$ rpki-client -vvvf rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft File: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft (raw, json) Hash identifier: DONSGCGMB9U08AsD/8fTIiJqli71Qgi5cTst4xoRCM0= Subject key identifier: D9:06:BE:4A:55:A2:36:65:19:DA:BF:CD:F7:B8:93:4A:A1:58:C4:1B Authority key identifier: 72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A Certificate issuer: /CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Certificate serial: 1CBAA996FBD89CF588185A94CA83029861097F26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft Manifest number: C7 Signing time: Sat 03 Oct 2026 01:51:27 +0000 Manifest this update: Sat 03 Oct 2026 01:46:27 +0000 Manifest next update: Sun 04 Oct 2026 03:17:27 +0000 Files and hashes: 1: 3131342e32392e3234302e302f32322d3234203d3e20313331363032.roa (hash: 4cmNPnys0d/FtI5okidfoOFAlkFUnmuDLC94ZHnaWrA=) 2: 3131342e32392e3234302e302f32322d3232203d3e203130303835.roa (hash: Iu3XM7OWOu4YExXTvgO6ZRczd2wJf5M+hq5Ui0NVDWs=) 3: 3131342e32392e3234302e302f32322d3234203d3e2034373830.roa (hash: KC1g1qM879l4ds0q/ydW26xvU61SJGGDoYP8GsPifjc=) 4: 3130332e3235322e3132382e302f32322d3234203d3e20313331363032.roa (hash: nVHgvAQGfCe5GeqBJlvDWrqjtd8OwRSNjhUeOydBwUA=) 5: 3130332e3235322e3132382e302f32322d3234203d3e2034373830.roa (hash: aU5nH7E+iqqE72JCSOf/syfpmIQ4Ugwf1G4zZbGiNhs=) 6: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl (hash: SE2P93VuyNyv58HP4uyRBOwhaAR/CXhTDitjh5nLvm0=) 7: 3130332e3235322e3132382e302f32322d3232203d3e203130303835.roa (hash: z0gKkFBHhI3K6nHdzx65beXtOEgH8B0I5cTB2wTLt8g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 03:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ba:a9:96:fb:d8:9c:f5:88:18:5a:94:ca:83:02:98:61:09:7f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Validity Not Before: Oct 3 01:46:27 2026 GMT Not After : Oct 4 03:17:27 2026 GMT Subject: CN=D906BE4A55A2366519DABFCDF7B8934AA158C41B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a9:95:08:cb:04:8c:43:91:db:f8:a1:e2:d2: b3:49:2b:08:79:16:c6:a1:33:e3:5b:e5:d9:81:85: 69:71:68:81:29:46:38:9f:68:b7:f7:4b:83:2d:3e: 9f:d9:73:db:76:6d:9d:fc:85:9b:bc:aa:78:c1:e9: a4:a5:ef:f3:08:8c:78:b4:45:ed:7c:e2:d9:c6:6d: a9:28:57:aa:57:19:a5:5e:50:d0:1d:09:c5:11:d1: 2c:17:da:c0:f0:e5:4e:d7:cf:01:64:e7:1d:ec:e0: 44:6d:a7:6d:fd:e4:c5:fa:b5:86:51:07:0f:eb:a9: 98:28:13:d6:bd:d9:dd:a1:b7:5b:46:0f:ca:81:b8: 28:60:94:b9:69:68:fa:dd:e2:a8:32:ca:89:12:6d: f4:e9:ea:48:d4:29:6c:ba:55:46:85:00:8d:cc:a3: 80:f4:32:e7:b1:bf:7d:b7:c0:e8:8d:24:48:19:1f: 74:e7:4c:62:55:c1:07:b8:93:44:5d:99:3f:28:0a: 07:19:fe:75:9d:bb:bd:1f:4a:a2:56:d6:df:7a:18: a6:16:01:e4:75:5f:ad:af:86:2d:ff:8c:62:57:24: 68:6e:16:fe:e6:19:01:64:c5:79:5d:aa:f7:34:11: 0f:41:26:c6:64:df:bc:cd:e3:ae:51:8e:b9:b9:70: 70:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:06:BE:4A:55:A2:36:65:19:DA:BF:CD:F7:B8:93:4A:A1:58:C4:1B X509v3 Authority Key Identifier: keyid:72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c2:8d:42:39:d7:3d:b9:f1:17:b7:4d:b2:2a:39:37:2f:a6: e6:00:58:46:7c:19:04:05:8e:d5:62:d5:00:62:30:40:c6:91: 59:35:83:07:b3:6d:73:85:6e:95:fb:68:23:e2:d9:c1:54:fc: 3d:14:c9:4e:1d:5f:25:e6:03:d4:91:9c:5c:6d:ba:91:4d:dc: 6e:3b:34:c6:84:4f:84:bf:a5:a0:f7:a4:a6:51:11:0c:08:e3: 09:22:3e:c5:7d:7c:09:1a:76:ed:97:c1:a0:bd:2d:77:a5:bb: 72:6e:61:4e:55:18:8e:65:b5:09:d8:eb:a4:25:e0:c8:38:1c: cc:4d:12:d9:da:a6:54:eb:0b:12:88:ad:1f:ee:53:12:a2:41: 5c:4d:00:77:15:02:06:12:28:f3:73:db:48:00:60:bf:a5:2f: 61:97:66:00:57:1f:f3:a8:5a:5f:ab:e9:ae:31:fc:92:60:aa: 88:18:e9:40:d7:aa:c4:e9:28:bf:92:bf:63:76:00:b2:e0:b1: 9f:21:3f:47:c1:77:3c:90:1b:e7:3a:c3:fa:6c:44:1d:7a:d1: 3b:27:78:9d:5f:db:ad:97:07:d6:7f:75:d0:88:4c:2d:53:4c: fb:cd:63:e4:e9:3d:bb:ab:37:07:70:22:70:53:8c:4e:96:45: 00:3c:a2:c0 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUHLqplvvYnPWIGFqUyoMCmGEJfyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4 REQzMDk5QTAeFw0yNjEwMDMwMTQ2MjdaFw0yNjEwMDQwMzE3MjdaMDMxMTAvBgNV BAMTKEQ5MDZCRTRBNTVBMjM2NjUxOURBQkZDREY3Qjg5MzRBQTE1OEM0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHqZUIywSMQ5Hb+KHi0rNJKwh5 FsahM+Nb5dmBhWlxaIEpRjifaLf3S4MtPp/Zc9t2bZ38hZu8qnjB6aSl7/MIjHi0 Re184tnGbakoV6pXGaVeUNAdCcUR0SwX2sDw5U7XzwFk5x3s4ERtp2395MX6tYZR Bw/rqZgoE9a92d2ht1tGD8qBuChglLlpaPrd4qgyyokSbfTp6kjUKWy6VUaFAI3M o4D0Muexv323wOiNJEgZH3TnTGJVwQe4k0RdmT8oCgcZ/nWdu70fSqJW1t96GKYW AeR1X62vhi3/jGJXJGhuFv7mGQFkxXldqvc0EQ9BJsZk37zN465Rjrm5cHCpAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU2Qa+SlWiNmUZ2r/N97iTSqFYxBswHwYDVR0j BBgwFoAUckh+F8JA1VwW6P5bC3HUSY3TCZowDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAv NzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MjQ4N0UxN0MyNDBENTVDMTZFOEZFNUIwQjcxRDQ0 OThERDMwOTlBLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAvNzI0ODdFMTdDMjQwRDU1QzE2 RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKHCjUI51z258Re3TbIq OTcvpuYAWEZ8GQQFjtVi1QBiMEDGkVk1gwezbXOFbpX7aCPi2cFU/D0UyU4dXyXm A9SRnFxtupFN3G47NMaET4S/paD3pKZREQwI4wkiPsV9fAkadu2XwaC9LXelu3Ju YU5VGI5ltQnY66Ql4Mg4HMxNEtnaplTrCxKIrR/uUxKiQVxNAHcVAgYSKPNz20gA YL+lL2GXZgBXH/OoWl+r6a4x/JJgqogY6UDXqsTpKL+Sv2N2ALLgsZ8hP0fBdzyQ G+c6w/psRB160TsneJ1f262XB9Z/ddCITC1TTPvNY+TpPburNwdwInBTjE6WRQA8 osA= -----END CERTIFICATE-----Generated at Sat Oct 3 14:27:59 2026 by rpki-client