$ rpki-client -vvf rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft File: 2E8003B145695D652CFF3D58625D3B0A3535AD84.mft (raw, json) Hash identifier: HV9UdWyZ9QSVfj7aNqBTSKEg/MVybY8UJeD3j08DlTo= Subject key identifier: 5C:45:B8:77:B4:1F:C2:27:11:7B:14:F7:21:98:74:D8:F6:9C:23:88 Authority key identifier: 2E:80:03:B1:45:69:5D:65:2C:FF:3D:58:62:5D:3B:0A:35:35:AD:84 Certificate issuer: /CN=2E8003B145695D652CFF3D58625D3B0A3535AD84 Certificate serial: 41F7A88D076D3159099D4E87799312D1C12CD13B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft Manifest number: 03 Signing time: Wed 13 May 2026 04:01:40 +0000 Manifest this update: Wed 13 May 2026 03:56:40 +0000 Manifest next update: Thu 14 May 2026 04:44:40 +0000 Files and hashes: 1: 2E8003B145695D652CFF3D58625D3B0A3535AD84.crl (hash: Szfp2xlWVpCu+FbtvZ69sgg4rTdWNwmBDapiuoWvYHM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.crl rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f7:a8:8d:07:6d:31:59:09:9d:4e:87:79:93:12:d1:c1:2c:d1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8003B145695D652CFF3D58625D3B0A3535AD84 Validity Not Before: May 13 03:56:40 2026 GMT Not After : May 14 04:44:40 2026 GMT Subject: CN=5C45B877B41FC227117B14F7219874D8F69C2388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:47:8f:e0:56:fa:b0:10:28:43:96:fd:f4:ff: 2b:b0:6e:ca:b2:ff:1c:18:85:2b:b4:7a:1e:b8:57: c3:cf:03:37:72:02:07:7b:2e:3c:c5:32:7e:d0:4b: 00:97:c1:af:e8:60:fd:ed:bc:9e:4c:97:82:92:e3: d6:18:97:ed:72:17:0c:aa:bd:b8:e6:4f:d7:16:96: 24:5c:32:9e:92:4c:9c:ad:59:9c:e6:e1:55:85:54: 48:32:1e:c8:e1:30:5a:14:db:f7:9a:31:42:ed:a2: a2:17:de:02:fa:5a:c9:63:3c:86:c0:8a:32:95:23: 61:cb:a2:a3:57:0e:d5:a1:9b:d4:51:a9:11:9f:8c: f6:b0:9e:87:7b:bf:d2:4f:78:51:b1:62:f1:48:4d: 03:7a:4c:88:a5:8f:a3:3b:89:15:74:27:b0:34:2d: ea:bc:9a:54:fa:2a:27:94:33:80:47:25:78:e4:87: 31:57:6f:78:01:8d:94:ea:29:55:f8:65:4f:79:3f: d6:1c:f9:0e:27:65:fc:33:8a:a9:ec:19:b2:d2:24: 1e:02:5a:28:08:4e:a0:2c:b3:48:fb:75:4b:fa:e4: e3:4b:4d:57:e7:0e:06:f2:2b:cc:1b:d8:06:39:1c: 78:94:4d:75:21:01:b4:5b:b3:4f:3d:34:32:0b:44: cb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:45:B8:77:B4:1F:C2:27:11:7B:14:F7:21:98:74:D8:F6:9C:23:88 X509v3 Authority Key Identifier: keyid:2E:80:03:B1:45:69:5D:65:2C:FF:3D:58:62:5D:3B:0A:35:35:AD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2E8003B145695D652CFF3D58625D3B0A3535AD84.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CXT/0/2E8003B145695D652CFF3D58625D3B0A3535AD84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:fe:6b:6e:ab:3d:27:ca:61:8f:a8:a6:42:af:ba:5c:79:1d: 41:07:a5:6e:00:57:8e:d0:01:02:8d:6b:80:83:5d:82:e3:02: 01:b6:e7:05:b7:f3:29:06:1b:d6:5f:1d:a2:0c:3e:9c:0f:fa: d6:2d:85:8a:1a:03:f9:7a:4f:90:a6:e8:00:67:00:dd:b8:48: 47:96:0a:f5:9e:5b:b5:fa:9f:b9:8a:67:13:a2:a1:38:49:6b: 05:8f:30:ce:51:94:84:38:3c:07:a4:3d:34:0a:92:9e:11:d3: 0a:37:57:46:1d:bc:8c:f3:74:1a:77:8f:45:c6:02:c5:8a:f0: a4:15:11:55:6b:62:72:76:56:db:32:d4:ad:c3:eb:ab:65:22: ef:0a:d5:ea:9a:1f:62:a4:3d:37:36:45:74:2f:0f:f9:8a:8f: 2d:e1:32:75:29:dd:90:42:f7:7b:1a:cc:3d:aa:4f:8f:4c:a5: 1a:0d:51:08:b6:c6:ef:93:31:bd:90:bc:bf:ae:17:cf:1c:23: 9c:fd:62:a9:0f:53:16:99:17:82:dd:c7:44:a2:60:ec:43:62: 85:2b:ea:1c:8b:d4:72:cd:06:c8:91:22:56:ca:57:f6:c8:5d: 44:11:38:33:55:11:cb:8a:e3:cb:f9:af:f1:21:37:5a:f9:8a: 3a:d5:68:20 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUQfeojQdtMVkJnU6HeZMS0cEs0TswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4MDAzQjE0NTY5NUQ2NTJDRkYzRDU4NjI1RDNCMEEz NTM1QUQ4NDAeFw0yNjA1MTMwMzU2NDBaFw0yNjA1MTQwNDQ0NDBaMDMxMTAvBgNV BAMTKDVDNDVCODc3QjQxRkMyMjcxMTdCMTRGNzIxOTg3NEQ4RjY5QzIzODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpR4/gVvqwEChDlv30/yuwbsqy /xwYhSu0eh64V8PPAzdyAgd7LjzFMn7QSwCXwa/oYP3tvJ5Ml4KS49YYl+1yFwyq vbjmT9cWliRcMp6STJytWZzm4VWFVEgyHsjhMFoU2/eaMULtoqIX3gL6WsljPIbA ijKVI2HLoqNXDtWhm9RRqRGfjPawnod7v9JPeFGxYvFITQN6TIilj6M7iRV0J7A0 Leq8mlT6KieUM4BHJXjkhzFXb3gBjZTqKVX4ZU95P9Yc+Q4nZfwziqnsGbLSJB4C WigITqAss0j7dUv65ONLTVfnDgbyK8wb2AY5HHiUTXUhAbRbs089NDILRMvHAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUXEW4d7QfwicRexT3IZh02PacI4gwHwYDVR0j BBgwFoAULoADsUVpXWUs/z1YYl07CjU1rYQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAv MkU4MDAzQjE0NTY5NUQ2NTJDRkYzRDU4NjI1RDNCMEEzNTM1QUQ4NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yRTgwMDNCMTQ1Njk1RDY1MkNGRjNENTg2MjVEM0Iw QTM1MzVBRDg0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1hULzAvMkU4MDAzQjE0NTY5NUQ2NTJD RkYzRDU4NjI1RDNCMEEzNTM1QUQ4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMT+a26rPSfKYY+opkKv ulx5HUEHpW4AV47QAQKNa4CDXYLjAgG25wW38ykGG9ZfHaIMPpwP+tYthYoaA/l6 T5Cm6ABnAN24SEeWCvWeW7X6n7mKZxOioThJawWPMM5RlIQ4PAekPTQKkp4R0wo3 V0YdvIzzdBp3j0XGAsWK8KQVEVVrYnJ2Vtsy1K3D66tlIu8K1eqaH2KkPTc2RXQv D/mKjy3hMnUp3ZBC93sazD2qT49MpRoNUQi2xu+TMb2QvL+uF88cI5z9YqkPUxaZ F4Ldx0SiYOxDYoUr6hyL1HLNBsiRIlbKV/bIXUQRODNVEcuK48v5r/EhN1r5ijrV aCA= -----END CERTIFICATE-----Generated at Wed May 13 20:36:00 2026 by rpki-client