$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft File: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft (raw, json) Hash identifier: eEpTh+xs0m43p+j4HcRA+GpQiGxT0/jDNbPjuZYY9LA= Subject key identifier: D0:77:13:49:B1:DB:91:44:8C:F0:C4:C6:E6:65:2F:FD:C5:C2:81:90 Authority key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25 Certificate issuer: /CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25 Certificate serial: 416D6211C83183A93F9012EF33F63B30CEDB549B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft Manifest number: 09 Signing time: Fri 15 May 2026 14:52:33 +0000 Manifest this update: Fri 15 May 2026 14:47:33 +0000 Manifest next update: Sat 16 May 2026 16:15:33 +0000 Files and hashes: 1: 3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa (hash: sgvshajZGUxIlcU63EqLfebE4wegi3sti647jzuqblg=) 2: 3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa (hash: 5vM1t1el5nYZJRxVKo6mmnrOcGRvisTj4oU5YWdMajw=) 3: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl (hash: JaMWVpX0WNj3Z/W95wSA3VCXPrFN8l41TLPgmDLlOFw=) 4: 3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa (hash: xeGUxts4a0IBuIHgiewir0gp38fQafeLm2d3Cwvi9SE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 16:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6d:62:11:c8:31:83:a9:3f:90:12:ef:33:f6:3b:30:ce:db:54:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25 Validity Not Before: May 15 14:47:33 2026 GMT Not After : May 16 16:15:33 2026 GMT Subject: CN=D0771349B1DB91448CF0C4C6E6652FFDC5C28190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:28:fb:c1:f3:b5:16:08:a9:49:41:1f:b5: 95:86:47:51:7d:3a:43:c1:00:a6:ea:e5:d9:9a:b9: 1f:78:4a:1f:23:c0:78:6f:9b:ca:74:8f:7e:9c:b5: 44:d3:60:46:ad:39:28:1e:88:06:71:27:bc:1f:f2: 4d:f3:30:c4:a6:8a:26:25:e9:48:10:65:d6:6e:06: f2:58:b1:30:0c:54:c9:37:c2:06:0b:64:e2:8d:90: 97:6a:84:01:ed:75:f6:39:dd:ef:1b:32:eb:ce:e2: 78:41:d9:ae:20:09:e7:30:21:bc:7b:57:dc:15:35: af:44:e8:54:81:65:90:01:7b:4c:3d:9b:f9:30:e8: 27:ec:fe:61:50:8b:61:00:6e:99:87:a8:f2:60:a4: a4:16:3c:a6:50:57:62:a9:78:35:99:3b:49:7a:be: e0:c9:46:0c:91:e3:08:d3:27:6e:1d:1e:88:5b:54: de:88:fc:f5:71:5e:ec:60:ce:cb:b4:e8:20:5b:05: 99:2d:b6:ce:e2:4c:ba:84:40:ce:c9:07:98:c0:a1: ae:95:9a:1e:14:46:37:de:43:f3:7a:20:9a:fa:a0: 19:56:49:31:14:44:04:76:8d:20:b1:4e:67:e0:cf: d9:3f:20:f2:ea:e2:56:bd:ea:9b:5b:50:f6:4c:c3: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:77:13:49:B1:DB:91:44:8C:F0:C4:C6:E6:65:2F:FD:C5:C2:81:90 X509v3 Authority Key Identifier: keyid:D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4c:93:72:52:fe:29:73:51:a5:a5:ea:32:ba:d0:25:9c:43: ba:df:74:9e:65:43:db:a7:40:e5:0f:1d:bf:ea:8e:16:87:d4: 62:77:c2:a6:78:1c:ee:95:00:21:ab:c0:1b:36:e4:19:1f:d4: 96:f1:b5:37:76:b2:eb:dd:36:1d:58:93:68:72:6a:d3:13:b0: 09:cd:25:19:a8:67:13:77:a9:05:40:cb:66:84:17:ba:fc:91: c6:47:8d:5c:f1:cb:ec:36:af:b3:57:ab:1a:54:47:b0:03:7e: 7b:c0:34:2a:83:e0:32:c3:1e:1d:16:d8:8e:bb:f7:63:2e:40: 00:fc:a0:ea:96:b3:45:4c:14:6e:33:c3:2a:54:6e:e9:15:5c: c5:82:8a:ef:26:f3:e4:bf:4d:39:22:57:4b:44:eb:5c:ae:51: 21:3d:a3:eb:9f:a5:54:93:75:1d:e0:f5:f0:49:39:8c:a8:bf: e0:19:94:9e:ca:fd:8c:c1:d5:21:0a:f2:49:54:5a:74:18:04: 91:d7:8d:79:e2:e3:15:5a:c1:ab:aa:39:1d:8a:6e:87:68:75: 9a:5f:63:78:c8:01:3b:7f:1f:6d:b8:60:b6:05:56:40:16:b0: 04:f3:1a:de:a9:56:63:1e:90:18:d8:a1:05:26:5a:64:c9:f4: c5:8b:c6:b4 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUQW1iEcgxg6k/kBLvM/Y7MM7bVJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkxRjZCMTdBNURGRTNCMjMzNkQxQUUzRTIzM0QxMEIy RDYyQUEyNTAeFw0yNjA1MTUxNDQ3MzNaFw0yNjA1MTYxNjE1MzNaMDMxMTAvBgNV BAMTKEQwNzcxMzQ5QjFEQjkxNDQ4Q0YwQzRDNkU2NjUyRkZEQzVDMjgxOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOCj7wfO1FgipSUEftZWGR1F9 OkPBAKbq5dmauR94Sh8jwHhvm8p0j36ctUTTYEatOSgeiAZxJ7wf8k3zMMSmiiYl 6UgQZdZuBvJYsTAMVMk3wgYLZOKNkJdqhAHtdfY53e8bMuvO4nhB2a4gCecwIbx7 V9wVNa9E6FSBZZABe0w9m/kw6Cfs/mFQi2EAbpmHqPJgpKQWPKZQV2KpeDWZO0l6 vuDJRgyR4wjTJ24dHohbVN6I/PVxXuxgzsu06CBbBZktts7iTLqEQM7JB5jAoa6V mh4URjfeQ/N6IJr6oBlWSTEURAR2jSCxTmfgz9k/IPLq4la96ptbUPZMw3irAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU0HcTSbHbkUSM8MTG5mUv/cXCgZAwHwYDVR0j BBgwFoAU2R9rF6Xf47IzbRrj4jPRCy1iqiUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJ LzEvRDkxRjZCMTdBNURGRTNCMjMzNkQxQUUzRTIzM0QxMEIyRDYyQUEyNS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC9EOTFGNkIxN0E1REZFM0IyMzM2RDFBRTNFMjMz RDEwQjJENjJBQTI1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJLzEvRDkxRjZCMTdBNURG RTNCMjMzNkQxQUUzRTIzM0QxMEIyRDYyQUEyNS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFZMk3JS/ilz UaWl6jK60CWcQ7rfdJ5lQ9unQOUPHb/qjhaH1GJ3wqZ4HO6VACGrwBs25Bkf1Jbx tTd2suvdNh1Yk2hyatMTsAnNJRmoZxN3qQVAy2aEF7r8kcZHjVzxy+w2r7NXqxpU R7ADfnvANCqD4DLDHh0W2I6792MuQAD8oOqWs0VMFG4zwypUbukVXMWCiu8m8+S/ TTkiV0tE61yuUSE9o+ufpVSTdR3g9fBJOYyov+AZlJ7K/YzB1SEK8klUWnQYBJHX jXni4xVawauqOR2KbododZpfY3jIATt/H224YLYFVkAWsATzGt6pVmMekBjYoQUm WmTJ9MWLxrQ= -----END CERTIFICATE-----Generated at Sat May 16 04:53:18 2026 by rpki-client