$ rpki-client -vvf rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft File: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft (raw, json) Hash identifier: lYwVVlbvfT0QbL6Zpb52KAhRsGiJ6B8gUEm46q59aaw= Subject key identifier: AC:02:A3:A9:7E:CD:A1:2B:CE:BE:F0:C7:CF:07:C7:63:A3:EC:10:1C Authority key identifier: 72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A Certificate issuer: /CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Certificate serial: 523626EFF23EB4E2947B06BFDF68B7D5DCC0CF7F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft Manifest number: 09 Signing time: Wed 13 May 2026 04:36:48 +0000 Manifest this update: Wed 13 May 2026 04:31:48 +0000 Manifest next update: Thu 14 May 2026 07:27:48 +0000 Files and hashes: 1: 3130332e3235322e3132382e302f32322d3234203d3e2034373830.roa (hash: aU5nH7E+iqqE72JCSOf/syfpmIQ4Ugwf1G4zZbGiNhs=) 2: 3130332e3235322e3132382e302f32322d3234203d3e20313331363032.roa (hash: nVHgvAQGfCe5GeqBJlvDWrqjtd8OwRSNjhUeOydBwUA=) 3: 3131342e32392e3234302e302f32322d3234203d3e20313331363032.roa (hash: 4cmNPnys0d/FtI5okidfoOFAlkFUnmuDLC94ZHnaWrA=) 4: 3130332e3235322e3132382e302f32322d3232203d3e203130303835.roa (hash: z0gKkFBHhI3K6nHdzx65beXtOEgH8B0I5cTB2wTLt8g=) 5: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl (hash: XGRiQziW1QzoGQJX3o5ZkfL44fUIiDGym/wlU38gGXg=) 6: 3131342e32392e3234302e302f32322d3234203d3e2034373830.roa (hash: KC1g1qM879l4ds0q/ydW26xvU61SJGGDoYP8GsPifjc=) 7: 3131342e32392e3234302e302f32322d3232203d3e203130303835.roa (hash: Iu3XM7OWOu4YExXTvgO6ZRczd2wJf5M+hq5Ui0NVDWs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:36:26:ef:f2:3e:b4:e2:94:7b:06:bf:df:68:b7:d5:dc:c0:cf:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Validity Not Before: May 13 04:31:48 2026 GMT Not After : May 14 07:27:48 2026 GMT Subject: CN=AC02A3A97ECDA12BCEBEF0C7CF07C763A3EC101C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:33:b0:a5:da:be:73:7b:07:79:fa:7c:0f: b9:e7:bd:43:61:a1:16:1d:18:61:dd:8e:05:b0:6a: 8a:b4:8a:cf:50:6f:a1:f3:0c:94:43:f7:b5:9e:24: f1:3f:77:e2:32:5b:04:02:8c:91:e4:5f:eb:7e:63: dd:ca:c1:4a:66:b2:6f:7c:ba:74:42:06:98:7c:b5: 1c:6c:7a:8e:20:8c:e2:c4:f8:27:cf:21:14:e5:b5: b1:16:8f:4c:0c:e4:ac:69:fa:d6:42:f4:85:11:17: 01:4f:7e:e2:87:54:e7:19:5a:5d:3c:50:9d:ee:25: 65:65:db:28:45:9e:c7:df:1e:8e:89:4b:62:79:a2: 34:e3:d1:f2:3f:9f:fe:d5:39:02:93:3c:bc:54:28: 02:fe:8e:88:0d:59:1b:89:73:14:75:e4:60:a7:25: 98:6c:e1:5e:b4:64:27:1e:f7:07:65:59:5e:a5:7b: 6d:d5:14:ae:a7:33:90:e6:9c:65:66:11:f1:44:b7: a9:ec:5b:8d:0c:24:09:35:aa:d8:92:93:d1:9c:a9: a5:d1:d9:89:74:a2:90:26:02:d6:8e:b0:a7:54:ad: 2a:85:dd:29:36:b0:3e:89:96:ed:dd:3a:6e:20:f9: d6:1e:ed:fc:c3:9c:1f:a0:46:4b:0f:b6:16:1e:43: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:02:A3:A9:7E:CD:A1:2B:CE:BE:F0:C7:CF:07:C7:63:A3:EC:10:1C X509v3 Authority Key Identifier: keyid:72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:07:e1:c0:a1:24:f9:a1:cc:40:c0:a2:a5:b5:c8:1d:cf:76: 51:c7:39:bc:8e:ac:d0:45:fc:21:88:e8:a6:8b:10:49:6d:2f: 44:b0:16:ab:f1:ca:0b:fb:76:e5:33:2a:75:51:28:1b:04:16: 4c:05:31:ec:ab:1b:55:26:df:84:38:4e:6a:40:dc:f8:da:24: a0:01:23:5f:3f:c4:33:39:8e:2d:12:74:c2:cf:10:1e:03:34: c7:be:86:02:73:fb:f2:da:31:f0:4e:65:86:c3:e4:bb:ba:95: ba:2f:89:24:66:f1:3d:c3:c7:96:50:44:f5:8f:83:dc:1f:dd: b4:43:32:09:ab:28:7f:40:0a:a6:d6:31:0e:e1:5d:0a:2e:47: 04:64:f5:d8:bb:3f:08:e6:3a:14:ed:77:65:e3:d7:f5:cc:f8: b8:03:04:2d:0c:16:dd:58:db:2a:50:73:2b:66:d7:59:69:71: 2e:bc:fe:03:b6:06:9c:5b:7e:b0:fa:27:bf:0e:df:35:2f:5f: ec:3e:a7:57:67:9d:ae:3b:93:79:1d:11:a6:ce:95:72:41:bb: c6:ea:be:f4:39:8a:d3:9d:1c:71:80:d8:bb:e1:9c:24:04:57: 11:de:f6:11:98:aa:36:cb:7f:88:c6:d4:62:f7:20:98:48:40: 04:f3:ca:fe -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUUjYm7/I+tOKUewa/32i31dzAz38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4 REQzMDk5QTAeFw0yNjA1MTMwNDMxNDhaFw0yNjA1MTQwNzI3NDhaMDMxMTAvBgNV BAMTKEFDMDJBM0E5N0VDREExMkJDRUJFRjBDN0NGMDdDNzYzQTNFQzEwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQjOwpdq+c3sHefp8D7nnvUNh oRYdGGHdjgWwaoq0is9Qb6HzDJRD97WeJPE/d+IyWwQCjJHkX+t+Y93KwUpmsm98 unRCBph8tRxseo4gjOLE+CfPIRTltbEWj0wM5Kxp+tZC9IURFwFPfuKHVOcZWl08 UJ3uJWVl2yhFnsffHo6JS2J5ojTj0fI/n/7VOQKTPLxUKAL+jogNWRuJcxR15GCn JZhs4V60ZCce9wdlWV6le23VFK6nM5DmnGVmEfFEt6nsW40MJAk1qtiSk9GcqaXR 2Yl0opAmAtaOsKdUrSqF3Sk2sD6Jlu3dOm4g+dYe7fzDnB+gRksPthYeQ1cRAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUrAKjqX7NoSvOvvDHzwfHY6PsEBwwHwYDVR0j BBgwFoAUckh+F8JA1VwW6P5bC3HUSY3TCZowDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAv NzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MjQ4N0UxN0MyNDBENTVDMTZFOEZFNUIwQjcxRDQ0 OThERDMwOTlBLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAvNzI0ODdFMTdDMjQwRDU1QzE2 RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADMH4cChJPmhzEDAoqW1 yB3PdlHHObyOrNBF/CGI6KaLEEltL0SwFqvxygv7duUzKnVRKBsEFkwFMeyrG1Um 34Q4TmpA3PjaJKABI18/xDM5ji0SdMLPEB4DNMe+hgJz+/LaMfBOZYbD5Lu6lbov iSRm8T3Dx5ZQRPWPg9wf3bRDMgmrKH9ACqbWMQ7hXQouRwRk9di7PwjmOhTtd2Xj 1/XM+LgDBC0MFt1Y2ypQcytm11lpcS68/gO2BpxbfrD6J78O3zUvX+w+p1dnna47 k3kdEabOlXJBu8bqvvQ5itOdHHGA2LvhnCQEVxHe9hGYqjbLf4jG1GL3IJhIQATz yv4= -----END CERTIFICATE-----Generated at Wed May 13 20:36:36 2026 by rpki-client