$ rpki-client -vvf rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft File: CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft (raw, json) Hash identifier: gN4zczyc4n4d6kwFwONVbGt5bvyma61Y1ZxaH7nvuY8= Subject key identifier: 89:17:6C:90:C0:58:B2:0F:50:AE:CF:9A:2D:20:BC:FF:B0:A8:FF:F1 Authority key identifier: CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F Certificate issuer: /CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F Certificate serial: 07E68534F8E197C7FE4BC7E01DE67CAF5F77707D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft Manifest number: 80 Signing time: Fri 14 Aug 2026 20:28:25 +0000 Manifest this update: Fri 14 Aug 2026 20:23:25 +0000 Manifest next update: Sat 15 Aug 2026 21:47:25 +0000 Files and hashes: 1: 3130332e3133302e38342e302f32322d3234203d3e20313331363037.roa (hash: kLXIxum1hjICq0/XMBssYAH4VJErk8HWH+ctM17UVM0=) 2: CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl (hash: QA0Ix3tQcfJa80u59fbuy4hsNvNqcxMdnWnOJz/jrPo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 21:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e6:85:34:f8:e1:97:c7:fe:4b:c7:e0:1d:e6:7c:af:5f:77:70:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE985C78C6B578507702DEDB1C399B2F99CB3B4F Validity Not Before: Aug 14 20:23:25 2026 GMT Not After : Aug 15 21:47:25 2026 GMT Subject: CN=89176C90C058B20F50AECF9A2D20BCFFB0A8FFF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:da:91:20:27:76:16:00:80:2e:f1:b0:07: 0c:54:00:cd:f3:0a:b3:5f:80:89:cb:0f:84:9a:23: dd:65:4d:e2:11:95:97:ed:66:72:c1:45:54:02:e6: 85:61:e5:e7:7f:88:b8:67:66:4d:87:57:c0:51:7c: ee:3f:5f:b0:19:24:43:80:f4:74:6a:a5:e6:7b:1b: 92:3c:f6:07:07:d8:13:c6:4b:bf:46:65:4d:61:1f: b0:11:4e:ad:b4:b6:e2:0c:e1:b3:b9:7b:93:6d:98: 43:73:c9:3e:f7:44:8f:41:86:a1:3b:f9:62:5d:f8: 84:c7:b7:4e:ce:c7:6c:51:c8:3e:e6:94:5a:40:0f: cd:f3:f9:fd:8b:28:89:46:8f:3e:69:33:60:03:c1: 6e:ff:6a:80:77:43:cc:27:81:ee:57:7b:5b:cb:9a: fa:f6:93:1f:16:fe:53:44:63:fd:30:21:0f:c6:ca: e8:09:ad:d0:0d:b1:9d:91:6f:df:eb:fa:99:b2:08: 4b:b0:65:5c:6c:ee:91:b7:5c:e2:5b:f7:b7:08:cd: c2:a9:79:69:a9:ec:b7:40:ac:13:df:63:40:2c:36: 0c:66:c1:7f:de:32:5b:68:b3:4d:cd:31:55:fb:2a: 93:68:f0:2e:2b:1d:75:66:0c:1d:08:08:e1:9c:e5: af:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:17:6C:90:C0:58:B2:0F:50:AE:CF:9A:2D:20:BC:FF:B0:A8:FF:F1 X509v3 Authority Key Identifier: keyid:CE:98:5C:78:C6:B5:78:50:77:02:DE:DB:1C:39:9B:2F:99:CB:3B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EHHKY/0/CE985C78C6B578507702DEDB1C399B2F99CB3B4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d5:e4:93:04:ef:ed:70:8c:6f:f0:2d:d6:67:64:2a:3a:c1: ec:09:f8:66:38:1d:15:c6:41:5c:f2:1d:e0:f7:9a:4d:ab:4f: 3e:bd:c1:2d:d6:b0:46:0c:79:56:08:22:19:97:9d:30:99:9a: 3c:9b:66:78:42:9b:b9:e5:3e:10:d4:a4:4d:6c:ea:7b:a2:95: 07:6c:9b:b3:6c:3e:33:82:b6:4a:35:5c:cc:fd:73:af:c4:9c: 96:89:34:79:01:50:f3:d6:0f:f0:d3:64:6b:3c:65:47:9b:99: a9:0a:8d:23:61:ca:51:cd:69:45:af:c8:2b:a2:f6:d5:8a:fd: 26:f4:86:f4:95:f3:a5:4d:a8:09:1f:f7:a9:c0:10:95:d4:98: 5b:cf:89:54:cd:ef:3d:79:2f:8a:c0:8f:f2:22:02:0d:8e:a9: 6f:98:f5:ea:3d:8a:50:a1:0d:4b:cf:11:29:5b:0b:50:5b:9c: 90:9c:36:76:31:dc:72:b0:92:e0:9b:bc:ef:0d:51:cf:5d:5f: b1:cc:0b:5b:4a:6d:4c:a4:7c:09:81:19:77:b2:69:95:44:a5: e8:df:ed:3e:7a:f8:cb:39:5f:5c:14:32:82:d2:48:f6:c9:31: 82:d3:97:2d:b6:04:ff:c2:85:ca:be:75:20:c5:b8:50:14:ce: 73:46:9c:2f -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUB+aFNPjhl8f+S8fgHeZ8r193cH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U5ODVDNzhDNkI1Nzg1MDc3MDJERURCMUMzOTlCMkY5 OUNCM0I0RjAeFw0yNjA4MTQyMDIzMjVaFw0yNjA4MTUyMTQ3MjVaMDMxMTAvBgNV BAMTKDg5MTc2QzkwQzA1OEIyMEY1MEFFQ0Y5QTJEMjBCQ0ZGQjBBOEZGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmIdqRICd2FgCALvGwBwxUAM3z CrNfgInLD4SaI91lTeIRlZftZnLBRVQC5oVh5ed/iLhnZk2HV8BRfO4/X7AZJEOA 9HRqpeZ7G5I89gcH2BPGS79GZU1hH7ARTq20tuIM4bO5e5NtmENzyT73RI9BhqE7 +WJd+ITHt07Ox2xRyD7mlFpAD83z+f2LKIlGjz5pM2ADwW7/aoB3Q8wnge5Xe1vL mvr2kx8W/lNEY/0wIQ/GyugJrdANsZ2Rb9/r+pmyCEuwZVxs7pG3XOJb97cIzcKp eWmp7LdArBPfY0AsNgxmwX/eMltos03NMVX7KpNo8C4rHXVmDB0ICOGc5a9pAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUiRdskMBYsg9Qrs+aLSC8/7Co//EwHwYDVR0j BBgwFoAUzphceMa1eFB3At7bHDmbL5nLO08wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRUhIS1kv MC9DRTk4NUM3OEM2QjU3ODUwNzcwMkRFREIxQzM5OUIyRjk5Q0IzQjRGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0NFOTg1Qzc4QzZCNTc4NTA3NzAyREVEQjFDMzk5 QjJGOTlDQjNCNEYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FSEhLWS8wL0NFOTg1Qzc4QzZCNTc4 NTA3NzAyREVEQjFDMzk5QjJGOTlDQjNCNEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA71eSTBO/tcIxv 8C3WZ2QqOsHsCfhmOB0VxkFc8h3g95pNq08+vcEt1rBGDHlWCCIZl50wmZo8m2Z4 Qpu55T4Q1KRNbOp7opUHbJuzbD4zgrZKNVzM/XOvxJyWiTR5AVDz1g/w02RrPGVH m5mpCo0jYcpRzWlFr8grovbViv0m9Ib0lfOlTagJH/epwBCV1Jhbz4lUze89eS+K wI/yIgINjqlvmPXqPYpQoQ1LzxEpWwtQW5yQnDZ2MdxysJLgm7zvDVHPXV+xzAtb Sm1MpHwJgRl3smmVRKXo3+0+evjLOV9cFDKC0kj2yTGC05cttgT/woXKvnUgxbhQ FM5zRpwv -----END CERTIFICATE-----Generated at Sat Aug 15 05:21:44 2026 by rpki-client