$ rpki-client -vvf rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft File: 2730CF9F132716F178F88FB1F268CE51CA264C9F.mft (raw, json) Hash identifier: ioP6b6dCr+0XGdmUvjWTZvO/O1HU9pq9zxTAmSxC4Kk= Subject key identifier: D8:B2:47:B1:98:D5:F4:0D:9D:CF:4E:D6:6C:8C:EF:35:A9:9B:AF:D3 Authority key identifier: 27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F Certificate issuer: /CN=2730CF9F132716F178F88FB1F268CE51CA264C9F Certificate serial: 0152B7B52F832FA4558B321AC686245F2D1DDE7B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft Manifest number: 04 Signing time: Wed 13 May 2026 08:07:45 +0000 Manifest this update: Wed 13 May 2026 08:02:45 +0000 Manifest next update: Thu 14 May 2026 10:35:45 +0000 Files and hashes: 1: 2730CF9F132716F178F88FB1F268CE51CA264C9F.crl (hash: NDz9Uay4wZSVjZfmCXrAr190I2pUDG+OAAN7/mxy2z0=) 2: 3130332e3132372e3231362e302f32332d3332203d3e20313331363432.roa (hash: 9QLLKde7xB+44T3GJTEMGiTgMX83XZhXuc69+/0GzrU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.crl rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:52:b7:b5:2f:83:2f:a4:55:8b:32:1a:c6:86:24:5f:2d:1d:de:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2730CF9F132716F178F88FB1F268CE51CA264C9F Validity Not Before: May 13 08:02:45 2026 GMT Not After : May 14 10:35:45 2026 GMT Subject: CN=D8B247B198D5F40D9DCF4ED66C8CEF35A99BAFD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9b:02:4c:b9:53:1e:dd:97:1d:b7:91:74:f7: b5:ef:9f:21:47:00:35:ad:dd:d4:0d:39:fd:7f:e1: be:02:72:c8:cc:44:c5:8b:85:65:15:07:d5:95:59: 72:67:01:a9:eb:ef:78:ed:46:01:a2:b9:09:b6:e6: c1:b2:be:6e:5a:11:a3:72:62:51:0d:3e:03:21:56: 6b:66:e7:c3:dd:74:d0:67:c5:cf:4b:60:a4:25:fa: 9a:fe:77:5f:18:35:1a:8b:e1:d9:78:0c:a7:3c:4c: df:ec:c4:cf:cd:78:1c:78:ca:24:37:61:26:05:ec: 11:8a:ec:22:36:b9:37:59:dc:2a:fb:0b:c7:12:7b: d9:37:56:6e:12:35:5f:6e:bf:59:bd:73:12:db:d7: e4:48:7f:8f:f6:0d:c3:0e:d2:7e:15:54:41:d1:e3: 87:e8:50:db:e3:5a:bb:67:7b:0b:70:f5:62:f4:0d: 7b:3c:59:b4:b1:cb:eb:4a:45:b5:fb:45:c0:e5:0c: e5:ad:17:5e:f0:1f:67:b7:96:18:2e:d1:92:72:59: 94:08:4b:1d:ae:ca:69:d5:b0:a3:44:24:12:3c:c8: 76:13:0f:15:77:e6:ef:66:2c:44:32:55:91:d6:6a: 38:d8:91:9e:c8:1e:a7:e2:db:a5:55:ea:0e:8d:8f: 35:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B2:47:B1:98:D5:F4:0D:9D:CF:4E:D6:6C:8C:EF:35:A9:9B:AF:D3 X509v3 Authority Key Identifier: keyid:27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f6:1b:5a:5c:96:57:29:24:ea:95:a1:71:e8:9b:31:08:7f: 17:09:40:ed:d5:b6:5d:9c:60:ae:23:2a:71:06:ba:55:6f:3d: 5b:f1:37:71:80:6a:8a:e7:1c:4b:df:4c:e9:7c:20:0c:d2:a1: f8:f1:2c:1e:f6:ec:ac:db:2a:25:7f:43:35:4e:da:ff:8a:a6: b3:a7:21:6a:6a:c8:15:21:cb:34:71:68:48:c5:95:88:24:56: 38:b7:6f:20:57:c3:5d:18:6c:9d:98:a9:3e:69:cd:61:4d:4b: 1e:b9:b0:13:eb:80:75:a1:27:a2:a9:0b:46:3d:13:7a:51:f0: b5:b9:c7:5d:a4:0f:ad:66:44:1c:d0:33:d8:49:b4:d3:1b:64: 4e:4d:cc:bb:55:c4:4a:4e:df:08:ec:b0:1e:53:e7:0f:b1:1f: fd:d4:69:13:8c:d0:d5:54:25:68:56:6f:44:0f:e6:be:36:69: 2e:f2:18:81:95:12:ad:11:d3:39:a5:e4:fc:d2:da:12:ec:c4: e0:fd:c6:08:4b:cf:6f:eb:8b:a3:b7:24:4a:a1:a2:e3:e7:37: 51:50:2c:a0:ac:77:ef:51:89:ca:f9:28:63:4b:3d:2e:52:66: 38:a4:e2:29:2e:b6:13:71:f0:66:bd:4e:4d:67:8f:e1:89:97: 67:11:dd:ff -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUAVK3tS+DL6RVizIaxoYkXy0d3nswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjczMENGOUYxMzI3MTZGMTc4Rjg4RkIxRjI2OENFNTFD QTI2NEM5RjAeFw0yNjA1MTMwODAyNDVaFw0yNjA1MTQxMDM1NDVaMDMxMTAvBgNV BAMTKEQ4QjI0N0IxOThENUY0MEQ5RENGNEVENjZDOENFRjM1QTk5QkFGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLmwJMuVMe3Zcdt5F097XvnyFH ADWt3dQNOf1/4b4CcsjMRMWLhWUVB9WVWXJnAanr73jtRgGiuQm25sGyvm5aEaNy YlENPgMhVmtm58PddNBnxc9LYKQl+pr+d18YNRqL4dl4DKc8TN/sxM/NeBx4yiQ3 YSYF7BGK7CI2uTdZ3Cr7C8cSe9k3Vm4SNV9uv1m9cxLb1+RIf4/2DcMO0n4VVEHR 44foUNvjWrtnewtw9WL0DXs8WbSxy+tKRbX7RcDlDOWtF17wH2e3lhgu0ZJyWZQI Sx2uymnVsKNEJBI8yHYTDxV35u9mLEQyVZHWajjYkZ7IHqfi26VV6g6NjzUFAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU2LJHsZjV9A2dz07WbIzvNambr9MwHwYDVR0j BBgwFoAUJzDPnxMnFvF4+I+x8mjOUcomTJ8wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFVTSEVO R1hJTi8wLzI3MzBDRjlGMTMyNzE2RjE3OEY4OEZCMUYyNjhDRTUxQ0EyNjRDOUYu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvMjczMENGOUYxMzI3MTZGMTc4Rjg4RkIx RjI2OENFNTFDQTI2NEM5Ri5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hVU0hFTkdYSU4vMC8yNzMw Q0Y5RjEzMjcxNkYxNzhGODhGQjFGMjY4Q0U1MUNBMjY0QzlGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA kfYbWlyWVykk6pWhceibMQh/FwlA7dW2XZxgriMqcQa6VW89W/E3cYBqiuccS99M 6XwgDNKh+PEsHvbsrNsqJX9DNU7a/4qms6chamrIFSHLNHFoSMWViCRWOLdvIFfD XRhsnZipPmnNYU1LHrmwE+uAdaEnoqkLRj0TelHwtbnHXaQPrWZEHNAz2Em00xtk Tk3Mu1XESk7fCOywHlPnD7Ef/dRpE4zQ1VQlaFZvRA/mvjZpLvIYgZUSrRHTOaXk /NLaEuzE4P3GCEvPb+uLo7ckSqGi4+c3UVAsoKx371GJyvkoY0s9LlJmOKTiKS62 E3HwZr1OTWeP4YmXZxHd/w== -----END CERTIFICATE-----Generated at Wed May 13 20:36:12 2026 by rpki-client