$ rpki-client -vvvf rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft File: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft (raw, json) Hash identifier: tc+OzwlmghMgmPBzUiRABIGBUpiKDzaqJRFw1okyKgo= Subject key identifier: 8B:CF:9E:4C:8F:17:64:46:21:22:C5:F1:10:67:1E:CD:8E:54:9A:9F Authority key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA Certificate issuer: /CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Certificate serial: 3AD8BE23F85C63173166F4F4C36FE463A5E840E6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft Manifest number: C9 Signing time: Sun 04 Oct 2026 11:35:20 +0000 Manifest this update: Sun 04 Oct 2026 11:30:20 +0000 Manifest next update: Mon 05 Oct 2026 15:29:20 +0000 Files and hashes: 1: 41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl (hash: Qdy18rXXXaO0PtkAq3dlZZLBV+qCnfMJR5bmRx5Cr6g=) 2: 323430373a653463303a313a3a2f34382d3438203d3e2039393230.roa (hash: SPZzDHWF7IOGU0RefkHatr6T+UuWJ43wu5dvfPsUlBc=) 3: 3130332e3137332e39342e302f32332d3234203d3e2039393230.roa (hash: 4AY9mKhgxxuuSl6y1Sy2exIP/SFNw2gXcIDmergV1Y0=) 4: 3130332e3137332e39352e302f32342d3234203d3e2039393230.roa (hash: GRWZ7hnM+/dWxb1R4FqblAJoXVc3WKwBr5Lvm8NY3Iw=) 5: 323430373a653463303a31303a3a2f34382d3438203d3e20323138363939.roa (hash: 5NPYn896f6cSL35NtV5sGfz6luML+FwCVhmlOoiZn4A=) 6: 3130332e3137332e39342e302f32342d3234203d3e2039393230.roa (hash: LLLHTnX1lDVfIT/USPcy8uRSK7AEjVy8r3OHlXaKRtA=) 7: 323430373a653463303a3a2f34382d3438203d3e20313532363134.roa (hash: vgzFcwGEYe/SuHzv/bradPPbtlCxt1g9+kfxNVcgqL0=) 8: 3130332e3137332e39342e302f32332d3234203d3e20313532363134.roa (hash: DFwmEzDSWwn1n/LKb3VnZN0eid9zGs6vXBGXUYxrvVE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d8:be:23:f8:5c:63:17:31:66:f4:f4:c3:6f:e4:63:a5:e8:40:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA Validity Not Before: Oct 4 11:30:20 2026 GMT Not After : Oct 5 15:29:20 2026 GMT Subject: CN=8BCF9E4C8F1764462122C5F110671ECD8E549A9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:37:e4:f9:34:48:65:c1:87:2e:a9:b9:c8: 80:f3:80:a6:fd:be:81:13:f0:7f:26:ce:6e:ba:75: 5b:96:52:5f:6d:56:6b:78:11:ee:f3:10:d1:57:ed: 61:cb:98:6d:3f:1b:8a:28:15:c7:e6:46:66:8d:64: 77:b5:57:2d:39:49:5d:42:7a:07:ef:08:9d:e5:72: 40:fd:36:4d:38:84:90:b9:24:d7:1b:3b:f6:fb:a1: 9c:ee:a4:f4:26:cd:a7:be:24:80:d3:51:27:20:dc: 50:b0:6a:42:cf:2d:5c:ca:c1:d6:18:24:1f:ab:49: c5:0f:c7:65:cc:0b:92:30:b7:d3:6d:ac:b2:f7:ff: d7:74:5e:4a:17:04:38:9e:a1:27:5e:6a:5a:a9:c1: 53:84:f7:c5:37:67:dc:cd:66:40:6c:2f:94:3c:f1: b8:92:f2:f0:81:56:17:58:ed:a7:2f:b2:d8:68:2e: 0b:c1:fc:7e:f7:f3:a5:6c:46:86:c7:e6:b2:19:59: c6:42:94:70:6b:ca:c8:c7:9e:0d:cc:f3:8e:b1:6f: 65:37:ea:93:c5:51:17:6a:83:f0:5e:f7:e6:0f:00: d2:81:d0:79:ae:a5:d0:eb:fa:41:8e:93:63:01:f0: 82:5a:b4:02:8a:ee:e4:fa:f1:46:03:f2:1d:1e:ad: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CF:9E:4C:8F:17:64:46:21:22:C5:F1:10:67:1E:CD:8E:54:9A:9F X509v3 Authority Key Identifier: keyid:41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:76:0b:0f:a4:9c:83:02:22:2a:b8:f4:b1:1d:97:3f:b2:d5: d9:88:f9:57:be:6c:ff:aa:0c:79:ab:96:57:c9:24:e2:16:2a: 04:5e:eb:0b:30:f7:7a:3f:3b:66:32:53:b0:3d:66:94:9d:50: 15:39:b8:41:d0:0c:c1:06:0c:37:78:45:ba:ee:05:2f:7d:68: 8d:d8:e1:7d:54:f1:73:e9:bc:c2:7c:65:dc:a1:52:19:29:3c: f2:ed:f6:ed:b3:b7:08:52:5b:50:e9:2c:52:2c:40:2c:34:91: 8b:2e:9b:d1:0a:56:b5:55:9a:af:c6:86:cd:2e:a5:79:ba:99: 0d:8a:9e:f0:fa:82:28:ee:f1:45:14:a4:8b:25:c3:bb:a0:3e: e2:a3:0f:63:79:f5:12:d1:e9:c9:83:0c:e4:f0:6c:03:f6:c8: d4:b6:0c:1c:ca:fe:9a:d2:df:47:5b:f2:9d:5c:18:c8:67:a2: 98:b9:a5:35:7d:59:94:c0:50:75:d4:5f:78:8d:7d:63:ed:a0: 45:c8:54:0a:7a:b5:39:40:86:ed:7f:5a:d3:53:17:df:78:89: d9:bc:f6:d3:0e:18:2e:4d:f2:57:3d:49:48:ae:f4:7f:a7:bb: 56:02:2f:59:20:c2:aa:79:73:52:d9:3c:8a:f7:4d:2f:fa:00: 11:75:ee:69 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUOti+I/hcYxcxZvT0w2/kY6XoQOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFCRUI2NTY2OEUxNjQ5RURFOTcyOEU0RkY0ODU5MUZB MEM1ODJCQTAeFw0yNjEwMDQxMTMwMjBaFw0yNjEwMDUxNTI5MjBaMDMxMTAvBgNV BAMTKDhCQ0Y5RTRDOEYxNzY0NDYyMTIyQzVGMTEwNjcxRUNEOEU1NDlBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXozfk+TRIZcGHLqm5yIDzgKb9 voET8H8mzm66dVuWUl9tVmt4Ee7zENFX7WHLmG0/G4ooFcfmRmaNZHe1Vy05SV1C egfvCJ3lckD9Nk04hJC5JNcbO/b7oZzupPQmzae+JIDTUScg3FCwakLPLVzKwdYY JB+rScUPx2XMC5Iwt9NtrLL3/9d0XkoXBDieoSdealqpwVOE98U3Z9zNZkBsL5Q8 8biS8vCBVhdY7acvsthoLgvB/H7386VsRobH5rIZWcZClHBrysjHng3M846xb2U3 6pPFURdqg/Be9+YPANKB0HmupdDr+kGOk2MB8IJatAKK7uT68UYD8h0erS7HAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUi8+eTI8XZEYhIsXxEGcezY5Ump8wHwYDVR0j BBgwFoAUQb62VmjhZJ7elyjk/0hZH6DFgrowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVNUVkMv MC80MUJFQjY1NjY4RTE2NDlFREU5NzI4RTRGRjQ4NTkxRkEwQzU4MkJBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzQxQkVCNjU2NjhFMTY0OUVERTk3MjhFNEZGNDg1 OTFGQTBDNTgyQkEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JU1RWQy8wLzQxQkVCNjU2NjhFMTY0 OUVERTk3MjhFNEZGNDg1OTFGQTBDNTgyQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRdgsPpJyDAiIq uPSxHZc/stXZiPlXvmz/qgx5q5ZXySTiFioEXusLMPd6PztmMlOwPWaUnVAVObhB 0AzBBgw3eEW67gUvfWiN2OF9VPFz6bzCfGXcoVIZKTzy7fbts7cIUltQ6SxSLEAs NJGLLpvRCla1VZqvxobNLqV5upkNip7w+oIo7vFFFKSLJcO7oD7iow9jefUS0enJ gwzk8GwD9sjUtgwcyv6a0t9HW/KdXBjIZ6KYuaU1fVmUwFB11F94jX1j7aBFyFQK erU5QIbtf1rTUxffeInZvPbTDhguTfJXPUlIrvR/p7tWAi9ZIMKqeXNS2TyK900v +gARde5p -----END CERTIFICATE-----Generated at Sun Oct 4 16:57:40 2026 by rpki-client