$ rpki-client -vvf rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft File: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft (raw, json) Hash identifier: iRAUtrgXN4uTLMp7O44FsDzeg8TAqcwB1Xvis4Ou/u8= Subject key identifier: 4F:A2:9F:DC:9D:73:6A:63:A7:01:53:51:A2:ED:0E:4D:C2:61:45:8F Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Certificate serial: 38F0F63BD5C9B501161B710F3DA65D4AB72D51B5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft Manifest number: 87 Signing time: Fri 14 Aug 2026 13:51:58 +0000 Manifest this update: Fri 14 Aug 2026 13:46:58 +0000 Manifest next update: Sat 15 Aug 2026 15:12:58 +0000 Files and hashes: 1: 3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa (hash: qkqrj9/N2V1M+ri4JRAjh2Xtl5l0eXftPC6OL0jPaCQ=) 2: 3130332e3232372e3232342e302f32332d3234203d3e20313438393936.roa (hash: Pe+GfCAU9CJUhyX0GcmCiKMiXy/uVxymKcKinAclsuQ=) 3: 3130332e3137372e33322e302f32342d3234203d3e20323134343332.roa (hash: 2YaoD0V9MTmYaytjBdN3g/2JltFPIOscJRsxuw7e/EQ=) 4: 3130332e3232372e3232352e302f32342d3234203d3e20313438393936.roa (hash: 3Fs3YXCHVhPim686QjSLVypvleRfB5cNa4r0sVni22s=) 5: 3130332e3137372e33322e302f32332d3234203d3e203338303432.roa (hash: xPDyINdFmufQbNbHGWy0zvLscglHenPHYxlwfT+v00s=) 6: A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl (hash: boJGb6EXSnXw3EA5gK09rhiGKjHcLLrHUpYL8ia3Tv8=) 7: 3130332e3232372e3232342e302f32332d3234203d3e20313334383233.roa (hash: GuzN1ophfvX5EgHLKpJRkwlqpD4JGNW35OZ+ZCoqD78=) 8: 3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa (hash: cQkjcrDW6Cw958N6gtJjxyd/adphXQyJjpPcfgZ5xG4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 15:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f0:f6:3b:d5:c9:b5:01:16:1b:71:0f:3d:a6:5d:4a:b7:2d:51:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Validity Not Before: Aug 14 13:46:58 2026 GMT Not After : Aug 15 15:12:58 2026 GMT Subject: CN=4FA29FDC9D736A63A7015351A2ED0E4DC261458F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:d3:f2:2e:60:7d:b0:42:89:cd:01:f6:c1: 86:da:26:ae:fc:ff:0d:aa:34:99:0f:0d:03:f4:e2: 1a:44:f0:3a:d2:4f:61:52:e2:36:c9:d1:87:d8:cd: 4b:0c:88:ca:ec:76:79:7c:97:73:f3:55:a6:22:12: e7:f0:e6:c3:33:17:79:73:94:a7:ba:84:40:22:64: 9c:e2:ad:6e:91:48:73:bf:16:91:c7:1f:f7:77:9d: ff:3a:35:1a:40:f2:00:d8:fc:d7:2d:45:9f:4a:81: 88:63:7f:aa:2c:74:e0:8b:20:9b:4e:34:a3:77:a3: 53:98:fb:9f:cf:85:9f:16:8b:d7:3d:34:4e:0b:73: 42:d0:4f:95:d3:e1:0e:da:ff:87:ec:1d:a8:e1:c8: 86:0e:89:16:90:e4:4f:36:23:2c:e9:4f:32:0e:16: dc:32:0e:56:ce:36:57:13:39:06:b7:c1:da:c3:49: d9:f8:f6:d7:f6:6c:3a:91:06:cf:85:b7:4b:55:27: 4d:56:85:78:bf:80:87:e6:5e:72:e5:4f:60:d0:8b: eb:a1:8f:e1:e3:72:5d:74:71:6a:5a:69:5a:a2:ca: 63:a1:2f:28:e9:8a:b7:6f:8e:c2:32:44:6a:c8:c6: dc:b9:95:ea:aa:df:d0:02:a8:c5:f4:53:8a:da:84: ab:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A2:9F:DC:9D:73:6A:63:A7:01:53:51:A2:ED:0E:4D:C2:61:45:8F X509v3 Authority Key Identifier: keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c6:a0:b4:be:90:b5:b2:33:09:e0:12:c6:8a:4b:31:90:7c: 39:2e:eb:56:85:a9:6e:7f:12:9d:e3:5f:14:3e:24:f4:f2:61: 04:42:e7:e9:3b:f8:29:e7:e4:4a:00:46:7c:37:f3:b2:25:23: b0:33:4a:2e:27:eb:55:1a:25:36:16:98:48:45:97:31:48:43: 4b:ec:4d:79:0d:0f:f2:6d:46:65:97:74:33:56:fe:d1:0e:4e: e7:16:e3:0f:8b:2a:48:bd:9a:a6:76:25:ca:8d:b0:ce:b7:78: d9:6e:75:49:81:88:c2:a3:98:ac:51:8d:01:6f:f8:c3:e4:e8: a2:3f:f2:3d:f9:13:41:2c:85:e8:07:65:b2:6a:7c:59:e8:01: 5a:e5:42:bd:6d:71:07:5a:bc:4d:b4:c4:97:f4:85:ca:5c:54: df:7e:c6:2e:a6:74:31:a9:bb:b7:6c:3a:96:0b:f3:ea:bc:87: f2:8a:ce:e3:f7:61:16:05:1e:0d:a8:1b:52:1b:15:26:73:be: 3e:2e:45:3c:9f:dd:f2:26:79:01:e2:a9:8f:31:7f:36:0e:0c: 6f:ca:73:ce:a5:8b:85:03:47:d3:e0:9d:ef:12:30:a1:fe:52: f6:a0:74:fb:0b:db:e0:fe:36:d6:4b:80:d9:f1:96:e0:c7:fa: 09:6f:7b:d8 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUOPD2O9XJtQEWG3EPPaZdSrctUbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MjdFNEU1M0JBNTE3QkJDNUM3OThDRjBEM0FGODcw Mzc1QzBCMDAeFw0yNjA4MTQxMzQ2NThaFw0yNjA4MTUxNTEyNThaMDMxMTAvBgNV BAMTKDRGQTI5RkRDOUQ3MzZBNjNBNzAxNTM1MUEyRUQwRTREQzI2MTQ1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspdPyLmB9sEKJzQH2wYbaJq78 /w2qNJkPDQP04hpE8DrST2FS4jbJ0YfYzUsMiMrsdnl8l3PzVaYiEufw5sMzF3lz lKe6hEAiZJzirW6RSHO/FpHHH/d3nf86NRpA8gDY/NctRZ9KgYhjf6osdOCLIJtO NKN3o1OY+5/PhZ8Wi9c9NE4Lc0LQT5XT4Q7a/4fsHajhyIYOiRaQ5E82IyzpTzIO FtwyDlbONlcTOQa3wdrDSdn49tf2bDqRBs+Ft0tVJ01WhXi/gIfmXnLlT2DQi+uh j+Hjcl10cWpaaVqiymOhLyjpirdvjsIyRGrIxty5leqq39ACqMX0U4rahKsNAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUT6Kf3J1zamOnAVNRou0OTcJhRY8wHwYDVR0j BBgwFoAUp4J+TlO6UXu8XHmM8NOvhwN1wLAwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1DUlMv MC9BNzgyN0U0RTUzQkE1MTdCQkM1Qzc5OENGMEQzQUY4NzAzNzVDMEIwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0E3ODI3RTRFNTNCQTUxN0JCQzVDNzk4Q0YwRDNB Rjg3MDM3NUMwQjAuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTUNSUy8wL0E3ODI3RTRFNTNCQTUx N0JCQzVDNzk4Q0YwRDNBRjg3MDM3NUMwQjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJxqC0vpC1sjMJ 4BLGiksxkHw5LutWhalufxKd418UPiT08mEEQufpO/gp5+RKAEZ8N/OyJSOwM0ou J+tVGiU2FphIRZcxSENL7E15DQ/ybUZll3QzVv7RDk7nFuMPiypIvZqmdiXKjbDO t3jZbnVJgYjCo5isUY0Bb/jD5OiiP/I9+RNBLIXoB2WyanxZ6AFa5UK9bXEHWrxN tMSX9IXKXFTffsYupnQxqbu3bDqWC/PqvIfyis7j92EWBR4NqBtSGxUmc74+LkU8 n93yJnkB4qmPMX82DgxvynPOpYuFA0fT4J3vEjCh/lL2oHT7C9vg/jbWS4DZ8Zbg x/oJb3vY -----END CERTIFICATE-----Generated at Sat Aug 15 05:22:24 2026 by rpki-client