$ rpki-client -vvvf rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft File: AAED3548B647C9B95804411BAB19736F229C5A54.mft (raw, json) Hash identifier: 9vNPpaZDaEalhJ6RGP0tlsofT9sh+ylpLHLXtlPYFLQ= Subject key identifier: 8F:00:CF:1D:56:70:55:2C:08:29:59:BA:2B:57:06:BB:D2:6C:8A:65 Authority key identifier: AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54 Certificate issuer: /CN=AAED3548B647C9B95804411BAB19736F229C5A54 Certificate serial: 41CC6BB9065B6DE90BC5B41323DE7660B50A55E7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft Manifest number: C1 Signing time: Thu 01 Oct 2026 09:50:07 +0000 Manifest this update: Thu 01 Oct 2026 09:45:07 +0000 Manifest next update: Fri 02 Oct 2026 12:36:07 +0000 Files and hashes: 1: 3231302e3234342e3139322e302f31392d3230203d3e2037343738.roa (hash: W335AiMtYbmtyFJ/6qInNtRm+Ld5a3fuzl0Q/nTZ7Xs=) 2: 3231312e37362e302e302f31392d3139203d3e2037343738.roa (hash: kS4UeB9bSZUO5PaEgviQEGNKSk9y0LCLxXLeAUQgMz0=) 3: AAED3548B647C9B95804411BAB19736F229C5A54.crl (hash: 3r1VazsHav3XXFPCavO0qTF+Cf8W20zPCQRgeVJb2y4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 12:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:cc:6b:b9:06:5b:6d:e9:0b:c5:b4:13:23:de:76:60:b5:0a:55:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAED3548B647C9B95804411BAB19736F229C5A54 Validity Not Before: Oct 1 09:45:07 2026 GMT Not After : Oct 2 12:36:07 2026 GMT Subject: CN=8F00CF1D5670552C082959BA2B5706BBD26C8A65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c9:50:a7:c2:36:9f:c9:da:db:57:39:8a:c0: e5:c4:d2:f4:a8:65:fc:05:d2:b9:19:91:05:e4:11: be:3f:ee:c7:ff:e6:1f:bb:1b:be:2f:68:bc:ca:0a: fa:be:95:9c:3e:3b:48:bf:e1:fe:b3:36:4f:36:97: 37:b7:1e:65:7d:ef:3f:7a:66:7b:67:c7:03:b4:d8: 15:af:2b:65:24:54:48:2a:d7:58:9f:bd:21:0c:e3: 08:58:97:f3:76:32:c9:89:96:2a:e8:45:f6:10:f4: 4b:f1:f0:33:0f:01:0e:0c:c5:81:1a:af:4a:78:40: 39:da:cb:1a:22:3c:9b:1c:b4:87:00:9f:82:cf:49: 3f:48:da:5c:25:ac:a3:1b:88:fc:d5:0f:13:6d:53: 86:f6:be:b0:70:e1:26:3b:5a:07:37:d5:57:dd:1a: ab:a4:55:0c:35:06:dc:2f:be:97:9c:b0:5b:a5:d5: 37:bc:49:1f:61:e5:67:81:a4:4c:9c:dc:fb:55:28: a4:0c:91:0f:ec:fe:fd:8d:fe:a0:a1:8b:84:7f:5b: 26:e6:b7:a3:c4:e1:bd:ce:dc:dc:52:15:f5:dc:e8: 82:fe:1b:ab:cb:b5:74:e2:f1:f2:9b:85:f1:0d:38: c5:db:0b:ff:67:6a:cb:69:4a:9c:25:40:40:3b:92: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:00:CF:1D:56:70:55:2C:08:29:59:BA:2B:57:06:BB:D2:6C:8A:65 X509v3 Authority Key Identifier: keyid:AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:33:e4:39:67:5b:88:05:35:15:0b:5d:35:95:f6:9b:c7:a6: b7:2c:15:95:64:10:ec:7a:a4:d0:c5:99:96:a7:7b:fc:25:48: fb:a1:98:d0:5e:05:c3:18:3c:98:6c:18:22:4e:bf:52:35:53: ef:13:3d:85:7b:0d:b5:64:7c:fb:ef:f3:12:3b:aa:4d:8a:52: 23:08:72:d0:1d:c0:83:84:cc:d8:70:67:1e:fa:fb:9b:ca:05: d1:e1:8d:fa:d4:0f:98:f0:78:3f:33:57:f7:bd:fc:a2:a5:3a: 54:c6:80:e5:54:f4:6e:cf:6b:99:ec:d4:51:da:01:43:5f:01: b4:47:f4:78:93:5e:7e:e9:9b:cb:e6:df:81:2c:04:06:cb:c6: 8c:a3:8e:10:9a:f1:fb:b9:83:95:6e:af:0f:03:2b:02:01:57: 10:fb:7e:47:ab:ad:55:b5:7d:ae:72:3b:25:44:4a:67:52:28: 1a:e9:80:e0:96:2b:41:ce:0a:83:59:af:fa:67:36:f5:a9:ad: 0c:a0:cd:5b:16:c5:2d:bf:3b:f5:70:89:03:96:09:4d:a8:60: a2:ac:4a:e4:ec:9d:e1:64:d5:59:19:af:3c:94:9a:27:70:ee: c5:95:e4:52:5c:60:d2:4e:e9:4b:d4:04:a7:12:c0:29:27:c4: 43:c1:8c:2c -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUQcxruQZbbekLxbQTI952YLUKVecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYy MjlDNUE1NDAeFw0yNjEwMDEwOTQ1MDdaFw0yNjEwMDIxMjM2MDdaMDMxMTAvBgNV BAMTKDhGMDBDRjFENTY3MDU1MkMwODI5NTlCQTJCNTcwNkJCRDI2QzhBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzyVCnwjafydrbVzmKwOXE0vSo ZfwF0rkZkQXkEb4/7sf/5h+7G74vaLzKCvq+lZw+O0i/4f6zNk82lze3HmV97z96 ZntnxwO02BWvK2UkVEgq11ifvSEM4whYl/N2MsmJliroRfYQ9Evx8DMPAQ4MxYEa r0p4QDnayxoiPJsctIcAn4LPST9I2lwlrKMbiPzVDxNtU4b2vrBw4SY7Wgc31Vfd GqukVQw1BtwvvpecsFul1Te8SR9h5WeBpEyc3PtVKKQMkQ/s/v2N/qChi4R/Wybm t6PE4b3O3NxSFfXc6IL+G6vLtXTi8fKbhfENOMXbC/9nastpSpwlQEA7ki1lAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUjwDPHVZwVSwIKVm6K1cGu9JsimUwHwYDVR0j BBgwFoAUqu01SLZHyblYBEEbqxlzbyKcWlQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAv QUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9BQUVEMzU0OEI2NDdDOUI5NTgwNDQxMUJBQjE5NzM2 RjIyOUM1QTU0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAvQUFFRDM1NDhCNjQ3QzlCOTU4 MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHkz5DlnW4gFNRULXTWV 9pvHprcsFZVkEOx6pNDFmZane/wlSPuhmNBeBcMYPJhsGCJOv1I1U+8TPYV7DbVk fPvv8xI7qk2KUiMIctAdwIOEzNhwZx76+5vKBdHhjfrUD5jweD8zV/e9/KKlOlTG gOVU9G7Pa5ns1FHaAUNfAbRH9HiTXn7pm8vm34EsBAbLxoyjjhCa8fu5g5Vurw8D KwIBVxD7fkerrVW1fa5yOyVESmdSKBrpgOCWK0HOCoNZr/pnNvWprQygzVsWxS2/ O/VwiQOWCU2oYKKsSuTsneFk1VkZrzyUmidw7sWV5FJcYNJO6UvUBKcSwCknxEPB jCw= -----END CERTIFICATE-----Generated at Fri Oct 2 05:25:50 2026 by rpki-client