$ rpki-client -vvvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft File: BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json) Hash identifier: +S6qeBgVAJ+PbPA3GCSdZyy5+c0sPVsskKSaEEBBzzU= Subject key identifier: A8:FC:F6:47:D4:6F:2E:0B:E1:89:08:3C:6E:9F:3E:21:FA:BB:3C:72 Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D Certificate issuer: /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Certificate serial: 5E42E82DC921384595AF41CB0C9898FF5115FCE4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft Manifest number: E8 Signing time: Sun 11 Oct 2026 09:57:22 +0000 Manifest this update: Sun 11 Oct 2026 09:52:22 +0000 Manifest next update: Mon 12 Oct 2026 12:59:22 +0000 Files and hashes: 1: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=) 2: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=) 3: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: 00z4dafo0HWzsd9jSJv3I9GzxGoDBbmhBhuS3ZZo9iQ=) 4: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=) 5: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:42:e8:2d:c9:21:38:45:95:af:41:cb:0c:98:98:ff:51:15:fc:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Validity Not Before: Oct 11 09:52:22 2026 GMT Not After : Oct 12 12:59:22 2026 GMT Subject: CN=A8FCF647D46F2E0BE189083C6E9F3E21FABB3C72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:be:d2:f7:7c:5c:71:b2:e3:28:f2:fb:9c:94: 6d:b0:a7:29:1d:81:b7:a1:e3:c7:d8:27:a8:68:7d: b3:c7:7d:77:81:dd:c0:ea:96:bd:35:9f:10:70:70: 3f:09:21:4c:1f:26:2b:7f:28:87:a6:fd:68:b3:19: ef:7e:0b:9d:e9:59:5d:66:83:ca:53:1d:9a:ac:1b: 9b:71:38:fb:f2:d4:25:65:b3:46:0a:d5:7a:3d:81: bf:9a:97:90:42:3b:bb:6a:db:7e:2f:e7:61:8c:1f: a7:9a:0e:5b:14:9e:ec:5c:07:45:c6:48:41:de:5c: b7:b4:be:0f:ce:24:ff:21:ec:1c:91:6c:ce:26:a9: 0d:2e:2d:ec:6e:c0:73:bf:47:5b:b6:e9:ba:de:a6: 2b:a7:ac:d2:b3:2e:38:70:ad:67:be:62:e9:61:83: 47:1d:1e:b8:7d:81:ad:43:b6:ca:db:26:56:09:ca: 01:53:fe:ca:8f:88:5b:0c:a9:1a:36:ee:ff:b2:81: db:68:47:b1:a0:9c:de:49:93:19:25:71:31:ba:49: 1d:5b:db:e6:e4:ba:db:aa:51:de:80:aa:b4:34:e3: 07:11:82:e3:0d:35:f9:aa:03:4c:91:b5:35:f5:16: 9f:97:1d:08:79:b4:3e:09:a2:67:6e:38:a0:69:d0: d9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FC:F6:47:D4:6F:2E:0B:E1:89:08:3C:6E:9F:3E:21:FA:BB:3C:72 X509v3 Authority Key Identifier: keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d3:dc:1b:3b:fb:6f:69:3c:3d:7e:9c:cc:8b:61:11:e4:59: b1:87:31:2d:01:ca:9d:70:c6:c6:e2:49:e7:68:88:48:c3:49: 6c:24:ef:17:63:21:e3:35:a0:64:97:89:52:1c:6c:cc:b1:89: dd:ff:89:0b:00:e1:43:cc:f7:08:a8:aa:5f:bb:e0:16:a7:c4: 59:86:73:a4:4b:03:18:c1:84:4d:94:45:86:e8:5f:ad:bb:b8: da:57:ee:38:99:5b:48:36:23:2b:23:d3:9f:45:0e:45:5f:24: 00:6c:76:78:d1:43:89:08:87:6d:a2:3b:b7:98:4c:c6:b8:72: 45:7d:4a:10:cc:d6:6c:d9:cf:00:ca:c0:a8:e1:3a:b7:c8:c6: 32:9c:64:f5:90:d5:75:8b:ef:1d:84:32:1d:9a:2d:2d:84:97: 75:29:50:40:2d:9d:c5:20:a0:f2:5f:3e:d2:4d:8d:ab:61:42: 74:b5:1b:ad:07:a8:fd:70:02:4c:0a:72:14:94:c8:8d:59:dc: 2f:60:66:ff:de:b6:49:66:f4:94:75:97:17:ee:8c:9b:4e:5b: 3d:2b:57:ce:d4:08:44:25:36:d1:b4:66:21:4d:86:8b:7e:b7: db:03:ec:f1:87:e1:0a:44:16:0e:f7:e8:89:51:bf:b3:53:1a: 8f:43:16:af -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUXkLoLckhOEWVr0HLDJiY/1EV/OQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5 RjY0OEY2RDAeFw0yNjEwMTEwOTUyMjJaFw0yNjEwMTIxMjU5MjJaMDMxMTAvBgNV BAMTKEE4RkNGNjQ3RDQ2RjJFMEJFMTg5MDgzQzZFOUYzRTIxRkFCQjNDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRvtL3fFxxsuMo8vuclG2wpykd gbeh48fYJ6hofbPHfXeB3cDqlr01nxBwcD8JIUwfJit/KIem/WizGe9+C53pWV1m g8pTHZqsG5txOPvy1CVls0YK1Xo9gb+al5BCO7tq234v52GMH6eaDlsUnuxcB0XG SEHeXLe0vg/OJP8h7ByRbM4mqQ0uLexuwHO/R1u26brepiunrNKzLjhwrWe+Yulh g0cdHrh9ga1DtsrbJlYJygFT/sqPiFsMqRo27v+ygdtoR7GgnN5JkxklcTG6SR1b 2+bkutuqUd6AqrQ04wcRguMNNfmqA0yRtTX1Fp+XHQh5tD4JomduOKBp0Nl5AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUqPz2R9RvLgvhiQg8bp8+Ifq7PHIwHwYDVR0j BBgwFoAUvcdxXSn05DGY1ZMVtxZ07p9kj20wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO LzEvQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMy9CREM3NzE1RDI5RjRFNDMxOThENTkzMTVCNzE2 NzRFRTlGNjQ4RjZELmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElOLzEvQkRDNzcxNUQyOUY0 RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACfT3Bs7+29p PD1+nMyLYRHkWbGHMS0Byp1wxsbiSedoiEjDSWwk7xdjIeM1oGSXiVIcbMyxid3/ iQsA4UPM9wioql+74BanxFmGc6RLAxjBhE2URYboX627uNpX7jiZW0g2Iysj059F DkVfJABsdnjRQ4kIh22iO7eYTMa4ckV9ShDM1mzZzwDKwKjhOrfIxjKcZPWQ1XWL 7x2EMh2aLS2El3UpUEAtncUgoPJfPtJNjathQnS1G60HqP1wAkwKchSUyI1Z3C9g Zv/etklm9JR1lxfujJtOWz0rV87UCEQlNtG0ZiFNhot+t9sD7PGH4QpEFg736IlR v7NTGo9DFq8= -----END CERTIFICATE-----Generated at Sun Oct 11 23:13:28 2026 by rpki-client