$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft File: _HUspZ646u8j0iXcZ6oIUgHx95w.mft (raw, json) Hash identifier: cVT8MXg9CSjOYvjEHAiIn47wtUg3LcVY2L9DzqApf+M= Subject key identifier: DE:FF:81:41:E2:DE:64:B1:11:89:27:32:8C:2D:59:C6:62:78:E5:9D Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C Certificate issuer: /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C Certificate serial: 02AA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft Manifest number: 0283 Signing time: Wed 22 Apr 2026 08:03:53 +0000 Manifest this update: Wed 22 Apr 2026 08:03:53 +0000 Manifest next update: Wed 22 Apr 2026 14:03:53 +0000 Files and hashes: 1: 5PX3XPInRwLdrxjNJFjpDmV_YWE.roa (hash: oZRkpZSmBjyDmZ2aKyrQVa9J3wZO7SNOQisdVK+47NQ=) 2: 5R7-cVCAF-siafJrsFpLMo5QwAI.roa (hash: TNahB6rZrA74mKx05W5b/7mY0h3f5HFKLhMN37gRl+Q=) 3: FI_l4-13QP9OGl6Mb5mklqo6scA.roa (hash: 6XXI7Jhd9lXAImf1MeS6P7d+O2EVvcvFLkcH2BaNDoU=) 4: KIITV7eWhVy2oyjflPz5VX2jgW4.roa (hash: lWCYvPowyiiCW0rJqficFkjP3myn6ivGv6yghD3b/2M=) 5: QRnbkM5AcAl5FgR7GO9y9QtvHIc.roa (hash: RrTZzOTPCCr5VdsUJACfpPtRGltHjXfTFa3k7aCF36U=) 6: QlJRPkwzvFSkzFyqNqAHw2qpp8o.roa (hash: sLB/lAuXpVWxEYttjxjEfkV/SwqGJLAlO66H053YWyQ=) 7: _HUspZ646u8j0iXcZ6oIUgHx95w.crl (hash: envs1SS6w4x92PUEzvMplvc6MA1unOOkIW1Ud3u6rDY=) 8: tpH271p44tFxIoooS8Y6JbCVsC4.roa (hash: Z0Kbx5ZrwKvQdCFKt2vuEDClyylwA8Wh7Aymeh8HVtk=) 9: wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa (hash: 36N1FeAVuZE8eI+ldZfqvGhEClJE27XR+yAWiFk5XZA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C Validity Not Before: Apr 22 08:03:53 2026 GMT Not After : Dec 30 15:30:20 2026 GMT Subject: CN=DEFF8141E2DE64B1118927328C2D59C66278E59D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:4e:5c:da:be:9e:de:b7:29:af:72:f2:25: 5d:77:d2:2d:f8:c9:e6:cb:72:b1:9b:a4:cd:57:f6: 36:0f:be:04:d2:08:d2:3b:b2:40:d9:05:22:dc:e6: ab:90:56:72:d2:20:d6:b0:cf:3c:33:9f:34:e7:d9: fd:56:0e:28:f3:4a:e2:5e:13:23:56:26:80:01:ce: e5:1a:04:81:b4:72:54:19:1f:cb:0d:c1:2d:40:a9: 68:21:e0:89:87:35:3e:d3:ac:06:dd:58:3e:46:96: a6:fd:60:eb:26:b8:fa:d6:64:74:bb:cc:de:ed:a1: 5d:28:d6:1d:26:ac:65:65:66:2b:8d:42:7a:85:a0: f7:cf:13:d8:12:d5:cd:88:f2:ba:0f:40:52:24:ef: 23:eb:93:bc:40:a0:74:2c:ff:26:16:d9:52:ea:e2: 0d:de:e7:e8:ca:4c:08:80:c3:60:5a:26:13:0f:9a: 7f:cc:ce:42:81:55:a3:d0:52:b3:fe:a9:65:43:8d: e3:0f:5b:d9:8f:7e:1e:a0:24:93:4e:b2:74:c6:3a: 44:e4:91:6a:49:a2:df:12:5c:16:19:0a:8b:a1:52: 15:ea:d3:80:87:8a:52:fe:7e:ba:af:44:4b:8f:a7: 17:97:d9:e4:1c:90:20:b3:32:c9:ca:0e:6d:f7:5f: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FF:81:41:E2:DE:64:B1:11:89:27:32:8C:2D:59:C6:62:78:E5:9D X509v3 Authority Key Identifier: keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f3:60:2c:58:42:23:4d:87:68:4f:a8:00:ac:71:56:c6:1d: cb:ae:14:e2:36:c0:74:51:b5:10:40:fb:19:25:a7:96:55:e9: 78:89:b1:3c:ec:16:53:c2:a9:3b:22:6c:4c:c4:df:61:97:6b: f6:59:ff:3a:f5:0e:ff:8f:16:20:f8:c1:a0:a4:81:c9:72:7a: 00:42:40:05:53:ea:13:56:06:8c:3b:d4:35:b1:aa:ff:fb:b3: 7d:51:ca:ea:00:57:7a:ed:7a:8d:f9:3b:27:80:ca:3d:81:f3: 37:bb:ad:fc:94:03:27:c3:bf:5c:fe:f5:b7:8f:85:3d:97:a8: 11:62:ae:9e:b8:c6:e8:fc:ad:6d:6d:de:7c:c9:9b:c4:85:43: 9c:dc:89:e3:5d:d5:2e:6d:19:3e:0b:bd:32:cb:8a:88:e2:40: 89:b0:64:ea:48:ee:79:c0:8d:03:48:f4:22:b7:a9:2f:7d:3f: 38:d5:d9:4a:23:fa:37:d6:cb:34:41:ec:fe:fd:ad:2a:27:b0: 48:75:42:14:a8:3e:9e:5f:91:ce:bd:8e:07:15:41:cc:ee:21: fc:a3:af:38:88:81:a7:7d:0f:8c:41:5f:4a:ce:b1:f2:a9:8d: 6a:01:92:df:e7:6d:96:c2:a2:37:5a:b8:eb:53:1d:57:e0:36: aa:b8:49:54 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICAqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkM3 NTJDQTU5RUI4RUFFRjIzRDIyNURDNjdBQTA4NTIwMUYxRjc5QzAeFw0yNjA0MjIw ODAzNTNaFw0yNjEyMzAxNTMwMjBaMDMxMTAvBgNVBAMTKERFRkY4MTQxRTJERTY0 QjExMTg5MjczMjhDMkQ1OUM2NjI3OEU1OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAV05c2r6e3rcpr3LyJV130i34yebLcrGbpM1X9jYPvgTSCNI7 skDZBSLc5quQVnLSINawzzwznzTn2f1WDijzSuJeEyNWJoABzuUaBIG0clQZH8sN wS1AqWgh4ImHNT7TrAbdWD5Glqb9YOsmuPrWZHS7zN7toV0o1h0mrGVlZiuNQnqF oPfPE9gS1c2I8roPQFIk7yPrk7xAoHQs/yYW2VLq4g3e5+jKTAiAw2BaJhMPmn/M zkKBVaPQUrP+qWVDjeMPW9mPfh6gJJNOsnTGOkTkkWpJot8SXBYZCouhUhXq04CH ilL+frqvREuPpxeX2eQckCCzMsnKDm33X5P9AgMBAAGjggILMIICBzAdBgNVHQ4E FgQU3v+BQeLeZLERiScyjC1ZxmJ45Z0wHwYDVR0jBBgwFoAU/HUspZ646u8j0iXc Z6oIUgHx95wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQU9URVJO RVQvX0hVc3BaNjQ2dThqMGlYY1o2b0lVZ0h4OTV3LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9fSFVzcFo2NDZ1OGowaVhjWjZvSVVnSHg5NXcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BT1RFUk5FVC9fSFVzcFo2NDZ1OGow aVhjWjZvSVVnSHg5NXcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUPNgLFhCI02HaE+oAKxxVsYdy64U4jbAdFG1EED7GSWnllXpeImxPOwWU8Kp OyJsTMTfYZdr9ln/OvUO/48WIPjBoKSByXJ6AEJABVPqE1YGjDvUNbGq//uzfVHK 6gBXeu16jfk7J4DKPYHzN7ut/JQDJ8O/XP71t4+FPZeoEWKunrjG6PytbW3efMmb xIVDnNyJ413VLm0ZPgu9MsuKiOJAibBk6kjuecCNA0j0IrepL30/ONXZSiP6N9bL NEHs/v2tKiewSHVCFKg+nl+Rzr2OBxVBzO4h/KOvOIiBp30PjEFfSs6x8qmNagGS 3+dtlsKiN1q461MdV+A2qrhJVA== -----END CERTIFICATE-----Generated at Wed Apr 22 11:26:43 2026 by rpki-client