOMi/2yivQwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0FOSU4v MC8xMDFCMEE3RjkwRDU4NzMxRTk2MThEQzQzMjQzOEM4QkZEQjI4QUY0LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzEwMUIwQTdGOTBENTg3MzFFOTYxOERDNDMyNDM4 QzhCRkRCMjhBRjQuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5JTi8wLzEwMUIwQTdGOTBENTg3 MzFFOTYxOERDNDMyNDM4QzhCRkRCMjhBRjQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxkhZPmvYDPZxi DEdVbcMoewgcsL1KpIvE2P/cNNVv4xj9YcKG3yBdYUVNS6V5bYGURbiyT4L4Pp7H oHWpzqfqdbwO/TL6s7BAOVETx/BAH1gakFx8GPp5SZLWVrtbvvsWCeC81TsS1lNV ZE5JCnnN7oWnCUdp/98tyeL1RYcVfk33bpc1zo4zn0p1xqAviP1/gs10BVuLmkJV W9kbRzrtwESenr9fO/NkWHBeN0IcAjSRvKJk31M/enj/gaH/MOHMJWVzs1ijSMJp QdMEN8zEXKi3gyZw81KBzOjVXC02arlKlPCf7kfbn9YBlLLai4DvQZKlXB+yI5XL GIkq5JbW -----END CERTIFICATE-----Generated at Wed Nov 11 01:04:36 2026 by rpki-client