$ rpki-client -vvvf rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft File: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft (raw, json) Hash identifier: n4u4WrzGlyReyR+lMf8c++QIowZ1a8nlYriFPQaHvX8= Subject key identifier: 1D:AF:63:D6:79:1C:0F:67:14:AD:05:D8:03:97:6F:F4:36:57:AB:54 Authority key identifier: 42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 Certificate issuer: /CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Certificate serial: 76303F085C91700F9613C5F0D9AD88564D59F399 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject info access: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft Manifest number: C5 Signing time: Sun 04 Oct 2026 08:59:46 +0000 Manifest this update: Sun 04 Oct 2026 08:54:46 +0000 Manifest next update: Mon 05 Oct 2026 11:55:46 +0000 Files and hashes: 1: 323430353a653463303a3a2f33322d3634203d3e20313331363737.roa (hash: 81X32lIDsqpLyEd5Xpy3ESJVHUbt39R1tegiSMqE1PY=) 2: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl (hash: QQmadfAo63MIWO0wHLN7SMkRaFa0S4uJbca2c7MeLPo=) 3: 323430353a653463303a3a2f33322d3634203d3e20313331363734.roa (hash: R5XmHRGNRbL/JzVgicSjGM6c3avdhtCi9gHhhibn8Iw=) 4: 3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa (hash: GSRooEfHneMScmMay9/suUawwfISd9M2Zp/oSqWxd5c=) 5: 3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa (hash: U1mFwcarBwcENEkbti0C1yVEmBtDzRAAAqYz8mcIUOg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:30:3f:08:5c:91:70:0f:96:13:c5:f0:d9:ad:88:56:4d:59:f3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162 Validity Not Before: Oct 4 08:54:46 2026 GMT Not After : Oct 5 11:55:46 2026 GMT Subject: CN=1DAF63D6791C0F6714AD05D803976FF43657AB54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:81:a4:58:62:e3:f6:f7:ea:c8:1f:14:ed: 07:43:1d:74:f2:51:34:9b:d6:99:6e:6a:da:cb:c5: 25:54:2a:57:0b:0c:12:10:a0:f7:25:9d:06:14:d4: 69:99:0e:dd:fd:1c:69:d0:e1:06:5a:34:c0:a3:53: 84:62:08:dd:0f:91:41:0f:fd:bb:78:c6:80:b7:1a: e3:55:6b:40:a7:58:f2:f0:d3:bb:44:e6:af:54:e5: d4:7a:bd:d6:c3:9a:c0:21:83:f8:bb:11:30:42:12: 2c:7c:d3:b1:13:8e:1e:5d:80:12:03:8d:74:fe:d6: 63:fb:5c:74:51:51:2a:6e:77:b5:b5:7d:1e:36:71: 2b:f2:16:43:10:02:7d:3a:91:4e:77:4f:84:eb:7b: 86:09:39:43:a5:80:1c:9a:23:3e:7e:69:33:b8:c0: af:66:36:55:5f:5b:2c:0a:6d:7f:fc:38:4b:3f:96: 6f:80:1b:65:59:b6:4b:15:cd:a0:a4:eb:ae:fe:02: 91:e9:be:8a:c1:e4:0b:b2:4f:e7:a8:bc:e3:9e:59: a8:d1:04:7d:c0:98:96:91:69:ba:04:c6:f5:35:4b: ef:98:de:99:8b:d7:1a:e9:12:c3:ce:6a:65:d8:7d: b5:2d:11:e1:c5:2f:17:a4:1a:f8:f0:09:63:bf:08: d8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AF:63:D6:79:1C:0F:67:14:AD:05:D8:03:97:6F:F4:36:57:AB:54 X509v3 Authority Key Identifier: keyid:42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:62:ab:81:27:0e:06:07:29:85:4d:e1:26:8c:6c:11:3d:80: 7b:ec:b5:19:f9:0f:5e:e1:1b:2f:d5:ad:2a:19:38:3c:3c:ab: b5:5e:08:e0:3e:ef:39:99:a8:d9:3d:5f:be:72:55:5e:8b:8a: 37:b7:ab:73:1a:1d:d3:dd:5b:20:31:46:ad:4d:5c:e1:87:c7: f4:23:15:ca:cd:0b:3a:ef:fa:4f:cd:93:2b:06:b8:41:78:21: 84:c0:40:48:8c:a0:6a:12:8b:16:3e:9c:d8:e2:23:5d:ce:55: 03:80:9c:ca:ad:81:c1:17:3d:68:ae:cc:23:0e:e6:70:36:8c: 2d:cb:80:67:97:43:9c:39:a8:96:ba:e0:ec:26:19:3f:12:c2: 3b:80:71:c8:f3:69:ba:9b:d9:20:79:d2:ab:87:e4:ed:9a:93: 82:4f:b8:c9:ef:6d:a5:a0:2a:d3:ad:9b:c3:8d:dc:b7:05:df: c3:78:3d:2b:59:ef:b3:33:b8:92:be:f6:43:b7:6a:27:ce:01: 4b:a9:db:8a:79:78:c6:8d:53:d6:e0:d6:e7:a5:47:04:70:b8: af:63:85:4d:eb:bc:a5:01:8a:52:f1:8e:70:c9:c0:4f:f2:85: 7b:8a:94:14:57:c3:69:f0:08:9b:f5:26:b2:e3:9b:ac:1e:11: 34:cb:51:1d -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUdjA/CFyRcA+WE8Xw2a2IVk1Z85kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1RTA4REVB ODYyMDE2MjAeFw0yNjEwMDQwODU0NDZaFw0yNjEwMDUxMTU1NDZaMDMxMTAvBgNV BAMTKDFEQUY2M0Q2NzkxQzBGNjcxNEFEMDVEODAzOTc2RkY0MzY1N0FCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrIGkWGLj9vfqyB8U7QdDHXTy UTSb1pluatrLxSVUKlcLDBIQoPclnQYU1GmZDt39HGnQ4QZaNMCjU4RiCN0PkUEP /bt4xoC3GuNVa0CnWPLw07tE5q9U5dR6vdbDmsAhg/i7ETBCEix807ETjh5dgBID jXT+1mP7XHRRUSpud7W1fR42cSvyFkMQAn06kU53T4Tre4YJOUOlgByaIz5+aTO4 wK9mNlVfWywKbX/8OEs/lm+AG2VZtksVzaCk667+ApHpvorB5AuyT+eovOOeWajR BH3AmJaRaboExvU1S++Y3pmL1xrpEsPOamXYfbUtEeHFLxekGvjwCWO/CNhtAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUHa9j1nkcD2cUrQXYA5dv9DZXq1QwHwYDVR0j BBgwFoAUQsf3jp/aALnKPi0d314I3qhiAWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT1BFTkZP Ui8wLzQyQzdGNzhFOUZEQTAwQjlDQTNFMkQxRERGNUUwOERFQTg2MjAxNjIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDJDN0Y3OEU5RkRBMDBCOUNBM0UyRDFEREY1 RTA4REVBODYyMDE2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL09QRU5GT1IvMC80MkM3Rjc4RTlG REEwMEI5Q0EzRTJEMURERjVFMDhERUE4NjIwMTYyLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmKrgScO BgcphU3hJoxsET2Ae+y1GfkPXuEbL9WtKhk4PDyrtV4I4D7vOZmo2T1fvnJVXouK N7ercxod091bIDFGrU1c4YfH9CMVys0LOu/6T82TKwa4QXghhMBASIygahKLFj6c 2OIjXc5VA4Ccyq2BwRc9aK7MIw7mcDaMLcuAZ5dDnDmolrrg7CYZPxLCO4BxyPNp upvZIHnSq4fk7ZqTgk+4ye9tpaAq062bw43ctwXfw3g9K1nvszO4kr72Q7dqJ84B S6nbinl4xo1T1uDW56VHBHC4r2OFTeu8pQGKUvGOcMnAT/KFe4qUFFfDafAIm/Um suObrB4RNMtRHQ== -----END CERTIFICATE-----Generated at Sun Oct 4 13:34:52 2026 by rpki-client