$ rpki-client -vvvf rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft File: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft (raw, json) Hash identifier: eoXGl5EtCXJUYibZFYuXiH2QGaMTGav43YBBti430FQ= Subject key identifier: 8D:2D:45:84:4B:F1:B9:78:03:63:E1:A2:01:6F:99:2C:2F:52:78:99 Authority key identifier: 85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 Certificate issuer: /CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Certificate serial: 7DE0075A1E2C26914C26DC41DF0AAA4CFF08D71C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft Manifest number: C7 Signing time: Sat 03 Oct 2026 22:48:18 +0000 Manifest this update: Sat 03 Oct 2026 22:43:18 +0000 Manifest next update: Sun 04 Oct 2026 23:55:18 +0000 Files and hashes: 1: 3130332e3233342e38302e302f32322d3234203d3e203137373130.roa (hash: uqLuHrrFZUmLWpdnoJCaLRe1oXTuRusUvNya24FB8bg=) 2: 3130332e3233342e38312e302f32342d3234203d3e203137373130.roa (hash: Zvu3k5iDBaX9iOQpea8Ybb+zcrWBht3qRGl2nLlRl/o=) 3: 3135302e3130372e36342e302f32322d3234203d3e203137373130.roa (hash: n+v5o9SBdWVqA5qvRZf6BeSCSFLkZj6roCOPAhBcFqM=) 4: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl (hash: qNcUlS5ZgunqDpQv/NqURlWQkUHHYpdRU63tI2jDx0o=) 5: 36312e35372e3232342e302f32302d3234203d3e203137373130.roa (hash: X08v+g23C1Fx8BQtKNgspF5UjPkGFKh01lY2BRa8ypo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e0:07:5a:1e:2c:26:91:4c:26:dc:41:df:0a:aa:4c:ff:08:d7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Validity Not Before: Oct 3 22:43:18 2026 GMT Not After : Oct 4 23:55:18 2026 GMT Subject: CN=8D2D45844BF1B9780363E1A2016F992C2F527899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f0:65:2a:bd:7f:7e:38:97:13:5e:69:1e:7b: 81:1e:6e:65:48:bf:2d:fa:e5:83:6b:dc:06:21:ba: 2c:93:1b:4d:f3:b1:3e:8d:95:04:67:4e:36:e7:6d: 63:47:31:7c:6c:4b:6e:2d:b4:a6:0d:79:6d:b7:ad: 00:ca:d2:fa:03:08:56:39:18:bc:6e:6d:5f:4c:07: d2:36:2a:2f:d6:1f:2b:26:2c:cc:76:e9:65:fd:9a: 93:88:c1:30:6b:86:80:87:b6:7b:12:20:37:b5:26: 8e:28:2f:73:35:27:5a:e1:8f:8d:1e:0c:01:a3:43: 1e:04:b0:81:d8:82:28:44:54:59:aa:ee:23:9e:c1: 27:79:30:78:40:90:5a:ac:82:3c:45:06:6e:fb:51: 14:de:af:6f:0f:cc:42:65:88:65:64:dd:4e:85:53: b3:6a:b5:a0:1a:d5:81:c4:68:38:c0:a8:8f:c7:2b: 7b:7e:c5:2f:d4:c4:d9:a3:07:68:43:a1:35:f2:14: eb:dd:71:46:23:4d:60:81:8c:56:bf:de:ef:44:66: bc:cb:59:c2:d0:42:4a:25:04:8d:fe:ab:ff:9b:b3: dd:8f:6b:cc:d5:90:c3:46:32:e7:c3:55:ea:71:99: 57:2a:1b:04:67:6a:0c:32:b7:8e:a1:cd:d4:5b:f2: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2D:45:84:4B:F1:B9:78:03:63:E1:A2:01:6F:99:2C:2F:52:78:99 X509v3 Authority Key Identifier: keyid:85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:53:fb:ef:04:9b:c0:cc:21:90:e9:9e:65:29:7c:6b:2b:ac: 18:1c:52:d8:dc:31:f4:55:bd:4d:4c:80:ec:d7:30:03:7f:1e: 02:14:e1:23:18:08:a0:fc:16:ca:d2:3d:4c:c6:0f:76:52:0d: 41:04:9c:00:76:46:5f:91:ef:f5:9f:af:3a:f7:40:c2:e4:7f: 6f:fc:b1:4c:11:4e:86:52:50:44:ff:b8:f8:36:70:1f:6b:9b: 0e:9c:14:92:32:e6:9c:bb:f0:9b:63:9d:33:8d:da:8a:87:92: 21:70:22:6e:8b:b0:01:12:3e:de:77:cd:bc:99:d7:7b:f2:27: 4f:6f:fb:9d:b0:79:9d:22:78:07:45:7c:4f:29:bc:93:24:71: 6c:b7:d9:7f:52:e2:3a:47:b0:8e:fd:19:7c:38:96:7f:62:00: 24:4e:f0:c0:01:bf:d4:83:a6:01:cd:49:68:0a:04:3d:a8:71: 6a:59:86:34:7b:64:10:e2:6f:ac:24:c9:ba:48:78:4e:bc:7f: 09:b0:89:33:9e:6a:22:b8:f9:8c:ea:6d:d6:c5:67:96:c2:a4: da:b5:72:43:8e:c0:73:8d:cb:30:e1:ee:a2:06:e2:16:bc:3f: 59:32:45:9f:b4:92:5e:a2:21:5d:47:b0:d7:88:bc:a1:c8:4c: 0d:d2:84:22 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUfeAHWh4sJpFMJtxB3wqqTP8I1xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAz RDk0NTU4NTAeFw0yNjEwMDMyMjQzMThaFw0yNjEwMDQyMzU1MThaMDMxMTAvBgNV BAMTKDhEMkQ0NTg0NEJGMUI5NzgwMzYzRTFBMjAxNkY5OTJDMkY1Mjc4OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8GUqvX9+OJcTXmkee4EebmVI vy365YNr3AYhuiyTG03zsT6NlQRnTjbnbWNHMXxsS24ttKYNeW23rQDK0voDCFY5 GLxubV9MB9I2Ki/WHysmLMx26WX9mpOIwTBrhoCHtnsSIDe1Jo4oL3M1J1rhj40e DAGjQx4EsIHYgihEVFmq7iOewSd5MHhAkFqsgjxFBm77URTer28PzEJliGVk3U6F U7NqtaAa1YHEaDjAqI/HK3t+xS/UxNmjB2hDoTXyFOvdcUYjTWCBjFa/3u9EZrzL WcLQQkolBI3+q/+bs92Pa8zVkMNGMufDVepxmVcqGwRnagwyt46hzdRb8hEbAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUjS1FhEvxuXgDY+GiAW+ZLC9SeJkwHwYDVR0j BBgwFoAUhXomhNfbyJznhOTfFvGhwD2UVYUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVU LzAvODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84NTdBMjY4NEQ3REJDODlDRTc4NEU0REYxNkYx QTFDMDNEOTQ1NTg1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVULzAvODU3QTI2ODREN0RC Qzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGxT++8Em8DM IZDpnmUpfGsrrBgcUtjcMfRVvU1MgOzXMAN/HgIU4SMYCKD8FsrSPUzGD3ZSDUEE nAB2Rl+R7/Wfrzr3QMLkf2/8sUwRToZSUET/uPg2cB9rmw6cFJIy5py78JtjnTON 2oqHkiFwIm6LsAESPt53zbyZ13vyJ09v+52weZ0ieAdFfE8pvJMkcWy32X9S4jpH sI79GXw4ln9iACRO8MABv9SDpgHNSWgKBD2ocWpZhjR7ZBDib6wkybpIeE68fwmw iTOeaiK4+YzqbdbFZ5bCpNq1ckOOwHONyzDh7qIG4ha8P1kyRZ+0kl6iIV1HsNeI vKHITA3ShCI= -----END CERTIFICATE-----Generated at Sun Oct 4 07:02:09 2026 by rpki-client