$ rpki-client -vvf rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft File: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft (raw, json) Hash identifier: UqKYaoSvrvWegvECxsz1/KYocQ6W3bFccSJ0FuLJ0Uk= Subject key identifier: CE:8A:40:D0:0A:7B:08:72:28:4C:4F:D3:96:A3:9C:09:5C:EF:D6:7B Authority key identifier: 5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E Certificate issuer: /CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Certificate serial: 61EC5830B9F95F1C25E017C465E6F7798B2FCDA6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft Manifest number: 84 Signing time: Fri 14 Aug 2026 15:02:08 +0000 Manifest this update: Fri 14 Aug 2026 14:57:08 +0000 Manifest next update: Sat 15 Aug 2026 17:18:08 +0000 Files and hashes: 1: 323430333a623334303a3a2f33322d3332203d3e2037343832.roa (hash: hiAMshIFeOvfI56eDRx+E/hRaz9fkWvi1Lc3t0AuAEM=) 2: 5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl (hash: S7k4h/l9nCLZ6RHT+v4ssXO/1ojDFx+6jE3NnHawaZQ=) 3: 3130332e3133302e34382e302f32322d3234203d3e2037343832.roa (hash: 1XWO79v70d0DECH7Xj/kPutEjOsPSVEabfarX+KunFQ=) 4: 323430333a623334303a3a2f33322d3332203d3e2039393232.roa (hash: gstqBh9leADrly9mEk8JDvYH97tC5t4YGpfgybnlAak=) 5: 3130332e3133302e34382e302f32322d3234203d3e2039393232.roa (hash: aCIxecjNLFEVzEOiCgmZ0K9yJGY1pe87ewnv5AFzkXs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 17:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ec:58:30:b9:f9:5f:1c:25:e0:17:c4:65:e6:f7:79:8b:2f:cd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E Validity Not Before: Aug 14 14:57:08 2026 GMT Not After : Aug 15 17:18:08 2026 GMT Subject: CN=CE8A40D00A7B0872284C4FD396A39C095CEFD67B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:fd:0b:f7:9b:31:e4:67:05:f5:af:94:8d: 58:7d:8f:56:92:22:32:31:06:ae:1e:c3:a6:27:25: e1:85:ec:6b:47:a2:59:46:96:38:0b:38:12:4f:17: 30:eb:72:d7:4a:ec:10:72:c5:95:d7:63:71:52:34: ae:6c:99:0e:25:b4:23:df:fe:7f:a0:aa:53:bc:06: 60:e6:18:d8:9e:fc:b0:18:41:4c:0c:f9:fe:99:09: 5d:02:33:e8:73:1b:df:b5:b9:06:cf:4e:f3:b4:8f: cf:47:63:e9:bc:72:76:51:80:09:d9:f2:10:77:ff: 6a:71:ec:28:60:45:76:3f:a3:85:25:b3:90:f9:52: 3e:2b:05:48:a8:44:83:54:10:78:ac:cb:49:18:7e: a8:6d:f0:e6:b5:4d:39:22:73:6e:20:41:ac:51:be: 9e:f7:ce:50:f4:c9:4b:8e:9e:f8:eb:8e:c9:c5:46: 2b:ed:cd:4b:aa:34:34:c2:ac:bb:7b:41:8f:38:36: 94:b9:52:2b:31:6c:16:e1:a8:c4:dc:a2:b7:94:69: d1:53:45:af:90:08:51:9f:98:7f:8a:b6:f3:3b:d2: 27:c3:64:9b:93:0c:20:c5:68:e3:67:55:de:01:81: b6:63:1e:85:44:90:cc:d3:51:0b:ca:1f:8c:9b:6e: 1e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8A:40:D0:0A:7B:08:72:28:4C:4F:D3:96:A3:9C:09:5C:EF:D6:7B X509v3 Authority Key Identifier: keyid:5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:d6:25:19:bf:11:b8:88:16:57:18:ae:0f:bf:b1:4d:76:37: b6:06:3c:ee:37:81:69:47:c3:85:60:58:83:a2:92:0a:f2:25: b1:d7:8f:fb:f5:b2:b0:2c:f9:20:78:1f:e4:49:1f:17:64:cf: 96:3d:e6:d5:0a:8a:eb:d9:71:79:3b:71:15:48:ac:6a:86:74: 7b:1f:6c:f2:cb:ee:28:2b:f1:24:2c:4e:62:f4:2b:63:48:b6: 46:f9:41:74:47:fc:e8:0c:9e:db:6c:eb:f9:08:cf:be:11:04: 6f:dd:72:eb:2f:c6:92:af:00:f7:c9:c3:6d:ac:25:f1:ba:9b: 17:79:a9:87:1e:b4:0e:c7:13:21:63:7c:92:ba:b1:49:5e:83: 6b:c7:29:13:2e:98:61:54:85:51:0a:0e:0b:ab:e8:ab:7a:81: 52:19:df:fe:b0:90:b0:1e:e3:0c:ab:aa:cf:da:67:91:b8:e0: d6:3e:7f:bd:ef:d8:61:d5:f0:8f:c1:44:93:31:e1:bb:ed:b6: 09:98:02:a8:dd:78:62:dc:79:ce:fd:f2:36:58:ac:d9:05:99: 8a:33:f6:9a:af:e3:3f:a1:71:c2:82:09:e6:e4:c0:f2:06:66: af:25:22:be:77:d6:5b:16:28:43:70:33:84:d6:4d:ea:4d:71: e2:10:bd:13 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUYexYMLn5Xxwl4BfEZeb3eYsvzaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVD NTg4QkE5RTAeFw0yNjA4MTQxNDU3MDhaFw0yNjA4MTUxNzE4MDhaMDMxMTAvBgNV BAMTKENFOEE0MEQwMEE3QjA4NzIyODRDNEZEMzk2QTM5QzA5NUNFRkQ2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCseP0L95sx5GcF9a+UjVh9j1aS IjIxBq4ew6YnJeGF7GtHollGljgLOBJPFzDrctdK7BByxZXXY3FSNK5smQ4ltCPf /n+gqlO8BmDmGNie/LAYQUwM+f6ZCV0CM+hzG9+1uQbPTvO0j89HY+m8cnZRgAnZ 8hB3/2px7ChgRXY/o4Uls5D5Uj4rBUioRINUEHisy0kYfqht8Oa1TTkic24gQaxR vp73zlD0yUuOnvjrjsnFRivtzUuqNDTCrLt7QY84NpS5UisxbBbhqMTcoreUadFT Ra+QCFGfmH+KtvM70ifDZJuTDCDFaONnVd4BgbZjHoVEkMzTUQvKH4ybbh5VAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUzopA0Ap7CHIoTE/TlqOcCVzv1nswHwYDVR0j BBgwFoAUWivuJDlbNvT/qVdT9nMVFcWIup4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVU LzAvNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS81QTJCRUUyNDM5NUIzNkY0RkZBOTU3NTNGNjcz MTUxNUM1ODhCQTlFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVULzAvNUEyQkVFMjQzOTVC MzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKrWJRm/EbiI FlcYrg+/sU12N7YGPO43gWlHw4VgWIOikgryJbHXj/v1srAs+SB4H+RJHxdkz5Y9 5tUKiuvZcXk7cRVIrGqGdHsfbPLL7igr8SQsTmL0K2NItkb5QXRH/OgMntts6/kI z74RBG/dcusvxpKvAPfJw22sJfG6mxd5qYcetA7HEyFjfJK6sUleg2vHKRMumGFU hVEKDgur6Kt6gVIZ3/6wkLAe4wyrqs/aZ5G44NY+f73v2GHV8I/BRJMx4bvttgmY AqjdeGLcec798jZYrNkFmYoz9pqv4z+hccKCCebkwPIGZq8lIr531lsWKENwM4TW TepNceIQvRM= -----END CERTIFICATE-----Generated at Sat Aug 15 05:20:39 2026 by rpki-client