$ rpki-client -vvvf rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft File: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft (raw, json) Hash identifier: MPE6Ruct0MrbvXQGieiuJrdMRnG4RqLcTlNbR6c4G/Y= Subject key identifier: 34:83:90:FD:68:D6:61:B2:F4:4B:64:79:74:2D:65:8F:01:6E:72:1C Authority key identifier: 21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 Certificate issuer: /CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Certificate serial: 2D7F0E8DDB6E8A0F3D5B27250F5882F5BEA89F65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft Manifest number: C7 Signing time: Sun 04 Oct 2026 07:14:27 +0000 Manifest this update: Sun 04 Oct 2026 07:09:27 +0000 Manifest next update: Mon 05 Oct 2026 07:20:27 +0000 Files and hashes: 1: 3130332e3131372e3133322e302f32332d3234203d3e2039363737.roa (hash: L4VMPfmAF+ujWD/W3Q/uT3gBZ3GdNZkDF1QTrHGw11I=) 2: 3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa (hash: AS3qH/RjBUke7M3rlCKwKKx7OXc4/iKqzu9OBdcpsSg=) 3: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl (hash: UBjxxZfnDbGGinm5ScnljBgdfudiD8RrPEuc/H2+Of8=) 4: 3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa (hash: yNF0rjdZhiThfjXcp9q9ny7hpelDoujpqo41tWTYbEo=) 5: 3130332e3131372e3133322e302f32332d3234203d3e203231383539.roa (hash: V7xrPLp5f+XdiNXnNwOKJbYVBx4iv5pqsU5W1y0I9ac=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 07:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7f:0e:8d:db:6e:8a:0f:3d:5b:27:25:0f:58:82:f5:be:a8:9f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Validity Not Before: Oct 4 07:09:27 2026 GMT Not After : Oct 5 07:20:27 2026 GMT Subject: CN=348390FD68D661B2F44B6479742D658F016E721C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:68:fd:ce:11:5a:55:75:48:d7:0c:d4:82: 8b:33:be:99:3e:81:79:ae:0b:07:2b:1d:9a:b0:ec: ff:c7:7f:fb:13:b2:ae:ac:f8:d1:3c:8d:70:1c:06: 4f:fd:45:32:be:71:e5:24:63:92:56:9f:7c:f1:39: 70:dd:d9:91:ae:80:d8:7b:11:18:18:e2:29:8e:f6: 97:62:7d:2c:4d:d2:26:20:30:c1:2e:1a:9d:64:bd: d4:c2:5c:9f:71:24:c6:db:23:b5:1b:e8:f2:4f:3e: 13:d2:af:89:a7:38:4d:ad:e0:1b:7e:25:bc:11:62: 01:b1:d0:67:10:84:06:fa:b9:31:8a:46:fb:b0:73: 64:25:c9:ff:5f:54:04:4d:0b:46:5c:db:50:e0:11: ca:93:d0:c8:a0:98:ec:80:0e:20:2b:15:8c:a1:b1: 25:8b:4e:93:95:3b:f9:ec:38:c4:e4:9e:b0:6a:14: 94:f6:74:8f:67:5f:03:ee:d1:5d:ce:5d:51:3e:9b: 85:13:c8:02:0e:7b:72:85:b3:5e:05:e1:e3:22:71: 3c:29:e7:03:a8:f0:6a:be:be:7b:23:d7:7b:bd:7f: 0c:4d:59:1b:81:bc:c9:6f:63:fa:7a:39:b9:5b:7a: c5:b6:fb:b3:fc:e9:b4:b2:7d:e4:e9:e6:dd:3d:5f: 35:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:83:90:FD:68:D6:61:B2:F4:4B:64:79:74:2D:65:8F:01:6E:72:1C X509v3 Authority Key Identifier: keyid:21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7d:37:9c:53:38:8a:39:ed:38:e4:8b:41:01:9a:0f:cb:96: 4a:be:2f:35:ac:93:15:9c:5d:5a:dd:fa:1e:4c:9d:ec:4a:52: 27:f2:4e:87:f5:a9:a7:d9:96:23:80:79:59:1f:3d:8c:40:a7: 37:d7:33:a9:ca:15:65:f6:45:43:dd:88:c8:03:c9:6b:3c:2e: cc:65:29:39:c5:1b:5c:9b:dc:12:31:cd:f6:2c:6f:b9:6d:9e: b0:dc:96:15:b6:4e:66:3d:56:4d:8a:cb:25:fe:21:c8:bf:13: af:5a:e7:47:9b:16:78:70:29:f0:ad:b2:c0:6a:53:93:d7:a9: ed:f4:f5:c8:00:01:d6:9c:01:36:33:d9:ae:d0:02:a3:1c:79: 1b:41:ff:03:ee:ad:f6:99:5b:a1:99:8f:77:db:14:c1:ab:d1: cf:8a:ef:4a:cc:55:91:2b:ae:ec:45:f8:00:56:b2:03:d1:a8: 31:64:ed:68:dd:6c:fd:b8:41:41:95:2a:dc:09:44:0b:23:72: 25:65:52:59:d7:1f:89:c1:93:c7:ad:f9:1e:52:d3:ae:0a:cf: 7d:70:23:da:68:a9:ad:24:a9:5c:12:32:07:43:fb:0b:77:56: d6:f8:72:d6:63:e1:94:ca:8d:f3:0b:c8:f8:e3:4d:6b:8d:4a: ed:f7:cf:62 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIULX8Ojdtuig89WyclD1iC9b6on2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQz RkNGQjVCMzAeFw0yNjEwMDQwNzA5MjdaFw0yNjEwMDUwNzIwMjdaMDMxMTAvBgNV BAMTKDM0ODM5MEZENjhENjYxQjJGNDRCNjQ3OTc0MkQ2NThGMDE2RTcyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUhmj9zhFaVXVI1wzUgoszvpk+ gXmuCwcrHZqw7P/Hf/sTsq6s+NE8jXAcBk/9RTK+ceUkY5JWn3zxOXDd2ZGugNh7 ERgY4imO9pdifSxN0iYgMMEuGp1kvdTCXJ9xJMbbI7Ub6PJPPhPSr4mnOE2t4Bt+ JbwRYgGx0GcQhAb6uTGKRvuwc2Qlyf9fVARNC0Zc21DgEcqT0MigmOyADiArFYyh sSWLTpOVO/nsOMTknrBqFJT2dI9nXwPu0V3OXVE+m4UTyAIOe3KFs14F4eMicTwp 5wOo8Gq+vnsj13u9fwxNWRuBvMlvY/p6OblbesW2+7P86bSyfeTp5t09XzU5AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUNIOQ/WjWYbL0S2R5dC1ljwFuchwwHwYDVR0j BBgwFoAUIbYtYOGrU4A7IpzPg8F5/T/PtbMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAv MjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yMUI2MkQ2MEUxQUI1MzgwM0IyMjlDQ0Y4M0MxNzlG RDNGQ0ZCNUIzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAvMjFCNjJENjBFMUFCNTM4MDNC MjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGB9N5xTOIo57Tjki0EB mg/Llkq+LzWskxWcXVrd+h5MnexKUifyTof1qafZliOAeVkfPYxApzfXM6nKFWX2 RUPdiMgDyWs8LsxlKTnFG1yb3BIxzfYsb7ltnrDclhW2TmY9Vk2KyyX+Ici/E69a 50ebFnhwKfCtssBqU5PXqe309cgAAdacATYz2a7QAqMceRtB/wPurfaZW6GZj3fb FMGr0c+K70rMVZErruxF+ABWsgPRqDFk7WjdbP24QUGVKtwJRAsjciVlUlnXH4nB k8et+R5S064Kz31wI9poqa0kqVwSMgdD+wt3Vtb4ctZj4ZTKjfMLyPjjTWuNSu33 z2I= -----END CERTIFICATE-----Generated at Sun Oct 4 17:37:44 2026 by rpki-client