$ rpki-client -vvvf rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft File: 9F397B838061280C2F2A887AC9D64012310492D8.mft (raw, json) Hash identifier: bDHoCNIOzoYjseU0YDqtukzDBpZ65G3BQh/ofg7WIbQ= Subject key identifier: 1E:C4:58:DA:5D:F4:3B:B6:50:46:69:65:50:38:F8:5D:AF:82:75:24 Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8 Certificate serial: 10A783C27A6CBD9830839FF801836F8993840DEA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft Manifest number: D4 Signing time: Sun 11 Oct 2026 20:43:27 +0000 Manifest this update: Sun 11 Oct 2026 20:38:27 +0000 Manifest next update: Mon 12 Oct 2026 22:42:27 +0000 Files and hashes: 1: 9F397B838061280C2F2A887AC9D64012310492D8.crl (hash: IcTIPv8LV+YND9R3HNyCsz9/xhUNXSPgrm+tCZMjos4=) 2: 3135312e3135382e362e302f32332d3234203d3e20313532363136.roa (hash: i1SCJ8GhyQLw1P2Ps8s9Plw8FCUopeJLu1mfg5xNyLQ=) 3: 3135312e3135382e372e302f32342d3234203d3e20333936393832.roa (hash: CiRNyIUTHDtjTklbG45WKUEv5VbhmGe28aKTdsZW1mc=) 4: 3135312e3135382e362e302f32332d3234203d3e20323132393639.roa (hash: g66apYgbNhFQA/s/Xvj16zu4hXDJuL5Fa8ux6Zav1qQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a7:83:c2:7a:6c:bd:98:30:83:9f:f8:01:83:6f:89:93:84:0d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8 Validity Not Before: Oct 11 20:38:27 2026 GMT Not After : Oct 12 22:42:27 2026 GMT Subject: CN=1EC458DA5DF43BB6504669655038F85DAF827524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:d7:88:7e:73:5d:33:31:d9:96:c8:fe:06: 5d:fb:d4:89:44:25:11:5a:34:fb:56:3f:06:e7:19: ff:42:e3:77:6c:be:c8:28:81:40:a8:d5:12:c8:84: e2:c9:dd:5c:03:e8:fb:6f:55:7a:8b:31:fa:dc:17: 7b:db:52:59:40:1f:e1:a9:b0:2e:f3:54:fd:6a:94: 61:82:2b:9f:0f:8c:3d:a7:a8:a5:c1:4c:f1:e2:8a: f1:53:e5:d6:1b:ed:04:fc:f9:0e:f9:fe:1f:02:5b: cc:76:77:76:b7:6c:ff:b3:94:cf:d1:85:be:9e:6b: ce:a7:41:34:2d:b0:5b:10:fc:6f:e5:14:9e:41:87: e8:47:a9:09:5b:fb:26:1c:0f:35:61:73:38:16:4e: 8a:8b:10:1e:22:c1:38:68:4c:d3:97:a9:9f:bc:4a: fb:ad:08:4a:b9:63:f0:b7:fc:5d:18:a0:1d:50:a5: 5e:d7:88:f5:3a:f4:43:f7:5b:ef:65:cc:79:a1:f9: 67:a6:e1:2f:7b:4f:af:a4:a6:76:99:a9:d3:a9:5c: 4f:80:df:c9:38:90:b2:34:bc:53:c2:79:cf:7e:12: 17:f9:2b:0c:14:3c:85:7d:11:1e:c2:11:ba:58:83: c1:38:11:05:00:e6:15:2b:c8:f9:2d:a5:49:04:03: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C4:58:DA:5D:F4:3B:B6:50:46:69:65:50:38:F8:5D:AF:82:75:24 X509v3 Authority Key Identifier: keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f9:0d:2a:6d:43:a1:4d:ff:53:f7:9b:d0:15:46:dd:39:2a: 4f:02:f4:db:c3:4e:3b:92:66:ef:0f:ae:2a:aa:4e:21:04:b7: 0b:c2:b2:5d:49:28:91:4f:64:09:b4:06:96:5c:e0:43:6b:bd: 35:f2:8d:81:c6:db:eb:c1:f8:bb:d3:c5:df:de:64:01:d4:67: 6d:5d:16:88:76:47:f8:37:38:f2:b4:cd:36:02:df:2e:66:c9: a8:c8:be:7e:db:9d:1d:96:3e:c4:f1:3a:57:fc:8f:69:6e:69: 1a:f0:14:c1:ae:8c:61:e5:a6:10:a2:ce:8b:3b:73:86:77:34: 90:42:6d:a0:16:20:fb:b2:44:01:05:5a:76:4e:0f:dc:1c:3a: 5b:50:d9:c1:23:e0:29:cd:83:7b:9c:6a:92:f7:23:eb:1d:fd: a5:e3:36:0b:5d:1c:e7:22:a8:8b:dd:a7:7c:b6:66:fd:cd:2d: 9d:0b:16:3b:3d:4b:c4:94:c3:36:47:89:e8:fd:3c:34:0f:b2: 7a:6a:9c:3e:25:63:45:05:f1:13:8f:cc:87:fa:1d:4a:e7:cc: fb:12:4f:5a:eb:0c:f6:e5:ba:06:3b:23:9d:1a:f2:2c:d8:52: 88:80:e8:0d:14:e7:3b:35:88:fd:6a:a0:cd:24:bb:21:7b:d8: fb:17:20:55 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUEKeDwnpsvZgwg5/4AYNviZOEDeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQwMTIz MTA0OTJEODAeFw0yNjEwMTEyMDM4MjdaFw0yNjEwMTIyMjQyMjdaMDMxMTAvBgNV BAMTKDFFQzQ1OERBNURGNDNCQjY1MDQ2Njk2NTUwMzhGODVEQUY4Mjc1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoA9eIfnNdMzHZlsj+Bl371IlE JRFaNPtWPwbnGf9C43dsvsgogUCo1RLIhOLJ3VwD6PtvVXqLMfrcF3vbUllAH+Gp sC7zVP1qlGGCK58PjD2nqKXBTPHiivFT5dYb7QT8+Q75/h8CW8x2d3a3bP+zlM/R hb6ea86nQTQtsFsQ/G/lFJ5Bh+hHqQlb+yYcDzVhczgWToqLEB4iwThoTNOXqZ+8 SvutCEq5Y/C3/F0YoB1QpV7XiPU69EP3W+9lzHmh+Wem4S97T6+kpnaZqdOpXE+A 38k4kLI0vFPCec9+Ehf5KwwUPIV9ER7CEbpYg8E4EQUA5hUryPktpUkEAwYlAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUHsRY2l30O7ZQRmllUDj4Xa+CdSQwHwYDVR0j BBgwFoAUnzl7g4BhKAwvKoh6ydZAEjEEktgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8x LzlGMzk3QjgzODA2MTI4MEMyRjJBODg3QUM5RDY0MDEyMzEwNDkyRDguY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzMvOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQw MTIzMTA0OTJEOC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS85RjM5N0I4MzgwNjEyODBD MkYyQTg4N0FDOUQ2NDAxMjMxMDQ5MkQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvkNKm1DoU3/U/eb 0BVG3TkqTwL028NOO5Jm7w+uKqpOIQS3C8KyXUkokU9kCbQGllzgQ2u9NfKNgcbb 68H4u9PF395kAdRnbV0WiHZH+Dc48rTNNgLfLmbJqMi+ftudHZY+xPE6V/yPaW5p GvAUwa6MYeWmEKLOiztzhnc0kEJtoBYg+7JEAQVadk4P3Bw6W1DZwSPgKc2De5xq kvcj6x39peM2C10c5yKoi92nfLZm/c0tnQsWOz1LxJTDNkeJ6P08NA+yemqcPiVj RQXxE4/Mh/odSufM+xJPWusM9uW6BjsjnRryLNhSiIDoDRTnOzWI/WqgzSS7IXvY +xcgVQ== -----END CERTIFICATE-----Generated at Mon Oct 12 00:47:51 2026 by rpki-client