$ rpki-client -vvvf rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft File: 049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft (raw, json) Hash identifier: IY7Pl+4LHayhpcEWKZSigOexeZZMBAhFeyGOtS8jcaw= Subject key identifier: 7A:DB:A0:DB:B4:83:AD:2D:22:4F:F8:65:69:AB:38:6F:4D:10:D5:31 Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B Certificate serial: 53ECF85F016DC401B337E74C99EE4532BB034732 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft Manifest number: DF Signing time: Sun 04 Oct 2026 14:30:45 +0000 Manifest this update: Sun 04 Oct 2026 14:25:45 +0000 Manifest next update: Mon 05 Oct 2026 18:29:45 +0000 Files and hashes: 1: 3132332e3235322e302e302f31372d3234203d3e2039343136.roa (hash: 8JxW+fPG8BWMJ3eQJdeafOLn1uT7L6DDouqnppnhNkg=) 2: 3132332e3235322e36342e302f31382d3138203d3e2039393234.roa (hash: yJVJ6C+sbqUiX3chBCIQtUJyWlloqJi99X6AD9sg0ZA=) 3: 049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl (hash: ah0sOMiMHw0z8SyQ389RY/8IJiFeY9wylF8Pp1VNalM=) 4: 3132322e39392e302e302f31382d3234203d3e2039343136.roa (hash: OPSFIJrW3fmKKJ0pvE28KRzPkCAaJ+W8WzXaI+ME20c=) 5: 3132332e3235322e302e302f31372d3234203d3e203138303432.roa (hash: eh2WLuFL8JfqsgGPL8GnRsMff9j5TtrpXmSa0C/O+SY=) 6: 3132332e3235322e36342e302f31382d3138203d3e2039343136.roa (hash: pbThQhpNTSnJMBASZ2s2lhxD43G2mkYc9iaYlmcl8J4=) 7: 3132342e3135352e3132382e302f31392d3234203d3e2039343136.roa (hash: 893YGx4CNG5anpdx2bAhSvZbR8KtZI1gTBdgDg7AhWU=) 8: 3230322e3135312e34382e302f32302d3234203d3e2039343136.roa (hash: s8f8Uct02N0OIWDDH0xlBcjycL5P1/sP2dObZ84wjW8=) 9: 3131352e34332e302e302f31362d3234203d3e2039343136.roa (hash: ccHKYIH1onediXgVYiKh7EHNnwTYWQJoE9EhH+EUTBk=) 10: 3131392e31342e3132382e302f31372d3137203d3e203138303432.roa (hash: Jdj9OnL+nvn+5vJ82BuOV+iDpLKwfqTLwAmIzmHjSjM=) 11: 3230332e3131382e3232342e302f32302d3230203d3e2039343136.roa (hash: P9ySgHddPveY+6EtVJoOuOaViOtED+utlhZfdlH05gM=) 12: 3232302e3135372e3131322e302f32302d3234203d3e203138303432.roa (hash: wLcmvrG3+9+VQcoGh/RouCPLhBf4BpOjD6kqqbR7944=) 13: 3131392e31342e302e302f31372d3137203d3e2039343136.roa (hash: E8EzQLG5CgTBVviuAYVjkJ5BeSPp51cZIv1bKC3xlIU=) 14: 3131352e34332e3132382e302f31372d3137203d3e203138303432.roa (hash: kgd4Oaxwu9ubZEjWN6uD3zvpYDcWGuuxHkyqviavhU8=) 15: 3230322e3135312e34382e302f32302d3234203d3e203138303432.roa (hash: 0Sm3TU3ucHMOKOYa+d48jFM4xmkHZ7KXpkQsW/3BXuk=) 16: 3232302e3135372e3131322e302f32302d3234203d3e2039343136.roa (hash: MV88dvBez2VEHGQu9vHIsSHLmR+FC/BkqQXgQl6RGGE=) 17: 3131392e31342e302e302f31362d3234203d3e2039343136.roa (hash: ogg05JqGwuh8Rk6w6nYH2L3SIwxm+KuAyegtBtcSZ9I=) 18: 3131392e31342e3132382e302f31372d3137203d3e2039343136.roa (hash: etypLFOH/+2ky9YLH0gkWFgtIbtkxf0DGdzRztYvnQ4=) 19: 3132332e3235322e302e302f31382d3138203d3e2039343136.roa (hash: ERhjaQIXwvyOB2XFTJS7sS0ge8NmOyER/FKPC6xegWQ=) 20: 3230332e3131382e3232342e302f32302d3230203d3e203138303432.roa (hash: 2exWg2jS2ItjCPg0xipUoannDwWvVERhxvaeyMJgPbs=) 21: 3131352e34332e3132382e302f31372d3137203d3e2039343136.roa (hash: St+0TPB6YfmeZtsKtmzv7EeJUGiMlhWPr0IbfUc/xZE=) 22: 3132342e3135352e3132382e302f31392d3234203d3e203138303432.roa (hash: IN0+/ooOlPpq110sSFYkiYlC1Kewj2Ug+tzHpY6kPI0=) 23: 3131392e31342e302e302f31362d3234203d3e203138303432.roa (hash: HbGluHb1NsEVJLOmIp1khnjJQIuZhHoSydxnFJStI9Y=) 24: 3131352e34332e302e302f31372d3137203d3e203138303432.roa (hash: 5gZY3nEfq5SmiFBc4GkzG7kzPKYWP/eJ/0s+gE8A0xM=) 25: 3132322e39392e302e302f31382d3234203d3e203138303432.roa (hash: Tz0cSD05i3OCST0PKGEitL9Cea02/7iZZXiFw8rsfjE=) 26: 3131352e34332e302e302f31372d3137203d3e2039343136.roa (hash: 8sPfy+KBH9Iy3oz6z3pK10IfnFdOzftlkUor0sZFlgE=) 27: 3131392e31342e302e302f31372d3137203d3e203138303432.roa (hash: izV5LKXyRkMjgziCJgXNzX9mmTRUejlC9TqllBbTJjE=) 28: 3131352e34332e302e302f31362d3234203d3e203138303432.roa (hash: 8CdvHvNqCGbHptsBsqmVxO/ddNWB2NuNellpQMuTOqQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 17:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ec:f8:5f:01:6d:c4:01:b3:37:e7:4c:99:ee:45:32:bb:03:47:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B Validity Not Before: Oct 4 14:25:45 2026 GMT Not After : Oct 5 18:29:45 2026 GMT Subject: CN=7ADBA0DBB483AD2D224FF86569AB386F4D10D531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:1b:d9:a4:0a:fe:93:e5:15:39:e5:0c:17: 7e:24:48:ab:92:44:59:68:1c:c1:ff:af:4a:b0:d6: 84:ca:89:51:03:56:0d:d7:81:3f:b5:88:7f:6d:57: 37:9e:f7:fa:ea:65:ac:9a:cb:34:fc:5e:42:08:02: ac:a0:d7:85:a1:32:41:1f:d6:17:79:da:4c:1a:80: 2b:9c:ee:c2:97:ce:2e:92:1d:ee:bc:29:b6:0d:04: c5:cf:4d:7f:c4:14:09:1c:b0:71:c7:90:f2:28:27: 24:2d:5c:d0:8f:65:3c:90:e2:1c:35:ac:1d:b5:72: 99:f2:a0:40:a7:f0:aa:0b:d3:ea:ec:65:85:d3:f8: b5:d2:7c:5e:d4:76:cc:71:4c:0f:90:21:51:86:13: 4f:cf:ac:72:df:ad:2d:0c:70:e1:6a:7e:77:47:3a: b6:76:b1:ab:95:1d:c4:0e:1c:29:3e:08:65:c0:f3: 40:45:81:49:d3:7e:df:12:11:dc:b7:1a:f2:d2:4d: 29:d6:89:9d:5a:d1:a7:fe:ba:06:76:35:d8:fb:d5: d9:47:de:2f:7c:38:4e:75:24:0f:97:cf:f6:ab:d8: d3:2b:4e:68:e7:bd:4c:34:f9:69:d3:b3:9c:7a:a1: b9:04:d4:c8:cd:10:76:d2:c1:07:82:4c:ed:bb:7e: b4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DB:A0:DB:B4:83:AD:2D:22:4F:F8:65:69:AB:38:6F:4D:10:D5:31 X509v3 Authority Key Identifier: keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:85:6a:82:ea:ca:a1:ab:eb:c6:b5:8f:a8:ff:8e:44:0e:ab: 41:7d:21:d7:e4:46:4b:33:67:c0:30:05:a5:ef:d4:b6:82:f6: aa:48:d8:17:da:f0:df:a1:c4:36:73:05:8c:7e:24:8d:e5:de: 11:81:ba:91:ec:2c:ae:ef:61:f8:d8:82:36:36:06:e9:07:99: 01:81:65:66:c6:e9:b8:64:23:88:93:3f:e9:23:41:89:92:3d: 0e:d0:a2:a7:9d:0c:59:8a:de:ad:e4:8d:93:1b:1b:39:e4:1c: d0:ce:c7:0e:3f:7a:d7:1a:8f:fa:2f:1a:70:d2:1d:71:b5:04: 11:d7:7b:01:f3:8a:d1:13:1e:fb:00:14:58:49:da:a4:b6:6f: 41:b0:db:1b:bd:99:68:c2:f2:66:38:5d:57:46:d9:94:45:7e: fe:0e:82:f7:c2:e4:84:cc:f8:c0:9f:ba:96:eb:eb:b9:d1:da: 28:34:0d:1a:08:35:e2:f0:d8:1f:92:9f:78:77:ae:29:f3:e0: e0:21:22:6e:8d:b2:23:9c:c4:40:10:1f:4e:e1:61:54:2c:0a: 3a:e6:4a:3f:94:0b:82:18:92:b9:1c:e1:17:25:45:c1:55:ea: 59:34:75:a7:cf:bc:83:42:ec:b0:e4:bd:23:e8:02:86:f6:38: 7a:0e:65:dd -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUU+z4XwFtxAGzN+dMme5FMrsDRzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0Qy MzMyNEU0QjAeFw0yNjEwMDQxNDI1NDVaFw0yNjEwMDUxODI5NDVaMDMxMTAvBgNV BAMTKDdBREJBMERCQjQ4M0FEMkQyMjRGRjg2NTY5QUIzODZGNEQxMEQ1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVBxvZpAr+k+UVOeUMF34kSKuS RFloHMH/r0qw1oTKiVEDVg3XgT+1iH9tVzee9/rqZayayzT8XkIIAqyg14WhMkEf 1hd52kwagCuc7sKXzi6SHe68KbYNBMXPTX/EFAkcsHHHkPIoJyQtXNCPZTyQ4hw1 rB21cpnyoECn8KoL0+rsZYXT+LXSfF7UdsxxTA+QIVGGE0/PrHLfrS0McOFqfndH OrZ2sauVHcQOHCk+CGXA80BFgUnTft8SEdy3GvLSTSnWiZ1a0af+ugZ2Ndj71dlH 3i98OE51JA+Xz/ar2NMrTmjnvUw0+WnTs5x6obkE1MjNEHbSwQeCTO27frRxAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUetug27SDrS0iT/hlaas4b00Q1TEwHwYDVR0j BBgwFoAUBJ1NvPql7iinm/SeYj6HzSMyTkswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5H LzAvMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8wNDlENERCQ0ZBQTVFRTI4QTc5QkY0OUU2MjNF ODdDRDIzMzI0RTRCLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5HLzAvMDQ5RDREQkNGQUE1 RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJeFaoLqyqGr 68a1j6j/jkQOq0F9IdfkRkszZ8AwBaXv1LaC9qpI2Bfa8N+hxDZzBYx+JI3l3hGB upHsLK7vYfjYgjY2BukHmQGBZWbG6bhkI4iTP+kjQYmSPQ7QoqedDFmK3q3kjZMb GznkHNDOxw4/etcaj/ovGnDSHXG1BBHXewHzitETHvsAFFhJ2qS2b0Gw2xu9mWjC 8mY4XVdG2ZRFfv4OgvfC5ITM+MCfupbr67nR2ig0DRoINeLw2B+Sn3h3rinz4OAh Im6NsiOcxEAQH07hYVQsCjrmSj+UC4IYkrkc4RclRcFV6lk0dafPvINC7LDkvSPo Aob2OHoOZd0= -----END CERTIFICATE-----Generated at Sun Oct 4 19:50:52 2026 by rpki-client