$ rpki-client -vvf rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft File: 589DA145B1A822538BB2E68D892E6742B34F0701.mft (raw, json) Hash identifier: F16+DWFXu8QmIf7k6j882IKpiSy2GFYyzWx8rV0vnt0= Subject key identifier: DF:74:CC:C6:38:E0:8C:CC:43:2B:64:A7:5A:37:40:63:46:95:DF:F9 Authority key identifier: 58:9D:A1:45:B1:A8:22:53:8B:B2:E6:8D:89:2E:67:42:B3:4F:07:01 Certificate issuer: /CN=589DA145B1A822538BB2E68D892E6742B34F0701 Certificate serial: 2FE5A59CF2F65845099677FD12F258612134446F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/589DA145B1A822538BB2E68D892E6742B34F0701.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft Manifest number: 81 Signing time: Fri 14 Aug 2026 20:23:23 +0000 Manifest this update: Fri 14 Aug 2026 20:18:23 +0000 Manifest next update: Sat 15 Aug 2026 23:49:23 +0000 Files and hashes: 1: 3136312e3234382e3132382e302f32332d3234203d3e20313331363435.roa (hash: A2tEu7HgD7mnKwNZUDnZPRv7DPPNtScV1zkEjUfoaE8=) 2: 589DA145B1A822538BB2E68D892E6742B34F0701.crl (hash: kOBueKatRqixnzWu3MbD8CH644cETEMA9Rrzo/3adQQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.crl rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/589DA145B1A822538BB2E68D892E6742B34F0701.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 23:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e5:a5:9c:f2:f6:58:45:09:96:77:fd:12:f2:58:61:21:34:44:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589DA145B1A822538BB2E68D892E6742B34F0701 Validity Not Before: Aug 14 20:18:23 2026 GMT Not After : Aug 15 23:49:23 2026 GMT Subject: CN=DF74CCC638E08CCC432B64A75A3740634695DFF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:36:ee:01:09:81:6f:6a:78:73:43:bb:84: fb:9a:a3:6d:c5:f5:e5:d6:8f:c3:00:d4:98:1c:58: 23:ad:65:0c:a5:10:36:9e:ed:17:dc:a6:48:9e:cd: 2a:cb:98:ad:f5:ba:13:45:45:64:f7:06:8e:91:50: a6:d1:97:9f:20:98:1b:50:8d:58:ff:fc:ba:6d:c1: be:ec:de:2d:04:03:bd:5e:f5:d1:e3:9e:87:dd:af: ae:9e:d9:37:90:63:ea:d9:bc:cf:91:f9:cb:e6:3b: 82:e8:d2:04:53:5a:30:aa:8c:6f:93:e8:b7:97:97: 35:d8:f4:94:82:c8:6e:cf:5c:4b:a6:e8:ad:67:95: 66:5c:a9:ec:30:bb:27:e3:60:01:e3:e5:6f:c0:39: ac:22:9b:68:1e:40:dd:9d:70:f6:fd:d1:f3:fc:4a: e3:0e:3d:3a:fb:cb:e4:23:1c:14:4c:71:b7:25:48: 41:05:4f:5e:46:e2:60:3e:8b:78:4a:07:4d:81:ad: b9:a5:e5:84:f7:e7:07:cb:6a:a0:31:20:30:fb:20: 4b:c6:82:6d:04:79:e7:4e:11:cf:99:c4:f6:cb:e3: 22:4e:5e:3c:23:15:b8:5f:5b:e8:33:cf:e5:a4:04: 7b:b0:1c:f5:e9:b4:4b:2e:86:a2:87:3c:1f:25:f5: 51:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:74:CC:C6:38:E0:8C:CC:43:2B:64:A7:5A:37:40:63:46:95:DF:F9 X509v3 Authority Key Identifier: keyid:58:9D:A1:45:B1:A8:22:53:8B:B2:E6:8D:89:2E:67:42:B3:4F:07:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/589DA145B1A822538BB2E68D892E6742B34F0701.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:5a:e8:ba:ae:c4:b9:54:e8:5c:54:6e:b8:26:6c:09:2d:9c: c5:47:e4:63:f4:a0:c5:fc:ac:81:6b:8b:3a:c4:d1:13:27:50: 3a:d8:41:57:04:82:89:80:cd:6f:b1:d0:26:64:77:60:16:41: 85:6a:75:1e:25:50:f3:a9:0c:4e:1b:77:2e:08:49:c9:2b:b8: 9d:89:89:1c:a8:39:6d:92:b1:dd:06:5c:68:54:fe:92:25:4f: 7c:ea:2c:5b:44:9e:7f:03:ff:ab:1e:3a:a4:21:b0:8d:df:83: 91:ba:29:9f:e3:1e:fc:45:ac:7c:a1:58:38:6d:36:d7:96:51: bd:73:39:fd:3b:ba:bd:70:02:c6:be:da:21:f0:7c:ec:bb:3c: c8:f8:64:0f:44:4e:bf:c2:83:55:ec:46:77:54:ec:25:1a:ee: 05:89:3e:40:07:f2:08:71:f5:26:83:8b:8a:05:75:3f:d1:0d: 2e:60:0f:50:7a:62:73:a3:a2:08:ce:bf:4d:76:d8:c2:e1:29: ad:fb:46:dd:71:c5:ea:de:e6:36:33:4c:cc:59:f6:de:bd:00: 6a:4d:d3:a8:ea:47:fc:93:0c:e1:54:e1:39:61:6a:81:d1:c6: 10:0f:d6:c6:37:9d:df:1d:b4:fb:ac:fd:5c:62:e3:77:7a:d9: b1:bf:23:36 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUL+WlnPL2WEUJlnf9EvJYYSE0RG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg5REExNDVCMUE4MjI1MzhCQjJFNjhEODkyRTY3NDJC MzRGMDcwMTAeFw0yNjA4MTQyMDE4MjNaFw0yNjA4MTUyMzQ5MjNaMDMxMTAvBgNV BAMTKERGNzRDQ0M2MzhFMDhDQ0M0MzJCNjRBNzVBMzc0MDYzNDY5NURGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/jbuAQmBb2p4c0O7hPuao23F 9eXWj8MA1JgcWCOtZQylEDae7RfcpkiezSrLmK31uhNFRWT3Bo6RUKbRl58gmBtQ jVj//Lptwb7s3i0EA71e9dHjnofdr66e2TeQY+rZvM+R+cvmO4Lo0gRTWjCqjG+T 6LeXlzXY9JSCyG7PXEum6K1nlWZcqewwuyfjYAHj5W/AOawim2geQN2dcPb90fP8 SuMOPTr7y+QjHBRMcbclSEEFT15G4mA+i3hKB02Brbml5YT35wfLaqAxIDD7IEvG gm0EeedOEc+ZxPbL4yJOXjwjFbhfW+gzz+WkBHuwHPXptEsuhqKHPB8l9VGjAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU33TMxjjgjMxDK2SnWjdAY0aV3/kwHwYDVR0j BBgwFoAUWJ2hRbGoIlOLsuaNiS5nQrNPBwEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzEv NTg5REExNDVCMUE4MjI1MzhCQjJFNjhEODkyRTY3NDJCMzRGMDcwMS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMC81ODlEQTE0NUIxQTgyMjUzOEJCMkU2OEQ4OTJFNjc0 MkIzNEYwNzAxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzEvNTg5REExNDVCMUE4MjI1MzhC QjJFNjhEODkyRTY3NDJCMzRGMDcwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGRa6LquxLlU6FxUbrgm bAktnMVH5GP0oMX8rIFrizrE0RMnUDrYQVcEgomAzW+x0CZkd2AWQYVqdR4lUPOp DE4bdy4ISckruJ2JiRyoOW2Ssd0GXGhU/pIlT3zqLFtEnn8D/6seOqQhsI3fg5G6 KZ/jHvxFrHyhWDhtNteWUb1zOf07ur1wAsa+2iHwfOy7PMj4ZA9ETr/Cg1XsRndU 7CUa7gWJPkAH8ghx9SaDi4oFdT/RDS5gD1B6YnOjogjOv0122MLhKa37Rt1xxere 5jYzTMxZ9t69AGpN06jqR/yTDOFU4TlhaoHRxhAP1sY3nd8dtPus/Vxi43d62bG/ IzY= -----END CERTIFICATE-----Generated at Sat Aug 15 10:25:41 2026 by rpki-client