$ rpki-client -vvf rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft File: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft (raw, json) Hash identifier: 9K5JIz51sIaz5QlwXx/tZL8GIM10/yAkY19CuyFqe3E= Subject key identifier: 99:3A:69:7F:9A:2A:6C:67:57:7E:E9:38:D8:91:0E:7A:82:49:31:88 Authority key identifier: D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90 Certificate issuer: /CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90 Certificate serial: 3A30778F65DAAF3F43C01A8AAE83AE4CDE89BD70 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft Manifest number: 05 Signing time: Wed 13 May 2026 03:51:39 +0000 Manifest this update: Wed 13 May 2026 03:46:39 +0000 Manifest next update: Thu 14 May 2026 07:15:39 +0000 Files and hashes: 1: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl (hash: pFEfqvoYOoYpGv3NwjbEuA2mH25wdGcFLTisKf1Q6KQ=) 2: 3130332e3132362e38382e302f32342d3234203d3e203438303234.roa (hash: Sd6Q7YbX3hdrc0mji0ubguZvwyQj1Zh6EbmfJzdspl4=) 3: 3130332e3132362e38382e302f32322d3234203d3e203138303436.roa (hash: WYxsc8T18C1jcbx9ZCaeGlpS/rFD1h17zovXNmt5VJk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:30:77:8f:65:da:af:3f:43:c0:1a:8a:ae:83:ae:4c:de:89:bd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90 Validity Not Before: May 13 03:46:39 2026 GMT Not After : May 14 07:15:39 2026 GMT Subject: CN=993A697F9A2A6C67577EE938D8910E7A82493188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9b:4f:f5:64:1e:88:11:ad:12:b7:1a:a0:02: 7c:45:ba:48:6e:e8:06:4b:bb:47:7f:ce:08:85:e9: 88:c3:5e:e4:73:08:ba:1d:4c:4f:20:c6:5d:66:06: 96:5a:21:3f:8a:ac:87:08:19:08:f6:20:b4:8d:4d: 5a:c8:e0:8b:f7:37:f6:b2:60:78:06:84:5c:75:76: fb:10:7a:33:3f:7e:4d:c8:6d:94:2d:12:a4:56:d9: eb:5f:b2:c3:4b:fa:cd:a0:7b:d1:f9:73:ac:dd:35: e9:3d:61:ac:d8:41:30:70:76:ac:84:41:52:a6:b9: b9:84:6e:e7:bd:1a:52:a5:60:48:78:9d:78:57:1b: 20:93:e2:6d:47:a6:fc:b5:b7:6d:28:2b:59:b5:73: f8:e9:7f:ed:17:e5:c4:22:6f:7d:5e:88:c8:8e:d2: ca:cb:75:06:ea:89:41:a2:14:ea:dd:d2:f6:29:74: 5e:69:5f:3c:6d:ed:ab:6e:c8:1b:a0:3a:e4:ab:b8: 0c:b3:03:96:20:81:1d:a4:5c:ca:31:ba:bb:a0:d3: 61:c6:73:fe:ad:cd:4e:48:13:c9:68:f6:ce:89:1b: dc:40:c7:5d:3d:f9:36:55:c0:93:b3:0c:75:d3:35: 19:4c:ac:7a:b2:44:46:37:23:08:8c:07:6f:4b:3b: b8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3A:69:7F:9A:2A:6C:67:57:7E:E9:38:D8:91:0E:7A:82:49:31:88 X509v3 Authority Key Identifier: keyid:D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:84:ba:17:19:fa:2d:37:df:ab:b4:5d:c5:07:a2:d9:26:b8: 1b:56:f6:6d:91:54:4e:20:6b:66:c9:90:d8:18:6f:18:fd:10: 18:71:43:cc:d0:86:32:af:a3:20:98:ea:2c:21:4b:0b:71:c2: f9:16:22:de:50:75:ec:e9:0d:bd:35:71:97:fd:f0:c8:11:c0: aa:5f:e7:73:d1:47:99:e8:ba:d6:a2:a8:7b:d0:0a:53:6e:b6: e9:e2:aa:3f:b6:df:43:81:b3:d4:87:33:7b:d2:34:81:9f:79: 9f:49:b8:65:e4:22:df:76:2e:cc:d0:da:5d:71:f9:5f:b6:de: 9d:ba:fd:43:48:1d:48:97:f2:25:fc:14:65:e3:1d:99:d4:d1: 27:51:66:4f:a5:5e:0d:93:b9:04:f1:8a:46:a7:23:4d:52:8b: 5f:e4:7d:8b:70:6a:98:70:e0:f6:fc:af:e4:a2:71:62:62:8f: 66:9a:51:10:11:74:7b:fa:71:be:7a:79:78:6b:f5:da:29:9d: b9:a1:65:9c:9b:db:02:a3:c4:22:e7:ea:08:60:00:6a:62:b1: ea:a4:d4:9a:4a:04:ef:c7:9d:79:73:91:30:61:69:6a:78:f5: 8b:08:d3:20:d5:4c:e5:5a:e8:fe:42:21:4d:8f:e4:96:43:aa: d2:c1:26:d6 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUOjB3j2Xarz9DwBqKroOuTN6JvXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFBRTMzMzgwMzVCRkNBN0M0RTg2RkJDMjgxQTFGREYw QkU2OUI5MDAeFw0yNjA1MTMwMzQ2MzlaFw0yNjA1MTQwNzE1MzlaMDMxMTAvBgNV BAMTKDk5M0E2OTdGOUEyQTZDNjc1NzdFRTkzOEQ4OTEwRTdBODI0OTMxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRm0/1ZB6IEa0StxqgAnxFukhu 6AZLu0d/zgiF6YjDXuRzCLodTE8gxl1mBpZaIT+KrIcIGQj2ILSNTVrI4Iv3N/ay YHgGhFx1dvsQejM/fk3IbZQtEqRW2etfssNL+s2ge9H5c6zdNek9YazYQTBwdqyE QVKmubmEbue9GlKlYEh4nXhXGyCT4m1Hpvy1t20oK1m1c/jpf+0X5cQib31eiMiO 0srLdQbqiUGiFOrd0vYpdF5pXzxt7atuyBugOuSruAyzA5YggR2kXMoxurug02HG c/6tzU5IE8lo9s6JG9xAx109+TZVwJOzDHXTNRlMrHqyREY3IwiMB29LO7gTAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUmTppf5oqbGdXfuk42JEOeoJJMYgwHwYDVR0j BBgwFoAU0a4zOANb/KfE6G+8KBof3wvmm5AwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hBTkdG VS8wL0QxQUUzMzM4MDM1QkZDQTdDNEU4NkZCQzI4MUExRkRGMEJFNjlCOTAuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvRDFBRTMzMzgwMzVCRkNBN0M0RTg2RkJDMjgx QTFGREYwQkU2OUI5MC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NIQU5HRlUvMC9EMUFFMzMzODAz NUJGQ0E3QzRFODZGQkMyODFBMUZERjBCRTY5QjkwLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYS6Fxn6 LTffq7RdxQei2Sa4G1b2bZFUTiBrZsmQ2BhvGP0QGHFDzNCGMq+jIJjqLCFLC3HC +RYi3lB17OkNvTVxl/3wyBHAql/nc9FHmei61qKoe9AKU2626eKqP7bfQ4Gz1Icz e9I0gZ95n0m4ZeQi33YuzNDaXXH5X7benbr9Q0gdSJfyJfwUZeMdmdTRJ1FmT6Ve DZO5BPGKRqcjTVKLX+R9i3BqmHDg9vyv5KJxYmKPZppREBF0e/pxvnp5eGv12imd uaFlnJvbAqPEIufqCGAAamKx6qTUmkoE78edeXORMGFpanj1iwjTINVM5Vro/kIh TY/klkOq0sEm1g== -----END CERTIFICATE-----Generated at Wed May 13 20:36:12 2026 by rpki-client