$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft File: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft (raw, json) Hash identifier: w4FI0ODwiU0/U8n5ewuB9kk9PVgPU34jnINBkwl/AKE= Subject key identifier: B2:4A:98:9D:86:66:9F:7F:A5:0D:57:A4:85:37:B4:7D:9A:87:47:EA Authority key identifier: BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA Certificate issuer: /CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Certificate serial: 3FEA0333ADBA00F6DC41CA9A79570D32B4E988A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft Manifest number: CD Signing time: Sat 03 Oct 2026 20:22:07 +0000 Manifest this update: Sat 03 Oct 2026 20:17:07 +0000 Manifest next update: Sun 04 Oct 2026 21:38:07 +0000 Files and hashes: 1: 323430323a346432303a3a2f34382d3438203d3e20313532363236.roa (hash: gWGrH7k/E1wfVhOhIGsZWVZwwwOvXG8dp1buitprMVE=) 2: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl (hash: EJ5UqW2QKK0L9bcftu+f4kVJv75NEjSPmNYxPZkVK4Y=) 3: 323430323a346432303a3a2f34382d3438203d3e20323133343330.roa (hash: yXLG5aJYFzJQAOcQmz7saI6BueUDkIVJ2tp9ey7Y/oo=) 4: 323430323a346432303a313a3a2f34382d3438203d3e20313331363533.roa (hash: X9wIzhuw1c0lYPQ7mtcEb2gQt9tzHi6f24KHdsIqRUI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 21:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ea:03:33:ad:ba:00:f6:dc:41:ca:9a:79:57:0d:32:b4:e9:88:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Validity Not Before: Oct 3 20:17:07 2026 GMT Not After : Oct 4 21:38:07 2026 GMT Subject: CN=B24A989D86669F7FA50D57A48537B47D9A8747EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:e7:29:79:fe:19:4b:5a:f6:de:88:69:37: 9e:a9:86:a4:1a:8e:03:eb:40:45:1b:de:6b:6f:c9: f6:13:05:d0:0c:6a:eb:25:68:72:de:88:fa:c1:cd: b1:b7:c0:57:75:3b:0a:6b:3d:48:7c:94:87:6a:56: 5c:bb:7a:50:d6:64:d0:b8:c4:c9:78:74:28:8c:7f: da:85:2c:84:4c:32:17:b9:07:f1:6c:2c:67:f9:ff: a8:29:b6:2b:97:70:74:a1:c0:46:35:b6:64:a7:2e: 54:02:91:89:59:da:a1:3b:f1:24:9f:c1:bc:a8:8a: 3c:72:8e:26:95:81:3e:ca:de:ee:54:c9:6a:73:ef: e6:45:f2:2c:aa:9f:9c:4b:31:54:fa:5e:d5:ed:a6: ad:35:79:21:fa:4a:62:7a:cf:ad:da:02:d6:18:e8: e9:9d:52:97:f4:6d:85:0a:57:be:01:50:70:b8:35: 1e:49:fe:7e:f7:34:ee:dd:70:f8:d4:69:a8:47:22: c6:54:74:7d:9b:89:16:e4:4b:cf:20:ca:ca:50:d6: f4:9e:e4:07:1b:eb:c7:c4:83:c9:7d:5c:34:6a:fc: 22:3a:14:64:72:12:17:85:86:de:9c:46:a9:67:a9: c0:3d:19:7c:5d:ff:67:36:81:ab:04:ae:5e:9e:35: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4A:98:9D:86:66:9F:7F:A5:0D:57:A4:85:37:B4:7D:9A:87:47:EA X509v3 Authority Key Identifier: keyid:BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:e6:e5:f3:3a:53:2f:0a:7a:c6:72:f6:a0:b0:1b:7c:89:e3: 20:4e:9e:06:84:8e:22:8d:46:11:7e:3f:97:26:1e:25:69:c3: 38:29:20:7e:29:70:5d:a6:e9:6a:b4:07:38:9b:81:ce:bb:fa: 24:8e:fd:9c:f7:f2:a9:c3:b3:d9:99:97:73:d0:fe:f7:9f:ab: cd:02:19:60:50:54:0d:24:bb:ab:9d:16:51:1e:4a:63:a0:b8: ac:cb:95:42:94:fb:a0:3a:b9:90:3b:c3:38:01:3a:a8:9a:65: e3:e1:c7:10:f9:e8:d4:d9:f7:02:72:d9:75:29:88:67:db:26: 89:d9:dd:39:47:cd:72:46:ea:e5:dd:82:c6:b9:af:68:ba:cd: 92:f3:56:3b:1b:67:bd:f7:ef:5d:2f:f8:16:09:81:47:9c:4e: 5b:38:90:75:83:1d:41:c3:f7:97:c3:23:8e:0b:28:e7:76:9d: ee:2e:31:ac:87:91:83:a4:52:21:4b:96:74:07:e5:22:79:24: 3b:f6:0c:db:75:19:73:7b:d8:31:a6:42:ea:5a:c8:9d:d9:65: 5c:eb:4d:ef:a1:b9:cd:0a:40:4a:55:95:b8:71:76:94:da:41: f7:51:17:c7:95:48:c8:f7:36:61:39:12:3b:c0:25:38:37:d1: 13:ea:3b:5c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUP+oDM626APbcQcqaeVcNMrTpiKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3 QTlFMDVEQTAeFw0yNjEwMDMyMDE3MDdaFw0yNjEwMDQyMTM4MDdaMDMxMTAvBgNV BAMTKEIyNEE5ODlEODY2NjlGN0ZBNTBENTdBNDg1MzdCNDdEOUE4NzQ3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt6ucpef4ZS1r23ohpN56phqQa jgPrQEUb3mtvyfYTBdAMauslaHLeiPrBzbG3wFd1OwprPUh8lIdqVly7elDWZNC4 xMl4dCiMf9qFLIRMMhe5B/FsLGf5/6gptiuXcHShwEY1tmSnLlQCkYlZ2qE78SSf wbyoijxyjiaVgT7K3u5UyWpz7+ZF8iyqn5xLMVT6XtXtpq01eSH6SmJ6z63aAtYY 6OmdUpf0bYUKV74BUHC4NR5J/n73NO7dcPjUaahHIsZUdH2biRbkS88gyspQ1vSe 5Acb68fEg8l9XDRq/CI6FGRyEheFht6cRqlnqcA9GXxd/2c2gasErl6eNUrBAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUskqYnYZmn3+lDVekhTe0fZqHR+owHwYDVR0j BBgwFoAUvtclxBPHpDb1ogDyB/PLOnqeBdowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURC QVNFLzAvQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9CRUQ3MjVDNDEzQzdBNDM2RjVBMjAwRjIw N0YzQ0IzQTdBOUUwNURBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURCQVNFLzAvQkVENzI1 QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACbm 5fM6Uy8KesZy9qCwG3yJ4yBOngaEjiKNRhF+P5cmHiVpwzgpIH4pcF2m6Wq0Bzib gc67+iSO/Zz38qnDs9mZl3PQ/vefq80CGWBQVA0ku6udFlEeSmOguKzLlUKU+6A6 uZA7wzgBOqiaZePhxxD56NTZ9wJy2XUpiGfbJonZ3TlHzXJG6uXdgsa5r2i6zZLz VjsbZ733710v+BYJgUecTls4kHWDHUHD95fDI44LKOd2ne4uMayHkYOkUiFLlnQH 5SJ5JDv2DNt1GXN72DGmQupayJ3ZZVzrTe+huc0KQEpVlbhxdpTaQfdRF8eVSMj3 NmE5EjvAJTg30RPqO1w= -----END CERTIFICATE-----Generated at Sun Oct 4 07:01:54 2026 by rpki-client