$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft File: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft (raw, json) Hash identifier: QBF2H03wmAA0cRJcRECMrbgk95RKO9kuG+iDv1cYgy0= Subject key identifier: E0:56:A7:AF:F9:F7:27:32:A2:27:5C:B0:78:DD:07:2D:62:23:6F:7F Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Certificate serial: 20AF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft Manifest number: 209C Signing time: Sat 07 Mar 2026 07:55:12 +0000 Manifest this update: Sat 07 Mar 2026 07:55:12 +0000 Manifest next update: Sat 07 Mar 2026 13:55:12 +0000 Files and hashes: 1: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl (hash: yimGON6RDl/CmzotP+UMzrmQ/q4wZG7+VEpLE5OeTDg=) 2: 19q9YUE92E00MFv6mPOYRiJp_bs.cer (hash: qvgcZ5sujC/VFoKDPMd/BcQ67GGdpEQF+ZfI/6JjZTg=) 3: Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer (hash: GLyAGYZEtykK2F8M1VPYXOGOO3lLljjyfCnPOzLCQsY=) 4: THcKx8Jx2lspFcoBuVmI0EFPQHw.cer (hash: 5qCf8vHI5s/dj0yKzjCNRNXUgeg0JeJVje+vNlO2L2Y=) 5: U0x2J0ozCwce_SDbBfbQQpKTdD4.cer (hash: 9k9xyP9CPxo9MsTikLvIKyHQ14M5uC6zcos87s15VUk=) 6: aDMC32pZIOL4OsTvdmVt3OhA9ZM.cer (hash: eslhc9YxwiK/wFc7vva8jdjonJGa7dv2/fAOopVJvW4=) 7: u4ipF4WngsjqPN3tPnwfCdp59kc.cer (hash: 7uK3NHDPC/X97uov7qJRf3jVbeyqtL+TCaGkcN0Sh/M=) 8: voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer (hash: EYsscO/VgrhhVm4R1wnEvCE3yUU+L1E85by5VdKOLbg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 13:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8367 (0x20af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2 Validity Not Before: Mar 7 07:55:12 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=E056A7AFF9F72732A2275CB078DD072D62236F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:0b:34:55:73:ff:4a:78:ea:7a:f1:4d:13: 5c:91:ee:7c:ea:e3:23:ab:49:e0:46:6f:5e:0b:d5: 2c:73:ec:79:f3:fb:09:8c:43:b3:35:83:f5:55:e3: 13:25:82:f8:87:1f:c9:11:f2:d6:af:b6:fd:b2:d7: 4d:0d:e8:c6:c7:ad:73:cb:20:1c:b7:64:1e:e4:d6: 3e:ca:a3:ac:7e:c6:56:0b:2c:97:5c:be:00:39:af: 5a:0b:23:ba:a9:2e:5a:36:f6:d5:d4:69:34:96:47: 2d:c0:e9:03:7c:e5:0b:56:c1:a2:97:7a:43:67:48: e3:ac:e7:70:27:7c:46:a2:09:f8:9d:8c:03:72:a0: f0:03:1a:7c:38:6d:42:b1:f6:05:4d:ca:7e:ae:9d: f8:86:44:2b:7a:1f:06:dd:9f:86:d6:e4:dd:9c:4e: e3:b6:ce:cc:07:3a:a1:75:bb:b9:5f:2b:e5:7b:65: 0b:2a:6d:ab:07:f5:73:bd:71:6c:e8:58:77:2f:4b: 49:76:91:54:53:9a:e2:ab:8b:01:7b:32:e7:ae:b7: e5:64:cf:b1:2f:eb:46:1e:2b:3a:9d:61:bc:0d:97: 1f:b5:7a:21:77:99:3e:fb:00:1c:e7:af:cb:98:d0: 78:80:68:a9:3e:0e:5a:5d:ea:1b:08:fd:78:71:48: 25:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:56:A7:AF:F9:F7:27:32:A2:27:5C:B0:78:DD:07:2D:62:23:6F:7F X509v3 Authority Key Identifier: keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:f8:30:5c:e0:96:e7:c8:64:ea:1e:a1:f1:68:98:f9:af:f7: 21:7a:1f:67:37:8e:3b:ec:97:2b:00:ac:51:4b:b0:f1:b8:b0: 19:c0:7d:c7:1a:fa:3e:49:21:22:b9:cc:a8:fa:b0:76:1d:e3: 2a:a4:34:89:b8:10:1b:c6:d3:a8:18:72:25:39:c6:b4:7b:7a: 30:9f:48:7b:34:a0:d0:32:19:00:be:00:88:e8:ee:2d:87:4e: 06:bf:9b:23:89:44:2b:f8:06:d1:0c:1f:1c:92:01:68:90:66: 76:79:c8:df:a4:9d:7b:8b:4b:bd:d1:95:af:16:1c:a1:e0:c4: 6f:cd:f7:d6:2b:6e:58:bc:c2:4f:00:43:42:27:ba:d7:63:16: a5:8a:4a:b7:51:97:a1:be:1b:67:c4:dd:9e:4d:d3:82:3e:86: cd:f0:5c:a9:e4:f4:20:34:0f:a0:72:7d:ae:1d:82:71:de:42: ef:a5:cf:62:32:8e:c2:ff:c1:f8:91:04:ef:f7:45:88:08:71: d1:e1:de:b0:ac:55:1f:e0:a9:76:a5:6d:b9:4c:eb:5b:47:93: 1a:5f:26:5c:01:c3:04:62:4c:51:e5:d0:3c:b3:95:0a:fe:a3: 84:77:19:94:c3:3a:56:33:ac:7d:b2:6b:4e:1c:d2:fe:fe:12: 9e:36:45:e5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgICIK8wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEyhEMUQyRjU1QzI2REIyODUyMEE3OTk2RkY3MkVE MDEwNDIwMDc5OEEyMB4XDTI2MDMwNzA3NTUxMloXDTI2MDkzMDAwMDAwMFowMzEx MC8GA1UEAxMoRTA1NkE3QUZGOUY3MjczMkEyMjc1Q0IwNzhERDA3MkQ2MjIzNkY3 RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMUTCzRVc/9KeOp68U0T XJHufOrjI6tJ4EZvXgvVLHPsefP7CYxDszWD9VXjEyWC+IcfyRHy1q+2/bLXTQ3o xsetc8sgHLdkHuTWPsqjrH7GVgssl1y+ADmvWgsjuqkuWjb21dRpNJZHLcDpA3zl C1bBopd6Q2dI46zncCd8RqIJ+J2MA3Kg8AMafDhtQrH2BU3Kfq6d+IZEK3ofBt2f htbk3ZxO47bOzAc6oXW7uV8r5XtlCyptqwf1c71xbOhYdy9LSXaRVFOa4quLAXsy 56635WTPsS/rRh4rOp1hvA2XH7V6IXeZPvsAHOevy5jQeIBoqT4OWl3qGwj9eHFI JbMCAwEAAaOCAhcwggITMB0GA1UdDgQWBBTgVqev+fcnMqInXLB43QctYiNvfzAf BgNVHSMEGDAWgBTR0vVcJtsoUgp5lv9y7QEEIAeYojAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wZEwxWENiYktGSUtlWmJfY3UwQkJDQUhtS0kuY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYy LzBkTDFYQ2JiS0ZJS2VaYl9jdTBCQkNBSG1LSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGVBggrBgEFBQcBCwSBiDCBhTBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzBkTDFYQ2JiS0ZJS2VaYl9jdTBCQkNBSG1L SS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25v dGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ+DBc4JbnyGTq HqHxaJj5r/cheh9nN4477JcrAKxRS7DxuLAZwH3HGvo+SSEiucyo+rB2HeMqpDSJ uBAbxtOoGHIlOca0e3own0h7NKDQMhkAvgCI6O4th04Gv5sjiUQr+AbRDB8ckgFo kGZ2ecjfpJ17i0u90ZWvFhyh4MRvzffWK25YvMJPAENCJ7rXYxalikq3UZehvhtn xN2eTdOCPobN8Fyp5PQgNA+gcn2uHYJx3kLvpc9iMo7C/8H4kQTv90WICHHR4d6w rFUf4Kl2pW25TOtbR5MaXyZcAcMEYkxR5dA8s5UK/qOEdxmUwzpWM6x9smtOHNL+ /hKeNkXl -----END CERTIFICATE-----Generated at Sat Mar 7 12:30:25 2026 by rpki-client