$ rpki-client -vvf rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft File: 8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft (raw, json) Hash identifier: 2qS66ZIxsbZ8z/PesP3g3aXOUu0dYhCO1g9hQAPYd9g= Subject key identifier: 96:83:30:99:11:D1:28:1F:E7:92:A4:9A:2E:5D:4B:23:6C:61:C1:BB Authority key identifier: 86:81:A4:AE:9D:1E:38:75:36:C2:E0:B9:1C:79:A8:76:CF:7D:E4:E4 Certificate issuer: /CN=8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4 Certificate serial: 628CB8C3B4AEE75D0C962024735D36BC3FA48964 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft Manifest number: 81 Signing time: Fri 14 Aug 2026 20:38:27 +0000 Manifest this update: Fri 14 Aug 2026 20:33:27 +0000 Manifest next update: Sat 15 Aug 2026 22:24:27 +0000 Files and hashes: 1: 323430323a6361303a3a2f33322d3438203d3e20313331363831.roa (hash: S/vvxrC76LtkDDAr3Lwj+sG9Po2jPNI3vSVyXNzI5B0=) 2: 8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl (hash: fkuQfxdXXn5l4h2elOJElxWER4+gPhJdlE20xVOFnt8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 22:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:8c:b8:c3:b4:ae:e7:5d:0c:96:20:24:73:5d:36:bc:3f:a4:89:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4 Validity Not Before: Aug 14 20:33:27 2026 GMT Not After : Aug 15 22:24:27 2026 GMT Subject: CN=9683309911D1281FE792A49A2E5D4B236C61C1BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:98:c4:70:a8:15:f2:b0:0b:9b:0a:0c:9d: d3:f8:39:88:8d:e4:3c:d3:8d:19:6f:8d:3a:91:bc: 7d:b5:59:74:71:c1:e1:8d:24:93:67:c6:60:0f:ae: 81:03:e3:f8:e7:59:09:ca:80:ff:28:53:51:ba:b4: 9b:a6:e3:57:67:25:0d:ff:67:3a:a2:f9:a9:34:bb: cd:56:76:f9:0b:00:41:ad:6d:27:53:3c:46:da:7b: 85:b2:9b:c3:a7:33:10:6b:71:91:ae:5f:ef:3f:f8: 2c:ae:f4:c0:37:25:13:76:8a:bd:41:a4:a9:d8:57: 89:58:29:5c:c2:8b:18:ba:53:95:82:d7:6a:1e:02: 3b:9b:5f:c3:44:d8:d6:f1:18:e9:cf:d1:06:cb:d3: 4b:d9:a4:b2:41:33:fb:63:67:8b:fe:82:9d:c5:aa: 4d:3b:9f:e3:35:3b:f1:c3:4e:64:12:31:aa:19:d2: 01:af:35:e1:e4:b5:85:de:0c:ec:0a:85:4d:f1:88: 0c:92:1f:b6:4e:6d:56:68:87:79:c4:91:f9:75:d8: 83:51:9a:04:6c:07:8e:45:4a:2f:43:b5:05:da:b3: 54:e3:59:8f:8f:5e:85:f7:9c:0f:94:09:84:5f:64: 40:ee:b0:9b:62:08:f6:b7:14:21:a8:34:8d:24:b8: 56:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:83:30:99:11:D1:28:1F:E7:92:A4:9A:2E:5D:4B:23:6C:61:C1:BB X509v3 Authority Key Identifier: keyid:86:81:A4:AE:9D:1E:38:75:36:C2:E0:B9:1C:79:A8:76:CF:7D:E4:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QISDA/0/8681A4AE9D1E387536C2E0B91C79A876CF7DE4E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:39:eb:32:4d:99:91:6c:28:f2:75:0e:1b:3b:58:07:c5:b5: bb:26:e8:76:6e:2d:bb:8a:5b:df:41:65:71:92:21:ea:27:c6: ab:33:61:cb:ee:e8:7e:5e:1e:3d:f3:1f:76:d5:b4:02:77:b5: bf:1d:0e:3c:5b:cc:b8:9a:5f:08:e3:19:1f:bb:0a:77:e3:cf: 8d:02:bc:78:8d:02:54:eb:ed:9d:d9:80:01:e8:fa:e0:89:11: 7a:64:c3:8c:97:f5:bc:a6:7c:b1:4f:b1:50:89:bd:ac:e4:c1: a2:b4:cb:0e:84:de:fb:38:16:79:86:86:b4:1d:a3:9a:6e:48: eb:0d:c1:98:a7:a4:50:5d:4f:da:13:79:36:be:42:4a:52:f7: d9:1a:31:52:7c:c4:3d:d5:33:46:07:17:fe:1d:bc:c4:e0:31: 9a:a0:87:fb:3b:d5:9e:c7:9c:28:5f:19:1e:38:5b:dd:81:c8: 12:73:22:a0:47:85:bf:c1:84:6d:af:7a:75:6d:16:41:66:c0: d0:1a:70:89:74:01:94:1b:74:ed:cd:bc:5e:83:5d:92:dd:2a: 34:cb:e3:06:3c:a2:b8:db:25:5a:de:5b:ee:1c:a2:f3:92:88: e1:43:d4:af:18:65:73:6f:24:c3:3b:76:9b:e6:a8:2a:e6:af: 6f:54:76:2c -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUYoy4w7Su510MliAkc102vD+kiWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY4MUE0QUU5RDFFMzg3NTM2QzJFMEI5MUM3OUE4NzZD RjdERTRFNDAeFw0yNjA4MTQyMDMzMjdaFw0yNjA4MTUyMjI0MjdaMDMxMTAvBgNV BAMTKDk2ODMzMDk5MTFEMTI4MUZFNzkyQTQ5QTJFNUQ0QjIzNkM2MUMxQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjCJjEcKgV8rALmwoMndP4OYiN 5DzTjRlvjTqRvH21WXRxweGNJJNnxmAProED4/jnWQnKgP8oU1G6tJum41dnJQ3/ Zzqi+ak0u81WdvkLAEGtbSdTPEbae4Wym8OnMxBrcZGuX+8/+Cyu9MA3JRN2ir1B pKnYV4lYKVzCixi6U5WC12oeAjubX8NE2NbxGOnP0QbL00vZpLJBM/tjZ4v+gp3F qk07n+M1O/HDTmQSMaoZ0gGvNeHktYXeDOwKhU3xiAySH7ZObVZoh3nEkfl12INR mgRsB45FSi9DtQXas1TjWY+PXoX3nA+UCYRfZEDusJtiCPa3FCGoNI0kuFZRAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUloMwmRHRKB/nkqSaLl1LI2xhwbswHwYDVR0j BBgwFoAUhoGkrp0eOHU2wuC5HHmods995OQwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUUlTREEv MC84NjgxQTRBRTlEMUUzODc1MzZDMkUwQjkxQzc5QTg3NkNGN0RFNEU0LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzg2ODFBNEFFOUQxRTM4NzUzNkMyRTBCOTFDNzlB ODc2Q0Y3REU0RTQuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9RSVNEQS8wLzg2ODFBNEFFOUQxRTM4 NzUzNkMyRTBCOTFDNzlBODc2Q0Y3REU0RTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDOesyTZmRbCjy dQ4bO1gHxbW7Juh2bi27ilvfQWVxkiHqJ8arM2HL7uh+Xh498x921bQCd7W/HQ48 W8y4ml8I4xkfuwp348+NArx4jQJU6+2d2YAB6PrgiRF6ZMOMl/W8pnyxT7FQib2s 5MGitMsOhN77OBZ5hoa0HaOabkjrDcGYp6RQXU/aE3k2vkJKUvfZGjFSfMQ91TNG Bxf+HbzE4DGaoIf7O9Wex5woXxkeOFvdgcgScyKgR4W/wYRtr3p1bRZBZsDQGnCJ dAGUG3Ttzbxeg12S3So0y+MGPKK42yVa3lvuHKLzkojhQ9SvGGVzbyTDO3ab5qgq 5q9vVHYs -----END CERTIFICATE-----Generated at Sat Aug 15 05:28:30 2026 by rpki-client