$ rpki-client -vvf rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft File: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft (raw, json) Hash identifier: JkvUxqBvGc7bwPdPgr1wkfBMSyt5dz6PZyIDyOMLJ5I= Subject key identifier: 21:C1:C2:BD:69:D5:16:41:61:4F:98:4C:AB:66:D6:11:B0:0B:DD:A7 Authority key identifier: 85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 Certificate issuer: /CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Certificate serial: 6FBFE94496456F997B6D9C10D3B36292995437C4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft Manifest number: 07 Signing time: Wed 13 May 2026 06:57:29 +0000 Manifest this update: Wed 13 May 2026 06:52:29 +0000 Manifest next update: Thu 14 May 2026 09:46:29 +0000 Files and hashes: 1: 3130332e3233342e38302e302f32322d3234203d3e203137373130.roa (hash: uqLuHrrFZUmLWpdnoJCaLRe1oXTuRusUvNya24FB8bg=) 2: 3130332e3233342e38312e302f32342d3234203d3e203137373130.roa (hash: Zvu3k5iDBaX9iOQpea8Ybb+zcrWBht3qRGl2nLlRl/o=) 3: 36312e35372e3232342e302f32302d3234203d3e203137373130.roa (hash: X08v+g23C1Fx8BQtKNgspF5UjPkGFKh01lY2BRa8ypo=) 4: 3135302e3130372e36342e302f32322d3234203d3e203137373130.roa (hash: n+v5o9SBdWVqA5qvRZf6BeSCSFLkZj6roCOPAhBcFqM=) 5: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl (hash: ZbyNZeHk+/AETt/HZ5Sml9RRcVk5irkahzIq4i88yRk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:bf:e9:44:96:45:6f:99:7b:6d:9c:10:d3:b3:62:92:99:54:37:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Validity Not Before: May 13 06:52:29 2026 GMT Not After : May 14 09:46:29 2026 GMT Subject: CN=21C1C2BD69D51641614F984CAB66D611B00BDDA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:a2:86:a5:a6:87:db:c3:83:4d:ff:54:bf: b2:59:e5:5a:d4:03:9b:90:1c:fe:41:ac:7d:22:89: 06:03:f4:76:6f:82:a3:f6:82:e0:c7:83:ff:4e:5d: 11:be:46:e7:5c:cd:ff:89:64:5b:d0:a7:03:fe:10: a4:36:fe:60:d4:93:99:0e:c6:77:95:81:3c:aa:82: 97:e8:cc:b3:bb:e3:c7:74:e0:98:5b:51:15:35:fa: 41:06:8f:af:d9:ba:8e:cb:07:94:b5:5a:ad:20:f9: 10:ff:7d:9d:a8:62:6a:15:06:2f:f4:a1:b5:0e:e1: 46:39:2c:81:36:ba:7c:2d:2d:35:c9:cc:96:68:6b: 94:72:c4:87:54:40:41:0f:8d:0e:b2:ec:2d:99:22: 3a:ec:14:1a:2c:1f:a5:0b:35:e3:83:50:94:43:9e: 0d:4b:95:57:7c:14:2e:91:a9:39:99:c7:dd:e2:78: 67:ba:2e:6e:a2:46:3f:79:ef:d8:ad:97:b1:75:3a: 48:e6:fb:17:68:c3:e5:0b:93:fc:04:70:31:27:2b: 76:d7:99:bb:1f:7f:49:8d:a8:fb:a5:8d:4b:10:f7: b5:99:00:cb:ec:76:ab:19:5c:54:75:0d:15:96:d9: 35:ee:6a:da:e5:ac:88:53:9a:35:18:57:51:95:f1: f5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C1:C2:BD:69:D5:16:41:61:4F:98:4C:AB:66:D6:11:B0:0B:DD:A7 X509v3 Authority Key Identifier: keyid:85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b0:23:34:26:2a:db:00:db:4b:82:a6:3c:4e:e4:0d:4f:6f: d7:74:f8:91:af:e9:45:9d:f4:96:0f:da:fd:cb:92:9f:df:cc: 10:cb:63:97:ed:b5:83:c1:fd:a8:f1:6a:38:4a:35:74:c4:72: e2:a7:f0:12:3b:c1:dd:eb:13:b6:95:d4:b5:91:39:28:ce:b8: 73:17:4c:b7:f5:bd:38:bf:08:82:dd:c1:30:69:e6:8c:c5:73: 25:cb:4f:66:68:a5:45:a0:a3:12:20:b4:1c:8f:31:6d:e4:c4: 40:f4:cc:15:3c:d5:af:cb:06:e9:f5:09:6c:93:49:87:a7:cb: ce:89:33:18:5c:cf:ab:c1:d8:0b:74:fe:cd:c7:f0:4b:5d:a0: e3:cf:ff:24:62:b3:8a:7d:d3:58:a2:2c:db:97:40:ac:95:56: 19:48:9b:cb:5c:c2:a0:4b:0d:89:b9:05:5a:f2:19:8d:10:46: 89:80:7f:18:36:00:7a:97:04:4f:a7:c4:ae:03:5e:d8:26:9a: 7d:e6:63:ba:d8:a3:60:88:33:35:96:98:13:43:92:2e:93:6e: 85:02:1a:d1:6e:6a:b7:b9:a6:fd:db:62:11:5f:9a:25:bc:00: b8:7c:d1:d9:4b:f7:a1:96:7a:7b:8e:c6:31:e3:4f:17:7f:46: 9b:e6:d0:61 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUb7/pRJZFb5l7bZwQ07NikplUN8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAz RDk0NTU4NTAeFw0yNjA1MTMwNjUyMjlaFw0yNjA1MTQwOTQ2MjlaMDMxMTAvBgNV BAMTKDIxQzFDMkJENjlENTE2NDE2MTRGOTg0Q0FCNjZENjExQjAwQkREQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRc6KGpaaH28ODTf9Uv7JZ5VrU A5uQHP5BrH0iiQYD9HZvgqP2guDHg/9OXRG+Rudczf+JZFvQpwP+EKQ2/mDUk5kO xneVgTyqgpfozLO748d04JhbURU1+kEGj6/Zuo7LB5S1Wq0g+RD/fZ2oYmoVBi/0 obUO4UY5LIE2unwtLTXJzJZoa5RyxIdUQEEPjQ6y7C2ZIjrsFBosH6ULNeODUJRD ng1LlVd8FC6RqTmZx93ieGe6Lm6iRj9579itl7F1Okjm+xdow+ULk/wEcDEnK3bX mbsff0mNqPuljUsQ97WZAMvsdqsZXFR1DRWW2TXuatrlrIhTmjUYV1GV8fVXAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUIcHCvWnVFkFhT5hMq2bWEbAL3acwHwYDVR0j BBgwFoAUhXomhNfbyJznhOTfFvGhwD2UVYUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVU LzAvODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84NTdBMjY4NEQ3REJDODlDRTc4NEU0REYxNkYx QTFDMDNEOTQ1NTg1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVULzAvODU3QTI2ODREN0RC Qzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ+wIzQmKtsA 20uCpjxO5A1Pb9d0+JGv6UWd9JYP2v3Lkp/fzBDLY5fttYPB/ajxajhKNXTEcuKn 8BI7wd3rE7aV1LWROSjOuHMXTLf1vTi/CILdwTBp5ozFcyXLT2ZopUWgoxIgtByP MW3kxED0zBU81a/LBun1CWyTSYeny86JMxhcz6vB2At0/s3H8EtdoOPP/yRis4p9 01iiLNuXQKyVVhlIm8tcwqBLDYm5BVryGY0QRomAfxg2AHqXBE+nxK4DXtgmmn3m Y7rYo2CIMzWWmBNDki6TboUCGtFuare5pv3bYhFfmiW8ALh80dlL96GWenuOxjHj Txd/Rpvm0GE= -----END CERTIFICATE-----Generated at Wed May 13 20:33:40 2026 by rpki-client