$ rpki-client -vvvf rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft File: B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft (raw, json) Hash identifier: 3sdjdbykoaiKFF2fcTVnn+OHmOkQ2vm5zb++/aLOSgI= Subject key identifier: AB:00:D5:36:1C:3E:13:97:D3:05:8F:B4:AF:C0:45:CE:B1:C3:65:7D Authority key identifier: B4:69:C8:AF:88:F1:41:7D:F3:E5:5E:0B:C5:EE:CA:DA:92:50:E5:CB Certificate issuer: /CN=B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB Certificate serial: 7252104341FA39D93D68929661A3227BA45ED7CA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft Manifest number: C2 Signing time: Fri 02 Oct 2026 19:08:36 +0000 Manifest this update: Fri 02 Oct 2026 19:03:36 +0000 Manifest next update: Sat 03 Oct 2026 19:34:36 +0000 Files and hashes: 1: B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl (hash: 67zYtF5aor8fq+FiOnnXSBVQzq8IaiJuLYWrTNoKYlo=) 2: 3130332e3139312e32322e302f32332d3234203d3e203633383939.roa (hash: 27hTm/nhNb00WioUC9L5MAuYLPzBS9aBOsaC8RsQYps=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:52:10:43:41:fa:39:d9:3d:68:92:96:61:a3:22:7b:a4:5e:d7:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB Validity Not Before: Oct 2 19:03:36 2026 GMT Not After : Oct 3 19:34:36 2026 GMT Subject: CN=AB00D5361C3E1397D3058FB4AFC045CEB1C3657D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:10:30:5f:07:51:84:2c:ae:c0:67:96:7a: 9a:52:80:35:36:1d:df:ad:1b:17:e8:5c:5f:0f:70: e2:0b:1a:c6:2f:04:49:1f:85:a8:21:84:e7:f2:61: ee:9e:a7:fa:80:67:12:56:44:15:fe:b6:4e:5e:4b: 9c:77:b2:2f:81:0b:f5:15:5e:51:9a:37:64:f2:fe: 66:75:74:21:d1:f5:5e:49:3a:20:ff:40:c0:2c:f6: 84:f7:ec:16:6c:d7:fd:47:ca:13:9f:24:d4:57:ab: 66:d5:04:7a:71:26:e5:2c:47:3f:ec:5b:89:37:ac: f0:4d:84:8b:8d:d7:e1:42:2d:fb:7a:68:b7:44:6a: 3b:39:c9:2b:a5:e3:69:6c:8f:0e:4e:e9:08:1a:d8: 51:02:fc:c2:71:89:11:7a:5c:af:f6:48:64:8b:2b: 35:33:be:23:e5:87:0b:2d:11:72:3c:36:64:c2:d9: 7c:72:1f:39:3f:fb:d2:a9:ab:8f:31:36:fa:98:e0: d6:d4:c1:07:d0:37:4d:18:6b:05:73:d6:61:e4:73: b7:4c:ff:28:b7:a2:9e:a3:cc:d8:e7:be:44:91:d0: d2:ab:b5:af:43:98:73:47:af:db:aa:a4:80:86:6f: 54:78:4f:ed:a0:bd:bb:88:cf:15:e4:ca:6d:d5:2b: 0f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:00:D5:36:1C:3E:13:97:D3:05:8F:B4:AF:C0:45:CE:B1:C3:65:7D X509v3 Authority Key Identifier: keyid:B4:69:C8:AF:88:F1:41:7D:F3:E5:5E:0B:C5:EE:CA:DA:92:50:E5:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:57:44:74:3d:ec:cd:a4:08:35:5b:8e:9e:3c:25:6b:f9:7d: 19:f2:f2:fc:0e:2c:2c:6b:17:13:88:c0:17:77:87:20:b9:e4: e8:31:98:94:66:67:84:f9:bb:18:f6:9d:c2:57:96:a1:f9:88: 52:13:3a:09:67:51:d4:43:a5:8d:f3:2d:16:52:59:03:34:d0: 9c:07:91:29:d8:09:aa:1d:8f:c7:02:14:85:82:ff:a6:70:74: 4e:cb:2c:62:38:40:20:f2:ba:52:bd:10:52:a3:b8:c4:06:45: 2a:1a:d5:87:c2:61:61:d5:37:2f:65:e3:81:a1:47:ab:37:7d: 6b:ec:70:75:86:09:88:41:6d:1a:d4:74:af:ae:61:fb:91:02: 5d:38:5e:12:04:be:6e:79:65:04:00:61:8e:68:99:37:ce:cf: 70:01:7a:e5:cd:40:d1:f7:29:aa:69:b6:0c:ea:bd:de:72:0a: 5b:cf:73:9e:ce:a7:89:36:95:e0:53:8a:43:4e:54:eb:d9:83: 5d:8c:57:75:44:1d:7b:53:42:f2:ff:63:f9:ac:b1:66:78:b3: ce:49:c8:1b:37:4a:e0:4e:9a:1a:ac:13:b9:01:f2:9a:96:0f: 8c:b5:ae:56:78:fc:45:04:79:1d:24:7e:77:e6:b7:de:fa:07: bf:7c:68:5d -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUclIQQ0H6Odk9aJKWYaMie6Re18owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ2OUM4QUY4OEYxNDE3REYzRTU1RTBCQzVFRUNBREE5 MjUwRTVDQjAeFw0yNjEwMDIxOTAzMzZaFw0yNjEwMDMxOTM0MzZaMDMxMTAvBgNV BAMTKEFCMDBENTM2MUMzRTEzOTdEMzA1OEZCNEFGQzA0NUNFQjFDMzY1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupxAwXwdRhCyuwGeWeppSgDU2 Hd+tGxfoXF8PcOILGsYvBEkfhaghhOfyYe6ep/qAZxJWRBX+tk5eS5x3si+BC/UV XlGaN2Ty/mZ1dCHR9V5JOiD/QMAs9oT37BZs1/1HyhOfJNRXq2bVBHpxJuUsRz/s W4k3rPBNhIuN1+FCLft6aLdEajs5ySul42lsjw5O6Qga2FEC/MJxiRF6XK/2SGSL KzUzviPlhwstEXI8NmTC2XxyHzk/+9Kpq48xNvqY4NbUwQfQN00YawVz1mHkc7dM /yi3op6jzNjnvkSR0NKrta9DmHNHr9uqpICGb1R4T+2gvbuIzxXkym3VKw/3AgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUqwDVNhw+E5fTBY+0r8BFzrHDZX0wHwYDVR0j BBgwFoAUtGnIr4jxQX3z5V4Lxe7K2pJQ5cswDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRVU1RD Q0FETS8wL0I0NjlDOEFGODhGMTQxN0RGM0U1NUUwQkM1RUVDQURBOTI1MEU1Q0Iu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQjQ2OUM4QUY4OEYxNDE3REYzRTU1RTBC QzVFRUNBREE5MjUwRTVDQi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UVVNUQ0NBRE0vMC9CNDY5 QzhBRjg4RjE0MTdERjNFNTVFMEJDNUVFQ0FEQTkyNTBFNUNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA cldEdD3szaQINVuOnjwla/l9GfLy/A4sLGsXE4jAF3eHILnk6DGYlGZnhPm7GPad wleWofmIUhM6CWdR1EOljfMtFlJZAzTQnAeRKdgJqh2PxwIUhYL/pnB0TsssYjhA IPK6Ur0QUqO4xAZFKhrVh8JhYdU3L2XjgaFHqzd9a+xwdYYJiEFtGtR0r65h+5EC XTheEgS+bnllBABhjmiZN87PcAF65c1A0fcpqmm2DOq93nIKW89zns6niTaV4FOK Q05U69mDXYxXdUQde1NC8v9j+ayxZnizzknIGzdK4E6aGqwTuQHympYPjLWuVnj8 RQR5HSR+d+a33voHv3xoXQ== -----END CERTIFICATE-----Generated at Sat Oct 3 13:05:06 2026 by rpki-client