$ rpki-client -vvvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft File: BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json) Hash identifier: 0TUNt2WOWvyXYSGNYeEWIb5Hc+QUoEO7Ty0aRPFAWxs= Subject key identifier: 21:79:B3:93:FC:2A:C3:0A:2C:15:B1:3E:33:27:4F:94:65:06:00:DE Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D Certificate issuer: /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Certificate serial: 7D720F2AFBC46C2200E956AE22A2AD6B8593F9D4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft Manifest number: AB Signing time: Wed 26 Aug 2026 08:02:52 +0000 Manifest this update: Wed 26 Aug 2026 07:57:52 +0000 Manifest next update: Thu 27 Aug 2026 11:55:52 +0000 Files and hashes: 1: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=) 2: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=) 3: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: VEl9JPPbROu9V71s1edImYi+oMkc7YbncFkq5cyZ+iM=) 4: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=) 5: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 11:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:72:0f:2a:fb:c4:6c:22:00:e9:56:ae:22:a2:ad:6b:85:93:f9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Validity Not Before: Aug 26 07:57:52 2026 GMT Not After : Aug 27 11:55:52 2026 GMT Subject: CN=2179B393FC2AC30A2C15B13E33274F94650600DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:7d:5a:5b:d2:fc:0a:c7:aa:a9:c2:11:21: f2:8f:db:4b:8a:42:20:ef:f6:2a:2a:01:27:7b:e7: 8c:5e:9e:5c:7a:07:1b:c1:4c:15:79:a6:a8:b8:84: 39:9c:bd:03:29:36:32:b5:0f:0d:03:15:64:18:f6: 7a:b3:1f:d7:f2:cd:f3:d0:ef:c7:44:59:75:c5:65: 93:55:8a:1f:cd:a5:09:e7:58:e8:72:a3:61:d7:1b: d6:3d:1d:f3:b0:ab:ea:79:48:32:be:34:f6:92:3f: be:47:e3:4c:39:57:89:2d:d3:3a:65:15:23:3a:1b: 5a:65:7a:13:03:e5:73:c5:58:60:65:2a:c7:7f:a7: fd:31:3e:e2:89:0d:3e:92:81:0e:67:4d:c1:c9:78: 2f:38:54:d3:b1:5c:cf:57:a4:f6:3c:70:ee:8b:18: b5:d4:f0:08:6a:5f:04:18:c0:50:98:ce:f5:0f:be: bc:fd:d7:31:5a:b2:a8:46:9f:52:62:be:e5:b1:12: 29:03:49:e3:31:8e:6e:24:ea:79:12:b9:19:c8:82: 96:b5:a6:2c:d9:2b:f8:f6:39:54:6b:f3:42:1a:0a: 65:0a:7f:cc:43:f0:2a:f4:27:67:b0:9f:fa:ab:72: 15:a9:03:a4:70:60:a9:ca:63:f8:60:5d:43:10:27: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:79:B3:93:FC:2A:C3:0A:2C:15:B1:3E:33:27:4F:94:65:06:00:DE X509v3 Authority Key Identifier: keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:35:37:a2:e3:f4:17:ac:20:01:52:9e:42:c2:8f:51:9a:26: 08:24:9a:70:6d:a0:0d:12:6f:76:50:f9:e2:d5:f6:f7:a6:68: c1:4a:cc:86:f6:1d:9e:62:8a:1c:89:01:c4:9c:26:d0:70:87: 6f:87:ea:60:c3:9d:a9:10:66:74:14:61:1a:6c:60:c6:5b:32: ed:fb:c0:76:a5:79:9b:41:1d:a0:be:05:b6:b6:0c:d3:bd:16: 20:22:21:94:a3:aa:10:59:2d:0c:15:be:46:09:88:a8:28:a0: f4:87:53:21:91:81:a5:18:d3:b4:23:e9:fe:fd:26:1c:a2:2e: 52:d9:1a:2f:54:43:f8:30:3a:6f:fb:36:a7:81:da:ce:35:4d: b5:27:27:0e:96:82:a9:3f:2e:9c:e7:58:1b:81:75:5e:a9:3b: 19:8c:90:ab:c7:e0:19:45:be:39:61:a3:48:b5:ef:d1:21:eb: 71:62:68:3d:ac:0b:70:d9:b2:e6:18:eb:2c:92:c5:7b:dc:e9: 12:3f:6b:fb:25:a4:73:4b:ff:df:92:76:04:9a:2c:3e:13:21: c7:f0:04:0f:50:a5:cb:3c:ad:81:cf:d7:a1:fc:99:b8:51:99: 67:f0:f7:7e:9d:fa:3e:86:bc:64:24:a9:99:dd:f0:15:1a:ed: 4c:33:76:34 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUfXIPKvvEbCIA6VauIqKta4WT+dQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5 RjY0OEY2RDAeFw0yNjA4MjYwNzU3NTJaFw0yNjA4MjcxMTU1NTJaMDMxMTAvBgNV BAMTKDIxNzlCMzkzRkMyQUMzMEEyQzE1QjEzRTMzMjc0Rjk0NjUwNjAwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCra31aW9L8CseqqcIRIfKP20uK QiDv9ioqASd754xenlx6BxvBTBV5pqi4hDmcvQMpNjK1Dw0DFWQY9nqzH9fyzfPQ 78dEWXXFZZNVih/NpQnnWOhyo2HXG9Y9HfOwq+p5SDK+NPaSP75H40w5V4kt0zpl FSM6G1plehMD5XPFWGBlKsd/p/0xPuKJDT6SgQ5nTcHJeC84VNOxXM9XpPY8cO6L GLXU8AhqXwQYwFCYzvUPvrz91zFasqhGn1JivuWxEikDSeMxjm4k6nkSuRnIgpa1 pizZK/j2OVRr80IaCmUKf8xD8Cr0J2ewn/qrchWpA6RwYKnKY/hgXUMQJxFFAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUIXmzk/wqwwosFbE+MydPlGUGAN4wHwYDVR0j BBgwFoAUvcdxXSn05DGY1ZMVtxZ07p9kj20wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO LzEvQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMy9CREM3NzE1RDI5RjRFNDMxOThENTkzMTVCNzE2 NzRFRTlGNjQ4RjZELmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElOLzEvQkRDNzcxNUQyOUY0 RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGI1N6Lj9Bes IAFSnkLCj1GaJggkmnBtoA0Sb3ZQ+eLV9vemaMFKzIb2HZ5iihyJAcScJtBwh2+H 6mDDnakQZnQUYRpsYMZbMu37wHaleZtBHaC+Bba2DNO9FiAiIZSjqhBZLQwVvkYJ iKgooPSHUyGRgaUY07Qj6f79JhyiLlLZGi9UQ/gwOm/7NqeB2s41TbUnJw6Wgqk/ LpznWBuBdV6pOxmMkKvH4BlFvjlho0i179Eh63FiaD2sC3DZsuYY6yySxXvc6RI/ a/slpHNL/9+SdgSaLD4TIcfwBA9Qpcs8rYHP16H8mbhRmWfw936d+j6GvGQkqZnd 8BUa7UwzdjQ= -----END CERTIFICATE-----Generated at Thu Aug 27 04:03:21 2026 by rpki-client