$ rpki-client -vvvf rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft File: 8DFE241B6B56425D05308D6CF84E530F0AD99312.mft (raw, json) Hash identifier: p5QY/D/aItvimAdqn5FZ1R5xmWCZOXqB0awSOUZFTto= Subject key identifier: 10:DA:A1:CD:3A:3B:88:44:0F:88:0A:C0:E8:40:42:3A:58:C4:9B:86 Authority key identifier: 8D:FE:24:1B:6B:56:42:5D:05:30:8D:6C:F8:4E:53:0F:0A:D9:93:12 Certificate issuer: /CN=8DFE241B6B56425D05308D6CF84E530F0AD99312 Certificate serial: 034F212EEF198F31BDDC78356698A0356F77828B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft Manifest number: C8 Signing time: Tue 06 Oct 2026 03:56:15 +0000 Manifest this update: Tue 06 Oct 2026 03:51:15 +0000 Manifest next update: Wed 07 Oct 2026 04:36:15 +0000 Files and hashes: 1: 3130332e3135392e3230362e302f32332d3234203d3e20313332333639.roa (hash: Njq8PYL4sI6Vl6OpGpULpdTiodD6fNVPkIMKZbxgiBg=) 2: 3130332e3135392e3230362e302f32332d3234203d3e203331393732.roa (hash: eK6+/TDh22lTbQdbALPHM65FmvpRbot7SqYBFf/0Vc0=) 3: 8DFE241B6B56425D05308D6CF84E530F0AD99312.crl (hash: gbL+Xd4Ydpd/zvIIvu1g0XRVh9a015RTwbR6r/zynPQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.crl rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 02:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4f:21:2e:ef:19:8f:31:bd:dc:78:35:66:98:a0:35:6f:77:82:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DFE241B6B56425D05308D6CF84E530F0AD99312 Validity Not Before: Oct 6 03:51:15 2026 GMT Not After : Oct 7 04:36:15 2026 GMT Subject: CN=10DAA1CD3A3B88440F880AC0E840423A58C49B86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:cc:b5:18:1e:96:16:8a:2f:e5:d7:fd:ef: c9:21:b1:10:0d:3d:cf:97:ec:84:6f:e7:37:d7:2b: b2:41:98:a5:2e:7e:b7:70:e3:23:23:77:08:f6:37: e7:4a:cb:bc:f1:fe:6e:54:ef:d4:22:56:ea:e0:66: 37:60:cb:f7:6f:eb:15:71:86:b8:74:e0:2e:c8:55: d7:7d:27:b5:6b:91:e7:b7:21:e1:b6:9f:ad:b0:f7: 00:da:b7:92:8f:5a:35:ab:82:77:4f:26:63:6f:cd: fb:c0:09:1c:1f:e0:42:3d:3d:00:c5:bd:6d:1e:2d: 22:88:62:72:3d:d6:66:0b:26:a6:7c:42:11:e4:95: 63:01:19:50:62:76:e5:30:38:4d:97:f5:c0:38:ad: ef:0e:b3:8e:07:11:14:b9:85:3d:b6:5f:1f:fa:e4: 2e:c6:02:1c:b7:c7:6e:ac:f4:48:6e:0c:67:50:cb: c2:21:7f:83:2d:fa:19:f4:e0:00:62:8b:4e:f9:09: 4d:a6:a9:cf:bf:ba:78:5c:5d:7d:f3:c9:2e:29:3f: 30:20:2a:be:fa:ff:a8:70:a9:9b:71:2b:d4:42:37: 04:9b:b8:b2:3c:46:af:9a:15:21:aa:4b:6c:36:a1: 8d:69:c8:14:9e:17:64:44:95:34:ba:66:1a:b8:84: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DA:A1:CD:3A:3B:88:44:0F:88:0A:C0:E8:40:42:3A:58:C4:9B:86 X509v3 Authority Key Identifier: keyid:8D:FE:24:1B:6B:56:42:5D:05:30:8D:6C:F8:4E:53:0F:0A:D9:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8DFE241B6B56425D05308D6CF84E530F0AD99312.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TTNS/0/8DFE241B6B56425D05308D6CF84E530F0AD99312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:25:9a:3d:a7:e7:2d:be:0e:89:b3:0b:ba:ef:8a:1e:39:76: 08:11:c5:d0:19:8b:8f:e0:22:32:85:69:1f:60:fd:aa:15:94: 52:44:16:f7:39:96:e9:be:5f:43:bf:cf:5d:32:27:85:07:33: 17:04:87:95:60:8b:f0:44:e8:6f:98:46:83:db:f5:c3:c4:3b: a6:7e:39:8d:06:a4:36:21:c0:18:87:9a:60:48:66:4b:9e:0f: e7:9e:77:a7:07:99:b4:c3:51:22:98:8a:95:2f:e9:5f:02:18: 70:07:86:b4:5a:f4:e0:2f:fc:4f:85:b2:a8:9d:55:1e:eb:94: 3f:3e:b0:b1:84:39:64:86:87:d1:9a:b4:0a:5d:55:11:0c:2f: e3:9c:fb:b0:e3:21:88:25:f3:0d:24:f6:3f:1c:dc:d8:c9:c9: 6d:4a:49:3c:c1:18:20:0b:40:9e:e6:ab:ea:40:21:04:ab:ad: 03:e3:62:b4:f9:f6:98:fd:7b:ff:c0:8f:b5:9d:e3:4b:62:65: 95:ba:34:3c:86:a9:05:86:83:d1:a1:15:5a:93:9a:28:b9:c2: 98:81:51:16:52:fa:be:f2:97:b8:1c:ca:a2:3f:fe:25:11:b8: b1:a3:e7:01:d9:83:99:f2:27:de:e7:dd:48:f2:93:25:a5:ad: 8e:b6:e5:05 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUA08hLu8ZjzG93Hg1ZpigNW93goswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERGRTI0MUI2QjU2NDI1RDA1MzA4RDZDRjg0RTUzMEYw QUQ5OTMxMjAeFw0yNjEwMDYwMzUxMTVaFw0yNjEwMDcwNDM2MTVaMDMxMTAvBgNV BAMTKDEwREFBMUNEM0EzQjg4NDQwRjg4MEFDMEU4NDA0MjNBNThDNDlCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVMy1GB6WFoov5df978khsRAN Pc+X7IRv5zfXK7JBmKUufrdw4yMjdwj2N+dKy7zx/m5U79QiVurgZjdgy/dv6xVx hrh04C7IVdd9J7Vrkee3IeG2n62w9wDat5KPWjWrgndPJmNvzfvACRwf4EI9PQDF vW0eLSKIYnI91mYLJqZ8QhHklWMBGVBiduUwOE2X9cA4re8Os44HERS5hT22Xx/6 5C7GAhy3x26s9EhuDGdQy8Ihf4Mt+hn04ABii075CU2mqc+/unhcXX3zyS4pPzAg Kr76/6hwqZtxK9RCNwSbuLI8Rq+aFSGqS2w2oY1pyBSeF2RElTS6Zhq4hNdBAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUENqhzTo7iEQPiArA6EBCOljEm4YwHwYDVR0j BBgwFoAUjf4kG2tWQl0FMI1s+E5TDwrZkxIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFROUy8w LzhERkUyNDFCNkI1NjQyNUQwNTMwOEQ2Q0Y4NEU1MzBGMEFEOTkzMTIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOERGRTI0MUI2QjU2NDI1RDA1MzA4RDZDRjg0RTUz MEYwQUQ5OTMxMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RUTlMvMC84REZFMjQxQjZCNTY0MjVE MDUzMDhENkNGODRFNTMwRjBBRDk5MzEyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICWaPafnLb4OibML uu+KHjl2CBHF0BmLj+AiMoVpH2D9qhWUUkQW9zmW6b5fQ7/PXTInhQczFwSHlWCL 8ETob5hGg9v1w8Q7pn45jQakNiHAGIeaYEhmS54P5553pweZtMNRIpiKlS/pXwIY cAeGtFr04C/8T4WyqJ1VHuuUPz6wsYQ5ZIaH0Zq0Cl1VEQwv45z7sOMhiCXzDST2 Pxzc2MnJbUpJPMEYIAtAnuar6kAhBKutA+NitPn2mP17/8CPtZ3jS2Jllbo0PIap BYaD0aEVWpOaKLnCmIFRFlL6vvKXuBzKoj/+JRG4saPnAdmDmfIn3ufdSPKTJaWt jrblBQ== -----END CERTIFICATE-----Generated at Tue Oct 6 19:51:24 2026 by rpki-client