$ rpki-client -vvf rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft File: FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft (raw, json) Hash identifier: eCpqTjIZ36eRGr9V7LK2iL9PtGfPiEUEVaCL5rMplbo= Subject key identifier: 1F:67:79:02:2B:89:90:C6:3F:35:98:01:54:A6:07:77:F9:0D:66:15 Authority key identifier: FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B Certificate issuer: /CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B Certificate serial: 3AC9F85B98A37F4A01F22E79B8C4D71AB6A7B980 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft Manifest number: 05 Signing time: Wed 13 May 2026 05:42:09 +0000 Manifest this update: Wed 13 May 2026 05:37:09 +0000 Manifest next update: Thu 14 May 2026 08:39:09 +0000 Files and hashes: 1: FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl (hash: UnJpYLuY80iiET9rEgqb+omh06+V7i8vZKM8kT6UPO0=) 2: 323430313a653736303a3a2f33322d3438203d3e20313331363435.roa (hash: 8YC3WhfA/JwpTpT4EA1dLfSVRzAraHz3m65LBo1nSas=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c9:f8:5b:98:a3:7f:4a:01:f2:2e:79:b8:c4:d7:1a:b6:a7:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B Validity Not Before: May 13 05:37:09 2026 GMT Not After : May 14 08:39:09 2026 GMT Subject: CN=1F6779022B8990C63F35980154A60777F90D6615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:34:41:61:f4:5a:f0:a3:ad:79:fa:f7:9d: eb:96:1c:a1:c1:19:cd:1d:7b:41:df:ce:b7:5c:ba: 4e:4b:51:b7:c1:aa:15:5f:bf:2f:38:2f:a3:81:d5: a1:98:49:f6:82:8a:dd:ab:dd:56:c1:f0:c3:56:71: ff:36:af:5e:36:b2:ff:e5:70:a8:7e:da:72:a3:17: ba:a8:41:30:a0:80:ed:a9:c3:0e:dd:88:fb:da:d9: 5a:63:4d:85:d4:e0:e5:e0:26:ac:7e:d7:07:86:db: 67:cb:73:84:c4:2a:a3:c0:7e:9f:43:17:71:20:74: 28:97:a2:a2:57:c4:33:4c:07:53:fb:40:49:2c:4a: 3c:b3:59:e4:5d:4c:0f:98:63:2d:a4:c0:89:b6:39: d1:10:7d:d5:9b:51:0b:77:30:6b:59:ae:c4:a6:d8: 1a:4a:e1:7c:9f:a8:8f:f7:53:d9:1d:03:2d:c2:4d: e4:de:ad:53:81:35:d5:0b:da:02:15:db:00:85:8f: e1:bf:03:a1:16:38:45:ac:5b:b1:89:82:8e:29:3e: b7:c6:90:2d:fe:d2:a7:33:f9:ea:d4:09:a9:f6:d0: e0:83:dd:15:c2:00:9f:ea:30:cf:09:3b:61:e1:4f: 5e:63:51:dc:f8:b5:8b:bf:81:09:94:ef:64:b2:17: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:67:79:02:2B:89:90:C6:3F:35:98:01:54:A6:07:77:F9:0D:66:15 X509v3 Authority Key Identifier: keyid:FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2c:24:da:38:45:5e:06:8c:01:28:45:f3:e8:56:4d:9a:3e: 41:1c:20:e5:fc:e0:3e:85:7e:0e:f4:de:2c:93:49:af:23:93: b3:22:a0:f1:df:c3:2d:92:cd:d4:34:41:f8:7c:95:08:05:57: d5:df:b6:aa:64:c1:cb:74:97:6a:e5:f9:43:96:3f:e6:59:b1: 91:23:75:da:57:6f:82:54:f9:3b:bf:27:68:85:90:3e:4a:dd: da:3e:d8:f2:4d:62:a2:c8:4d:1a:d7:32:e8:2b:d2:63:4e:83: 4b:44:89:d2:87:c4:3e:80:4e:ec:a7:7a:bb:f8:37:1d:cd:ef: f8:88:d1:6a:bf:0e:2e:77:1e:00:33:5f:6d:af:bb:66:da:24: c7:7f:5e:9c:36:52:6a:b6:87:fe:75:31:ec:99:33:e8:1c:5b: 63:25:57:52:8f:d6:1d:ad:23:36:90:08:1c:07:c9:96:26:fd: 6c:14:6e:47:ef:d7:ff:c7:8c:5f:a8:b7:e8:e3:80:5e:d1:94: 2a:2a:2d:20:ac:dd:c2:06:cf:15:36:78:8a:fd:1f:b7:e3:b6: 41:86:7c:f1:f1:9b:60:8a:4b:32:4f:66:1d:fb:0d:82:21:5c: 6c:c0:d1:2f:47:f6:9e:d6:f5:f3:ea:88:78:97:b2:d7:5d:66: 67:26:47:ed -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUOsn4W5ijf0oB8i55uMTXGranuYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3NTJENkUxQTg5QTgyNEJFNkUwNDg1MkQxRjUwNUYw MUVEMTg1QjAeFw0yNjA1MTMwNTM3MDlaFw0yNjA1MTQwODM5MDlaMDMxMTAvBgNV BAMTKDFGNjc3OTAyMkI4OTkwQzYzRjM1OTgwMTU0QTYwNzc3RjkwRDY2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+jRBYfRa8KOtefr3neuWHKHB Gc0de0Hfzrdcuk5LUbfBqhVfvy84L6OB1aGYSfaCit2r3VbB8MNWcf82r142sv/l cKh+2nKjF7qoQTCggO2pww7diPva2VpjTYXU4OXgJqx+1weG22fLc4TEKqPAfp9D F3EgdCiXoqJXxDNMB1P7QEksSjyzWeRdTA+YYy2kwIm2OdEQfdWbUQt3MGtZrsSm 2BpK4XyfqI/3U9kdAy3CTeTerVOBNdUL2gIV2wCFj+G/A6EWOEWsW7GJgo4pPrfG kC3+0qcz+erUCan20OCD3RXCAJ/qMM8JO2HhT15jUdz4tYu/gQmU72SyF4LXAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUH2d5AiuJkMY/NZgBVKYHd/kNZhUwHwYDVR0j BBgwFoAU+3UtbhqJqCS+bgSFLR9QXwHtGFswDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzAv RkI3NTJENkUxQTg5QTgyNEJFNkUwNDg1MkQxRjUwNUYwMUVEMTg1Qi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9GQjc1MkQ2RTFBODlBODI0QkU2RTA0ODUyRDFGNTA1 RjAxRUQxODVCLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzAvRkI3NTJENkUxQTg5QTgyNEJF NkUwNDg1MkQxRjUwNUYwMUVEMTg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKUsJNo4RV4GjAEoRfPo Vk2aPkEcIOX84D6Ffg703iyTSa8jk7MioPHfwy2SzdQ0Qfh8lQgFV9Xftqpkwct0 l2rl+UOWP+ZZsZEjddpXb4JU+Tu/J2iFkD5K3do+2PJNYqLITRrXMugr0mNOg0tE idKHxD6ATuynerv4Nx3N7/iI0Wq/Di53HgAzX22vu2baJMd/Xpw2Umq2h/51MeyZ M+gcW2MlV1KP1h2tIzaQCBwHyZYm/WwUbkfv1//HjF+ot+jjgF7RlCoqLSCs3cIG zxU2eIr9H7fjtkGGfPHxm2CKSzJPZh37DYIhXGzA0S9H9p7W9fPqiHiXstddZmcm R+0= -----END CERTIFICATE-----Generated at Wed May 13 20:33:44 2026 by rpki-client