$ rpki-client -vvvf rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft File: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft (raw, json) Hash identifier: rWXPvlMwiHC6rDe6p5ZA0wOuldjw8nCTOESeGSwctck= Subject key identifier: AB:05:5B:2C:E1:7B:E7:9B:42:6A:F2:8B:E3:39:AE:77:3A:81:6C:2B Authority key identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 Certificate issuer: /CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Certificate serial: 2CC4AE086AF03FA4E85F170B7A45F2F7040189DC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft Manifest number: CA Signing time: Wed 07 Oct 2026 18:33:47 +0000 Manifest this update: Wed 07 Oct 2026 18:28:47 +0000 Manifest next update: Thu 08 Oct 2026 18:56:47 +0000 Files and hashes: 1: 3136302e3139312e342e302f32332d3234203d3e203338303432.roa (hash: uC4SAyffO7EbE3rGS0jHS6n7C39qBWkfFa7uUUduW8s=) 2: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl (hash: 96Krf0lMpiUQeUpG0lZkc3xNTGpmzmh+HVZkfgj7bEg=) 3: 3136302e3139312e342e302f32332d3234203d3e20313334383233.roa (hash: MvSn3+N3E0x49y2zyFZseXhPFbhPYX7FDxa/hvK0XxA=) 4: 3136302e3139312e342e302f32332d3234203d3e20313438393936.roa (hash: WDQ6isA31vRFBEKAPNTN2h03bliS7XG3+ZDUsxu5ekM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 15:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c4:ae:08:6a:f0:3f:a4:e8:5f:17:0b:7a:45:f2:f7:04:01:89:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7 Validity Not Before: Oct 7 18:28:47 2026 GMT Not After : Oct 8 18:56:47 2026 GMT Subject: CN=AB055B2CE17BE79B426AF28BE339AE773A816C2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:dc:bd:2c:6f:bc:f1:a4:ac:62:d3:50:d9: 7f:88:40:53:3c:71:fb:7f:48:38:51:7c:2a:c2:9e: fc:9d:97:86:a7:20:e0:f0:47:aa:47:bd:3a:e6:a7: 9c:66:64:59:a2:b4:cc:0e:9d:2c:ec:e4:f8:ff:c1: 3c:70:b5:6d:52:1e:15:bb:3b:8a:e8:ed:22:b6:6f: 78:af:bf:77:10:0a:23:12:7f:56:a0:aa:e1:33:2d: 34:29:b1:ba:72:ee:f8:5c:17:2e:34:40:76:92:1e: f3:24:07:f5:fa:88:e3:82:1b:14:32:ae:6e:41:92: 02:ee:f3:90:e3:79:94:b8:96:ae:f4:bf:35:dd:28: cd:23:3f:19:16:ba:69:e1:2f:8b:e5:84:44:6d:38: 89:28:98:78:70:d9:bf:5c:28:7c:b5:0f:9a:a6:34: 9e:95:77:b5:83:36:9b:74:84:ad:da:c4:d9:c7:2a: 94:b7:0c:41:b7:34:15:21:3d:7b:f8:f0:ec:0f:05: 25:1d:72:8d:c3:f3:95:dc:72:e4:a6:a3:b2:8e:02: 25:5c:fc:3a:e2:31:72:25:6d:77:ce:fe:a3:68:29: f5:5e:81:e2:9b:ad:9e:0b:6c:6b:08:73:7d:47:e3: c3:aa:67:f5:7e:62:1c:e1:f6:6f:87:8c:7b:f5:c5: da:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:05:5B:2C:E1:7B:E7:9B:42:6A:F2:8B:E3:39:AE:77:3A:81:6C:2B X509v3 Authority Key Identifier: keyid:EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e2:41:6b:62:23:f8:27:e1:ec:2b:73:d9:5b:f4:0d:2e:48: 63:99:fb:3b:66:9f:a1:69:6f:a8:a8:aa:06:f6:31:c1:fb:d5: 37:93:e7:74:37:f1:41:cd:c6:9c:32:b9:f9:c4:b6:b6:ab:72: ae:af:d3:c6:9e:ed:cb:e8:c1:59:b5:27:10:f5:22:99:20:9f: 7d:73:50:4b:dc:5a:14:c2:e0:24:ca:61:75:e4:2a:f7:9e:69: a8:d9:60:e5:85:39:61:2f:6c:72:74:69:bb:00:52:58:82:e6: a2:d1:1b:0c:c6:fb:06:cb:23:9c:12:7f:1f:e8:85:0f:b0:22: 23:5f:91:e4:04:13:c9:a9:c7:10:61:60:18:b1:71:c1:e0:80: 54:7e:48:a5:cb:e9:13:25:8e:18:1e:a2:72:3b:1f:fc:e8:18: 3c:02:f1:30:ab:9e:db:6b:f7:2c:e8:50:32:fd:e6:fc:c6:d4: 2c:13:e4:94:0d:74:e5:2b:91:a9:6c:58:a1:bf:0b:c2:60:b6: 33:c2:c8:df:fd:d3:30:e2:83:2b:61:33:c7:3f:e5:12:66:af: 43:fc:01:1d:e2:e3:f4:e9:c1:6f:dd:e5:4e:32:bf:70:cd:c9: 07:02:84:51:4d:4a:42:cf:a3:cf:68:89:4e:09:ad:6d:df:fa: 32:53:a5:62 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIULMSuCGrwP6ToXxcLekXy9wQBidwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUYxRDEwNDg0RUZBNzlBQkMwMThGQTBFRkE3RjNCMEMx NkVFNDNBNzAeFw0yNjEwMDcxODI4NDdaFw0yNjEwMDgxODU2NDdaMDMxMTAvBgNV BAMTKEFCMDU1QjJDRTE3QkU3OUI0MjZBRjI4QkUzMzlBRTc3M0E4MTZDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwG9y9LG+88aSsYtNQ2X+IQFM8 cft/SDhRfCrCnvydl4anIODwR6pHvTrmp5xmZFmitMwOnSzs5Pj/wTxwtW1SHhW7 O4ro7SK2b3ivv3cQCiMSf1agquEzLTQpsbpy7vhcFy40QHaSHvMkB/X6iOOCGxQy rm5BkgLu85DjeZS4lq70vzXdKM0jPxkWumnhL4vlhERtOIkomHhw2b9cKHy1D5qm NJ6Vd7WDNpt0hK3axNnHKpS3DEG3NBUhPXv48OwPBSUdco3D85XccuSmo7KOAiVc /DriMXIlbXfO/qNoKfVegeKbrZ4LbGsIc31H48OqZ/V+Yhzh9m+HjHv1xdpVAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUqwVbLOF755tCavKL4zmudzqBbCswHwYDVR0j BBgwFoAU7x0QSE76eavAGPoO+n87DBbuQ6cwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1ZS0wv MC9FRjFEMTA0ODRFRkE3OUFCQzAxOEZBMEVGQTdGM0IwQzE2RUU0M0E3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0VGMUQxMDQ4NEVGQTc5QUJDMDE4RkEwRUZBN0Yz QjBDMTZFRTQzQTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTVlLTC8wL0VGMUQxMDQ4NEVGQTc5 QUJDMDE4RkEwRUZBN0YzQjBDMTZFRTQzQTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBX4kFrYiP4J+Hs K3PZW/QNLkhjmfs7Zp+haW+oqKoG9jHB+9U3k+d0N/FBzcacMrn5xLa2q3Kur9PG nu3L6MFZtScQ9SKZIJ99c1BL3FoUwuAkymF15Cr3nmmo2WDlhTlhL2xydGm7AFJY guai0RsMxvsGyyOcEn8f6IUPsCIjX5HkBBPJqccQYWAYsXHB4IBUfkily+kTJY4Y HqJyOx/86Bg8AvEwq57ba/cs6FAy/eb8xtQsE+SUDXTlK5GpbFihvwvCYLYzwsjf /dMw4oMrYTPHP+USZq9D/AEd4uP06cFv3eVOMr9wzckHAoRRTUpCz6PPaIlOCa1t 3/oyU6Vi -----END CERTIFICATE-----Generated at Thu Oct 8 01:02:03 2026 by rpki-client