$ rpki-client -vvvf rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft File: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft (raw, json) Hash identifier: eGPL6nn8qcR9JH5ZcH9Xg+SKHCc2uG5qn9jP8Z3/0m0= Subject key identifier: E4:F7:41:57:64:12:0A:34:30:97:E2:B8:D4:B2:C6:E3:E2:A6:80:9A Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Certificate serial: 21C1F95979DCE6A1A2C8BC6F45352D9CE00D5AA2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft Manifest number: CA Signing time: Sun 04 Oct 2026 01:48:50 +0000 Manifest this update: Sun 04 Oct 2026 01:43:50 +0000 Manifest next update: Mon 05 Oct 2026 03:29:50 +0000 Files and hashes: 1: 3130332e3137372e33322e302f32342d3234203d3e20323134343332.roa (hash: 2YaoD0V9MTmYaytjBdN3g/2JltFPIOscJRsxuw7e/EQ=) 2: 3130332e3137372e33322e302f32332d3234203d3e203338303432.roa (hash: xPDyINdFmufQbNbHGWy0zvLscglHenPHYxlwfT+v00s=) 3: 3130332e3232372e3232342e302f32332d3234203d3e20313334383233.roa (hash: GuzN1ophfvX5EgHLKpJRkwlqpD4JGNW35OZ+ZCoqD78=) 4: 3130332e3232372e3232342e302f32332d3234203d3e20313438393936.roa (hash: Pe+GfCAU9CJUhyX0GcmCiKMiXy/uVxymKcKinAclsuQ=) 5: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl (hash: eZMKe7H167yBHi1fQCvna7J9OlmGxU6Oy7Ia6Q7nMFE=) 6: 3130332e3232372e3232352e302f32342d3234203d3e20313438393936.roa (hash: 3Fs3YXCHVhPim686QjSLVypvleRfB5cNa4r0sVni22s=) 7: 3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa (hash: cQkjcrDW6Cw958N6gtJjxyd/adphXQyJjpPcfgZ5xG4=) 8: 3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa (hash: qkqrj9/N2V1M+ri4JRAjh2Xtl5l0eXftPC6OL0jPaCQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c1:f9:59:79:dc:e6:a1:a2:c8:bc:6f:45:35:2d:9c:e0:0d:5a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Validity Not Before: Oct 4 01:43:50 2026 GMT Not After : Oct 5 03:29:50 2026 GMT Subject: CN=E4F7415764120A343097E2B8D4B2C6E3E2A6809A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:6c:70:8c:14:9a:e9:d1:fd:e4:58:c5:9c: 18:95:9b:c6:f8:26:29:c2:99:fd:d0:43:c9:08:d0: 8d:7a:fd:a4:4e:e6:60:81:06:f1:0c:38:6c:d0:c6: c1:2d:41:88:7c:fe:af:7c:b4:ce:ea:db:cb:0d:a1: f2:92:d1:13:ff:d8:ca:89:bb:1e:a4:a7:41:eb:ed: 56:07:be:63:0c:74:10:5a:b4:0f:57:f3:9b:00:94: c9:5e:5d:ec:89:ed:74:e4:15:27:8e:6c:26:ab:bf: d3:5e:c3:29:b1:4f:ff:28:f2:e4:8a:5c:be:ba:7c: d7:17:08:2f:28:b4:eb:6c:2d:1d:c4:2e:39:ee:3c: 3e:26:f2:18:3e:a5:54:de:3e:b4:12:d8:24:56:b0: 12:c2:52:a9:13:33:82:14:79:b9:96:46:1b:ea:58: bc:38:1c:5f:4a:66:d6:fa:2b:92:40:0d:32:60:b8: 34:7b:e0:d9:3a:b1:d6:fb:e2:71:27:d3:5b:87:72: 21:08:10:15:b2:4f:25:88:2a:08:d2:77:8e:14:2f: cd:f5:58:a2:01:a2:33:70:39:34:e4:91:24:58:f4: 64:8a:03:73:a6:82:48:68:83:15:29:4f:a5:ec:3e: 00:3a:fe:35:ad:68:21:84:6d:40:3f:f1:90:e7:30: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F7:41:57:64:12:0A:34:30:97:E2:B8:D4:B2:C6:E3:E2:A6:80:9A X509v3 Authority Key Identifier: keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:0e:db:1e:84:ce:c4:cd:a7:45:95:4f:7d:12:26:0f:1b:24: 1a:06:24:a7:b6:20:2a:4d:ed:f5:48:e5:dd:70:a6:78:a1:9f: c5:ab:b0:61:3e:36:7a:8b:04:fd:08:9b:47:4b:1c:fe:68:a4: 50:85:93:e6:26:2a:69:dc:d5:22:ad:8d:29:fd:c8:db:ed:93: ab:55:dc:21:45:8e:c3:15:99:8c:5a:b8:9b:8b:ea:e9:d8:e6: a2:49:5c:5f:8c:ad:45:94:64:57:f5:cf:55:40:5c:81:10:c2: 83:9a:d2:fd:ab:51:ea:59:d7:fb:15:68:c1:66:eb:23:03:f3: 73:bd:6f:c4:76:6a:c2:a0:26:5f:c6:77:18:be:00:a3:e7:44: db:62:34:56:b3:3e:e9:b6:bb:e9:bc:9d:7c:fa:e7:8a:66:47: 9a:51:f3:29:99:1d:3d:c6:f8:3c:b2:17:61:a7:f9:27:8b:05: f6:24:ee:39:d0:39:dd:ed:71:af:9c:27:cb:e2:f7:90:0e:7c: 7e:d7:be:d4:28:3b:f1:70:57:e8:68:9b:93:e4:33:03:91:78: 3f:d9:09:08:b2:d8:b8:33:35:15:93:3a:04:0c:fa:e9:82:8e: f9:13:77:2c:ba:40:98:5a:a9:72:9e:6c:8b:aa:4b:72:b8:88: 12:c0:75:9e -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUIcH5WXnc5qGiyLxvRTUtnOANWqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MjdFNEU1M0JBNTE3QkJDNUM3OThDRjBEM0FGODcw Mzc1QzBCMDAeFw0yNjEwMDQwMTQzNTBaFw0yNjEwMDUwMzI5NTBaMDMxMTAvBgNV BAMTKEU0Rjc0MTU3NjQxMjBBMzQzMDk3RTJCOEQ0QjJDNkUzRTJBNjgwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTz2xwjBSa6dH95FjFnBiVm8b4 JinCmf3QQ8kI0I16/aRO5mCBBvEMOGzQxsEtQYh8/q98tM7q28sNofKS0RP/2MqJ ux6kp0Hr7VYHvmMMdBBatA9X85sAlMleXeyJ7XTkFSeObCarv9NewymxT/8o8uSK XL66fNcXCC8otOtsLR3ELjnuPD4m8hg+pVTePrQS2CRWsBLCUqkTM4IUebmWRhvq WLw4HF9KZtb6K5JADTJguDR74Nk6sdb74nEn01uHciEIEBWyTyWIKgjSd44UL831 WKIBojNwOTTkkSRY9GSKA3OmgkhogxUpT6XsPgA6/jWtaCGEbUA/8ZDnMAMVAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU5PdBV2QSCjQwl+K41LLG4+KmgJowHwYDVR0j BBgwFoAUp4J+TlO6UXu8XHmM8NOvhwN1wLAwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1DUlMv MC9BNzgyN0U0RTUzQkE1MTdCQkM1Qzc5OENGMEQzQUY4NzAzNzVDMEIwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0E3ODI3RTRFNTNCQTUxN0JCQzVDNzk4Q0YwRDNB Rjg3MDM3NUMwQjAuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTUNSUy8wL0E3ODI3RTRFNTNCQTUx N0JCQzVDNzk4Q0YwRDNBRjg3MDM3NUMwQjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHDtsehM7EzadF lU99EiYPGyQaBiSntiAqTe31SOXdcKZ4oZ/Fq7BhPjZ6iwT9CJtHSxz+aKRQhZPm Jipp3NUirY0p/cjb7ZOrVdwhRY7DFZmMWribi+rp2OaiSVxfjK1FlGRX9c9VQFyB EMKDmtL9q1HqWdf7FWjBZusjA/NzvW/EdmrCoCZfxncYvgCj50TbYjRWsz7ptrvp vJ18+ueKZkeaUfMpmR09xvg8shdhp/kniwX2JO450Dnd7XGvnCfL4veQDnx+177U KDvxcFfoaJuT5DMDkXg/2QkIsti4MzUVkzoEDPrpgo75E3csukCYWqlynmyLqkty uIgSwHWe -----END CERTIFICATE-----Generated at Sun Oct 4 10:34:08 2026 by rpki-client