$ rpki-client -vvf rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft File: 86E5C9C6D878819F10BEC976A116DB8148A15794.mft (raw, json) Hash identifier: XVOt1MA6rdw5Q7sN/5rYHaPofLYcT6fxt5p/tCs9UTw= Subject key identifier: 47:9E:6C:94:48:5F:05:B9:5C:8F:19:E2:BC:D2:E6:71:8F:33:0C:0F Authority key identifier: 86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94 Certificate issuer: /CN=86E5C9C6D878819F10BEC976A116DB8148A15794 Certificate serial: 483771496A93965FD60CF9C1D1E30B5FCC82A359 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer Subject info access: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft Manifest number: 07 Signing time: Fri 15 May 2026 11:36:58 +0000 Manifest this update: Fri 15 May 2026 11:31:58 +0000 Manifest next update: Sat 16 May 2026 14:32:58 +0000 Files and hashes: 1: 3134302e39322e302e302f31362d3234203d3e2031363539.roa (hash: rvl3iJZidfPVj8QIpPoFpRfFHf2uQD3RRvMQXspZm6A=) 2: 86E5C9C6D878819F10BEC976A116DB8148A15794.crl (hash: 7osUUOX0omfm4mUX+QxVRWPgucC2UB1AQmrDmX8wiAI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:37:71:49:6a:93:96:5f:d6:0c:f9:c1:d1:e3:0b:5f:cc:82:a3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E5C9C6D878819F10BEC976A116DB8148A15794 Validity Not Before: May 15 11:31:58 2026 GMT Not After : May 16 14:32:58 2026 GMT Subject: CN=479E6C94485F05B95C8F19E2BCD2E6718F330C0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8d:b9:fe:bf:c8:55:f5:ef:13:c9:e7:b4:b8: 30:a9:08:ed:3f:b1:ae:34:c3:3f:83:14:55:8f:bd: 19:e1:50:64:92:7e:17:31:fc:44:e8:32:e4:a7:93: 6b:fe:1b:45:09:67:fb:7e:eb:8a:5d:42:45:07:d8: 21:9f:14:6a:a1:6f:40:06:5d:60:de:13:03:1a:53: 8a:14:c9:78:66:31:bd:99:83:2c:4c:de:04:d0:c4: 7f:30:a0:d4:f2:68:ff:33:2f:1a:e5:81:23:20:97: fc:d0:96:75:42:ee:70:08:c7:c6:16:f9:97:d1:d6: b1:b0:50:83:a4:55:a4:f9:f1:e3:56:64:d2:2a:13: 16:cb:5b:8e:82:e9:f1:ff:6e:ba:13:69:df:9b:be: bd:90:cc:5c:b4:1a:3e:98:d3:40:a3:fe:fd:44:f8: 82:cc:49:74:35:6c:f7:f5:d6:0b:13:0a:3b:50:c9: 38:5f:82:52:d1:16:90:ad:28:00:d6:a5:83:34:90: 5b:bd:5e:4e:a2:b1:ea:ad:3a:39:03:00:fe:9e:f7: fe:1a:51:3b:fe:d3:ea:45:28:bd:da:db:f6:81:52: 3f:e3:f9:6d:38:d0:59:07:a2:04:ca:36:42:85:92: cc:8c:60:07:c4:b7:55:9c:9a:cd:75:21:6b:0e:66: ab:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9E:6C:94:48:5F:05:B9:5C:8F:19:E2:BC:D2:E6:71:8F:33:0C:0F X509v3 Authority Key Identifier: keyid:86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:dd:d5:ad:3f:5a:1e:0c:c3:15:ee:f1:8d:dc:a5:c9:69:d3: fd:96:1a:92:fb:e6:71:29:6d:ac:8b:34:88:39:d8:2d:e0:45: 84:14:55:60:d5:46:29:bf:cc:1d:fe:ca:c0:0d:92:44:3d:47: 1b:6d:d0:f2:57:be:02:1c:98:71:fb:63:c5:d3:99:a2:90:c1: 5e:30:79:2b:2e:01:36:f5:24:6f:44:32:f8:22:f0:87:30:28: 20:fa:af:75:9e:d0:34:5c:9e:f3:6d:a8:61:08:00:c0:38:68: ad:41:1b:34:fc:a6:c1:f5:ce:4e:74:08:51:b2:1b:92:f9:14: fb:d1:2b:a2:b4:e8:29:0d:bd:62:73:9b:93:59:a3:02:23:38: a9:b0:f1:12:90:b2:de:63:ae:b7:ef:72:f7:8b:7d:9c:5c:62: 39:a0:2b:4e:e5:38:63:19:4c:b4:f1:fc:2a:d3:a5:c6:5a:14: 5f:e7:d5:70:81:9c:b8:d4:d1:70:d5:f3:e7:da:8f:8b:eb:e8: 4b:6e:90:b3:f0:f4:2a:6d:fb:4c:46:b9:ba:11:29:65:58:56: 98:33:af:fc:ee:fb:f8:96:f4:c6:2c:a0:e1:a5:39:36:45:87: a1:b2:5a:44:e9:3a:4f:e9:a9:f6:56:46:9d:d1:b2:df:f3:73: ea:e5:50:f0 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUSDdxSWqTll/WDPnB0eMLX8yCo1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNUM5QzZEODc4ODE5RjEwQkVDOTc2QTExNkRCODE0 OEExNTc5NDAeFw0yNjA1MTUxMTMxNThaFw0yNjA1MTYxNDMyNThaMDMxMTAvBgNV BAMTKDQ3OUU2Qzk0NDg1RjA1Qjk1QzhGMTlFMkJDRDJFNjcxOEYzMzBDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSjbn+v8hV9e8Tyee0uDCpCO0/ sa40wz+DFFWPvRnhUGSSfhcx/EToMuSnk2v+G0UJZ/t+64pdQkUH2CGfFGqhb0AG XWDeEwMaU4oUyXhmMb2ZgyxM3gTQxH8woNTyaP8zLxrlgSMgl/zQlnVC7nAIx8YW +ZfR1rGwUIOkVaT58eNWZNIqExbLW46C6fH/broTad+bvr2QzFy0Gj6Y00Cj/v1E +ILMSXQ1bPf11gsTCjtQyThfglLRFpCtKADWpYM0kFu9Xk6iseqtOjkDAP6e9/4a UTv+0+pFKL3a2/aBUj/j+W040FkHogTKNkKFksyMYAfEt1Wcms11IWsOZquHAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUR55slEhfBblcjxnivNLmcY8zDA8wHwYDVR0j BBgwFoAUhuXJxth4gZ8Qvsl2oRbbgUihV5QwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSUlJLzAv ODZFNUM5QzZEODc4ODE5RjEwQkVDOTc2QTExNkRCODE0OEExNTc5NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMC84NkU1QzlDNkQ4Nzg4MTlGMTBCRUM5NzZBMTE2REI4 MTQ4QTE1Nzk0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSUlJLzAvODZFNUM5QzZEODc4ODE5RjEw QkVDOTc2QTExNkRCODE0OEExNTc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALTd1a0/Wh4MwxXu8Y3c pclp0/2WGpL75nEpbayLNIg52C3gRYQUVWDVRim/zB3+ysANkkQ9Rxtt0PJXvgIc mHH7Y8XTmaKQwV4weSsuATb1JG9EMvgi8IcwKCD6r3We0DRcnvNtqGEIAMA4aK1B GzT8psH1zk50CFGyG5L5FPvRK6K06CkNvWJzm5NZowIjOKmw8RKQst5jrrfvcveL fZxcYjmgK07lOGMZTLTx/CrTpcZaFF/n1XCBnLjU0XDV8+faj4vr6EtukLPw9Cpt +0xGuboRKWVYVpgzr/zu+/iW9MYsoOGlOTZFh6GyWkTpOk/pqfZWRp3Rst/zc+rl UPA= -----END CERTIFICATE-----Generated at Sat May 16 04:50:41 2026 by rpki-client