$ rpki-client -vvf rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft File: 9F397B838061280C2F2A887AC9D64012310492D8.mft (raw, json) Hash identifier: FXzltAQvuXSrDGWseqqaSKdPgN04zTYuve2REv2aGSA= Subject key identifier: 92:F4:7D:09:75:51:D2:36:89:63:CA:37:48:86:56:BF:EF:0B:88:29 Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8 Certificate serial: 5970D306B85611E44E63934FE6E5ADBF8D0B6500 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft Manifest number: 59 Signing time: Sun 12 Jul 2026 10:02:06 +0000 Manifest this update: Sun 12 Jul 2026 09:57:06 +0000 Manifest next update: Mon 13 Jul 2026 13:58:06 +0000 Files and hashes: 1: 3135312e3135382e372e302f32342d3234203d3e20333936393832.roa (hash: CiRNyIUTHDtjTklbG45WKUEv5VbhmGe28aKTdsZW1mc=) 2: 3135312e3135382e362e302f32332d3234203d3e20323132393639.roa (hash: g66apYgbNhFQA/s/Xvj16zu4hXDJuL5Fa8ux6Zav1qQ=) 3: 3135312e3135382e362e302f32332d3234203d3e20313532363136.roa (hash: i1SCJ8GhyQLw1P2Ps8s9Plw8FCUopeJLu1mfg5xNyLQ=) 4: 9F397B838061280C2F2A887AC9D64012310492D8.crl (hash: LVxxOCNcAoU/1swkCcp+FL9P35vO7LXw03TkxLqLtGo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 21:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:70:d3:06:b8:56:11:e4:4e:63:93:4f:e6:e5:ad:bf:8d:0b:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8 Validity Not Before: Jul 12 09:57:06 2026 GMT Not After : Jul 13 13:58:06 2026 GMT Subject: CN=92F47D097551D2368963CA37488656BFEF0B8829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6c:e5:ed:b7:d1:e7:5b:77:1d:98:86:93:c2: c8:7f:c3:76:89:78:4a:13:76:50:ed:b1:0b:3f:98: 05:0d:15:41:f9:f7:d2:4f:9a:48:07:f8:6b:e1:25: f3:a8:e3:28:63:4a:23:44:fe:2b:78:4a:f5:6e:91: 04:56:28:30:08:09:32:c4:1a:30:b8:75:be:54:dc: 8f:c1:87:26:3a:75:6b:0e:3f:ac:b9:f0:4b:f0:e0: cc:38:b0:39:d1:58:c9:4c:c1:a7:e0:ed:b7:68:d7: 9c:7a:13:37:fa:83:3b:ae:1d:d4:17:72:85:67:87: 8e:04:59:a7:ff:42:86:ac:73:58:54:42:4f:f9:5e: c6:90:e7:25:fc:37:83:ce:a9:3a:62:1f:f4:05:6c: da:76:32:a9:9e:0d:cf:30:58:91:66:30:9d:30:06: d3:a2:a8:a7:c7:b9:3b:fd:57:46:c8:7e:e7:fe:3d: 23:fc:92:cd:cf:4c:7b:de:9e:99:47:f0:39:83:9d: b2:61:9d:b8:6d:c3:a1:1c:0a:df:e0:5f:e5:23:a6: c8:9e:0d:21:2a:6b:8d:85:e1:a0:ad:25:fa:12:32: f8:63:ec:5d:8f:77:17:c5:21:93:3d:f0:fd:fb:06: 48:36:de:3a:b7:ec:46:46:97:c6:85:ae:2a:b9:05: 2f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F4:7D:09:75:51:D2:36:89:63:CA:37:48:86:56:BF:EF:0B:88:29 X509v3 Authority Key Identifier: keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a4:5c:90:a6:c5:72:95:d9:a9:d6:f6:05:32:d0:d9:d0:ff: d4:0c:91:9f:9f:70:ad:16:9d:ef:20:ad:0f:40:5a:8d:2b:6f: 35:13:4b:9a:87:f4:37:5c:a3:10:7a:cc:9e:d0:4f:7a:c8:13: 00:38:cb:ce:27:8f:70:0a:9b:03:9b:aa:c1:5b:6d:b2:67:b5: 55:ff:0c:7a:41:92:7c:a8:a4:cf:96:ba:ee:62:31:53:ad:69: ba:15:53:52:eb:e3:76:d1:64:ba:3c:99:c4:1c:03:66:37:09: f5:6c:09:73:78:0d:00:54:e7:72:c8:3a:14:32:a3:0a:2b:ff: e5:74:bf:83:df:e4:e3:42:8e:e2:27:57:d1:48:dc:77:17:da: 3f:d6:fc:e2:66:29:2d:8b:6c:07:69:2d:77:1a:6d:9e:5a:fc: 05:e5:c3:a3:fc:1c:4f:f2:74:15:ee:37:8a:e9:69:d4:d0:b2: 2f:f3:45:26:68:89:3d:ab:d6:30:8a:af:32:59:8f:55:19:22: d3:e2:6d:89:88:9e:04:06:f4:34:ad:2b:23:60:84:f8:a9:49: d2:2d:78:00:6e:6f:61:60:10:03:d3:b1:0a:d3:07:46:3b:78: cc:4d:d7:d4:c2:ef:ca:bc:9f:a4:80:0e:d9:03:79:6a:ab:a6: 8b:99:ff:38 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUWXDTBrhWEeROY5NP5uWtv40LZQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQwMTIz MTA0OTJEODAeFw0yNjA3MTIwOTU3MDZaFw0yNjA3MTMxMzU4MDZaMDMxMTAvBgNV BAMTKDkyRjQ3RDA5NzU1MUQyMzY4OTYzQ0EzNzQ4ODY1NkJGRUYwQjg4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObOXtt9HnW3cdmIaTwsh/w3aJ eEoTdlDtsQs/mAUNFUH599JPmkgH+GvhJfOo4yhjSiNE/it4SvVukQRWKDAICTLE GjC4db5U3I/BhyY6dWsOP6y58Evw4Mw4sDnRWMlMwafg7bdo15x6Ezf6gzuuHdQX coVnh44EWaf/Qoasc1hUQk/5XsaQ5yX8N4POqTpiH/QFbNp2MqmeDc8wWJFmMJ0w BtOiqKfHuTv9V0bIfuf+PSP8ks3PTHvenplH8DmDnbJhnbhtw6EcCt/gX+Ujpsie DSEqa42F4aCtJfoSMvhj7F2PdxfFIZM98P37Bkg23jq37EZGl8aFriq5BS+lAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUkvR9CXVR0jaJY8o3SIZWv+8LiCkwHwYDVR0j BBgwFoAUnzl7g4BhKAwvKoh6ydZAEjEEktgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8x LzlGMzk3QjgzODA2MTI4MEMyRjJBODg3QUM5RDY0MDEyMzEwNDkyRDguY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzMvOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQw MTIzMTA0OTJEOC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS85RjM5N0I4MzgwNjEyODBD MkYyQTg4N0FDOUQ2NDAxMjMxMDQ5MkQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqRckKbFcpXZqdb2 BTLQ2dD/1AyRn59wrRad7yCtD0BajStvNRNLmof0N1yjEHrMntBPesgTADjLzieP cAqbA5uqwVttsme1Vf8MekGSfKikz5a67mIxU61puhVTUuvjdtFkujyZxBwDZjcJ 9WwJc3gNAFTncsg6FDKjCiv/5XS/g9/k40KO4idX0UjcdxfaP9b84mYpLYtsB2kt dxptnlr8BeXDo/wcT/J0Fe43iulp1NCyL/NFJmiJPavWMIqvMlmPVRki0+JtiYie BAb0NK0rI2CE+KlJ0i14AG5vYWAQA9OxCtMHRjt4zE3X1MLvyryfpIAO2QN5aqum i5n/OA== -----END CERTIFICATE-----Generated at Sun Jul 12 14:17:12 2026 by rpki-client