$ rpki-client -vvvf rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft File: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft (raw, json) Hash identifier: 57q1M9mbS6gE7978YrwRIq92lHtAT8bE14dv995WXto= Subject key identifier: 8A:45:A4:FF:D3:FB:BF:5A:A4:6C:99:26:8F:46:17:CF:76:17:89:40 Authority key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25 Certificate issuer: /CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25 Certificate serial: 5C4083776F66AD8647F168BBFF10399A20753988 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft Manifest number: C7 Signing time: Mon 05 Oct 2026 17:04:42 +0000 Manifest this update: Mon 05 Oct 2026 16:59:42 +0000 Manifest next update: Tue 06 Oct 2026 19:08:42 +0000 Files and hashes: 1: 3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa (hash: 5vM1t1el5nYZJRxVKo6mmnrOcGRvisTj4oU5YWdMajw=) 2: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl (hash: ezdNvRXnamMtQWDlna/KEcqezlKR+sR1nLqcpH1XuGg=) 3: 3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa (hash: xeGUxts4a0IBuIHgiewir0gp38fQafeLm2d3Cwvi9SE=) 4: 3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa (hash: sgvshajZGUxIlcU63EqLfebE4wegi3sti647jzuqblg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 10:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:40:83:77:6f:66:ad:86:47:f1:68:bb:ff:10:39:9a:20:75:39:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25 Validity Not Before: Oct 5 16:59:42 2026 GMT Not After : Oct 6 19:08:42 2026 GMT Subject: CN=8A45A4FFD3FBBF5AA46C99268F4617CF76178940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:61:d5:c8:3d:95:79:bd:98:2a:20:52:30: 58:bd:aa:6d:ea:f5:41:93:41:20:78:1a:af:53:cf: 4b:67:a2:8f:b5:45:c1:12:2c:f3:6f:fb:9b:3c:0a: cf:44:fe:fe:a4:de:ba:56:b9:af:73:56:73:ca:94: f7:03:b2:13:d3:20:44:a1:20:d5:da:7e:4d:89:c8: ef:db:4e:12:76:8a:65:b1:8d:e2:cf:f2:ab:40:3d: da:bd:fb:04:5a:c2:94:3d:c7:9d:61:b0:ea:b5:e9: 04:41:f7:aa:1b:9c:24:3f:01:c0:71:cf:22:a9:99: fb:64:06:50:bb:5f:c6:bc:d7:64:b1:d0:f8:9d:3d: 7d:45:68:9d:8c:55:40:fa:3d:02:e6:cf:83:fb:d0: 5f:55:e1:f8:de:bc:a7:2d:c7:a4:b0:2f:58:67:9e: 8e:61:ff:60:2b:ad:be:eb:02:02:f8:a2:1c:35:02: 4c:55:14:7a:8a:bb:94:09:2b:f4:59:ff:4d:bb:a1: 1d:a0:95:66:f2:5e:df:29:3b:2d:8a:3f:a8:f2:80: ab:ad:8c:7b:5e:dc:e3:4f:f2:1b:b3:3c:4f:9d:aa: 80:23:b3:c2:23:7a:48:df:e2:32:c8:e8:62:95:71: 83:40:99:ce:6b:97:4b:5e:d4:9c:ed:b0:f5:42:5a: fc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:45:A4:FF:D3:FB:BF:5A:A4:6C:99:26:8F:46:17:CF:76:17:89:40 X509v3 Authority Key Identifier: keyid:D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:80:2b:b9:aa:d4:ea:b8:5d:05:09:9a:6f:46:ce:38:43:3a: 2e:d3:83:29:5c:cf:f8:06:81:00:17:8f:87:e9:c9:7d:9e:89: 3c:ea:bc:ea:b4:73:e5:e4:9d:7a:d8:43:62:aa:33:b9:9b:b6: e6:8e:5f:8c:1b:6e:82:2c:14:3d:93:16:74:b0:81:6f:aa:26: 17:2e:e2:b6:f0:b7:07:c6:c1:81:c1:ba:f5:5e:d1:2c:58:7d: 48:23:ab:57:c7:ab:34:e6:ff:c6:b5:5e:b1:5b:7e:ad:31:2f: 86:88:c8:da:03:ef:24:38:33:4d:4b:62:6e:59:df:8c:62:72: 01:65:14:b6:6f:3e:3b:64:9e:52:69:70:a1:6f:8f:cf:01:14: 23:65:93:0e:23:20:c1:71:64:b1:ed:42:3d:6c:e1:df:fb:08: 11:4e:31:0d:93:73:b8:21:13:f0:c3:fa:d9:5d:db:87:e9:2c: 67:65:0c:85:61:b0:a5:8a:4f:cb:52:ad:af:3a:2a:0d:c0:8e: 60:0d:36:d2:57:82:94:44:50:a9:95:48:e2:70:38:20:15:03: d2:1b:65:49:19:e0:35:1e:d7:6f:4c:d2:32:63:0b:4f:63:e0: 0b:58:ef:67:e4:a3:bd:74:52:77:2c:cc:c0:65:96:3f:65:87: 1c:bf:ef:bc -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUXECDd29mrYZH8Wi7/xA5miB1OYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkxRjZCMTdBNURGRTNCMjMzNkQxQUUzRTIzM0QxMEIy RDYyQUEyNTAeFw0yNjEwMDUxNjU5NDJaFw0yNjEwMDYxOTA4NDJaMDMxMTAvBgNV BAMTKDhBNDVBNEZGRDNGQkJGNUFBNDZDOTkyNjhGNDYxN0NGNzYxNzg5NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80GHVyD2Veb2YKiBSMFi9qm3q 9UGTQSB4Gq9Tz0tnoo+1RcESLPNv+5s8Cs9E/v6k3rpWua9zVnPKlPcDshPTIESh INXafk2JyO/bThJ2imWxjeLP8qtAPdq9+wRawpQ9x51hsOq16QRB96obnCQ/AcBx zyKpmftkBlC7X8a812Sx0PidPX1FaJ2MVUD6PQLmz4P70F9V4fjevKctx6SwL1hn no5h/2Arrb7rAgL4ohw1AkxVFHqKu5QJK/RZ/027oR2glWbyXt8pOy2KP6jygKut jHte3ONP8huzPE+dqoAjs8Ijekjf4jLI6GKVcYNAmc5rl0te1JztsPVCWvzrAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUikWk/9P7v1qkbJkmj0YXz3YXiUAwHwYDVR0j BBgwFoAU2R9rF6Xf47IzbRrj4jPRCy1iqiUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJ LzEvRDkxRjZCMTdBNURGRTNCMjMzNkQxQUUzRTIzM0QxMEIyRDYyQUEyNS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC9EOTFGNkIxN0E1REZFM0IyMzM2RDFBRTNFMjMz RDEwQjJENjJBQTI1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1hJLzEvRDkxRjZCMTdBNURG RTNCMjMzNkQxQUUzRTIzM0QxMEIyRDYyQUEyNS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA2AK7mq1Oq4 XQUJmm9GzjhDOi7Tgylcz/gGgQAXj4fpyX2eiTzqvOq0c+XknXrYQ2KqM7mbtuaO X4wbboIsFD2TFnSwgW+qJhcu4rbwtwfGwYHBuvVe0SxYfUgjq1fHqzTm/8a1XrFb fq0xL4aIyNoD7yQ4M01LYm5Z34xicgFlFLZvPjtknlJpcKFvj88BFCNlkw4jIMFx ZLHtQj1s4d/7CBFOMQ2Tc7ghE/DD+tld24fpLGdlDIVhsKWKT8tSra86Kg3AjmAN NtJXgpREUKmVSOJwOCAVA9IbZUkZ4DUe129M0jJjC09j4AtY72fko710UncszMBl lj9lhxy/77w= -----END CERTIFICATE-----Generated at Tue Oct 6 01:26:52 2026 by rpki-client