$ rpki-client -vvf rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft File: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft (raw, json) Hash identifier: fMCkzIpIAs0eNH1kfrNZbQ/GdP2m7SD0ZEZzSkzhXDg= Subject key identifier: 24:75:26:86:71:34:75:C5:86:ED:DB:6F:CD:E4:EF:5C:A4:DF:A8:DF Authority key identifier: 85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 Certificate issuer: /CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Certificate serial: 05990930E8C69060E24FF4AB5C04D957D0259689 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft Manifest number: 84 Signing time: Fri 14 Aug 2026 16:42:21 +0000 Manifest this update: Fri 14 Aug 2026 16:37:21 +0000 Manifest next update: Sat 15 Aug 2026 18:22:21 +0000 Files and hashes: 1: 36312e35372e3232342e302f32302d3234203d3e203137373130.roa (hash: X08v+g23C1Fx8BQtKNgspF5UjPkGFKh01lY2BRa8ypo=) 2: 3130332e3233342e38302e302f32322d3234203d3e203137373130.roa (hash: uqLuHrrFZUmLWpdnoJCaLRe1oXTuRusUvNya24FB8bg=) 3: 3130332e3233342e38312e302f32342d3234203d3e203137373130.roa (hash: Zvu3k5iDBaX9iOQpea8Ybb+zcrWBht3qRGl2nLlRl/o=) 4: 857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl (hash: 2vM8qK+FnFyQklIG0biKgODX+jjI84A1NS1j8zC4Ryg=) 5: 3135302e3130372e36342e302f32322d3234203d3e203137373130.roa (hash: n+v5o9SBdWVqA5qvRZf6BeSCSFLkZj6roCOPAhBcFqM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 18:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:99:09:30:e8:c6:90:60:e2:4f:f4:ab:5c:04:d9:57:d0:25:96:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=857A2684D7DBC89CE784E4DF16F1A1C03D945585 Validity Not Before: Aug 14 16:37:21 2026 GMT Not After : Aug 15 18:22:21 2026 GMT Subject: CN=24752686713475C586EDDB6FCDE4EF5CA4DFA8DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:a0:17:fb:b3:33:64:04:26:4b:63:0d:70: f6:dc:49:c7:6c:4d:78:75:e3:39:cd:41:15:6b:e9: 58:96:4d:de:a7:13:71:fb:68:b0:fd:7b:8f:e9:5b: 9e:fd:74:98:06:94:57:8e:b5:57:8e:8f:91:db:38: 0a:42:90:09:33:0d:58:72:52:07:5c:88:f5:05:db: 59:dd:5d:06:dd:19:49:ba:f0:03:d1:60:d6:04:48: 7d:03:ff:7f:be:b0:d8:ba:18:68:1c:6e:24:aa:f7: 5a:8a:78:03:56:73:8d:ed:89:ed:32:44:53:bb:7c: 08:c3:eb:f7:f9:8e:ee:03:05:29:6f:54:e6:7e:7c: 4f:b8:71:19:87:84:b0:d2:48:b8:d2:69:d1:43:da: 3b:a5:12:c0:8e:9f:a7:49:ea:b1:d5:96:bc:50:4f: 24:7d:3b:8d:ec:f7:14:92:58:89:a4:da:00:55:dd: 29:07:7a:9a:0b:77:3f:a5:03:fe:fb:e8:82:ad:3d: 96:aa:8b:04:07:7d:0b:ff:13:bf:7a:73:1f:29:5b: e0:a5:14:8c:d6:54:a7:ec:71:6d:27:00:0a:8e:05: 47:c7:56:83:4f:a4:64:93:62:d7:b0:d5:6b:c3:be: 4a:9b:90:d2:72:aa:e6:a7:e1:05:fe:78:dd:ef:c3: 76:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:75:26:86:71:34:75:C5:86:ED:DB:6F:CD:E4:EF:5C:A4:DF:A8:DF X509v3 Authority Key Identifier: keyid:85:7A:26:84:D7:DB:C8:9C:E7:84:E4:DF:16:F1:A1:C0:3D:94:55:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/857A2684D7DBC89CE784E4DF16F1A1C03D945585.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PIINET/0/857A2684D7DBC89CE784E4DF16F1A1C03D945585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:26:08:db:f0:24:25:ed:0f:11:a8:55:1f:0f:43:80:ad:f0: f4:ca:5a:98:c5:0e:b3:24:01:40:a2:76:cd:a6:66:07:9a:28: 51:3a:19:23:88:03:60:28:3c:9d:f5:bb:2f:db:ae:d5:dc:f8: 2d:00:bc:cf:83:9f:da:33:b9:de:6f:cb:30:12:b2:c0:40:42: 50:30:ed:a6:4a:58:a4:f7:d7:d6:87:a5:3c:47:44:f6:6a:64: 67:ad:24:02:3a:db:c7:7f:6b:49:05:60:4b:80:a5:49:a5:19: 58:3a:9e:5f:68:ee:66:da:59:dd:b7:8e:ab:2b:3e:44:52:75: d1:77:f8:14:b8:1c:85:1d:04:8a:c9:4b:92:41:1e:c7:e1:97: ce:8d:d5:be:85:7d:a9:aa:fe:a5:35:54:14:a4:5b:a5:55:8c: 95:74:89:7f:6a:3b:37:93:e3:74:1c:35:c3:b2:98:57:e5:1c: f5:bc:fe:1b:a3:ac:ec:6a:8e:22:bf:73:71:0b:c8:2b:95:a0: 0c:e4:22:39:e5:b5:f1:78:29:22:12:ad:a8:1b:81:b2:cc:a6: 59:9f:2c:19:2e:01:7f:d8:38:fe:d8:a5:bf:95:5c:94:87:ad: 39:a0:f0:1f:9e:37:5b:36:1c:c9:dc:af:79:d7:74:c5:bd:5d: 87:62:67:63 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUBZkJMOjGkGDiT/SrXATZV9AllokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAz RDk0NTU4NTAeFw0yNjA4MTQxNjM3MjFaFw0yNjA4MTUxODIyMjFaMDMxMTAvBgNV BAMTKDI0NzUyNjg2NzEzNDc1QzU4NkVEREI2RkNERTRFRjVDQTRERkE4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtaAX+7MzZAQmS2MNcPbcScds TXh14znNQRVr6ViWTd6nE3H7aLD9e4/pW579dJgGlFeOtVeOj5HbOApCkAkzDVhy UgdciPUF21ndXQbdGUm68APRYNYESH0D/3++sNi6GGgcbiSq91qKeANWc43tie0y RFO7fAjD6/f5ju4DBSlvVOZ+fE+4cRmHhLDSSLjSadFD2julEsCOn6dJ6rHVlrxQ TyR9O43s9xSSWImk2gBV3SkHepoLdz+lA/776IKtPZaqiwQHfQv/E796cx8pW+Cl FIzWVKfscW0nAAqOBUfHVoNPpGSTYtew1WvDvkqbkNJyquan4QX+eN3vw3aBAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUJHUmhnE0dcWG7dtvzeTvXKTfqN8wHwYDVR0j BBgwFoAUhXomhNfbyJznhOTfFvGhwD2UVYUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVU LzAvODU3QTI2ODREN0RCQzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84NTdBMjY4NEQ3REJDODlDRTc4NEU0REYxNkYx QTFDMDNEOTQ1NTg1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUElJTkVULzAvODU3QTI2ODREN0RC Qzg5Q0U3ODRFNERGMTZGMUExQzAzRDk0NTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANImCNvwJCXt DxGoVR8PQ4Ct8PTKWpjFDrMkAUCids2mZgeaKFE6GSOIA2AoPJ31uy/brtXc+C0A vM+Dn9ozud5vyzASssBAQlAw7aZKWKT319aHpTxHRPZqZGetJAI628d/a0kFYEuA pUmlGVg6nl9o7mbaWd23jqsrPkRSddF3+BS4HIUdBIrJS5JBHsfhl86N1b6Ffamq /qU1VBSkW6VVjJV0iX9qOzeT43QcNcOymFflHPW8/hujrOxqjiK/c3ELyCuVoAzk IjnltfF4KSISragbgbLMplmfLBkuAX/YOP7Ypb+VXJSHrTmg8B+eN1s2HMncr3nX dMW9XYdiZ2M= -----END CERTIFICATE-----Generated at Sat Aug 15 05:27:25 2026 by rpki-client