$ rpki-client -vvf rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft File: 5407824F2094BDB5E96C450A4F36563A73225CCB.mft (raw, json) Hash identifier: xgt18Y/xtuyUrEA8ug+JDDWmI02YH43S2Tguo3uRAAU= Subject key identifier: 33:21:D7:DE:FE:E9:5C:F1:E1:6F:ED:A8:4E:7D:D7:17:13:86:A3:F7 Authority key identifier: 54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB Certificate issuer: /CN=5407824F2094BDB5E96C450A4F36563A73225CCB Certificate serial: 4A7611A71F5093F006734F5B44239DE51FF86157 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft Manifest number: 08 Signing time: Wed 13 May 2026 08:07:46 +0000 Manifest this update: Wed 13 May 2026 08:02:46 +0000 Manifest next update: Thu 14 May 2026 10:04:46 +0000 Files and hashes: 1: 323430313a626136303a3a2f33322d3438203d3e203332353935.roa (hash: RBIOP3iKwRtqrSWqj44FA3/x/uVqA34IvA8ZG8hK44Q=) 2: 5407824F2094BDB5E96C450A4F36563A73225CCB.crl (hash: Ji8waHCPb0nvVermRt5GsxO2RheJBbIII2ySfPX8yUY=) 3: 323430313a626136303a3a2f33322d3438203d3e2039393233.roa (hash: 5TVrVE33kIL0XhQaO3gte1KLCXkOhF1o3uG63J4/55s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:76:11:a7:1f:50:93:f0:06:73:4f:5b:44:23:9d:e5:1f:f8:61:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5407824F2094BDB5E96C450A4F36563A73225CCB Validity Not Before: May 13 08:02:46 2026 GMT Not After : May 14 10:04:46 2026 GMT Subject: CN=3321D7DEFEE95CF1E16FEDA84E7DD7171386A3F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:85:51:0b:97:20:43:7c:a7:5e:a6:66:85:fe: 8b:34:63:59:98:0e:61:8d:d2:ab:59:11:08:96:40: 04:3c:7f:80:70:ea:28:42:61:dd:fb:91:42:d4:b4: 0d:c7:94:57:87:dc:90:29:a2:09:b5:63:37:90:96: a8:86:82:34:02:4e:20:e9:c4:33:f3:6b:32:5b:18: e6:a3:5e:0a:25:a9:95:be:b7:2d:76:4e:18:28:76: fa:7e:76:20:2c:8b:0b:9a:03:50:7d:dd:09:76:ba: 67:02:03:6c:97:1d:92:64:4b:a5:ce:93:6f:aa:ea: af:ee:22:5e:a3:83:75:b7:23:e0:02:ce:5b:a3:c3: 10:aa:7a:8c:00:0b:57:60:d8:8c:0f:e8:12:45:1a: 08:1b:82:d0:2c:01:28:c7:61:47:74:2d:9b:46:42: ec:d0:31:bf:3b:65:62:79:74:fd:27:4c:8b:0e:59: 25:e4:10:9c:00:12:4d:24:d9:a1:c3:88:98:b3:38: a1:d6:6c:77:4c:fe:3d:8f:09:b5:44:4a:24:3f:d0: 13:a5:59:b7:d9:3e:eb:1c:55:61:a8:4a:02:af:9a: 83:03:c5:9b:1f:de:60:9a:60:b7:5f:02:77:9f:bc: 46:28:8d:89:2c:2f:dc:05:3a:7c:62:12:3f:93:47: a3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:21:D7:DE:FE:E9:5C:F1:E1:6F:ED:A8:4E:7D:D7:17:13:86:A3:F7 X509v3 Authority Key Identifier: keyid:54:07:82:4F:20:94:BD:B5:E9:6C:45:0A:4F:36:56:3A:73:22:5C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5407824F2094BDB5E96C450A4F36563A73225CCB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/0/5407824F2094BDB5E96C450A4F36563A73225CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7a:ff:35:ca:aa:cb:7f:2c:82:86:0d:f2:a1:6e:a8:6c:5c: 34:0a:82:7c:b3:cc:85:3f:9d:71:04:6a:a4:cb:c7:bb:a0:be: c1:ac:e0:6b:ae:58:d1:2a:57:99:88:6d:a8:c6:d9:eb:f0:cc: 1a:5f:0f:f4:f3:6c:cb:af:af:56:b5:5b:ab:65:7e:48:8f:52: 79:65:29:39:cd:0b:2f:62:05:79:95:46:10:72:4c:f1:c5:43: fa:fe:1c:ea:17:b1:54:30:60:af:69:ad:f2:e1:c9:e4:c9:7f: ec:5f:a0:c9:65:a4:82:65:e7:f0:be:33:c7:76:dd:dd:e4:22: 3c:24:3d:bc:7d:97:9c:e9:c5:a2:e1:e8:2f:1e:79:e8:e6:cf: 5e:84:9f:b6:e4:5f:73:30:26:a8:f7:9f:1e:49:bf:49:45:15: 6e:5f:6c:7e:63:e9:c1:3f:18:c6:20:4e:6a:8d:23:52:1e:35: 1b:d6:13:08:f2:7e:9b:b6:98:bf:ae:75:fe:ce:dd:cb:72:c1: dc:4f:22:85:f6:18:bc:d9:f2:0c:b6:fa:ec:dc:80:78:74:10: 77:ac:80:b9:ad:0c:07:e7:bb:ad:44:31:2d:51:2b:14:ba:83: 9a:3d:65:53:3b:9c:b0:3c:6c:ec:82:17:69:b5:9c:0a:24:2a: 2b:05:2f:b2 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUSnYRpx9Qk/AGc09bRCOd5R/4YVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQwNzgyNEYyMDk0QkRCNUU5NkM0NTBBNEYzNjU2M0E3 MzIyNUNDQjAeFw0yNjA1MTMwODAyNDZaFw0yNjA1MTQxMDA0NDZaMDMxMTAvBgNV BAMTKDMzMjFEN0RFRkVFOTVDRjFFMTZGRURBODRFN0RENzE3MTM4NkEzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDThVELlyBDfKdepmaF/os0Y1mY DmGN0qtZEQiWQAQ8f4Bw6ihCYd37kULUtA3HlFeH3JApogm1YzeQlqiGgjQCTiDp xDPzazJbGOajXgolqZW+ty12Thgodvp+diAsiwuaA1B93Ql2umcCA2yXHZJkS6XO k2+q6q/uIl6jg3W3I+ACzlujwxCqeowAC1dg2IwP6BJFGggbgtAsASjHYUd0LZtG QuzQMb87ZWJ5dP0nTIsOWSXkEJwAEk0k2aHDiJizOKHWbHdM/j2PCbVESiQ/0BOl WbfZPuscVWGoSgKvmoMDxZsf3mCaYLdfAnefvEYojYksL9wFOnxiEj+TR6MTAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUMyHX3v7pXPHhb+2oTn3XFxOGo/cwHwYDVR0j BBgwFoAUVAeCTyCUvbXpbEUKTzZWOnMiXMswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExF LzAvNTQwNzgyNEYyMDk0QkRCNUU5NkM0NTBBNEYzNjU2M0E3MzIyNUNDQi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS81NDA3ODI0RjIwOTRCREI1RTk2QzQ1MEE0RjM2 NTYzQTczMjI1Q0NCLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExFLzAvNTQwNzgyNEYyMDk0 QkRCNUU5NkM0NTBBNEYzNjU2M0E3MzIyNUNDQi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAJ6/zXKqst/ LIKGDfKhbqhsXDQKgnyzzIU/nXEEaqTLx7ugvsGs4GuuWNEqV5mIbajG2evwzBpf D/TzbMuvr1a1W6tlfkiPUnllKTnNCy9iBXmVRhByTPHFQ/r+HOoXsVQwYK9prfLh yeTJf+xfoMllpIJl5/C+M8d23d3kIjwkPbx9l5zpxaLh6C8eeejmz16En7bkX3Mw Jqj3nx5Jv0lFFW5fbH5j6cE/GMYgTmqNI1IeNRvWEwjyfpu2mL+udf7O3ctywdxP IoX2GLzZ8gy2+uzcgHh0EHesgLmtDAfnu61EMS1RKxS6g5o9ZVM7nLA8bOyCF2m1 nAokKisFL7I= -----END CERTIFICATE-----Generated at Wed May 13 20:36:00 2026 by rpki-client