$ rpki-client -vvvf rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft File: D31DE8192962A403BB6809455D9C0776F79CC527.mft (raw, json) Hash identifier: Bz9qtH41stfMgzF8+sks0xfsumE6j7K8gfABgMNIOLY= Subject key identifier: BC:8B:08:30:22:AA:CE:68:61:FE:AF:D8:A5:0B:7F:8D:31:B7:F7:0E Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527 Certificate serial: 2A14CEF21B81FEAC74A4AE85B3A5E9558ACEDD61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft Manifest number: CE Signing time: Tue 06 Oct 2026 11:37:49 +0000 Manifest this update: Tue 06 Oct 2026 11:32:49 +0000 Manifest next update: Wed 07 Oct 2026 12:01:49 +0000 Files and hashes: 1: 36312e35362e31362e302f32302d3234203d3e203138343131.roa (hash: OaBE8mWI96DAhvnsCUNb1Lo3ZA5eC1WiiVCLBOSaZW4=) 2: 36312e35362e32342e302f32342d3234203d3e203138343131.roa (hash: 4W+qJBNLOJOWIRvtB6qDddjGArtbipAJUnwCauAbtiw=) 3: D31DE8192962A403BB6809455D9C0776F79CC527.crl (hash: 3ksVWtR82VJ5vDRdFLD1v1po1vXh67XV58vFaQy1/t4=) 4: 36312e35362e31382e302f32342d3234203d3e203138343131.roa (hash: gjwd7BV9O1873cFPhEXU/7D/wbFE9dSEUv4zzhFHYw8=) 5: 3131392e33302e31362e302f32302d3230203d3e203138343131.roa (hash: VDIgNrS0Bj4C/eZLO2BtqOoH9/X324CutCA0RmZUaVs=) 6: 3131392e33302e31362e302f32302d3234203d3e203138343131.roa (hash: b/aL5o5ZJ2+jJ6WA1q4dCKtGxzeUgsNC1ybEW3+mJZY=) 7: 36312e35362e31362e302f32302d3230203d3e203138343131.roa (hash: cpOU01Iw58/YmjLPrJqeRjungi3bbe0B4tFLVOzxjxc=) 8: 36312e35362e32362e302f32342d3234203d3e203138343131.roa (hash: nzkDFeWq9DKB8SnYVh/zKHjUR7e4Y9fE95qdnDZlMiI=) 9: 36312e35362e32352e302f32342d3234203d3e203138343131.roa (hash: qLfcOZVogzNc0fPW8DS0BFg+aXm72rn141irJHfF/2A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 02:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:14:ce:f2:1b:81:fe:ac:74:a4:ae:85:b3:a5:e9:55:8a:ce:dd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527 Validity Not Before: Oct 6 11:32:49 2026 GMT Not After : Oct 7 12:01:49 2026 GMT Subject: CN=BC8B083022AACE6861FEAFD8A50B7F8D31B7F70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d1:08:5c:1b:0a:58:87:c2:a3:53:8b:23:bd: 4e:0e:cf:13:9d:61:73:41:75:9e:a7:5d:f9:c1:02: 91:b6:e2:5b:a6:3f:dc:08:b3:36:32:64:be:da:da: 0e:30:bb:43:5f:a9:c5:4e:f6:b4:a7:e5:bc:14:61: 90:96:72:ab:a5:61:4d:96:43:66:91:3f:11:ec:21: 1c:6a:80:e6:09:f1:01:52:86:e7:f9:fe:b2:27:c9: f9:76:f8:30:8a:24:63:b7:66:1f:9d:ce:bf:19:b5: 21:ce:ed:43:3f:74:fb:b0:f1:80:f5:be:b2:ac:72: db:fc:ff:24:53:32:5e:63:76:29:48:21:51:9e:7f: cd:12:7a:d4:2e:cc:30:b5:78:e9:a6:67:8d:d0:3d: 04:e9:2b:4b:56:e2:3a:16:0f:7d:ff:61:34:d5:26: ce:9f:4d:1a:a1:d3:f2:6e:be:ef:ac:60:bb:93:11: c4:92:a5:c7:1e:2e:1f:bf:30:68:02:b2:de:be:97: d5:83:19:30:0e:9d:41:58:e4:0a:2b:fd:1e:da:ab: ce:f0:4e:f2:36:a7:74:75:87:b6:da:25:ca:b3:1c: 71:c1:1e:97:25:8b:5b:53:5c:4d:6c:4c:07:5a:95: 93:6c:2f:d0:05:81:02:71:37:bf:cf:7a:ba:6f:58: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8B:08:30:22:AA:CE:68:61:FE:AF:D8:A5:0B:7F:8D:31:B7:F7:0E X509v3 Authority Key Identifier: keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:af:01:24:56:94:e7:7a:d7:e9:5b:23:05:2a:bc:47:0f:9b: d7:1a:00:aa:bf:5f:c4:17:ac:39:c6:50:7a:3f:39:7c:80:d3: b9:05:1b:39:70:2f:e6:e5:37:69:7e:cc:1b:24:72:b7:92:b9: 0e:d6:a2:a8:1c:85:46:a5:bd:70:f4:e1:6e:38:9e:c8:c1:56: ca:cf:dc:82:17:40:e1:84:66:9a:0c:59:6d:43:d7:06:a9:0c: fc:50:d0:81:7d:5c:77:35:f1:21:ee:66:71:b0:f1:9d:b9:92: 08:2e:98:0f:26:d0:57:73:8c:d6:6e:a1:30:a3:bc:99:84:33: 4a:aa:da:c5:01:c3:14:e4:79:20:46:ca:7e:76:81:11:e0:98: 77:d4:83:e0:6a:3a:24:d2:1b:69:2b:2e:d5:5d:4d:74:75:1c: 51:87:7d:14:32:a2:f2:14:be:fb:2a:35:a5:75:2f:59:f7:11: d8:09:61:60:08:38:41:a8:70:cd:1e:7a:cf:93:2a:88:85:0d: 20:af:2d:8f:64:f7:e5:32:7e:20:df:02:1a:9a:2d:3d:fb:7c: d9:21:07:b4:42:79:76:67:1a:ce:0a:6a:17:e5:93:f2:e3:49: 20:e3:95:99:19:c4:ef:ea:b4:7e:16:16:7f:00:c2:e5:91:50: 89:0b:43:0d -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUKhTO8huB/qx0pK6Fs6XpVYrO3WEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxREU4MTkyOTYyQTQwM0JCNjgwOTQ1NUQ5QzA3NzZG NzlDQzUyNzAeFw0yNjEwMDYxMTMyNDlaFw0yNjEwMDcxMjAxNDlaMDMxMTAvBgNV BAMTKEJDOEIwODMwMjJBQUNFNjg2MUZFQUZEOEE1MEI3RjhEMzFCN0Y3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0QhcGwpYh8KjU4sjvU4OzxOd YXNBdZ6nXfnBApG24lumP9wIszYyZL7a2g4wu0NfqcVO9rSn5bwUYZCWcqulYU2W Q2aRPxHsIRxqgOYJ8QFShuf5/rInyfl2+DCKJGO3Zh+dzr8ZtSHO7UM/dPuw8YD1 vrKsctv8/yRTMl5jdilIIVGef80SetQuzDC1eOmmZ43QPQTpK0tW4joWD33/YTTV Js6fTRqh0/Juvu+sYLuTEcSSpcceLh+/MGgCst6+l9WDGTAOnUFY5Aor/R7aq87w TvI2p3R1h7baJcqzHHHBHpcli1tTXE1sTAdalZNsL9AFgQJxN7/PerpvWFlTAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUvIsIMCKqzmhh/q/YpQt/jTG39w4wHwYDVR0j BBgwFoAU0x3oGSlipAO7aAlFXZwHdvecxScwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRURUTlMv MC9EMzFERTgxOTI5NjJBNDAzQkI2ODA5NDU1RDlDMDc3NkY3OUNDNTI3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0QzMURFODE5Mjk2MkE0MDNCQjY4MDk0NTVEOUMw Nzc2Rjc5Q0M1MjcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FRFROUy8wL0QzMURFODE5Mjk2MkE0 MDNCQjY4MDk0NTVEOUMwNzc2Rjc5Q0M1MjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLrwEkVpTnetfp WyMFKrxHD5vXGgCqv1/EF6w5xlB6Pzl8gNO5BRs5cC/m5TdpfswbJHK3krkO1qKo HIVGpb1w9OFuOJ7IwVbKz9yCF0DhhGaaDFltQ9cGqQz8UNCBfVx3NfEh7mZxsPGd uZIILpgPJtBXc4zWbqEwo7yZhDNKqtrFAcMU5HkgRsp+doER4Jh31IPgajok0htp Ky7VXU10dRxRh30UMqLyFL77KjWldS9Z9xHYCWFgCDhBqHDNHnrPkyqIhQ0gry2P ZPflMn4g3wIami09+3zZIQe0Qnl2ZxrOCmoX5ZPy40kg45WZGcTv6rR+FhZ/AMLl kVCJC0MN -----END CERTIFICATE-----Generated at Tue Oct 6 18:49:55 2026 by rpki-client