$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft File: 4F029ED27C82844F72C10999E3E77841D888E8A5.mft (raw, json) Hash identifier: EaISI1BTuqS5CTG85XDVFsd4fEEuupuGozDe+xzgKe0= Subject key identifier: 4C:03:6D:31:7D:47:59:6A:F2:52:4B:F8:9A:7F:1B:3E:62:81:05:93 Authority key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 Certificate issuer: /CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Certificate serial: 5A747B65A2C9B2BABCFE9D3B80CF9CB0C35BEF9E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft Manifest number: C9 Signing time: Tue 06 Oct 2026 09:57:23 +0000 Manifest this update: Tue 06 Oct 2026 09:52:23 +0000 Manifest next update: Wed 07 Oct 2026 12:08:23 +0000 Files and hashes: 1: 3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa (hash: UO7gvVHXWOf9xNngHpaJcF4QjHFiPZ4bxN2SGXLKeFI=) 2: 3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa (hash: SV9WMKCo6lqqmo4TlONcJhx+nWmHLOoLn96eGrQjUkk=) 3: 4F029ED27C82844F72C10999E3E77841D888E8A5.crl (hash: wGnflLxXH4Lf0Bh8ulKUV97A3usbufOweAQu5VIB/SQ=) 4: 3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa (hash: mrGHrLU6IhLiSFGZj4xNfph3sl5DRFLwfN+J+P0jaGY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 03:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:74:7b:65:a2:c9:b2:ba:bc:fe:9d:3b:80:cf:9c:b0:c3:5b:ef:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Validity Not Before: Oct 6 09:52:23 2026 GMT Not After : Oct 7 12:08:23 2026 GMT Subject: CN=4C036D317D47596AF2524BF89A7F1B3E62810593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:53:c8:af:8d:6d:f1:23:4d:8b:25:a7:c6: 66:df:8e:ce:20:0a:7e:e7:92:c5:ee:28:bd:99:f9: bb:63:5f:c8:07:a6:08:89:97:e4:54:35:bc:24:2a: a6:af:32:f5:64:0d:c7:e2:49:f4:08:6e:02:da:2f: 62:ce:b2:b0:c9:f6:8a:95:14:db:5c:c1:9e:94:4c: 6d:21:34:f3:48:b2:d4:f0:d0:b2:db:b8:75:2a:01: 93:d2:46:d6:29:d8:d9:3a:5a:5b:dd:9a:0c:27:77: dc:27:bb:42:5a:16:bf:36:39:1a:ad:db:6b:b8:d6: 86:7d:f2:4b:dc:b6:30:1a:3b:5f:99:ce:cc:88:1e: 8f:18:17:d9:57:5c:79:0e:27:10:50:4d:bf:d1:d1: 0c:14:bc:1f:38:81:de:82:ac:ae:27:7d:a5:90:f0: e5:dc:08:c5:32:72:02:56:0d:e5:e7:0c:60:1d:59: 04:a8:66:5b:5b:01:6a:03:cf:35:11:dc:99:76:8c: 6c:38:13:20:6b:3e:68:24:53:bd:b1:9a:d7:0a:87: 67:d9:d3:1c:82:a2:92:49:39:f3:5c:6a:15:de:7c: eb:e0:45:89:9c:02:26:7a:90:79:9f:ed:d4:e2:58: a1:ce:59:91:3e:03:39:5d:25:7e:6d:a9:51:a9:de: 54:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:03:6D:31:7D:47:59:6A:F2:52:4B:F8:9A:7F:1B:3E:62:81:05:93 X509v3 Authority Key Identifier: keyid:4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:90:fe:0f:32:e0:ea:90:6f:b6:a9:8b:2e:e4:a4:d3:17:a7: c5:0b:46:ea:34:09:d5:e8:cb:70:38:2b:ea:84:4f:28:bf:f1: 8e:b6:19:74:e2:76:d4:ee:3d:b4:f3:fc:ae:97:c6:bf:9b:0c: 49:5b:6b:e3:21:ab:4d:3b:19:78:ff:b4:24:41:77:1a:e5:e5: a5:9b:a7:97:cc:cc:4c:09:3a:da:9d:0f:af:7e:c4:6b:ed:77: 91:f0:92:81:dd:4a:3a:95:91:cb:2e:e6:77:ef:19:53:df:4f: 2f:39:0d:29:da:8e:62:e2:f9:4a:8d:cb:ec:ea:5f:44:73:a2: 92:89:1e:6d:de:df:11:1a:43:dd:1a:8e:ba:43:86:7a:e3:32: 24:5a:bf:97:3b:1c:03:e7:0c:0a:2e:d6:73:12:ac:e7:de:46: e7:18:1c:fe:4f:73:99:31:af:26:47:4d:19:f7:e2:7c:4e:09: 78:2b:e5:21:1b:c8:ea:3e:e1:ba:24:f0:be:16:0a:05:7a:1b: 4f:b0:26:c5:57:90:f2:06:d9:4c:3b:e9:0d:34:3a:cb:27:7a: 59:e6:7d:ed:34:cc:71:b6:3c:42:c8:d6:b0:c8:80:14:4a:e5: 56:c8:68:70:3a:51:e4:e1:51:e1:69:42:49:da:bd:51:66:4f: 4a:76:d3:d1 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUWnR7ZaLJsrq8/p07gM+csMNb754wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjlFRDI3QzgyODQ0RjcyQzEwOTk5RTNFNzc4NDFE ODg4RThBNTAeFw0yNjEwMDYwOTUyMjNaFw0yNjEwMDcxMjA4MjNaMDMxMTAvBgNV BAMTKDRDMDM2RDMxN0Q0NzU5NkFGMjUyNEJGODlBN0YxQjNFNjI4MTA1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0VPIr41t8SNNiyWnxmbfjs4g Cn7nksXuKL2Z+btjX8gHpgiJl+RUNbwkKqavMvVkDcfiSfQIbgLaL2LOsrDJ9oqV FNtcwZ6UTG0hNPNIstTw0LLbuHUqAZPSRtYp2Nk6Wlvdmgwnd9wnu0JaFr82ORqt 22u41oZ98kvctjAaO1+ZzsyIHo8YF9lXXHkOJxBQTb/R0QwUvB84gd6CrK4nfaWQ 8OXcCMUycgJWDeXnDGAdWQSoZltbAWoDzzUR3Jl2jGw4EyBrPmgkU72xmtcKh2fZ 0xyCopJJOfNcahXefOvgRYmcAiZ6kHmf7dTiWKHOWZE+AzldJX5tqVGp3lQnAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUTANtMX1HWWryUkv4mn8bPmKBBZMwHwYDVR0j BBgwFoAUTwKe0nyChE9ywQmZ4+d4QdiI6KUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v MS80RjAyOUVEMjdDODI4NDRGNzJDMTA5OTlFM0U3Nzg0MUQ4ODhFOEE1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzRGMDI5RUQyN0M4Mjg0NEY3MkMxMDk5OUUzRTc3 ODQxRDg4OEU4QTUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8xLzRGMDI5RUQyN0M4Mjg0 NEY3MkMxMDk5OUUzRTc3ODQxRDg4OEU4QTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANkP4PMuDqkG+2 qYsu5KTTF6fFC0bqNAnV6MtwOCvqhE8ov/GOthl04nbU7j208/yul8a/mwxJW2vj IatNOxl4/7QkQXca5eWlm6eXzMxMCTranQ+vfsRr7XeR8JKB3Uo6lZHLLuZ37xlT 308vOQ0p2o5i4vlKjcvs6l9Ec6KSiR5t3t8RGkPdGo66Q4Z64zIkWr+XOxwD5wwK LtZzEqzn3kbnGBz+T3OZMa8mR00Z9+J8Tgl4K+UhG8jqPuG6JPC+FgoFehtPsCbF V5DyBtlMO+kNNDrLJ3pZ5n3tNMxxtjxCyNawyIAUSuVWyGhwOlHk4VHhaUJJ2r1R Zk9KdtPR -----END CERTIFICATE-----Generated at Tue Oct 6 18:49:55 2026 by rpki-client