$ rpki-client -vvvf rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft File: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft (raw, json) Hash identifier: 3+ulnQRi/KN3+FxeJpb36ULCbeYd8X/tpHcF35z+DO4= Subject key identifier: 42:AC:84:DB:F0:95:89:EE:5B:6D:3E:DD:33:8A:A3:52:BC:B1:14:FB Authority key identifier: 5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E Certificate issuer: /CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Certificate serial: 1C7F1DCBFD7DCB9CA056A62526B5E39542F1539B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft Manifest number: C6 Signing time: Sat 03 Oct 2026 01:01:04 +0000 Manifest this update: Sat 03 Oct 2026 00:56:04 +0000 Manifest next update: Sun 04 Oct 2026 04:06:04 +0000 Files and hashes: 1: 323430333a623334303a3a2f33322d3332203d3e2039393232.roa (hash: gstqBh9leADrly9mEk8JDvYH97tC5t4YGpfgybnlAak=) 2: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl (hash: 7QxAWHSEPGi4SZkKdxC8pjcfKJoqbRqSzNP0Ch/mxtU=) 3: 3130332e3133302e34382e302f32322d3234203d3e2039393232.roa (hash: aCIxecjNLFEVzEOiCgmZ0K9yJGY1pe87ewnv5AFzkXs=) 4: 323430333a623334303a3a2f33322d3332203d3e2037343832.roa (hash: hiAMshIFeOvfI56eDRx+E/hRaz9fkWvi1Lc3t0AuAEM=) 5: 3130332e3133302e34382e302f32322d3234203d3e2037343832.roa (hash: 1XWO79v70d0DECH7Xj/kPutEjOsPSVEabfarX+KunFQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7f:1d:cb:fd:7d:cb:9c:a0:56:a6:25:26:b5:e3:95:42:f1:53:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Validity Not Before: Oct 3 00:56:04 2026 GMT Not After : Oct 4 04:06:04 2026 GMT Subject: CN=42AC84DBF09589EE5B6D3EDD338AA352BCB114FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:02:cb:c6:d8:83:66:a4:ff:1a:ab:8f:f8: 27:a0:fe:e5:84:16:98:2a:02:82:15:12:e3:4a:fb: 50:3a:1a:52:8f:8f:2c:58:3a:7c:a0:c7:a6:da:4e: 59:4b:2d:9c:e3:61:72:5c:4f:fe:cf:d3:bb:16:1a: e7:79:59:1c:2e:e0:8e:25:11:c9:31:40:4a:07:59: 4e:14:04:6f:9d:c5:b5:17:86:f7:73:54:60:86:4b: 65:08:4a:5f:2f:e6:91:f3:25:9f:15:c0:68:c2:d4: cd:41:6d:e5:83:c0:37:3e:a1:67:77:e8:75:eb:9e: 8d:a7:28:d8:14:34:3f:27:2d:e4:60:5a:a2:81:ef: b1:c2:92:ad:8f:6d:dd:d5:21:55:b1:dc:26:54:77: 9a:43:fd:e2:2a:18:9e:48:f6:e0:55:8b:06:26:57: 58:35:07:b7:44:52:39:91:a2:22:ee:16:5c:97:18: 58:97:a0:27:3a:4d:06:01:64:cc:83:20:aa:19:45: 6b:5e:b4:a2:90:d2:eb:61:bc:2e:c8:8a:41:73:89: a0:f1:82:87:94:0c:1b:a2:47:55:11:65:07:f6:f2: 60:7f:59:6e:17:12:c8:86:f5:81:68:a6:7d:09:3d: 49:4d:ef:8e:7d:cd:d4:da:82:ba:53:e0:56:31:ab: dc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AC:84:DB:F0:95:89:EE:5B:6D:3E:DD:33:8A:A3:52:BC:B1:14:FB X509v3 Authority Key Identifier: keyid:5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:ba:68:ab:79:d4:09:64:d7:4d:e3:71:0c:28:f1:87:e1:35: 74:01:97:eb:01:7c:16:27:57:5c:2c:2d:f4:de:e4:e2:e8:8b: ac:4a:9e:09:76:85:63:54:0d:87:d5:1f:10:cc:ba:3d:8e:13: 7d:c1:14:e5:fe:59:d6:5d:58:5f:a9:6f:58:b9:76:ec:3e:00: 4f:66:95:95:35:c0:3c:80:f7:8e:b4:ce:7c:ee:6a:61:58:14: a3:46:43:89:ff:ff:40:89:f9:f4:24:8b:90:d4:76:76:7b:99: 64:80:c8:cd:0a:1e:12:25:55:b9:6c:f1:97:02:13:9d:ad:74: 74:e6:d2:bc:0b:a7:7b:c2:bc:b7:f9:96:07:9f:6a:e6:d7:05: 92:1e:f9:d2:7f:10:24:59:9a:50:19:5e:df:c2:48:43:86:41: cf:47:a8:29:5f:bf:96:d8:47:11:00:39:3d:f1:98:49:65:86: 8b:e6:9c:84:40:72:6c:4f:79:24:d2:fd:94:69:f2:e4:ce:49: 0a:df:a0:91:ea:73:a4:5e:e8:f7:e9:49:ec:a2:eb:ae:7a:11: 0d:3c:31:ac:39:43:4d:f1:5b:5f:46:dc:a2:83:13:3f:66:07: 26:64:f8:29:62:37:57:4f:6b:3b:4c:84:39:f9:58:fb:e0:01: f8:22:5c:b1 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUHH8dy/19y5ygVqYlJrXjlULxU5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVD NTg4QkE5RTAeFw0yNjEwMDMwMDU2MDRaFw0yNjEwMDQwNDA2MDRaMDMxMTAvBgNV BAMTKDQyQUM4NERCRjA5NTg5RUU1QjZEM0VERDMzOEFBMzUyQkNCMTE0RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNwLLxtiDZqT/GquP+Ceg/uWE FpgqAoIVEuNK+1A6GlKPjyxYOnygx6baTllLLZzjYXJcT/7P07sWGud5WRwu4I4l EckxQEoHWU4UBG+dxbUXhvdzVGCGS2UISl8v5pHzJZ8VwGjC1M1BbeWDwDc+oWd3 6HXrno2nKNgUND8nLeRgWqKB77HCkq2Pbd3VIVWx3CZUd5pD/eIqGJ5I9uBViwYm V1g1B7dEUjmRoiLuFlyXGFiXoCc6TQYBZMyDIKoZRWtetKKQ0uthvC7IikFziaDx goeUDBuiR1URZQf28mB/WW4XEsiG9YFopn0JPUlN7459zdTagrpT4FYxq9yRAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUQqyE2/CVie5bbT7dM4qjUryxFPswHwYDVR0j BBgwFoAUWivuJDlbNvT/qVdT9nMVFcWIup4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVU LzAvNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS81QTJCRUUyNDM5NUIzNkY0RkZBOTU3NTNGNjcz MTUxNUM1ODhCQTlFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVULzAvNUEyQkVFMjQzOTVC MzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAOW6aKt51Alk 103jcQwo8YfhNXQBl+sBfBYnV1wsLfTe5OLoi6xKngl2hWNUDYfVHxDMuj2OE33B FOX+WdZdWF+pb1i5duw+AE9mlZU1wDyA9460znzuamFYFKNGQ4n//0CJ+fQki5DU dnZ7mWSAyM0KHhIlVbls8ZcCE52tdHTm0rwLp3vCvLf5lgefaubXBZIe+dJ/ECRZ mlAZXt/CSEOGQc9HqClfv5bYRxEAOT3xmEllhovmnIRAcmxPeSTS/ZRp8uTOSQrf oJHqc6Re6PfpSeyi6656EQ08Maw5Q03xW19G3KKDEz9mByZk+CliN1dPaztMhDn5 WPvgAfgiXLE= -----END CERTIFICATE-----Generated at Sat Oct 3 11:04:34 2026 by rpki-client