$ rpki-client -vvvf rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft File: 9F397B838061280C2F2A887AC9D64012310492D8.mft (raw, json) Hash identifier: IFPn/0rgZNUbnoU9Tve++JQ7GNiAdUFsqiTXx+i0SG4= Subject key identifier: F3:B2:E7:95:A7:25:4B:F3:21:82:9A:78:A1:6F:A2:8C:36:3E:1C:57 Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8 Certificate serial: 4905328BF2295938A51B5190A8D1804D2F020B3E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft Manifest number: 95 Signing time: Wed 26 Aug 2026 12:08:21 +0000 Manifest this update: Wed 26 Aug 2026 12:03:21 +0000 Manifest next update: Thu 27 Aug 2026 12:39:21 +0000 Files and hashes: 1: 9F397B838061280C2F2A887AC9D64012310492D8.crl (hash: 0TlFOkRCFX/y6XJObzttvJF6JKo/B4b59aI6XWCIHCA=) 2: 3135312e3135382e362e302f32332d3234203d3e20313532363136.roa (hash: i1SCJ8GhyQLw1P2Ps8s9Plw8FCUopeJLu1mfg5xNyLQ=) 3: 3135312e3135382e362e302f32332d3234203d3e20323132393639.roa (hash: g66apYgbNhFQA/s/Xvj16zu4hXDJuL5Fa8ux6Zav1qQ=) 4: 3135312e3135382e372e302f32342d3234203d3e20333936393832.roa (hash: CiRNyIUTHDtjTklbG45WKUEv5VbhmGe28aKTdsZW1mc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 12:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:05:32:8b:f2:29:59:38:a5:1b:51:90:a8:d1:80:4d:2f:02:0b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8 Validity Not Before: Aug 26 12:03:21 2026 GMT Not After : Aug 27 12:39:21 2026 GMT Subject: CN=F3B2E795A7254BF321829A78A16FA28C363E1C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:e1:12:a1:ba:f5:05:c9:c1:05:1f:eb:df: 9d:87:d2:f2:6e:76:38:b8:7f:2d:35:f5:06:9f:82: 82:39:09:ce:eb:cf:14:b4:b2:26:41:ba:0d:ef:f3: 66:4f:65:a3:41:f1:08:8b:7f:2d:ed:11:9e:62:dc: f9:f8:4c:99:c8:ce:dc:7b:89:49:28:2c:8c:8a:f7: 18:0f:ee:14:e6:4f:60:d8:75:19:80:05:ea:ee:2c: fd:ad:f9:6d:ab:68:ed:b3:64:a3:31:2e:bf:42:85: fc:53:6a:39:c1:c4:b5:e1:56:c0:67:b1:b2:80:b1: b8:39:d6:09:c1:b7:66:53:11:b4:0b:c3:fd:56:06: 66:d2:fe:c3:2f:37:d9:95:be:9c:26:66:69:f7:01: 7d:5f:34:4e:fb:79:ac:7d:d3:4d:25:a3:6f:7b:9e: 1b:e9:0c:fd:2f:78:42:81:73:5a:e4:5a:81:bf:bb: 42:14:4e:7d:06:6a:52:53:84:49:e3:b1:49:74:6c: 89:11:68:b2:b8:46:7d:e1:d8:db:c7:2f:b0:7a:c6: ab:d9:68:ce:e2:64:95:8e:51:d5:8e:7a:f2:7f:b0: 1c:96:94:96:a2:e1:73:8c:b8:c9:85:f7:f2:4f:95: 60:fa:2f:d4:fc:db:c7:86:f9:52:bb:fb:f4:62:bf: 88:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B2:E7:95:A7:25:4B:F3:21:82:9A:78:A1:6F:A2:8C:36:3E:1C:57 X509v3 Authority Key Identifier: keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ae:f9:e5:17:11:90:bb:3f:85:94:e3:3b:6b:da:1e:19:f8: b9:65:fc:8a:2a:22:db:8e:4c:33:e7:cc:76:92:03:50:46:28: 43:18:8a:92:01:12:f1:23:37:38:48:78:42:e7:77:5f:6e:74: d4:4c:4b:0b:c4:1b:08:a3:57:d2:af:77:8a:7e:63:3a:44:0f: ae:a7:e8:0c:2e:54:ad:23:93:60:3a:34:f8:17:62:ef:7d:2c: 03:a4:a6:94:6a:bf:97:a2:c6:5f:46:44:f0:37:41:62:26:6a: 07:1d:ef:d6:e3:b4:63:6c:13:ef:c6:13:68:03:0a:4a:3c:ba: 63:ce:cf:02:6e:dd:b2:f8:79:6d:ac:66:78:eb:a6:4f:3a:9a: b6:e4:79:7a:43:da:27:17:83:ca:53:26:49:ab:98:fe:2f:ab: 8e:94:96:9b:c4:f2:78:57:59:7a:09:6f:33:24:b7:26:ba:c4: 51:9e:b8:2a:a5:a6:d5:e8:3a:a5:38:a4:6d:20:7d:50:55:f5: b4:74:4b:f4:93:c8:b7:d1:cd:83:e2:0a:d7:ac:28:d6:f4:7f: 21:a0:ad:be:07:ae:fa:36:70:ec:5d:ea:47:49:30:f0:8e:69: 2b:3f:ad:d8:09:3e:fe:70:71:54:c7:8b:66:50:3f:85:91:54: c0:cf:7d:15 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUSQUyi/IpWTilG1GQqNGATS8CCz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQwMTIz MTA0OTJEODAeFw0yNjA4MjYxMjAzMjFaFw0yNjA4MjcxMjM5MjFaMDMxMTAvBgNV BAMTKEYzQjJFNzk1QTcyNTRCRjMyMTgyOUE3OEExNkZBMjhDMzYzRTFDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGO+ESobr1BcnBBR/r352H0vJu dji4fy019QafgoI5Cc7rzxS0siZBug3v82ZPZaNB8QiLfy3tEZ5i3Pn4TJnIztx7 iUkoLIyK9xgP7hTmT2DYdRmABeruLP2t+W2raO2zZKMxLr9ChfxTajnBxLXhVsBn sbKAsbg51gnBt2ZTEbQLw/1WBmbS/sMvN9mVvpwmZmn3AX1fNE77eax9000lo297 nhvpDP0veEKBc1rkWoG/u0IUTn0GalJThEnjsUl0bIkRaLK4Rn3h2NvHL7B6xqvZ aM7iZJWOUdWOevJ/sByWlJai4XOMuMmF9/JPlWD6L9T828eG+VK7+/Riv4izAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU87LnlaclS/Mhgpp4oW+ijDY+HFcwHwYDVR0j BBgwFoAUnzl7g4BhKAwvKoh6ydZAEjEEktgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8x LzlGMzk3QjgzODA2MTI4MEMyRjJBODg3QUM5RDY0MDEyMzEwNDkyRDguY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzMvOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQw MTIzMTA0OTJEOC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS85RjM5N0I4MzgwNjEyODBD MkYyQTg4N0FDOUQ2NDAxMjMxMDQ5MkQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAla755RcRkLs/hZTj O2vaHhn4uWX8iioi245MM+fMdpIDUEYoQxiKkgES8SM3OEh4Qud3X2501ExLC8Qb CKNX0q93in5jOkQPrqfoDC5UrSOTYDo0+Bdi730sA6SmlGq/l6LGX0ZE8DdBYiZq Bx3v1uO0Y2wT78YTaAMKSjy6Y87PAm7dsvh5baxmeOumTzqatuR5ekPaJxeDylMm SauY/i+rjpSWm8TyeFdZeglvMyS3JrrEUZ64KqWm1eg6pTikbSB9UFX1tHRL9JPI t9HNg+IK16wo1vR/IaCtvgeu+jZw7F3qR0kw8I5pKz+t2Ak+/nBxVMeLZlA/hZFU wM99FQ== -----END CERTIFICATE-----Generated at Thu Aug 27 04:51:31 2026 by rpki-client