$ rpki-client -vvvf rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft File: 9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft (raw, json) Hash identifier: 5OFixhcMDy7oE4QJH7udUTpon0uSwZBWhPtFQq/3Urs= Subject key identifier: A4:12:C2:16:98:A4:D3:1A:C1:6C:A8:16:FA:FE:8D:90:2E:07:99:DB Authority key identifier: 9D:00:7D:37:3F:38:1C:CA:59:6E:CE:20:FC:27:E8:D7:F7:2B:D5:C2 Certificate issuer: /CN=9D007D373F381CCA596ECE20FC27E8D7F72BD5C2 Certificate serial: 081ACC7B08963758AAA5A49F9BB2E5AB1FDA8C65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft Manifest number: C5 Signing time: Sat 03 Oct 2026 23:43:23 +0000 Manifest this update: Sat 03 Oct 2026 23:38:23 +0000 Manifest next update: Mon 05 Oct 2026 03:28:23 +0000 Files and hashes: 1: 3130332e3136302e3232362e302f32332d3234203d3e203338383432.roa (hash: fXBUwxrpMNifp4MO+znwtVxrCjA2c4pDgmAW0x6+dMc=) 2: 3130332e3136302e3232362e302f32332d3234203d3e20313331363539.roa (hash: E3rZgHSz1Z/QlxuFQ/uZkBfovj2HHfCX638SO+t2sg0=) 3: 323430363a663334303a3a2f33322d3634203d3e203338383432.roa (hash: dPU2RCL9922koNIK4EbftiZXNxbxs5ADbxLPZLggc34=) 4: 9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl (hash: 6G2bVNe9v633ZDzF+I8MxUbRjP3jeB/hsAgUgdid6f8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 03:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1a:cc:7b:08:96:37:58:aa:a5:a4:9f:9b:b2:e5:ab:1f:da:8c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D007D373F381CCA596ECE20FC27E8D7F72BD5C2 Validity Not Before: Oct 3 23:38:23 2026 GMT Not After : Oct 5 03:28:23 2026 GMT Subject: CN=A412C21698A4D31AC16CA816FAFE8D902E0799DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:15:66:7d:50:17:f9:f2:0f:67:fe:c6:36:18: 90:47:73:2e:02:e2:d3:d3:51:92:7b:96:4b:4f:4f: b1:16:50:17:ff:58:33:d3:ca:c8:27:bc:54:09:84: 39:f9:e9:37:ec:9d:dd:e8:e7:01:59:74:9d:c8:c0: 8d:8d:60:67:be:d2:ba:b0:8a:2e:e8:ed:05:5a:24: 0c:f0:3c:02:ae:9e:4a:7e:12:ae:b2:35:63:4f:76: 8c:ac:34:32:aa:7a:fc:3d:62:8b:c2:e6:5f:89:28: fc:ff:08:93:8b:ed:5d:89:f7:74:24:ed:05:7d:c9: 69:5c:cb:0f:09:b1:44:f1:7f:04:2d:df:e7:13:2e: b1:a2:6f:5d:12:d3:c6:da:1e:8a:5b:67:9b:cb:4d: bd:c1:dc:90:13:d8:e0:7b:a5:a3:9b:60:d4:01:a0: db:cf:ec:e5:95:94:6b:33:24:0d:09:c5:46:6f:e9: 61:d2:7c:59:e9:06:d1:42:62:4e:27:8a:25:da:2b: 9c:5c:96:7d:81:33:d1:2e:47:a8:a7:62:15:01:17: d7:40:60:00:20:3c:5e:1e:84:d7:ad:98:1a:2c:1d: 03:b6:0f:79:44:a0:26:0f:c3:d4:d0:31:7e:1c:e4: 95:2b:5c:b1:a4:0f:40:0b:3c:52:b7:d2:95:f2:11: 87:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:12:C2:16:98:A4:D3:1A:C1:6C:A8:16:FA:FE:8D:90:2E:07:99:DB X509v3 Authority Key Identifier: keyid:9D:00:7D:37:3F:38:1C:CA:59:6E:CE:20:FC:27:E8:D7:F7:2B:D5:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DNSNET/0/9D007D373F381CCA596ECE20FC27E8D7F72BD5C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:eb:b1:90:09:df:9b:58:75:24:91:67:92:d5:c7:a1:c3:14: 80:5a:88:f3:78:1d:db:5e:03:14:9f:e3:b9:98:fc:9e:e5:95: f3:26:7a:39:48:ba:8c:8f:3b:82:06:c4:e2:6c:85:5f:a7:7a: 59:98:84:cc:5c:d0:73:f2:f0:b1:ef:a7:33:44:9b:b0:d5:e8: da:d5:da:96:6d:0e:44:bd:44:19:17:a1:b4:31:72:e7:17:ad: 5f:09:fc:31:d2:f0:9a:ba:8b:10:7b:4f:3d:33:75:3a:09:1e: b2:25:12:f2:d0:d4:d0:66:60:3e:02:44:41:98:74:23:53:41: 86:7e:60:6a:aa:57:aa:b4:38:73:a9:1d:0a:97:73:09:66:3a: a0:74:d5:da:34:04:a9:14:78:7d:71:1a:90:61:9e:ad:f2:f7: 0a:f8:66:fd:12:25:f8:46:81:d3:60:4e:eb:f5:6a:d0:2f:50: 00:0b:45:9f:29:c9:4f:d5:b1:dc:8a:79:00:a1:eb:6d:e2:8c: 99:d3:67:47:7f:4d:7b:b3:b8:4f:d7:96:71:de:5d:8b:19:b1: 5b:f9:bf:64:f3:0c:a9:66:d3:35:ac:83:c0:e2:6d:2a:66:2c: e1:22:6a:01:eb:06:47:3d:61:c0:64:d7:76:5d:5d:d5:c5:71: e9:0d:9f:a0 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUCBrMewiWN1iqpaSfm7Llqx/ajGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwMDdEMzczRjM4MUNDQTU5NkVDRTIwRkMyN0U4RDdG NzJCRDVDMjAeFw0yNjEwMDMyMzM4MjNaFw0yNjEwMDUwMzI4MjNaMDMxMTAvBgNV BAMTKEE0MTJDMjE2OThBNEQzMUFDMTZDQTgxNkZBRkU4RDkwMkUwNzk5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcFWZ9UBf58g9n/sY2GJBHcy4C 4tPTUZJ7lktPT7EWUBf/WDPTysgnvFQJhDn56Tfsnd3o5wFZdJ3IwI2NYGe+0rqw ii7o7QVaJAzwPAKunkp+Eq6yNWNPdoysNDKqevw9YovC5l+JKPz/CJOL7V2J93Qk 7QV9yWlcyw8JsUTxfwQt3+cTLrGib10S08baHopbZ5vLTb3B3JAT2OB7paObYNQB oNvP7OWVlGszJA0JxUZv6WHSfFnpBtFCYk4niiXaK5xcln2BM9EuR6inYhUBF9dA YAAgPF4ehNetmBosHQO2D3lEoCYPw9TQMX4c5JUrXLGkD0ALPFK30pXyEYcBAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUpBLCFpik0xrBbKgW+v6NkC4HmdswHwYDVR0j BBgwFoAUnQB9Nz84HMpZbs4g/Cfo1/cr1cIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE5TTkVU LzAvOUQwMDdEMzczRjM4MUNDQTU5NkVDRTIwRkMyN0U4RDdGNzJCRDVDMi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS85RDAwN0QzNzNGMzgxQ0NBNTk2RUNFMjBGQzI3 RThEN0Y3MkJENUMyLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE5TTkVULzAvOUQwMDdEMzczRjM4 MUNDQTU5NkVDRTIwRkMyN0U4RDdGNzJCRDVDMi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAArrsZAJ35tY dSSRZ5LVx6HDFIBaiPN4HdteAxSf47mY/J7llfMmejlIuoyPO4IGxOJshV+nelmY hMxc0HPy8LHvpzNEm7DV6NrV2pZtDkS9RBkXobQxcucXrV8J/DHS8Jq6ixB7Tz0z dToJHrIlEvLQ1NBmYD4CREGYdCNTQYZ+YGqqV6q0OHOpHQqXcwlmOqB01do0BKkU eH1xGpBhnq3y9wr4Zv0SJfhGgdNgTuv1atAvUAALRZ8pyU/VsdyKeQCh623ijJnT Z0d/TXuzuE/XlnHeXYsZsVv5v2TzDKlm0zWsg8DibSpmLOEiagHrBkc9YcBk13Zd XdXFcekNn6A= -----END CERTIFICATE-----Generated at Sun Oct 4 17:35:02 2026 by rpki-client