$ rpki-client -vvf rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft File: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft (raw, json) Hash identifier: 1UKbs7fxq3x/TmVayS5FgkYAUVB3oUZ48wrwcDY0LJ8= Subject key identifier: C5:8C:81:C2:E7:DC:F9:DC:AC:A5:EE:F0:88:80:9E:E7:BC:B8:BC:15 Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 Certificate issuer: /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Certificate serial: 6673ECA4F96F5B3421A899564B216EC09E4DDDF8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft Manifest number: 09 Signing time: Wed 13 May 2026 04:36:48 +0000 Manifest this update: Wed 13 May 2026 04:31:48 +0000 Manifest next update: Thu 14 May 2026 08:05:48 +0000 Files and hashes: 1: 3231302e312e3233342e302f32342d3332203d3e20313331363537.roa (hash: pYVK17zAbMWT4djhepdkPZ+a4SmhzlWvmNCdXixNe1Y=) 2: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (hash: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=) 3: 3231302e312e3233342e302f32332d3332203d3e20313331363537.roa (hash: XhpQ+C1tVRKngGZ94cXlaeW9/WXKoL5qCwvg98P9HFY=) 4: 3231302e312e3233352e302f32342d3332203d3e20313331363537.roa (hash: RLXRr3oaU8tfZv8c58D+ZW+I4V/4m7eEXGAKJ8n/Gpk=) 5: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (hash: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M=) 6: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl (hash: SwyriVMtsulg8MJOpiqUMyORl2k3GxvQNtoU8QONJks=) 7: 3231302e312e3233342e302f32332d3332203d3e20313334383233.roa (hash: HWI5VQZaFjKYV+LScUBkUhCoJacVyotR7e1ayxfccA8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:73:ec:a4:f9:6f:5b:34:21:a8:99:56:4b:21:6e:c0:9e:4d:dd:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Validity Not Before: May 13 04:31:48 2026 GMT Not After : May 14 08:05:48 2026 GMT Subject: CN=C58C81C2E7DCF9DCACA5EEF088809EE7BCB8BC15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:29:6b:fe:29:8a:2f:96:43:a9:3c:de:42: 04:2c:59:c2:72:51:f3:a5:af:70:9f:27:96:ad:4b: 40:a1:e7:a0:99:bc:cc:44:a3:f4:ae:16:36:e7:31: b7:7a:dc:f4:c2:39:77:c5:30:e9:20:35:31:e7:9f: 14:b7:36:08:8f:32:dc:c2:6d:a5:cd:d8:a2:1f:8c: 93:11:2d:43:b9:0e:63:09:08:5f:66:3f:e9:69:9d: ba:b8:5c:5d:20:f8:57:f9:b4:06:ad:8c:2a:50:3d: 0c:36:fc:42:21:c2:74:c8:b6:2b:54:a1:85:58:c0: 3d:71:33:c9:2c:32:75:cc:24:01:31:f4:bd:16:60: 3b:bd:95:7d:c0:c3:67:07:d8:ec:0f:8c:02:8a:b0: 65:c7:4a:8d:d1:be:8c:40:b1:e4:16:af:4c:c0:70: 0d:77:75:d4:59:ce:9a:45:39:bb:9d:97:e0:ac:d3: 40:aa:2b:13:36:60:27:bf:69:df:82:a5:79:52:bf: 44:58:bc:3b:00:27:11:64:54:9f:fd:5a:17:15:6d: 0d:55:fe:ea:a7:ed:a7:0a:28:8f:ee:7f:aa:4d:d5: c5:a5:f0:cd:25:0f:dc:cf:52:22:ba:3f:fd:f8:3e: b3:d0:87:7b:bb:a0:9e:ad:39:b5:7f:f1:eb:35:c4: 1f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8C:81:C2:E7:DC:F9:DC:AC:A5:EE:F0:88:80:9E:E7:BC:B8:BC:15 X509v3 Authority Key Identifier: keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:80:c8:dc:b1:78:de:c1:be:02:2d:6e:97:d5:43:cd:5d:48: 3d:02:33:7c:6b:1f:c2:04:2b:a4:d6:ec:49:cf:a2:e1:db:c9: b2:a1:96:17:e3:10:66:cf:5c:43:e8:c5:ca:53:cb:71:39:17: c7:00:e2:ee:d6:40:7b:07:49:2b:66:a9:ae:2a:99:fa:37:bc: 56:ea:ac:60:60:ad:36:88:29:35:7f:cf:40:9c:d3:12:db:54: fb:9c:3a:aa:65:ee:5b:bf:d8:11:a4:eb:94:3b:d3:a1:46:c6: b6:5a:b5:c9:da:d2:49:4f:c1:94:81:df:e2:bd:24:05:d3:14: fa:bf:65:e5:b1:06:4d:9c:90:15:55:99:29:34:57:53:4f:51: 62:1a:8e:0c:a8:36:a9:8f:6a:84:a3:8d:04:64:c9:64:0b:a8: c7:44:30:d8:43:35:f8:1a:c1:47:ae:7c:11:e6:89:2e:0f:97: 51:3d:93:dd:38:bb:33:67:81:b1:87:8b:85:43:50:54:a8:c4: 6e:e0:26:e9:7d:8e:d4:25:b9:c0:ed:b8:d4:93:87:6a:78:03: a5:fd:01:3d:dd:f3:68:db:5e:d7:4c:22:ab:5d:b4:e1:7f:33: 08:94:f7:67:21:f5:20:c2:be:36:a4:e3:0e:5e:f8:e2:61:fd: df:a8:c6:07 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUZnPspPlvWzQhqJlWSyFuwJ5N3fgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZGOEE2 RkFEQTQ2MDAeFw0yNjA1MTMwNDMxNDhaFw0yNjA1MTQwODA1NDhaMDMxMTAvBgNV BAMTKEM1OEM4MUMyRTdEQ0Y5RENBQ0E1RUVGMDg4ODA5RUU3QkNCOEJDMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBSlr/imKL5ZDqTzeQgQsWcJy UfOlr3CfJ5atS0Ch56CZvMxEo/SuFjbnMbd63PTCOXfFMOkgNTHnnxS3NgiPMtzC baXN2KIfjJMRLUO5DmMJCF9mP+lpnbq4XF0g+Ff5tAatjCpQPQw2/EIhwnTItitU oYVYwD1xM8ksMnXMJAEx9L0WYDu9lX3Aw2cH2OwPjAKKsGXHSo3RvoxAseQWr0zA cA13ddRZzppFObudl+Cs00CqKxM2YCe/ad+CpXlSv0RYvDsAJxFkVJ/9WhcVbQ1V /uqn7acKKI/uf6pN1cWl8M0lD9zPUiK6P/34PrPQh3u7oJ6tObV/8es1xB83AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUxYyBwufc+dyspe7wiICe57y4vBUwHwYDVR0j BBgwFoAUnQ9tU28FPDu1Iz5o4GNvim+tpGAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREFGVS8w LzlEMEY2RDUzNkYwNTNDM0JCNTIzM0U2OEUwNjM2RjhBNkZBREE0NjAuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZG OEE2RkFEQTQ2MC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RBRlUvMC85RDBGNkQ1MzZGMDUzQzNC QjUyMzNFNjhFMDYzNkY4QTZGQURBNDYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIDI3LF43sG+Ai1u l9VDzV1IPQIzfGsfwgQrpNbsSc+i4dvJsqGWF+MQZs9cQ+jFylPLcTkXxwDi7tZA ewdJK2apriqZ+je8VuqsYGCtNogpNX/PQJzTEttU+5w6qmXuW7/YEaTrlDvToUbG tlq1ydrSSU/BlIHf4r0kBdMU+r9l5bEGTZyQFVWZKTRXU09RYhqODKg2qY9qhKON BGTJZAuox0Qw2EM1+BrBR658EeaJLg+XUT2T3Ti7M2eBsYeLhUNQVKjEbuAm6X2O 1CW5wO241JOHangDpf0BPd3zaNte10wiq1204X8zCJT3ZyH1IMK+NqTjDl744mH9 36jGBw== -----END CERTIFICATE-----Generated at Wed May 13 20:36:00 2026 by rpki-client