$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft File: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft (raw, json) Hash identifier: N5207Z2EZDpFjd5Rnk3+yI4UyzKDKNWSSvhZbyQ4Kk4= Subject key identifier: B6:DF:93:87:30:C3:F9:B0:78:1E:EC:1E:B8:02:E9:08:F9:F6:1E:F1 Authority key identifier: BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA Certificate issuer: /CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Certificate serial: 1A5FD16E97B8C3DEFF89E985A7ECB8C0BE6B57DF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft Manifest number: 0A Signing time: Wed 13 May 2026 07:07:33 +0000 Manifest this update: Wed 13 May 2026 07:02:33 +0000 Manifest next update: Thu 14 May 2026 09:13:33 +0000 Files and hashes: 1: 323430323a346432303a3a2f34382d3438203d3e20313532363236.roa (hash: gWGrH7k/E1wfVhOhIGsZWVZwwwOvXG8dp1buitprMVE=) 2: 323430323a346432303a313a3a2f34382d3438203d3e20313331363533.roa (hash: X9wIzhuw1c0lYPQ7mtcEb2gQt9tzHi6f24KHdsIqRUI=) 3: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl (hash: jIRr6WLwAmwOF9zipiIkhgesB/IkHD4gCWeyrtRE+ns=) 4: 323430323a346432303a3a2f33322d3332203d3e20313331363533.roa (hash: jLINZ0KQO6feKxwIuilqEIA94aHhGEJnk9VJLWCDTOs=) 5: 323430323a346432303a3a2f34382d3438203d3e20323133343330.roa (hash: yXLG5aJYFzJQAOcQmz7saI6BueUDkIVJ2tp9ey7Y/oo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5f:d1:6e:97:b8:c3:de:ff:89:e9:85:a7:ec:b8:c0:be:6b:57:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA Validity Not Before: May 13 07:02:33 2026 GMT Not After : May 14 09:13:33 2026 GMT Subject: CN=B6DF938730C3F9B0781EEC1EB802E908F9F61EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:ce:b0:07:4e:3a:d0:1e:4e:4a:ef:a4:42: 7b:2f:66:7b:29:f0:de:14:5f:fd:88:55:b6:fb:16: af:71:62:de:2a:cf:ba:28:9d:f1:c7:98:48:f8:b2: 44:f6:6c:44:1e:f7:16:74:be:e0:67:70:e5:ca:9c: 64:4e:0f:ef:be:02:bc:ad:21:8e:1f:88:dc:94:4d: bd:a0:41:3b:2b:65:ad:79:5a:14:71:22:2e:6c:8d: 04:0b:4b:88:37:b5:fa:cc:8e:8b:7f:a8:6a:7b:45: b1:9b:14:68:b8:80:8a:0a:43:70:fb:4a:90:d5:49: 0f:ec:c9:5d:b2:f3:74:d5:e4:f7:19:25:48:bc:56: bc:04:f5:09:84:48:f3:dc:48:e0:1f:64:2b:25:34: 28:73:85:c1:14:6e:8a:55:11:9a:d5:cf:8a:cf:59: b3:72:e9:34:5d:f4:7a:a0:bb:25:0b:59:cd:47:fb: d6:08:91:8b:5e:e5:70:f6:19:6c:5b:09:34:54:25: a4:a7:8f:0b:c9:77:22:c7:1a:7d:79:e4:a5:9c:63: e7:71:09:d8:27:d9:36:d0:3c:e1:73:62:60:df:6e: cc:99:76:ac:fe:5d:62:7b:23:e7:59:6c:7a:1e:2b: fa:ec:db:f9:db:4a:aa:75:cf:88:e1:d8:98:27:d5: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DF:93:87:30:C3:F9:B0:78:1E:EC:1E:B8:02:E9:08:F9:F6:1E:F1 X509v3 Authority Key Identifier: keyid:BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:98:f7:5b:97:ae:a3:4c:36:ff:e5:ea:75:0b:16:59:12:25: 05:4c:78:b5:9f:b1:e1:df:20:36:a8:01:c9:ae:9e:4d:26:70: 22:ae:7f:22:d0:9c:66:55:7e:74:bc:dc:a9:92:d3:81:f1:22: c8:4f:84:d6:ac:6e:a8:d4:34:7b:02:76:b5:7d:1b:ea:e2:04: 5e:4f:4a:ef:55:7a:45:bd:0f:9e:ea:c6:9d:44:56:ce:89:65: 32:d4:f6:0d:1d:4c:6d:e4:c5:ef:e7:62:fe:2a:fd:34:80:1a: c2:5b:99:ad:08:5d:71:4b:00:21:72:bb:88:82:f4:42:6c:42: ac:29:91:ec:20:93:10:7e:49:88:47:60:6e:b7:a2:3a:0b:db: 13:41:62:4c:8b:1b:8a:50:19:9b:df:49:18:86:f0:92:35:81: 87:71:3c:31:8e:3f:3d:2e:22:90:04:f4:27:40:17:b4:08:24: ae:c5:e2:6c:4c:f0:b1:d7:f6:29:f9:50:ab:d8:8e:9b:49:03: 9b:c7:ed:0a:90:84:e1:25:3e:48:08:13:4a:ab:33:9f:c9:93: 89:2a:07:7f:93:ea:f3:5a:e9:53:29:7a:26:ec:1b:2d:07:63: 00:09:32:b6:2a:ca:16:be:a5:34:e0:b2:d6:58:17:c3:b5:a2: 8b:5b:c2:80 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGl/Rbpe4w97/iemFp+y4wL5rV98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3 QTlFMDVEQTAeFw0yNjA1MTMwNzAyMzNaFw0yNjA1MTQwOTEzMzNaMDMxMTAvBgNV BAMTKEI2REY5Mzg3MzBDM0Y5QjA3ODFFRUMxRUI4MDJFOTA4RjlGNjFFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKs6wB0460B5OSu+kQnsvZnsp 8N4UX/2IVbb7Fq9xYt4qz7oonfHHmEj4skT2bEQe9xZ0vuBncOXKnGROD+++Aryt IY4fiNyUTb2gQTsrZa15WhRxIi5sjQQLS4g3tfrMjot/qGp7RbGbFGi4gIoKQ3D7 SpDVSQ/syV2y83TV5PcZJUi8VrwE9QmESPPcSOAfZCslNChzhcEUbopVEZrVz4rP WbNy6TRd9HqguyULWc1H+9YIkYte5XD2GWxbCTRUJaSnjwvJdyLHGn155KWcY+dx Cdgn2TbQPOFzYmDfbsyZdqz+XWJ7I+dZbHoeK/rs2/nbSqp1z4jh2Jgn1RnpAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUtt+ThzDD+bB4HuweuALpCPn2HvEwHwYDVR0j BBgwFoAUvtclxBPHpDb1ogDyB/PLOnqeBdowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURC QVNFLzAvQkVENzI1QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9CRUQ3MjVDNDEzQzdBNDM2RjVBMjAwRjIw N0YzQ0IzQTdBOUUwNURBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURCQVNFLzAvQkVENzI1 QzQxM0M3QTQzNkY1QTIwMEYyMDdGM0NCM0E3QTlFMDVEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEuY 91uXrqNMNv/l6nULFlkSJQVMeLWfseHfIDaoAcmunk0mcCKufyLQnGZVfnS83KmS 04HxIshPhNasbqjUNHsCdrV9G+riBF5PSu9VekW9D57qxp1EVs6JZTLU9g0dTG3k xe/nYv4q/TSAGsJbma0IXXFLACFyu4iC9EJsQqwpkewgkxB+SYhHYG63ojoL2xNB YkyLG4pQGZvfSRiG8JI1gYdxPDGOPz0uIpAE9CdAF7QIJK7F4mxM8LHX9in5UKvY jptJA5vH7QqQhOElPkgIE0qrM5/Jk4kqB3+T6vNa6VMpeibsGy0HYwAJMrYqyha+ pTTgstZYF8O1ootbwoA= -----END CERTIFICATE-----Generated at Wed May 13 20:36:01 2026 by rpki-client