$ rpki-client -vvvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft File: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json) Hash identifier: WYQS5D9QuPsCT9zMZSOHRzzQz5KuRWKk5t+KMZNoo9g= Subject key identifier: 46:2D:D7:D3:2C:91:48:3E:BB:66:8C:D4:DD:33:95:E7:89:F1:7A:89 Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Certificate serial: 01EDE786775539E0C9AC55DE86459477D02AD3E0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft Manifest number: C9 Signing time: Mon 05 Oct 2026 09:32:55 +0000 Manifest this update: Mon 05 Oct 2026 09:27:55 +0000 Manifest next update: Tue 06 Oct 2026 11:46:55 +0000 Files and hashes: 1: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: SJj10N2v0CH81zAiGmLBBeVekbDbwMPmwUw/Y2vKPZc=) 2: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=) 3: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=) 4: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=) 5: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 09:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ed:e7:86:77:55:39:e0:c9:ac:55:de:86:45:94:77:d0:2a:d3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Validity Not Before: Oct 5 09:27:55 2026 GMT Not After : Oct 6 11:46:55 2026 GMT Subject: CN=462DD7D32C91483EBB668CD4DD3395E789F17A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:0e:12:91:61:ad:54:71:86:81:89:83:3c: 46:e7:92:88:bf:0d:a7:e0:04:8b:04:b4:94:18:90: b3:fb:aa:09:e5:44:3b:c4:30:14:69:2a:aa:df:f8: 8e:1c:0f:f2:5b:76:51:2a:fb:65:18:6d:a9:e3:c8: ea:c3:4e:14:eb:0d:06:98:63:1b:c0:77:83:d6:1e: 1f:e2:14:50:d3:b4:d9:30:76:7e:78:4d:6f:55:99: 9a:a2:dd:3b:37:1b:da:55:5d:09:e5:c5:95:c0:ed: 86:54:3d:0a:1a:43:a8:10:ed:fd:09:22:ad:81:76: 4e:5e:05:cd:eb:3b:52:72:8c:9f:01:3a:ea:86:c6: 05:de:18:b3:77:6a:1c:c7:8c:52:e9:e8:32:f3:84: 80:09:a6:af:b3:e2:49:3b:ae:d1:ef:81:ff:05:df: bc:7c:07:b3:8d:dc:0e:c8:c6:bf:75:99:98:58:3d: 3a:29:78:8a:ee:a7:ac:84:d4:e1:bf:6b:a6:67:7d: 8c:99:2d:2c:f7:ae:e9:7d:69:33:4c:ab:b2:ec:ec: 7b:3c:05:1a:3a:0b:14:7a:33:00:dc:60:72:75:f0: a2:19:7a:70:f0:c8:74:dc:c1:96:3c:55:df:05:49: f6:05:de:55:19:62:44:e9:f2:14:89:d6:cb:1b:9f: ad:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2D:D7:D3:2C:91:48:3E:BB:66:8C:D4:DD:33:95:E7:89:F1:7A:89 X509v3 Authority Key Identifier: keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b2:15:4f:a7:4b:69:17:3a:2e:34:89:35:bb:5b:63:2e:e7: 7d:b0:16:b0:1b:8b:95:df:af:c9:88:3f:f9:b7:39:72:0b:84: 97:71:92:4d:e8:cc:cc:1b:40:ca:60:7e:30:f5:46:95:56:35: e3:95:bb:db:42:65:04:f2:c4:41:ec:05:55:a9:63:47:d6:10: bc:1a:de:4e:7b:46:7b:40:78:73:2d:20:1b:77:69:0a:34:85: 86:d1:77:d2:a7:b5:a0:0e:d1:f8:19:c8:4d:95:25:9c:69:de: 1f:f5:72:ac:d2:c3:53:0a:47:43:7f:85:90:a7:e2:81:83:71: 6f:d5:ea:96:9b:3a:ad:e9:8e:91:6d:05:c6:0b:f4:34:79:3c: 12:26:e8:66:1a:af:a1:7b:17:61:91:10:bb:2d:1d:c3:e7:6f: d6:a6:b7:55:65:5d:9e:da:40:2b:91:0d:ef:e2:f1:f0:30:0d: 06:55:94:f8:58:c6:b3:74:3a:ee:e8:b2:a7:62:12:c5:b1:95: c8:7d:82:4e:8f:44:85:9d:e0:60:64:5b:43:2b:44:03:d8:d7: 36:00:be:b1:59:a1:a2:83:d2:7c:85:be:32:1d:69:b8:30:5e: ef:9f:be:94:d4:e2:d1:94:e2:f5:f4:a3:a7:5a:b5:6a:ae:3c: 54:1d:0e:99 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUAe3nhndVOeDJrFXehkWUd9Aq0+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFDMjdENTI0 NjZBQzdFNjAeFw0yNjEwMDUwOTI3NTVaFw0yNjEwMDYxMTQ2NTVaMDMxMTAvBgNV BAMTKDQ2MkREN0QzMkM5MTQ4M0VCQjY2OENENEREMzM5NUU3ODlGMTdBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcg4SkWGtVHGGgYmDPEbnkoi/ DafgBIsEtJQYkLP7qgnlRDvEMBRpKqrf+I4cD/JbdlEq+2UYbanjyOrDThTrDQaY YxvAd4PWHh/iFFDTtNkwdn54TW9VmZqi3Ts3G9pVXQnlxZXA7YZUPQoaQ6gQ7f0J Iq2Bdk5eBc3rO1JyjJ8BOuqGxgXeGLN3ahzHjFLp6DLzhIAJpq+z4kk7rtHvgf8F 37x8B7ON3A7Ixr91mZhYPTopeIrup6yE1OG/a6ZnfYyZLSz3rul9aTNMq7Ls7Hs8 BRo6CxR6MwDcYHJ18KIZenDwyHTcwZY8Vd8FSfYF3lUZYkTp8hSJ1ssbn60DAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQURi3X0yyRSD67ZozU3TOV54nxeokwHwYDVR0j BBgwFoAUTU29KLvriSCzeqYEisJ9UkZqx+YwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VDVU5F VC8wLzRENERCRDI4QkJFQjg5MjBCMzdBQTYwNDhBQzI3RDUyNDY2QUM3RTYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFD MjdENTI0NjZBQzdFNi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NFQ1VORVQvMC80RDREQkQyOEJC RUI4OTIwQjM3QUE2MDQ4QUMyN0Q1MjQ2NkFDN0U2Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbIVT6dL aRc6LjSJNbtbYy7nfbAWsBuLld+vyYg/+bc5cguEl3GSTejMzBtAymB+MPVGlVY1 45W720JlBPLEQewFValjR9YQvBreTntGe0B4cy0gG3dpCjSFhtF30qe1oA7R+BnI TZUlnGneH/VyrNLDUwpHQ3+FkKfigYNxb9Xqlps6remOkW0Fxgv0NHk8EiboZhqv oXsXYZEQuy0dw+dv1qa3VWVdntpAK5EN7+Lx8DANBlWU+FjGs3Q67uiyp2ISxbGV yH2CTo9EhZ3gYGRbQytEA9jXNgC+sVmhooPSfIW+Mh1puDBe75++lNTi0ZTi9fSj p1q1aq48VB0OmQ== -----END CERTIFICATE-----Generated at Mon Oct 5 16:09:56 2026 by rpki-client