$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft File: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft (raw, json) Hash identifier: FONMpRE4Pzx94zRW1aaoaAwam0GV05IdNmwDpvEQIb0= Subject key identifier: D5:31:67:66:1A:21:DD:F7:C2:12:37:8D:32:7F:74:4B:F1:34:68:D1 Authority key identifier: BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA Certificate issuer: /CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Certificate serial: 23924ACBF80A996E3D328BB271CB4D7E93CB7ED2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft Manifest number: 8A Signing time: Fri 14 Aug 2026 10:06:33 +0000 Manifest this update: Fri 14 Aug 2026 10:01:33 +0000 Manifest next update: Sat 15 Aug 2026 13:15:33 +0000 Files and hashes: 1: 323430323a346432303a313a3a2f34382d3438203d3e20313331363533.roa (hash: X9wIzhuw1c0lYPQ7mtcEb2gQt9tzHi6f24KHdsIqRUI=) 2: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl (hash: 8dpHUUzdK8ZoC+L6db97r5UgehvRTektOCEMjc/lNQI=) 3: 323430323a346432303a3a2f34382d3438203d3e20323133343330.roa (hash: yXLG5aJYFzJQAOcQmz7saI6BueUDkIVJ2tp9ey7Y/oo=) 4: 323430323a346432303a3a2f34382d3438203d3e20313532363236.roa (hash: gWGrH7k/E1wfVhOhIGsZWVZwwwOvXG8dp1buitprMVE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 13:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:92:4a:cb:f8:0a:99:6e:3d:32:8b:b2:71:cb:4d:7e:93:cb:7e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Validity Not Before: Aug 14 10:01:33 2026 GMT Not After : Aug 15 13:15:33 2026 GMT Subject: CN=D53167661A21DDF7C212378D327F744BF13468D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:ae:25:15:f3:d5:35:d7:0f:45:13:c7:02: a4:65:dc:c9:d8:d4:8c:7b:f9:7f:96:7d:d6:f4:07: a6:39:9e:fa:c7:15:c1:ae:40:45:ef:9f:68:52:5b: ad:d2:6f:21:ec:34:e1:4f:4f:ad:46:3d:5d:af:13: 15:c8:da:4e:82:ea:75:a3:75:b2:c2:02:19:59:95: a5:54:7d:e0:63:2e:04:25:0f:2c:42:3e:73:e7:29: 1a:4d:78:07:da:a2:58:b2:35:41:2c:17:db:c8:f5: d8:c5:ad:a9:3f:9b:b1:0e:1b:d7:76:76:f5:9e:5a: ea:cb:9d:17:ae:82:a1:da:85:67:65:dc:ed:42:99: d4:e1:ef:45:86:5c:5c:1f:ba:24:78:cf:88:26:0d: e4:9d:be:81:08:a8:4d:1a:01:70:87:9b:2e:fb:7f: e6:7e:fb:4a:6f:f0:46:95:0d:99:53:1a:39:25:b3: 64:31:c8:d3:c9:b4:62:3f:10:2d:96:12:f4:f9:42: 0c:66:a2:75:50:67:fe:15:ce:d1:82:2e:d1:8b:45: de:87:38:23:7b:6e:e0:0e:a1:3a:8b:e4:1a:0b:11: 5d:59:10:82:3d:5a:dd:bb:61:65:31:57:20:39:23: 4f:b3:2c:58:b1:00:8c:7f:a0:80:a9:38:3a:14:aa: b3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:31:67:66:1A:21:DD:F7:C2:12:37:8D:32:7F:74:4B:F1:34:68:D1 X509v3 Authority Key Identifier: keyid:BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:53:78:66:07:e3:29:48:ed:d1:30:f8:3b:7d:83:14:ce:f4: 24:30:79:60:e1:d1:c5:e1:5c:54:25:e1:a9:2f:a1:48:da:5b: 18:15:3e:1f:6f:d7:fb:32:0e:07:a6:ce:aa:56:98:4e:93:96: 8f:eb:45:ee:18:65:a0:61:6c:e4:13:4a:1b:e8:5a:0b:91:0c: 7f:e1:2d:8d:40:b6:81:03:c6:84:a9:b0:eb:25:ea:ff:ae:17: e7:c5:7e:18:04:c7:20:46:38:73:e8:c5:ae:54:3c:4a:60:85: 5b:81:19:fc:f2:8a:9e:ac:fe:39:8a:cc:0a:40:72:31:f0:ea: 53:50:3c:6f:aa:dc:3f:2e:08:21:b2:a0:ab:0a:fd:8e:87:d3: b6:c3:be:3c:8a:c1:fe:bc:87:05:1d:f0:a1:fe:e8:27:58:c4: a3:bd:c8:9f:13:3e:55:b0:d4:c5:36:3f:ec:29:a4:15:5d:02: f5:02:df:bf:e2:0b:8a:c1:9f:00:9a:c3:9a:52:e4:39:50:c0: 08:3c:37:27:ec:ec:c1:52:b0:46:e7:3e:02:1b:ca:7f:45:02: c5:b5:34:54:96:b8:86:f6:b0:3e:05:2d:e4:ef:a2:34:a7:df: 49:4a:d9:9e:2d:41:18:ae:ac:1f:ad:8f:a9:57:b5:86:e3:75: 4f:d2:7c:e6 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUI5JKy/gKmW49MouycctNfpPLftIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3 QTlFMDVEQTAeFw0yNjA4MTQxMDAxMzNaFw0yNjA4MTUxMzE1MzNaMDMxMTAvBgNV BAMTKEQ1MzE2NzY2MUEyMURERjdDMjEyMzc4RDMyN0Y3NDRCRjEzNDY4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgK4lFfPVNdcPRRPHAqRl3MnY 1Ix7+X+Wfdb0B6Y5nvrHFcGuQEXvn2hSW63SbyHsNOFPT61GPV2vExXI2k6C6nWj dbLCAhlZlaVUfeBjLgQlDyxCPnPnKRpNeAfaoliyNUEsF9vI9djFrak/m7EOG9d2 dvWeWurLnReugqHahWdl3O1CmdTh70WGXFwfuiR4z4gmDeSdvoEIqE0aAXCHmy77 f+Z++0pv8EaVDZlTGjkls2QxyNPJtGI/EC2WEvT5QgxmonVQZ/4VztGCLtGLRd6H OCN7buAOoTqL5BoLEV1ZEII9Wt27YWUxVyA5I0+zLFixAIx/oICpODoUqrMHAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU1TFnZhoh3ffCEjeNMn90S/E0aNEwHwYDVR0j BBgwFoAUvtclxBPHpDb1ogDyB/PLOnqeBdowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURC QVNFLzAvQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9CRUQ3MjVDNDEzQzdBNDM2RjVBMjAwRjIw N0YzQ0IzQTdBOUUwNURBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURCQVNFLzAvQkVENzI1 QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJxT eGYH4ylI7dEw+Dt9gxTO9CQweWDh0cXhXFQl4akvoUjaWxgVPh9v1/syDgemzqpW mE6Tlo/rRe4YZaBhbOQTShvoWguRDH/hLY1AtoEDxoSpsOsl6v+uF+fFfhgExyBG OHPoxa5UPEpghVuBGfzyip6s/jmKzApAcjHw6lNQPG+q3D8uCCGyoKsK/Y6H07bD vjyKwf68hwUd8KH+6CdYxKO9yJ8TPlWw1MU2P+wppBVdAvUC37/iC4rBnwCaw5pS 5DlQwAg8Nyfs7MFSsEbnPgIbyn9FAsW1NFSWuIb2sD4FLeTvojSn30lK2Z4tQRiu rB+tj6lXtYbjdU/SfOY= -----END CERTIFICATE-----Generated at Sat Aug 15 05:20:54 2026 by rpki-client