$ rpki-client -vvf rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft File: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft (raw, json) Hash identifier: OCAUx9IzrXiYSsEQo/R6HBUU0OgHRAIjQ8EdOiMra2g= Subject key identifier: E7:77:19:8C:EB:CE:57:80:6A:29:FE:8B:9B:40:F9:36:8B:2C:78:71 Authority key identifier: E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44 Certificate issuer: /CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44 Certificate serial: 4C511451EE83ACA66431C59BBC5BE04EA197A42B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft Manifest number: 07 Signing time: Wed 13 May 2026 07:07:33 +0000 Manifest this update: Wed 13 May 2026 07:02:33 +0000 Manifest next update: Thu 14 May 2026 08:20:33 +0000 Files and hashes: 1: 323430353a363434303a3a2f33322d3332203d3e20313331363636.roa (hash: QB2gyR5XQYs4MfGBjgJf/jtuHKKTmEl5qfrVI5ynL/A=) 2: 3231312e37362e3139302e302f32332d3234203d3e20313331363636.roa (hash: dIKzwOV/Rg8kX37DO7rzZtMhciZlDJrIMJrJMoEYC/o=) 3: 3130332e3134342e33342e302f32332d3234203d3e20313331363636.roa (hash: Wv08z2tY7w2z0229EEvjyYYNTE6epIRCshOK3YEh39Y=) 4: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl (hash: gkybQE4sRNkqDBSAktolNj7kw1lNI26SLW3dMe/zVvI=) 5: 3230322e3132332e3132342e302f32332d3234203d3e20313331363636.roa (hash: G254ASDsdEOL8B4Bo3zdknO7xdbQNcKopBri7j6oisI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:51:14:51:ee:83:ac:a6:64:31:c5:9b:bc:5b:e0:4e:a1:97:a4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44 Validity Not Before: May 13 07:02:33 2026 GMT Not After : May 14 08:20:33 2026 GMT Subject: CN=E777198CEBCE57806A29FE8B9B40F9368B2C7871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:91:aa:6b:e8:d5:5c:10:fc:3f:df:87:77: 1f:b7:6c:92:4b:3d:28:06:ce:1f:30:d5:ec:53:10: ea:92:ec:be:e4:7c:e8:55:90:2c:3c:dd:bc:88:1f: 23:3f:43:a2:4c:14:48:e2:11:c0:04:04:48:55:e1: f9:e7:e2:6d:d7:e0:94:3e:bd:f0:27:17:0d:b8:fc: 73:6e:05:bb:00:03:40:a5:0a:ed:e7:88:41:f3:5b: 63:b1:98:0d:84:ab:8b:13:ad:4d:4c:ce:46:3b:c2: d5:ad:72:d3:cc:94:36:78:42:d9:1b:b4:99:24:2f: 69:29:7a:29:69:af:b4:dc:81:23:9b:e6:28:a9:b3: 7d:d3:90:79:b8:fd:5e:bb:0b:ba:b9:98:ce:0a:a0: 03:9e:ff:c7:cf:43:9d:77:a1:1f:7a:4e:1d:ba:e9: 93:f2:4a:0a:90:fa:e8:be:22:28:41:eb:e2:b0:11: b6:eb:84:33:5a:a7:ec:a7:a0:8d:b7:c8:a1:1c:45: 5a:54:5b:70:8c:18:05:2a:88:1c:cb:a2:fc:cf:08: 77:e1:4c:23:f2:e4:8f:9c:bc:15:a5:36:3b:7d:55: 7a:d8:2d:7f:4f:4b:d2:93:eb:97:5f:2c:e0:75:56: 04:a5:f7:f7:5c:cf:12:d1:6b:13:ae:72:d5:27:a8: 52:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:77:19:8C:EB:CE:57:80:6A:29:FE:8B:9B:40:F9:36:8B:2C:78:71 X509v3 Authority Key Identifier: keyid:E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:49:1a:70:3e:53:29:bf:8c:99:cf:7d:b6:31:9b:00:94:4d: e0:06:57:07:43:e0:0d:9a:e4:d5:f3:47:67:75:c4:d5:85:77: c5:e8:99:60:b3:7a:ee:88:7e:ad:60:a0:de:f8:47:95:cd:7b: 3c:3b:db:19:c4:32:6b:56:7f:25:e3:52:c5:5a:62:5a:46:d8: a2:3a:b6:37:f6:6d:21:ac:bd:9b:95:ff:c0:f2:14:b8:80:93: 6b:d4:0b:4e:d4:db:43:2c:1b:6e:ed:3a:61:d2:a2:ab:d2:40: 57:34:dc:e7:58:42:de:ed:0c:f6:4f:57:68:85:3a:ff:fb:e6: 46:f8:19:b2:cb:52:64:26:71:90:4f:d6:e4:2f:23:b8:be:f4: 0c:65:29:46:8f:0c:54:4f:00:d2:f9:c9:16:ef:ac:a0:f9:bb: fd:24:bb:e8:bb:68:18:e3:5f:96:9f:c8:b0:4e:6c:d9:7c:9f: f0:ef:10:d4:75:1e:8e:f3:97:7e:78:c9:a6:8b:86:b4:b4:d0: 7b:e6:59:1f:67:14:b7:a5:92:16:ef:91:a2:12:c9:22:94:c1: b9:f2:71:49:d5:ab:0d:30:e8:55:89:22:b3:d1:5d:c7:8c:4a: a7:30:81:a0:68:9b:38:f5:50:87:e1:51:6f:6d:e6:e2:44:af: 98:81:fa:76 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUTFEUUe6DrKZkMcWbvFvgTqGXpCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDI2QzA5NDQ5Q0VCNEVFNUZEN0NDMjAwQjA3M0NB NTNCQ0E0NDAeFw0yNjA1MTMwNzAyMzNaFw0yNjA1MTQwODIwMzNaMDMxMTAvBgNV BAMTKEU3NzcxOThDRUJDRTU3ODA2QTI5RkU4QjlCNDBGOTM2OEIyQzc4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmIZGqa+jVXBD8P9+Hdx+3bJJL PSgGzh8w1exTEOqS7L7kfOhVkCw83byIHyM/Q6JMFEjiEcAEBEhV4fnn4m3X4JQ+ vfAnFw24/HNuBbsAA0ClCu3niEHzW2OxmA2Eq4sTrU1MzkY7wtWtctPMlDZ4Qtkb tJkkL2kpeilpr7TcgSOb5iips33TkHm4/V67C7q5mM4KoAOe/8fPQ513oR96Th26 6ZPySgqQ+ui+IihB6+KwEbbrhDNap+ynoI23yKEcRVpUW3CMGAUqiBzLovzPCHfh TCPy5I+cvBWlNjt9VXrYLX9PS9KT65dfLOB1VgSl9/dczxLRaxOuctUnqFI3AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU53cZjOvOV4BqKf6Lm0D5NosseHEwHwYDVR0j BBgwFoAU6H0mwJRJzrTuX9fMIAsHPKU7ykQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFNULzAv RTg3RDI2QzA5NDQ5Q0VCNEVFNUZEN0NDMjAwQjA3M0NBNTNCQ0E0NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9FODdEMjZDMDk0NDlDRUI0RUU1RkQ3Q0MyMDBCMDcz Q0E1M0JDQTQ0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFNULzAvRTg3RDI2QzA5NDQ5Q0VCNEVF NUZEN0NDMjAwQjA3M0NBNTNCQ0E0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEhJGnA+Uym/jJnPfbYx mwCUTeAGVwdD4A2a5NXzR2d1xNWFd8XomWCzeu6Ifq1goN74R5XNezw72xnEMmtW fyXjUsVaYlpG2KI6tjf2bSGsvZuV/8DyFLiAk2vUC07U20MsG27tOmHSoqvSQFc0 3OdYQt7tDPZPV2iFOv/75kb4GbLLUmQmcZBP1uQvI7i+9AxlKUaPDFRPANL5yRbv rKD5u/0ku+i7aBjjX5afyLBObNl8n/DvENR1Ho7zl354yaaLhrS00HvmWR9nFLel khbvkaISySKUwbnycUnVqw0w6FWJIrPRXceMSqcwgaBomzj1UIfhUW9t5uJEr5iB +nY= -----END CERTIFICATE-----Generated at Wed May 13 20:35:59 2026 by rpki-client