$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft File: BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json) Hash identifier: aN3BdbLxQftNwcw/YB1bgtp46v9j1GnlwNsmN+S7XPk= Subject key identifier: 45:8F:3D:C7:1E:5E:8F:35:A9:A3:D5:4E:A7:0A:6B:9B:70:8D:87:C5 Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D Certificate issuer: /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Certificate serial: 69A41F244E3286E495CD5A7F3C10B381738B37DD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft Manifest number: 31 Signing time: Thu 28 May 2026 03:44:02 +0000 Manifest this update: Thu 28 May 2026 03:39:02 +0000 Manifest next update: Fri 29 May 2026 04:55:02 +0000 Files and hashes: 1: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: vulyC6GBs43sHhbhsQuoihevJ9x/qTlP532tGS5TLW8=) 2: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=) 3: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=) 4: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=) 5: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 May 2026 04:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a4:1f:24:4e:32:86:e4:95:cd:5a:7f:3c:10:b3:81:73:8b:37:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D Validity Not Before: May 28 03:39:02 2026 GMT Not After : May 29 04:55:02 2026 GMT Subject: CN=458F3DC71E5E8F35A9A3D54EA70A6B9B708D87C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:e0:a4:ae:a1:b7:e6:a5:c3:3f:46:80:31: 3a:33:9c:78:dc:f2:f3:0f:24:08:ae:f8:db:38:62: bd:33:f7:8c:c4:c0:48:43:18:d6:80:f2:a0:be:02: 86:38:3c:2a:d9:f1:f5:bb:53:7e:82:6f:cc:7c:6a: be:6f:73:9a:d2:74:f7:2b:ad:f7:da:e6:68:84:b7: b0:2a:d3:5b:f3:8c:de:34:3d:35:04:11:6d:82:b9: 9d:22:d8:7e:ad:c3:51:c3:d0:67:6c:72:71:4b:6f: 77:cd:df:b6:45:ff:40:f9:1a:c9:df:e8:22:90:f8: 02:90:96:e1:5e:b5:20:cc:18:10:28:14:27:2b:9b: 4e:46:f7:14:62:df:48:97:b5:c5:b6:f2:85:b3:49: a5:aa:c5:92:6a:30:ad:48:0c:bd:2f:50:a0:39:fc: 07:13:02:50:79:61:a9:18:b3:19:47:db:03:c2:14: 8e:b5:ef:b2:58:92:4d:e5:3a:96:2e:b8:07:83:8b: 37:8e:4f:f8:8b:49:30:55:57:e4:aa:d0:31:97:1f: 6d:d8:cf:cd:41:6a:ed:e2:e6:bf:2c:ec:61:c8:87: 7f:82:6c:0a:32:b0:8b:89:f9:0f:5f:bc:42:33:86: 61:ed:39:b9:66:a5:9b:ff:f9:5a:12:45:ed:9f:c4: 50:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8F:3D:C7:1E:5E:8F:35:A9:A3:D5:4E:A7:0A:6B:9B:70:8D:87:C5 X509v3 Authority Key Identifier: keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:79:0a:7b:79:27:aa:1c:21:81:11:51:a1:1d:8c:15:de:17: e9:89:56:18:7b:dc:c8:09:cf:46:fa:f2:8c:13:24:f9:93:6d: fc:75:24:35:3d:e2:fc:5a:97:60:65:df:b3:8c:bf:7e:63:bf: 15:db:55:1b:37:5c:da:82:37:e0:a4:47:5a:70:13:32:7d:56: f5:82:24:70:be:41:14:28:d5:ee:88:9d:18:9a:f2:ec:9a:78: 04:09:3f:a4:5e:df:eb:39:6c:f7:af:60:5f:99:ac:bd:78:0c: 81:88:63:dd:48:2a:30:8a:bb:29:bf:ac:22:66:f1:dc:64:09: 17:a8:09:17:e1:88:c3:92:cb:77:c2:e2:61:1a:71:dc:27:97: 3a:eb:3b:cf:76:79:37:60:d1:2e:0f:f8:37:6e:1c:2c:a6:b2: ee:4d:25:2c:a5:b6:5d:16:22:e1:e7:b3:8c:6c:ee:fe:4a:e6: 7b:c5:65:de:b6:2f:91:98:4b:48:af:ec:c5:0f:54:2b:b6:a1: b3:40:76:71:e9:27:90:c2:82:46:dc:8d:d2:13:b3:ea:f0:09: ea:7f:7c:02:b1:f1:6a:5b:d6:2c:b9:cd:4b:35:13:ba:64:3a: c5:1e:1b:73:c1:db:33:c0:7e:1e:af:48:d4:2b:39:78:fb:12: 7f:10:f2:61 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUaaQfJE4yhuSVzVp/PBCzgXOLN90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5 RjY0OEY2RDAeFw0yNjA1MjgwMzM5MDJaFw0yNjA1MjkwNDU1MDJaMDMxMTAvBgNV BAMTKDQ1OEYzREM3MUU1RThGMzVBOUEzRDU0RUE3MEE2QjlCNzA4RDg3QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYuCkrqG35qXDP0aAMToznHjc 8vMPJAiu+Ns4Yr0z94zEwEhDGNaA8qC+AoY4PCrZ8fW7U36Cb8x8ar5vc5rSdPcr rffa5miEt7Aq01vzjN40PTUEEW2CuZ0i2H6tw1HD0GdscnFLb3fN37ZF/0D5Gsnf 6CKQ+AKQluFetSDMGBAoFCcrm05G9xRi30iXtcW28oWzSaWqxZJqMK1IDL0vUKA5 /AcTAlB5YakYsxlH2wPCFI6177JYkk3lOpYuuAeDizeOT/iLSTBVV+Sq0DGXH23Y z81Bau3i5r8s7GHIh3+CbAoysIuJ+Q9fvEIzhmHtOblmpZv/+VoSRe2fxFAbAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQURY89xx5ejzWpo9VOpwprm3CNh8UwHwYDVR0j BBgwFoAUvcdxXSn05DGY1ZMVtxZ07p9kj20wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO LzEvQkRDNzcxNUQyOUY0RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMy9CREM3NzE1RDI5RjRFNDMxOThENTkzMTVCNzE2 NzRFRTlGNjQ4RjZELmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElOLzEvQkRDNzcxNUQyOUY0 RTQzMTk4RDU5MzE1QjcxNjc0RUU5RjY0OEY2RC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGF5Cnt5J6oc IYERUaEdjBXeF+mJVhh73MgJz0b68owTJPmTbfx1JDU94vxal2Bl37OMv35jvxXb VRs3XNqCN+CkR1pwEzJ9VvWCJHC+QRQo1e6InRia8uyaeAQJP6Re3+s5bPevYF+Z rL14DIGIY91IKjCKuym/rCJm8dxkCReoCRfhiMOSy3fC4mEacdwnlzrrO892eTdg 0S4P+DduHCymsu5NJSyltl0WIuHns4xs7v5K5nvFZd62L5GYS0iv7MUPVCu2obNA dnHpJ5DCgkbcjdITs+rwCep/fAKx8Wpb1iy5zUs1E7pkOsUeG3PB2zPAfh6vSNQr OXj7En8Q8mE= -----END CERTIFICATE-----Generated at Thu May 28 07:17:02 2026 by rpki-client