$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft File: CA678C886D87F023B9297877BF550E88E90AE169.mft (raw, json) Hash identifier: Sj185xKgh9d+gZ19riPBoBr+pyk/2ZWeYBmutc8MYWs= Subject key identifier: 3B:F5:DC:AA:58:01:36:48:67:DA:CB:B9:B7:6E:57:90:30:E0:F7:71 Authority key identifier: CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69 Certificate issuer: /CN=CA678C886D87F023B9297877BF550E88E90AE169 Certificate serial: 2812FF2C4277FA4F96ACFD147AD8604A48863F7A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft Manifest number: C4 Signing time: Sat 03 Oct 2026 22:48:18 +0000 Manifest this update: Sat 03 Oct 2026 22:43:18 +0000 Manifest next update: Sun 04 Oct 2026 23:48:18 +0000 Files and hashes: 1: 34392e3231332e33342e302f32332d3234203d3e2037353336.roa (hash: UiYvDw3Nz5+XLnUJ6ot0sHBwCYvrMQN4qa4YEtJyIAc=) 2: CA678C886D87F023B9297877BF550E88E90AE169.crl (hash: VWqI16SsgDKF32k3VDgs9/EMa7O0pMyijAChpitsdiA=) 3: 34392e3231332e33342e302f32332d3234203d3e203231383539.roa (hash: fJnxPhgLX/rch2cog18IcRNcikXmBfffJ21WF3oWCTE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:12:ff:2c:42:77:fa:4f:96:ac:fd:14:7a:d8:60:4a:48:86:3f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA678C886D87F023B9297877BF550E88E90AE169 Validity Not Before: Oct 3 22:43:18 2026 GMT Not After : Oct 4 23:48:18 2026 GMT Subject: CN=3BF5DCAA5801364867DACBB9B76E579030E0F771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:3b:e9:74:2d:35:71:e1:99:92:cc:40:4d: 0d:bc:50:79:9e:63:9f:12:69:e9:bb:be:86:03:9a: 9f:86:eb:bd:65:6b:e8:a8:64:1d:10:c6:81:ef:e7: b5:d5:e8:59:dd:f9:56:f9:98:c9:63:ae:d1:25:b0: ea:c5:42:61:0b:f3:ee:68:25:a0:01:f6:17:ec:ef: ad:4b:be:7d:de:2b:f4:fa:29:d7:4e:b2:10:df:07: 3b:66:f6:2f:01:1a:9b:7e:6c:8a:6e:ac:7c:57:e9: a2:48:3c:15:1f:c6:74:8f:2d:17:90:5f:cf:93:88: 7e:88:f5:ca:4a:d8:39:78:0a:25:57:13:1b:a4:26: fe:4d:b4:b2:8a:e3:49:b2:ec:f9:3f:3c:24:e9:e7: 24:53:66:f0:a0:b7:a9:d2:6c:14:d3:6f:4c:b6:e4: b0:0d:a2:b7:3f:7c:45:d0:26:6e:ea:cd:61:0b:63: e3:b4:5e:50:bf:8b:d3:00:6b:58:af:4b:e5:e1:e0: 41:46:be:f2:b9:38:9b:af:d4:83:29:91:47:c2:0f: 0a:07:7b:5b:5e:d6:c9:1b:3a:9e:11:d0:88:9d:c8: 8c:16:61:9e:05:26:a9:c0:be:4c:e7:ed:cd:28:a2: e8:c1:6e:f1:68:b2:d3:f9:9d:76:8d:d3:b2:5f:5e: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F5:DC:AA:58:01:36:48:67:DA:CB:B9:B7:6E:57:90:30:E0:F7:71 X509v3 Authority Key Identifier: keyid:CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:fb:c0:af:de:ab:34:3d:fe:07:52:28:9d:c7:1f:f6:32:6a: 55:cc:0c:b1:cb:5d:20:ae:89:40:a1:45:c9:63:d5:18:cd:05: e9:c2:79:79:64:2e:cc:b0:a1:e2:fb:8f:a2:98:aa:42:9a:82: a9:74:b7:b3:7a:64:e7:2f:91:e5:19:ee:3d:f1:83:11:72:86: 48:3b:8b:0e:cc:90:f6:e0:df:13:33:41:35:6a:52:da:ee:2a: 41:fa:6e:24:2d:d4:fd:51:21:21:a7:4d:c5:61:95:a9:d1:b8: e4:9f:63:40:0f:d6:1b:98:17:a3:aa:95:dd:72:82:f8:25:be: fe:04:ce:9c:73:ec:b7:ae:6a:9e:f4:5c:b5:b7:f9:eb:b2:f3: 1d:6f:d4:d5:7c:5f:ec:70:81:d2:ab:e5:79:e3:0f:78:74:49: d4:b7:58:49:c3:05:52:f2:92:b7:65:63:ce:3d:19:42:9f:63: 2f:9d:91:72:f5:f9:99:03:3b:bc:29:9c:50:6e:f8:fa:0b:51: e0:a1:06:c5:8d:bb:81:b5:6e:4a:af:e3:11:10:89:75:f4:6a: 09:95:87:d5:52:2c:e5:9a:33:9e:69:db:6b:cc:48:bd:d2:3f: fe:bc:54:99:d5:31:fd:44:a9:38:43:09:b8:80:84:c9:b9:99: 26:6e:6f:7f -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUKBL/LEJ3+k+WrP0UethgSkiGP3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2NzhDODg2RDg3RjAyM0I5Mjk3ODc3QkY1NTBFODhF OTBBRTE2OTAeFw0yNjEwMDMyMjQzMThaFw0yNjEwMDQyMzQ4MThaMDMxMTAvBgNV BAMTKDNCRjVEQ0FBNTgwMTM2NDg2N0RBQ0JCOUI3NkU1NzkwMzBFMEY3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYTvpdC01ceGZksxATQ28UHme Y58Saem7voYDmp+G671la+ioZB0QxoHv57XV6Fnd+Vb5mMljrtElsOrFQmEL8+5o JaAB9hfs761Lvn3eK/T6KddOshDfBztm9i8BGpt+bIpurHxX6aJIPBUfxnSPLReQ X8+TiH6I9cpK2Dl4CiVXExukJv5NtLKK40my7Pk/PCTp5yRTZvCgt6nSbBTTb0y2 5LANorc/fEXQJm7qzWELY+O0XlC/i9MAa1ivS+Xh4EFGvvK5OJuv1IMpkUfCDwoH e1te1skbOp4R0IidyIwWYZ4FJqnAvkzn7c0ooujBbvFostP5nXaN07JfXq2LAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUO/XcqlgBNkhn2su5t25XkDDg93EwHwYDVR0j BBgwFoAUymeMiG2H8CO5KXh3v1UOiOkK4WkwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hJWUlZ SS8wL0NBNjc4Qzg4NkQ4N0YwMjNCOTI5Nzg3N0JGNTUwRTg4RTkwQUUxNjkuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQ0E2NzhDODg2RDg3RjAyM0I5Mjk3ODc3QkY1 NTBFODhFOTBBRTE2OS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NISVlJWUkvMC9DQTY3OEM4ODZE ODdGMDIzQjkyOTc4NzdCRjU1MEU4OEU5MEFFMTY5Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/vAr96r ND3+B1Ionccf9jJqVcwMsctdIK6JQKFFyWPVGM0F6cJ5eWQuzLCh4vuPopiqQpqC qXS3s3pk5y+R5RnuPfGDEXKGSDuLDsyQ9uDfEzNBNWpS2u4qQfpuJC3U/VEhIadN xWGVqdG45J9jQA/WG5gXo6qV3XKC+CW+/gTOnHPst65qnvRctbf567LzHW/U1Xxf 7HCB0qvleeMPeHRJ1LdYScMFUvKSt2Vjzj0ZQp9jL52RcvX5mQM7vCmcUG74+gtR 4KEGxY27gbVuSq/jERCJdfRqCZWH1VIs5Zoznmnba8xIvdI//rxUmdUx/USpOEMJ uICEybmZJm5vfw== -----END CERTIFICATE-----Generated at Sun Oct 4 07:18:30 2026 by rpki-client