$ rpki-client -vvvf rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft File: 86E5C9C6D878819F10BEC976A116DB8148A15794.mft (raw, json) Hash identifier: MaRrr8HGl+A7OBvyhOaFe0Cfk4xoBWiajeS33aNX4MM= Subject key identifier: A4:33:D3:54:41:7A:1F:16:F9:73:C5:3D:37:82:C7:FD:34:DD:C6:BC Authority key identifier: 86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94 Certificate issuer: /CN=86E5C9C6D878819F10BEC976A116DB8148A15794 Certificate serial: 4DDEFC1A2D706F45CEC6FD792DD5EBC3EAD8A321 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer Subject info access: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft Manifest number: CA Signing time: Wed 07 Oct 2026 15:13:24 +0000 Manifest this update: Wed 07 Oct 2026 15:08:24 +0000 Manifest next update: Thu 08 Oct 2026 15:35:24 +0000 Files and hashes: 1: 3134302e39322e302e302f31362d3234203d3e2031363539.roa (hash: rvl3iJZidfPVj8QIpPoFpRfFHf2uQD3RRvMQXspZm6A=) 2: 86E5C9C6D878819F10BEC976A116DB8148A15794.crl (hash: MnYIBaJWnHX7Md079X/vtDjbb8wJxRlIyRjdU2F0VVg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 15:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:de:fc:1a:2d:70:6f:45:ce:c6:fd:79:2d:d5:eb:c3:ea:d8:a3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E5C9C6D878819F10BEC976A116DB8148A15794 Validity Not Before: Oct 7 15:08:24 2026 GMT Not After : Oct 8 15:35:24 2026 GMT Subject: CN=A433D354417A1F16F973C53D3782C7FD34DDC6BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:05:07:e6:9c:fc:9f:27:ef:d2:94:5e:05: 93:23:f9:cf:23:3c:47:73:cf:f4:9d:e7:50:fd:b2: 07:e9:10:da:37:15:dd:f8:2e:45:df:77:7e:33:0d: 7c:f3:e3:11:fc:a5:c2:f0:7b:46:72:41:3e:4f:d8: c0:be:35:66:39:9a:33:05:9a:b3:95:c6:b6:7f:ed: 5b:30:f7:dc:08:61:62:8c:18:76:8d:63:56:64:e9: 9c:eb:85:4b:fa:8c:5b:bf:55:cf:16:8a:c3:29:47: 99:0c:8c:2b:2e:fc:b9:ee:bd:4c:3e:19:a0:3c:c7: 33:3d:1f:ea:05:51:49:b7:82:38:82:e8:96:90:d8: f8:56:de:d8:5a:7c:6a:0a:74:d5:75:ed:4e:9f:42: d3:de:cc:67:87:d2:a8:66:0a:f9:a9:58:24:7f:cb: c5:c6:5e:dd:c5:21:7c:63:7a:4f:a2:95:72:ad:07: 59:1b:6b:6d:c1:5d:46:3a:d1:1f:7b:2f:7d:2a:9d: ca:80:40:de:7c:bf:f8:6a:37:4f:e5:7e:71:15:27: 6a:63:d4:c0:19:e1:dd:ef:23:84:0b:fa:94:d7:fa: 96:8a:9f:e9:fb:2a:34:38:e3:d3:79:d2:1e:03:53: 6d:bd:a6:a7:0e:61:1f:3e:5a:87:98:2b:48:ea:78: 90:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:33:D3:54:41:7A:1F:16:F9:73:C5:3D:37:82:C7:FD:34:DD:C6:BC X509v3 Authority Key Identifier: keyid:86:E5:C9:C6:D8:78:81:9F:10:BE:C9:76:A1:16:DB:81:48:A1:57:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/86E5C9C6D878819F10BEC976A116DB8148A15794.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/III/0/86E5C9C6D878819F10BEC976A116DB8148A15794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:69:9f:70:13:54:af:4f:09:53:c4:74:b7:1c:4f:41:2c:1a: 08:40:b7:f2:30:7b:50:2c:46:c8:c6:c2:ea:42:2e:06:d9:ea: c9:a2:5e:63:ec:dc:6f:63:84:a3:2d:49:51:a7:66:4d:6e:22: ee:bd:b5:70:2a:0d:4b:6b:52:cf:e5:66:e2:d4:23:73:37:04: a7:ff:69:e3:4a:7d:9c:c4:dc:a9:a0:d4:21:e2:f3:27:bb:d3: 76:26:88:d0:a5:4e:5c:a6:a5:34:e1:5c:15:03:06:d9:5f:ad: bb:3b:0f:18:fa:99:82:29:c3:86:b8:84:46:82:e7:d0:bc:92: ab:f2:fb:54:44:3d:29:42:8e:f0:16:01:d0:e1:59:db:4e:51: 5d:3b:d2:44:d8:5d:52:04:db:bc:f8:26:76:31:12:2e:10:7c: 0b:ec:21:ff:6c:b1:8d:b2:a0:cf:bc:d7:88:93:8b:61:6a:b3: 0a:1b:be:fc:bf:a8:d5:9b:20:74:62:88:8d:bf:04:72:a2:49: 95:60:25:18:60:db:09:7e:d0:43:b2:5e:4d:9e:d9:b9:cb:f9: 77:81:18:64:34:65:cc:aa:1e:26:bb:63:a8:15:d0:a5:7f:7e: 63:cd:f2:3b:08:29:fc:f4:c9:32:44:12:78:0f:b0:51:1f:77: 6c:4f:7e:65 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUTd78Gi1wb0XOxv15LdXrw+rYoyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNUM5QzZEODc4ODE5RjEwQkVDOTc2QTExNkRCODE0 OEExNTc5NDAeFw0yNjEwMDcxNTA4MjRaFw0yNjEwMDgxNTM1MjRaMDMxMTAvBgNV BAMTKEE0MzNEMzU0NDE3QTFGMTZGOTczQzUzRDM3ODJDN0ZEMzREREM2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9QUH5pz8nyfv0pReBZMj+c8j PEdzz/Sd51D9sgfpENo3Fd34LkXfd34zDXzz4xH8pcLwe0ZyQT5P2MC+NWY5mjMF mrOVxrZ/7Vsw99wIYWKMGHaNY1Zk6ZzrhUv6jFu/Vc8WisMpR5kMjCsu/LnuvUw+ GaA8xzM9H+oFUUm3gjiC6JaQ2PhW3thafGoKdNV17U6fQtPezGeH0qhmCvmpWCR/ y8XGXt3FIXxjek+ilXKtB1kba23BXUY60R97L30qncqAQN58v/hqN0/lfnEVJ2pj 1MAZ4d3vI4QL+pTX+paKn+n7KjQ449N50h4DU229pqcOYR8+WoeYK0jqeJAxAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUpDPTVEF6Hxb5c8U9N4LH/TTdxrwwHwYDVR0j BBgwFoAUhuXJxth4gZ8Qvsl2oRbbgUihV5QwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSUlJLzAv ODZFNUM5QzZEODc4ODE5RjEwQkVDOTc2QTExNkRCODE0OEExNTc5NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMC84NkU1QzlDNkQ4Nzg4MTlGMTBCRUM5NzZBMTE2REI4 MTQ4QTE1Nzk0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSUlJLzAvODZFNUM5QzZEODc4ODE5RjEw QkVDOTc2QTExNkRCODE0OEExNTc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACRpn3ATVK9PCVPEdLcc T0EsGghAt/Iwe1AsRsjGwupCLgbZ6smiXmPs3G9jhKMtSVGnZk1uIu69tXAqDUtr Us/lZuLUI3M3BKf/aeNKfZzE3Kmg1CHi8ye703YmiNClTlympTThXBUDBtlfrbs7 Dxj6mYIpw4a4hEaC59C8kqvy+1REPSlCjvAWAdDhWdtOUV070kTYXVIE27z4JnYx Ei4QfAvsIf9ssY2yoM+814iTi2Fqswobvvy/qNWbIHRiiI2/BHKiSZVgJRhg2wl+ 0EOyXk2e2bnL+XeBGGQ0ZcyqHia7Y6gV0KV/fmPN8jsIKfz0yTJEEngPsFEfd2xP fmU= -----END CERTIFICATE-----Generated at Wed Oct 7 19:19:35 2026 by rpki-client