$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft File: 4F029ED27C82844F72C10999E3E77841D888E8A5.mft (raw, json) Hash identifier: JBqVWcnanvPIatoR2scSglC/Bc4v+4JgCusZw0ke8Jo= Subject key identifier: 64:A7:EF:7A:D4:01:0D:91:5E:FA:20:DB:BB:2C:75:DE:78:9C:04:42 Authority key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 Certificate issuer: /CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Certificate serial: 01A81F13B5742621891B3FD96CEE3F3D09C40D1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft Manifest number: 0A Signing time: Fri 15 May 2026 08:36:23 +0000 Manifest this update: Fri 15 May 2026 08:31:23 +0000 Manifest next update: Sat 16 May 2026 11:21:23 +0000 Files and hashes: 1: 3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa (hash: SV9WMKCo6lqqmo4TlONcJhx+nWmHLOoLn96eGrQjUkk=) 2: 3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa (hash: UO7gvVHXWOf9xNngHpaJcF4QjHFiPZ4bxN2SGXLKeFI=) 3: 4F029ED27C82844F72C10999E3E77841D888E8A5.crl (hash: a2IUBVu4nSQic407emv5HL1LqUlNSajkPHE/VFB26Ug=) 4: 3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa (hash: mrGHrLU6IhLiSFGZj4xNfph3sl5DRFLwfN+J+P0jaGY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 11:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a8:1f:13:b5:74:26:21:89:1b:3f:d9:6c:ee:3f:3d:09:c4:0d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Validity Not Before: May 15 08:31:23 2026 GMT Not After : May 16 11:21:23 2026 GMT Subject: CN=64A7EF7AD4010D915EFA20DBBB2C75DE789C0442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fa:53:d1:c3:63:19:50:56:48:c5:31:dd:3e: 15:a7:62:61:e9:05:a2:32:e6:39:e6:a5:ee:71:04: 38:7f:29:dd:0a:50:84:55:e2:ba:e9:a0:d1:22:f8: b3:ed:30:90:c7:ee:6e:80:3e:4e:42:1b:1d:5a:02: 4e:af:69:7f:30:29:a6:41:ab:f1:a6:41:42:42:ac: 63:3d:08:fd:3b:af:3a:b6:70:7a:71:08:9b:99:ae: 33:34:48:29:64:a1:d9:50:8c:9a:9b:e9:ce:a8:32: 75:be:80:8a:f2:0d:3d:9d:ee:b5:15:78:58:f2:60: f7:13:c1:c8:46:fe:b3:0d:e2:c7:2f:3a:80:ec:47: 3f:c3:d5:63:75:35:8c:a9:ec:ed:b4:2d:bf:c1:34: b4:09:22:88:45:c0:5b:a4:63:a7:e5:10:6e:5e:30: 6b:b6:e7:da:fc:16:78:44:57:fe:b2:e2:5a:5c:7b: e2:6e:f9:c8:6f:9e:73:9c:77:36:38:87:92:62:9a: da:0b:b3:41:60:ec:ec:63:fa:bb:ba:64:49:7a:15: 09:94:2b:90:00:51:93:88:bb:74:71:df:6f:a6:50: 9f:8c:ae:31:1b:31:af:e5:0b:f5:9e:cc:05:17:26: 30:c8:41:42:3f:15:40:84:e3:fc:8d:9e:c2:8a:77: 30:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A7:EF:7A:D4:01:0D:91:5E:FA:20:DB:BB:2C:75:DE:78:9C:04:42 X509v3 Authority Key Identifier: keyid:4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:bf:f4:d4:67:46:26:cb:8e:2c:76:18:c5:c6:60:87:a6:7c: 95:bf:06:ae:7f:28:13:25:31:42:a1:6b:2d:8d:65:a9:75:36: a1:cc:02:9b:2e:50:fe:52:f0:7d:01:78:73:86:7a:87:e8:57: 3d:ae:32:eb:cc:24:46:cd:20:45:3b:78:d7:9c:1c:7d:08:42: 7a:36:45:ec:bb:b3:42:a2:e8:26:09:ef:32:2d:1b:10:72:6f: 96:9c:d2:d6:b7:2f:ea:45:d3:d9:89:ff:cc:bd:a8:08:9a:fe: 5c:6a:1c:22:6e:d4:18:f6:b3:19:a0:27:6a:be:a4:62:ca:a7: b9:7f:4a:30:af:c2:52:77:61:24:78:db:a3:de:35:4e:8a:88: 58:a9:6c:95:ae:3b:bb:c0:34:1e:97:5e:be:0d:51:19:5b:9d: 23:d8:12:e0:0a:17:e3:75:9b:b1:f8:93:da:ec:ac:ff:33:37: cc:36:d1:50:7f:55:7b:65:e7:74:28:50:f5:a4:d9:3a:7f:49: ba:b9:57:4d:6d:38:8c:10:d6:36:72:14:b9:11:56:52:51:b1: e8:6d:d9:a0:20:7e:2b:03:28:42:95:82:9c:49:97:e7:e5:86: 1f:74:1a:89:9b:44:35:85:e3:83:27:b7:4d:53:10:06:2c:08: 59:85:9e:85 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUAagfE7V0JiGJGz/ZbO4/PQnEDRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjlFRDI3QzgyODQ0RjcyQzEwOTk5RTNFNzc4NDFE ODg4RThBNTAeFw0yNjA1MTUwODMxMjNaFw0yNjA1MTYxMTIxMjNaMDMxMTAvBgNV BAMTKDY0QTdFRjdBRDQwMTBEOTE1RUZBMjBEQkJCMkM3NURFNzg5QzA0NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd+lPRw2MZUFZIxTHdPhWnYmHp BaIy5jnmpe5xBDh/Kd0KUIRV4rrpoNEi+LPtMJDH7m6APk5CGx1aAk6vaX8wKaZB q/GmQUJCrGM9CP07rzq2cHpxCJuZrjM0SClkodlQjJqb6c6oMnW+gIryDT2d7rUV eFjyYPcTwchG/rMN4scvOoDsRz/D1WN1NYyp7O20Lb/BNLQJIohFwFukY6flEG5e MGu259r8FnhEV/6y4lpce+Ju+chvnnOcdzY4h5JimtoLs0Fg7Oxj+ru6ZEl6FQmU K5AAUZOIu3Rx32+mUJ+MrjEbMa/lC/WezAUXJjDIQUI/FUCE4/yNnsKKdzBjAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUZKfvetQBDZFe+iDbuyx13nicBEIwHwYDVR0j BBgwFoAUTwKe0nyChE9ywQmZ4+d4QdiI6KUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v MS80RjAyOUVEMjdDODI4NDRGNzJDMTA5OTlFM0U3Nzg0MUQ4ODhFOEE1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzRGMDI5RUQyN0M4Mjg0NEY3MkMxMDk5OUUzRTc3 ODQxRDg4OEU4QTUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8xLzRGMDI5RUQyN0M4Mjg0 NEY3MkMxMDk5OUUzRTc3ODQxRDg4OEU4QTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuv/TUZ0Ymy44s dhjFxmCHpnyVvwaufygTJTFCoWstjWWpdTahzAKbLlD+UvB9AXhzhnqH6Fc9rjLr zCRGzSBFO3jXnBx9CEJ6NkXsu7NCougmCe8yLRsQcm+WnNLWty/qRdPZif/MvagI mv5cahwibtQY9rMZoCdqvqRiyqe5f0owr8JSd2EkeNuj3jVOiohYqWyVrju7wDQe l16+DVEZW50j2BLgChfjdZux+JPa7Kz/MzfMNtFQf1V7Zed0KFD1pNk6f0m6uVdN bTiMENY2chS5EVZSUbHobdmgIH4rAyhClYKcSZfn5YYfdBqJm0Q1heODJ7dNUxAG LAhZhZ6F -----END CERTIFICATE-----Generated at Sat May 16 04:53:46 2026 by rpki-client