$ rpki-client -vvvf rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft File: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft (raw, json) Hash identifier: Z9NcWoht+rCvjnV1SwYjgkhs6a9VZGzM8MC0eqgUprU= Subject key identifier: 5B:B1:F4:5E:B2:85:24:F9:57:78:49:BF:A2:34:9B:80:9B:E8:DC:C7 Authority key identifier: 21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF Certificate issuer: /CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF Certificate serial: 10DF31DBFB2656D4872CE5F96CAD74C7D4953218 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft Manifest number: CB Signing time: Tue 06 Oct 2026 05:21:26 +0000 Manifest this update: Tue 06 Oct 2026 05:16:26 +0000 Manifest next update: Wed 07 Oct 2026 07:11:26 +0000 Files and hashes: 1: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl (hash: H6jw0qJWAVhO+RxSQ8Bksyr2oeKdj+e3kNONYxOLBGg=) 2: 323430313a636436303a3a2f34302d3430203d3e20323134303330.roa (hash: 780V3DLt+Fe7Fs8V4ULwUWJozzo56xPXySO9+JGJ2W8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 02:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:df:31:db:fb:26:56:d4:87:2c:e5:f9:6c:ad:74:c7:d4:95:32:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF Validity Not Before: Oct 6 05:16:26 2026 GMT Not After : Oct 7 07:11:26 2026 GMT Subject: CN=5BB1F45EB28524F9577849BFA2349B809BE8DCC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f8:97:60:cf:5c:2b:dc:7a:3e:b9:65:f0:49: 69:3f:55:c7:69:82:0c:e6:ea:54:6d:0e:c7:10:bf: f1:63:3f:ba:5a:61:af:b6:93:08:6f:91:37:5b:fb: 7c:a3:65:0f:d9:74:64:df:4c:18:35:72:f5:c2:cf: ec:58:11:d4:72:c7:b0:c5:7c:3e:b2:d7:2d:9b:e5: 88:94:df:be:87:6f:38:b5:56:cf:60:c9:7c:fe:74: ad:72:2b:58:bb:d5:d6:42:02:ac:90:a5:e9:c7:4e: c8:d9:e4:3c:d1:3a:60:7e:a5:6b:d3:7c:78:fe:e4: a0:0f:bd:eb:df:be:46:5a:85:ec:a3:06:bb:64:db: b3:f1:dd:d4:26:41:c4:e7:d3:32:81:a6:fe:02:8a: f3:e3:53:67:bc:a3:3d:6c:1d:99:ee:0c:c3:db:a1: 40:77:da:ef:71:3c:27:07:44:7d:6a:69:ab:73:ea: 34:ae:24:1b:c9:47:a1:6f:46:40:b2:89:da:93:ef: 2f:87:d8:83:02:6c:1d:c5:b3:65:e2:d5:d0:4a:ae: 76:df:e5:86:89:7a:83:fe:87:91:1d:ba:01:73:7d: 6d:ee:b5:f0:40:53:e4:49:35:11:11:29:53:6d:68: 3d:3d:1c:5f:54:fc:b3:5c:86:06:45:ad:e8:8a:2d: 96:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B1:F4:5E:B2:85:24:F9:57:78:49:BF:A2:34:9B:80:9B:E8:DC:C7 X509v3 Authority Key Identifier: keyid:21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:db:fc:a0:b1:03:1d:d0:be:fd:6b:3a:6e:9b:e4:27:6b:9c: a3:b7:79:21:34:01:34:33:85:d4:b7:1f:c5:d3:5b:94:b8:81: 60:f7:21:f7:29:23:c2:2b:ea:4c:18:3b:d5:96:af:16:84:b1: 93:76:7f:13:8b:c7:37:10:35:3c:69:6d:a7:00:b7:13:4a:10: 17:42:a1:06:2b:98:76:4a:47:df:06:98:ad:1f:37:d3:d8:45: a9:db:ec:58:fe:09:f4:46:52:69:07:7a:bc:c2:b5:0e:08:d4: e2:54:76:78:17:b6:9f:fc:08:74:a1:a1:39:38:2e:ad:dc:58: 52:ba:e0:df:df:ef:22:f5:9e:87:ad:7f:7b:24:4e:c9:3f:af: 4f:0f:70:f6:8c:8a:90:92:08:de:54:a7:ae:73:c7:56:fd:53: ef:57:7d:17:54:7e:28:38:23:6f:2f:ed:4c:e9:c9:4e:d1:e0: f9:6e:b7:2d:a1:b1:69:29:82:9c:21:97:3e:ab:25:2d:06:b4: e8:14:e8:f0:ba:90:82:24:c7:07:c2:45:dd:d3:0e:e4:49:0f: a6:31:9d:b6:29:e7:67:d8:15:57:18:44:51:01:80:05:f9:09: 9c:0d:db:aa:83:2e:a3:69:ae:38:14:20:d1:9a:6a:5f:26:cf: 0d:94:0a:cd -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUEN8x2/smVtSHLOX5bK10x9SVMhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5 NDlDRDVBRjAeFw0yNjEwMDYwNTE2MjZaFw0yNjEwMDcwNzExMjZaMDMxMTAvBgNV BAMTKDVCQjFGNDVFQjI4NTI0Rjk1Nzc4NDlCRkEyMzQ5QjgwOUJFOERDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM+Jdgz1wr3Ho+uWXwSWk/Vcdp ggzm6lRtDscQv/FjP7paYa+2kwhvkTdb+3yjZQ/ZdGTfTBg1cvXCz+xYEdRyx7DF fD6y1y2b5YiU376Hbzi1Vs9gyXz+dK1yK1i71dZCAqyQpenHTsjZ5DzROmB+pWvT fHj+5KAPvevfvkZaheyjBrtk27Px3dQmQcTn0zKBpv4CivPjU2e8oz1sHZnuDMPb oUB32u9xPCcHRH1qaatz6jSuJBvJR6FvRkCyidqT7y+H2IMCbB3Fs2Xi1dBKrnbf 5YaJeoP+h5EdugFzfW3utfBAU+RJNRERKVNtaD09HF9U/LNchgZFreiKLZYFAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUW7H0XrKFJPlXeEm/ojSbgJvo3McwHwYDVR0j BBgwFoAUIdv9GSESH3MMYUwN5iEs1pSc1a8wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE LzAvMjFEQkZEMTkyMTEyMUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMURCRkQxOTIxMTIxRjczMEM2MTRDMERFNjIx MkNENjk0OUNENUFGLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzAvMjFEQkZEMTkyMTEy MUY3MzBDNjE0QzBERTYyMTJDRDY5NDlDRDVBRi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK/b/KCxAx3Q vv1rOm6b5CdrnKO3eSE0ATQzhdS3H8XTW5S4gWD3IfcpI8Ir6kwYO9WWrxaEsZN2 fxOLxzcQNTxpbacAtxNKEBdCoQYrmHZKR98GmK0fN9PYRanb7Fj+CfRGUmkHerzC tQ4I1OJUdngXtp/8CHShoTk4Lq3cWFK64N/f7yL1noetf3skTsk/r08PcPaMipCS CN5Up65zx1b9U+9XfRdUfig4I28v7UzpyU7R4Pluty2hsWkpgpwhlz6rJS0GtOgU 6PC6kIIkxwfCRd3TDuRJD6YxnbYp52fYFVcYRFEBgAX5CZwN26qDLqNprjgUINGa al8mzw2UCs0= -----END CERTIFICATE-----Generated at Tue Oct 6 14:51:31 2026 by rpki-client