$ rpki-client -vvf rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft File: 9F397B838061280C2F2A887AC9D64012310492D8.mft (raw, json) Hash identifier: mqBOqmlb5rA0W+Z4DempPhjy+/49rVyal6YDAt+vSjY= Subject key identifier: 7C:0E:7D:8F:A9:91:69:01:08:E4:09:8F:9D:17:41:D7:B2:3F:B6:17 Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8 Certificate serial: 4A80452A23FC64EE4180FA7F767D17166C7C48EA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft Manifest number: 1A Signing time: Wed 27 May 2026 21:28:29 +0000 Manifest this update: Wed 27 May 2026 21:23:29 +0000 Manifest next update: Thu 28 May 2026 23:38:29 +0000 Files and hashes: 1: 9F397B838061280C2F2A887AC9D64012310492D8.crl (hash: SqLpfmELoZH4OrwGwDcN9HLhlGa67HaNwiuq9sQBY98=) 2: 3135312e3135382e362e302f32332d3234203d3e20313532363136.roa (hash: i1SCJ8GhyQLw1P2Ps8s9Plw8FCUopeJLu1mfg5xNyLQ=) 3: 3135312e3135382e362e302f32332d3234203d3e20323132393639.roa (hash: g66apYgbNhFQA/s/Xvj16zu4hXDJuL5Fa8ux6Zav1qQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 23:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:80:45:2a:23:fc:64:ee:41:80:fa:7f:76:7d:17:16:6c:7c:48:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8 Validity Not Before: May 27 21:23:29 2026 GMT Not After : May 28 23:38:29 2026 GMT Subject: CN=7C0E7D8FA991690108E4098F9D1741D7B23FB617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:58:61:47:3a:61:91:19:a7:e6:36:d3:c8:e4: d9:3d:5e:53:a9:e1:8c:a8:ab:a2:59:ba:63:a6:78: 24:0d:1d:46:89:ae:af:c1:30:eb:79:e1:78:31:37: 79:2a:ac:d5:18:70:9b:30:b6:7d:52:51:bc:78:1f: f2:0f:94:b0:24:52:4c:a9:92:04:0d:26:ef:e9:53: fe:db:5f:40:63:bd:34:83:a3:c9:36:c3:b5:92:4c: 4e:72:3c:be:5a:68:b5:7c:40:c9:e4:ae:28:e2:9e: a1:78:e6:21:4e:ae:fd:5d:58:63:9f:d2:23:9b:69: 90:9a:b6:6e:40:b0:3c:6e:16:89:cc:da:0f:95:1f: 56:4c:76:bc:58:c7:74:8c:59:2e:73:f5:6f:9b:b6: c3:ab:0b:9b:22:72:88:1d:1e:4b:a8:21:02:db:d4: 51:8d:f0:a0:f1:fb:85:ce:57:00:ef:c3:9c:21:d0: 0f:79:68:7a:21:64:2e:79:00:94:15:95:11:8c:c7: 1f:71:b2:c3:98:b3:08:c5:c8:43:0c:da:2a:5b:92: 24:c4:87:64:93:39:16:14:22:75:9e:b4:29:fe:32: 30:eb:e6:68:7b:65:16:f2:1f:18:a2:d6:d3:3f:47: dd:ad:db:29:d2:1c:72:42:14:00:30:05:34:e6:d9: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0E:7D:8F:A9:91:69:01:08:E4:09:8F:9D:17:41:D7:B2:3F:B6:17 X509v3 Authority Key Identifier: keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7f:4a:86:a4:c6:ac:bc:81:5c:aa:f5:04:e9:a3:f8:d3:e9: 8d:0c:9b:45:59:e9:d4:11:02:d7:6e:28:4e:00:c1:55:a7:74: 99:c5:cf:d8:85:90:b5:a1:9c:19:ee:3a:e0:2a:92:c9:02:26: a7:53:e7:27:aa:f3:d9:b0:d5:3e:f0:8b:ab:f4:d9:74:9a:1d: 85:4c:ee:4e:90:ad:7e:c0:df:e0:14:6e:ae:54:58:fa:f2:55: 20:2a:18:ee:b9:7a:dc:6b:25:49:32:8b:81:b5:1f:68:6d:de: 27:c6:c7:9e:a8:d4:54:8b:6f:49:a4:fb:08:3d:b4:c3:b3:2d: 15:f0:b0:51:73:69:72:64:b3:87:40:a9:21:b8:e8:64:7d:f1: d9:39:94:11:30:55:1f:82:fa:6c:2a:03:a6:b6:53:ed:bc:fe: c5:7a:f3:16:78:5b:3b:a4:29:da:0b:02:3b:ff:4a:18:e4:04: 38:e2:7b:ba:86:66:4f:79:37:b6:1d:cd:04:1c:9d:70:28:62: d7:ad:fb:30:9e:a5:fa:d9:0f:ce:dc:0e:70:f6:07:e1:76:8e: 40:6f:af:24:40:1d:5e:42:a3:a5:13:53:df:d3:f6:2d:32:ac: c2:94:51:7c:05:a0:6a:7b:28:07:e5:58:dc:c0:ac:f3:5c:8f: 24:e1:41:d6 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUSoBFKiP8ZO5BgPp/dn0XFmx8SOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQwMTIz MTA0OTJEODAeFw0yNjA1MjcyMTIzMjlaFw0yNjA1MjgyMzM4MjlaMDMxMTAvBgNV BAMTKDdDMEU3RDhGQTk5MTY5MDEwOEU0MDk4RjlEMTc0MUQ3QjIzRkI2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWGFHOmGRGafmNtPI5Nk9XlOp 4Yyoq6JZumOmeCQNHUaJrq/BMOt54XgxN3kqrNUYcJswtn1SUbx4H/IPlLAkUkyp kgQNJu/pU/7bX0BjvTSDo8k2w7WSTE5yPL5aaLV8QMnkrijinqF45iFOrv1dWGOf 0iObaZCatm5AsDxuFonM2g+VH1ZMdrxYx3SMWS5z9W+btsOrC5sicogdHkuoIQLb 1FGN8KDx+4XOVwDvw5wh0A95aHohZC55AJQVlRGMxx9xssOYswjFyEMM2ipbkiTE h2STORYUInWetCn+MjDr5mh7ZRbyHxii1tM/R92t2ynSHHJCFAAwBTTm2W1DAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUfA59j6mRaQEI5AmPnRdB17I/thcwHwYDVR0j BBgwFoAUnzl7g4BhKAwvKoh6ydZAEjEEktgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8x LzlGMzk3QjgzODA2MTI4MEMyRjJBODg3QUM5RDY0MDEyMzEwNDkyRDguY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzMvOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQw MTIzMTA0OTJEOC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS85RjM5N0I4MzgwNjEyODBD MkYyQTg4N0FDOUQ2NDAxMjMxMDQ5MkQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEH9KhqTGrLyBXKr1 BOmj+NPpjQybRVnp1BEC124oTgDBVad0mcXP2IWQtaGcGe464CqSyQImp1PnJ6rz 2bDVPvCLq/TZdJodhUzuTpCtfsDf4BRurlRY+vJVICoY7rl63GslSTKLgbUfaG3e J8bHnqjUVItvSaT7CD20w7MtFfCwUXNpcmSzh0CpIbjoZH3x2TmUETBVH4L6bCoD prZT7bz+xXrzFnhbO6Qp2gsCO/9KGOQEOOJ7uoZmT3k3th3NBBydcChi1637MJ6l +tkPztwOcPYH4XaOQG+vJEAdXkKjpRNT39P2LTKswpRRfAWgansoB+VY3MCs81yP JOFB1g== -----END CERTIFICATE-----Generated at Thu May 28 07:16:49 2026 by rpki-client