$ rpki-client -vvvf rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft File: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft (raw, json) Hash identifier: 0AOw2IZBrTWVeHDwUxU+mst54doDdZqPayZitFxxTXo= Subject key identifier: A1:08:4C:57:41:9C:75:D3:F7:A6:31:95:48:43:39:17:C4:7A:36:95 Authority key identifier: 2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22 Certificate issuer: /CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22 Certificate serial: 6E115B602A5CC56AA10E1B909E59C7293AFD0D90 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft Manifest number: C4 Signing time: Sat 03 Oct 2026 17:11:19 +0000 Manifest this update: Sat 03 Oct 2026 17:06:19 +0000 Manifest next update: Sun 04 Oct 2026 20:33:19 +0000 Files and hashes: 1: 3130332e3134302e3233332e302f32342d3234203d3e203332323432.roa (hash: dWqlZ57qGRFx6N79EQLtYosKEY+TDhYs9JMAewBJPsQ=) 2: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl (hash: v4ORrb2eIfGsgFDNtbFf0SmrKWTVtiAC2eDp6cSQzIc=) 3: 3130332e3134302e3233322e302f32342d3234203d3e203332323432.roa (hash: q7dF1jX4ROfIjFDlO5sVW9hRX9k2oXkr8fjwFlVtFmE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 20:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:11:5b:60:2a:5c:c5:6a:a1:0e:1b:90:9e:59:c7:29:3a:fd:0d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22 Validity Not Before: Oct 3 17:06:19 2026 GMT Not After : Oct 4 20:33:19 2026 GMT Subject: CN=A1084C57419C75D3F7A6319548433917C47A3695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c3:40:bf:72:f0:e4:52:b2:e6:b1:04:2e:d9: dc:72:df:9a:6f:d9:39:11:68:04:13:52:d6:dc:13: a9:e2:5a:04:0c:75:ff:34:5f:9d:f6:a5:80:77:0e: 3f:69:f2:85:fb:fc:c9:c5:b7:3b:8c:af:07:49:30: 84:e3:b8:7c:fd:d1:9c:13:04:9c:ed:06:79:3e:d9: c7:5c:a0:97:8f:49:1b:a0:2b:bb:0d:cb:78:18:7a: 6d:be:de:81:e7:f2:3e:24:7d:0e:90:e3:ca:f2:a8: c7:1c:14:f2:90:c7:53:1f:11:29:1a:2b:98:ee:05: e9:01:9c:ab:d3:b0:84:03:b6:23:3e:e4:a9:c2:e3: 5f:f4:e1:d6:6f:91:7e:c4:b0:04:9f:d7:05:ff:f0: ee:97:1e:1f:ba:2d:0a:2f:40:23:b3:8a:5d:e7:90: 04:9b:e8:d3:11:f6:16:c1:67:5e:c4:d9:67:20:50: c2:f3:e5:8d:ff:b4:dd:87:c4:89:a7:2d:1e:43:14: 5e:66:24:67:88:af:e4:48:a3:2c:7e:aa:5c:c5:5f: 4e:bb:fc:e4:8c:3a:53:e0:5e:2b:64:e4:b3:d7:c5: a9:8e:de:10:86:46:3a:36:bd:79:e7:fa:fc:05:62: 5c:73:9a:38:fa:f9:7f:f5:76:7d:db:d4:a0:91:e9: fa:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:08:4C:57:41:9C:75:D3:F7:A6:31:95:48:43:39:17:C4:7A:36:95 X509v3 Authority Key Identifier: keyid:2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:12:4c:00:b8:58:fd:a9:4a:02:22:52:d0:9c:5d:3d:28:e9: 31:50:d8:b0:cf:45:3b:63:0f:6a:26:80:5e:82:6e:6c:92:1b: 42:98:84:ce:56:aa:bc:99:d4:db:b7:ed:ec:d7:f5:05:24:20: 47:93:33:30:73:86:0b:bc:a9:2c:50:6b:da:af:94:8d:f8:94: fc:5a:6b:b1:c2:ab:aa:7c:f6:b6:37:1b:d4:4a:cc:e2:46:42: 8d:17:bf:06:fd:f1:20:5e:e2:91:5e:18:3e:61:0e:43:77:ed: 9d:9b:0c:d0:c5:ba:f4:dc:4e:dd:08:7d:ae:19:9f:07:b9:6c: 53:05:83:ab:70:a6:f9:9b:d2:71:77:9e:7e:c4:4f:f3:1a:9f: a5:29:e8:fc:1f:18:88:94:d0:47:1a:78:9c:7e:0d:bb:63:01: 2a:4c:da:c2:d8:d5:e4:92:79:56:87:7d:f9:5f:c6:60:40:cb: c0:fa:b7:b1:16:1a:ca:cc:15:6d:3f:d1:67:de:5d:29:c1:b0: c7:cf:8d:75:77:d8:df:48:3c:6b:11:69:e6:af:90:8b:64:ac: f3:0e:6e:ad:d5:c8:12:7f:ee:6b:19:e1:31:ad:3b:e2:8a:d7: 41:26:12:f6:3e:e4:8d:bb:ab:35:d8:2f:f3:15:c0:f2:18:cc: 26:42:2e:e8 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUbhFbYCpcxWqhDhuQnlnHKTr9DZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OEZCMEFENkNCNENGREY3MzY0NzkxRDE0MzVBRDQ4 QzY3NUQyMjAeFw0yNjEwMDMxNzA2MTlaFw0yNjEwMDQyMDMzMTlaMDMxMTAvBgNV BAMTKEExMDg0QzU3NDE5Qzc1RDNGN0E2MzE5NTQ4NDMzOTE3QzQ3QTM2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbw0C/cvDkUrLmsQQu2dxy35pv 2TkRaAQTUtbcE6niWgQMdf80X532pYB3Dj9p8oX7/MnFtzuMrwdJMITjuHz90ZwT BJztBnk+2cdcoJePSRugK7sNy3gYem2+3oHn8j4kfQ6Q48ryqMccFPKQx1MfESka K5juBekBnKvTsIQDtiM+5KnC41/04dZvkX7EsASf1wX/8O6XHh+6LQovQCOzil3n kASb6NMR9hbBZ17E2WcgUMLz5Y3/tN2HxImnLR5DFF5mJGeIr+RIoyx+qlzFX067 /OSMOlPgXitk5LPXxamO3hCGRjo2vXnn+vwFYlxzmjj6+X/1dn3b1KCR6fqlAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUoQhMV0GcddP3pjGVSEM5F8R6NpUwHwYDVR0j BBgwFoAULVj7CtbLTP33NkeR0UNa1IxnXSIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDTC8w LzJENThGQjBBRDZDQjRDRkRGNzM2NDc5MUQxNDM1QUQ0OEM2NzVEMjIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMkQ1OEZCMEFENkNCNENGREY3MzY0NzkxRDE0MzVB RDQ4QzY3NUQyMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0wvMC8yRDU4RkIwQUQ2Q0I0Q0ZE RjczNjQ3OTFEMTQzNUFENDhDNjc1RDIyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBJMALhY/alKAiJS 0JxdPSjpMVDYsM9FO2MPaiaAXoJubJIbQpiEzlaqvJnU27ft7Nf1BSQgR5MzMHOG C7ypLFBr2q+UjfiU/FprscKrqnz2tjcb1ErM4kZCjRe/Bv3xIF7ikV4YPmEOQ3ft nZsM0MW69NxO3Qh9rhmfB7lsUwWDq3Cm+ZvScXeefsRP8xqfpSno/B8YiJTQRxp4 nH4Nu2MBKkzawtjV5JJ5Vod9+V/GYEDLwPq3sRYayswVbT/RZ95dKcGwx8+NdXfY 30g8axFp5q+Qi2Ss8w5urdXIEn/uaxnhMa074orXQSYS9j7kjburNdgv8xXA8hjM JkIu6A== -----END CERTIFICATE-----Generated at Sun Oct 4 09:03:37 2026 by rpki-client