$ rpki-client -vvf rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft File: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft (raw, json) Hash identifier: ShfNJgorSu9Nbwl57mrnHUD/Cug2tcp+cECaF5NfKjY= Subject key identifier: EC:86:8D:DA:A5:C2:82:B1:3F:BF:0D:85:51:8F:C0:79:0C:8F:38:41 Authority key identifier: 72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A Certificate issuer: /CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Certificate serial: 63086608D99E192F92CE6383D4761026BDD3C004 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft Manifest number: 86 Signing time: Fri 14 Aug 2026 16:12:16 +0000 Manifest this update: Fri 14 Aug 2026 16:07:16 +0000 Manifest next update: Sat 15 Aug 2026 18:58:16 +0000 Files and hashes: 1: 3131342e32392e3234302e302f32322d3232203d3e203130303835.roa (hash: Iu3XM7OWOu4YExXTvgO6ZRczd2wJf5M+hq5Ui0NVDWs=) 2: 3130332e3235322e3132382e302f32322d3234203d3e20313331363032.roa (hash: nVHgvAQGfCe5GeqBJlvDWrqjtd8OwRSNjhUeOydBwUA=) 3: 3131342e32392e3234302e302f32322d3234203d3e20313331363032.roa (hash: 4cmNPnys0d/FtI5okidfoOFAlkFUnmuDLC94ZHnaWrA=) 4: 3130332e3235322e3132382e302f32322d3234203d3e2034373830.roa (hash: aU5nH7E+iqqE72JCSOf/syfpmIQ4Ugwf1G4zZbGiNhs=) 5: 3130332e3235322e3132382e302f32322d3232203d3e203130303835.roa (hash: z0gKkFBHhI3K6nHdzx65beXtOEgH8B0I5cTB2wTLt8g=) 6: 3131342e32392e3234302e302f32322d3234203d3e2034373830.roa (hash: KC1g1qM879l4ds0q/ydW26xvU61SJGGDoYP8GsPifjc=) 7: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl (hash: FSx1URg8OE/KX4KGJJJYmLP+mFaGxDxSmbKaGueOolQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 18:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:08:66:08:d9:9e:19:2f:92:ce:63:83:d4:76:10:26:bd:d3:c0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A Validity Not Before: Aug 14 16:07:16 2026 GMT Not After : Aug 15 18:58:16 2026 GMT Subject: CN=EC868DDAA5C282B13FBF0D85518FC0790C8F3841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:6b:8e:0c:eb:ba:96:60:c1:bc:79:1d:ec: 27:7b:a2:e3:23:23:02:3c:76:ad:8c:7a:27:dd:c6: 16:4f:b9:57:52:52:dd:22:6e:e2:93:df:fd:ba:5a: 36:a0:94:41:1c:23:7d:c2:19:38:e6:dc:44:97:19: 20:48:51:a3:29:32:4f:17:d8:94:be:88:98:71:9e: 89:59:91:46:fb:51:58:f2:d1:59:7a:4d:b1:2f:65: a6:21:9b:26:8a:e6:aa:99:11:14:ef:6f:4b:6c:05: 6e:a2:1c:4e:a5:1f:51:79:c4:8b:0e:8a:4e:07:91: 14:a2:f0:db:9f:d5:0f:54:8e:dd:b9:2f:f2:df:15: 09:54:e4:99:df:57:e9:81:c7:9f:36:c8:0c:f7:82: 92:ae:e3:a4:c8:0b:37:b0:a3:13:e6:78:95:1c:e1: b0:d0:be:ed:fe:96:6c:21:61:47:e5:55:21:42:ed: 42:ad:d1:57:d4:ba:b1:8b:0e:1d:cd:ed:96:ad:3c: 70:40:6b:5b:7e:70:11:c2:67:09:dc:f7:ed:04:04: 64:6f:20:15:d2:71:2a:d1:7b:30:8c:4b:c0:26:b5: a1:89:09:a5:83:c9:3c:a0:62:97:1c:19:50:fa:75: 74:19:5e:4f:88:65:5f:2d:01:87:bb:89:6e:d0:43: 87:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:86:8D:DA:A5:C2:82:B1:3F:BF:0D:85:51:8F:C0:79:0C:8F:38:41 X509v3 Authority Key Identifier: keyid:72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a3:69:75:90:d2:89:e4:38:73:83:33:6f:e8:68:34:f3:ca: e2:f5:2a:40:62:9f:3c:c5:e0:7b:c6:e8:ef:54:a5:b2:0e:d7: 81:66:b8:47:d6:39:80:a9:60:7e:31:66:3b:0c:48:1b:98:f2: d7:2f:2f:45:dd:29:92:bf:77:e0:cb:68:49:66:37:37:a3:47: 45:a2:c3:11:f1:86:63:00:df:27:06:25:52:40:56:8c:47:0d: 8e:9e:96:42:7a:c7:55:6e:4b:23:91:a3:05:8a:8e:c2:22:5c: e5:9b:1e:4c:c0:e4:4e:7c:57:d5:eb:09:39:07:12:ac:0a:8f: fc:d7:02:09:0a:8e:98:c1:73:32:72:52:c0:40:4d:14:6c:5b: 82:e8:03:39:99:75:00:9b:f1:a8:36:e8:33:03:a4:17:27:be: 32:f5:f7:da:89:9f:b0:01:23:d3:77:c0:a7:fe:8f:f3:1f:b3: e8:99:84:30:4a:53:9a:52:81:da:c4:7f:f1:9e:45:07:a2:37: 31:e0:16:42:dc:fa:bd:03:e5:ab:e3:80:81:27:52:2f:1f:08: cb:ec:56:e6:a2:48:9e:4d:8a:43:08:e8:eb:fb:8c:3a:e1:09: 5e:b8:00:20:56:28:3f:2b:cf:74:b6:4d:14:a8:7a:c7:be:54: 56:c2:5c:f8 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUYwhmCNmeGS+SzmOD1HYQJr3TwAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4 REQzMDk5QTAeFw0yNjA4MTQxNjA3MTZaFw0yNjA4MTUxODU4MTZaMDMxMTAvBgNV BAMTKEVDODY4RERBQTVDMjgyQjEzRkJGMEQ4NTUxOEZDMDc5MEM4RjM4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe8GuODOu6lmDBvHkd7Cd7ouMj IwI8dq2MeifdxhZPuVdSUt0ibuKT3/26WjaglEEcI33CGTjm3ESXGSBIUaMpMk8X 2JS+iJhxnolZkUb7UVjy0Vl6TbEvZaYhmyaK5qqZERTvb0tsBW6iHE6lH1F5xIsO ik4HkRSi8Nuf1Q9Ujt25L/LfFQlU5JnfV+mBx582yAz3gpKu46TICzewoxPmeJUc 4bDQvu3+lmwhYUflVSFC7UKt0VfUurGLDh3N7ZatPHBAa1t+cBHCZwnc9+0EBGRv IBXScSrRezCMS8AmtaGJCaWDyTygYpccGVD6dXQZXk+IZV8tAYe7iW7QQ4eXAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU7IaN2qXCgrE/vw2FUY/AeQyPOEEwHwYDVR0j BBgwFoAUckh+F8JA1VwW6P5bC3HUSY3TCZowDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAv NzI0ODdFMTdDMjQwRDU1QzE2RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MjQ4N0UxN0MyNDBENTVDMTZFOEZFNUIwQjcxRDQ0 OThERDMwOTlBLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFlBLzAvNzI0ODdFMTdDMjQwRDU1QzE2 RThGRTVCMEI3MUQ0NDk4REQzMDk5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE+jaXWQ0onkOHODM2/o aDTzyuL1KkBinzzF4HvG6O9UpbIO14FmuEfWOYCpYH4xZjsMSBuY8tcvL0XdKZK/ d+DLaElmNzejR0WiwxHxhmMA3ycGJVJAVoxHDY6elkJ6x1VuSyORowWKjsIiXOWb HkzA5E58V9XrCTkHEqwKj/zXAgkKjpjBczJyUsBATRRsW4LoAzmZdQCb8ag26DMD pBcnvjL199qJn7ABI9N3wKf+j/Mfs+iZhDBKU5pSgdrEf/GeRQeiNzHgFkLc+r0D 5avjgIEnUi8fCMvsVuaiSJ5NikMI6Ov7jDrhCV64ACBWKD8rz3S2TRSoese+VFbC XPg= -----END CERTIFICATE-----Generated at Sat Aug 15 05:22:40 2026 by rpki-client