$ rpki-client -vvf rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft File: C4FE0149FC774090A5B6304E8968380A1F1B0426.mft (raw, json) Hash identifier: 10pavFVLkHJHBDc7HXVka1lzhfCKPCTx6+CtiV+p4jM= Subject key identifier: 3E:7F:F6:31:44:B1:D0:28:FC:62:C1:79:9E:A1:8B:2B:C8:08:A3:6C Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 Certificate issuer: /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Certificate serial: 340DF6EE916D11F8DE119E6C68EC1F68C7112496 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft Manifest number: 05 Signing time: Wed 13 May 2026 05:07:01 +0000 Manifest this update: Wed 13 May 2026 05:02:01 +0000 Manifest next update: Thu 14 May 2026 06:11:01 +0000 Files and hashes: 1: 3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa (hash: RmocfnFYGeRr/aQ5L4jWeV+BcjwmA5Wox7nbUvuA0XQ=) 2: 323430373a643234303a3a2f33322d3438203d3e203138343238.roa (hash: rBUhV/xvRZeEelrs2jyNJogNIGW8G/cMNY2z96YxdgM=) 3: C4FE0149FC774090A5B6304E8968380A1F1B0426.crl (hash: ZQZmPmxOX82RG9TMjdhkqGsCvNzgQPvbq4HbmAIR2wI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0d:f6:ee:91:6d:11:f8:de:11:9e:6c:68:ec:1f:68:c7:11:24:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Validity Not Before: May 13 05:02:01 2026 GMT Not After : May 14 06:11:01 2026 GMT Subject: CN=3E7FF63144B1D028FC62C1799EA18B2BC808A36C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:a2:14:15:2a:d7:cf:2a:4e:41:be:f8:37: f0:a5:10:b5:1f:f0:dc:99:99:3b:04:f6:89:3f:2a: 60:fd:ca:81:96:0e:4c:e8:8c:ae:ff:54:11:a3:a7: 92:26:c5:2c:75:d6:5b:03:df:dc:e9:58:3d:aa:2e: b6:01:02:58:ef:bb:d5:6e:6f:a4:36:bc:bb:71:e7: c2:e7:c7:94:8a:63:f9:1b:4b:bf:68:30:0a:6b:54: a8:20:84:5e:92:aa:fb:e5:49:7a:3d:02:19:2c:02: a2:10:1f:86:83:24:e0:6e:43:1d:1b:30:d8:26:09: a9:64:17:49:59:cb:b7:e2:3d:8f:71:c9:25:f0:0f: ae:6a:e2:ba:c7:36:d6:4e:61:b1:1a:bb:42:cf:03: 7b:c8:d4:d0:38:cb:62:7a:bb:d1:2e:11:a9:53:07: 08:9a:90:66:41:54:d7:5a:76:62:89:f3:a1:11:ae: d4:08:29:0a:45:f8:01:d2:db:e6:2b:d9:61:c2:de: d8:36:fd:95:55:07:c7:8b:e5:1e:cc:51:8b:63:9a: 68:62:a3:e0:1d:51:d6:5a:f0:83:de:14:44:30:5f: 72:02:57:8c:c2:20:96:f3:72:d5:70:63:01:05:ff: 68:a0:1c:50:53:fa:0f:dc:a4:df:b8:41:eb:5b:61: a6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7F:F6:31:44:B1:D0:28:FC:62:C1:79:9E:A1:8B:2B:C8:08:A3:6C X509v3 Authority Key Identifier: keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f5:14:6b:f3:94:a2:eb:dd:dc:71:9a:55:02:d6:12:88:d0: 1d:f8:30:8c:96:ea:e8:4b:43:e6:00:ac:e8:e4:da:86:02:f0: b6:6b:4d:6a:b8:e2:86:b7:4c:1f:6c:13:1a:6d:04:61:1c:30: 15:c4:6c:24:4d:23:0d:a9:0f:2c:de:4d:e3:9c:68:b8:06:00: 6e:3f:4b:8a:7e:82:26:89:40:5e:08:50:d2:4b:c8:8d:a9:5b: 1e:af:07:9e:08:f9:94:d3:8e:01:11:e5:a8:4c:b6:61:dc:b0: 6e:97:8e:b2:b0:f8:09:69:4e:f8:eb:91:ec:1e:ad:aa:27:14: 50:6c:99:ab:8c:1c:46:52:5f:60:01:c7:07:98:45:74:5a:7b: fe:32:b0:7d:a8:f2:a6:86:c0:2c:4f:67:08:62:6b:93:be:a6: c6:41:85:0e:98:f4:4d:c7:a4:11:00:8a:3e:e0:1e:2b:76:ff: 72:ea:1a:97:56:b1:32:c2:8e:01:16:13:a5:86:a3:ba:4f:ec: a8:37:b0:70:af:6a:7a:80:4b:c5:12:71:d8:87:54:10:e7:74: 63:1a:1a:df:c8:64:72:b3:4b:ce:77:d2:7c:04:02:b6:0e:58: 08:19:2b:4e:c8:0d:74:f9:5b:84:10:49:3a:04:1c:5e:8c:cb: 7e:f4:69:15 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUNA327pFtEfjeEZ5saOwfaMcRJJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGRTAxNDlGQzc3NDA5MEE1QjYzMDRFODk2ODM4MEEx RjFCMDQyNjAeFw0yNjA1MTMwNTAyMDFaFw0yNjA1MTQwNjExMDFaMDMxMTAvBgNV BAMTKDNFN0ZGNjMxNDRCMUQwMjhGQzYyQzE3OTlFQTE4QjJCQzgwOEEzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6taIUFSrXzypOQb74N/ClELUf 8NyZmTsE9ok/KmD9yoGWDkzojK7/VBGjp5ImxSx11lsD39zpWD2qLrYBAljvu9Vu b6Q2vLtx58Lnx5SKY/kbS79oMAprVKgghF6SqvvlSXo9AhksAqIQH4aDJOBuQx0b MNgmCalkF0lZy7fiPY9xySXwD65q4rrHNtZOYbEau0LPA3vI1NA4y2J6u9EuEalT BwiakGZBVNdadmKJ86ERrtQIKQpF+AHS2+Yr2WHC3tg2/ZVVB8eL5R7MUYtjmmhi o+AdUdZa8IPeFEQwX3ICV4zCIJbzctVwYwEF/2igHFBT+g/cpN+4QetbYaZfAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUPn/2MUSx0Cj8YsF5nqGLK8gIo2wwHwYDVR0j BBgwFoAUxP4BSfx3QJCltjBOiWg4Ch8bBCYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUVSQ1lD QVQvMC9DNEZFMDE0OUZDNzc0MDkwQTVCNjMwNEU4OTY4MzgwQTFGMUIwNDI2LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0M0RkUwMTQ5RkM3NzQwOTBBNUI2MzA0RTg5 NjgzODBBMUYxQjA0MjYuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NRVJDWUNBVC8wL0M0RkUwMTQ5 RkM3NzQwOTBBNUI2MzA0RTg5NjgzODBBMUYxQjA0MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAB9RRr 85Si693ccZpVAtYSiNAd+DCMluroS0PmAKzo5NqGAvC2a01quOKGt0wfbBMabQRh HDAVxGwkTSMNqQ8s3k3jnGi4BgBuP0uKfoImiUBeCFDSS8iNqVserweeCPmU044B EeWoTLZh3LBul46ysPgJaU7465HsHq2qJxRQbJmrjBxGUl9gAccHmEV0Wnv+MrB9 qPKmhsAsT2cIYmuTvqbGQYUOmPRNx6QRAIo+4B4rdv9y6hqXVrEywo4BFhOlhqO6 T+yoN7Bwr2p6gEvFEnHYh1QQ53RjGhrfyGRys0vOd9J8BAK2DlgIGStOyA10+VuE EEk6BBxejMt+9GkV -----END CERTIFICATE-----Generated at Wed May 13 20:33:45 2026 by rpki-client