$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEYONDORBIT/RVzVDYKVhJn9r8sK3xAlH0yrPi0.mft File: RVzVDYKVhJn9r8sK3xAlH0yrPi0.mft (raw, json) Hash identifier: n4LoHplf6U0yOWtDKPHouxyacBjaqkfCI8PMisfDAt0= Subject key identifier: E6:66:F7:D9:24:90:F1:A8:BD:F5:57:B9:78:FC:18:F7:0B:1D:D9:B1 Authority key identifier: 45:5C:D5:0D:82:95:84:99:FD:AF:CB:0A:DF:10:25:1F:4C:AB:3E:2D Certificate issuer: /CN=455CD50D82958499FDAFCB0ADF10251F4CAB3E2D Certificate serial: 12D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RVzVDYKVhJn9r8sK3xAlH0yrPi0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEYONDORBIT/RVzVDYKVhJn9r8sK3xAlH0yrPi0.mft Manifest number: 12C2 Signing time: Mon 13 Apr 2026 11:33:39 +0000 Manifest this update: Mon 13 Apr 2026 11:33:39 +0000 Manifest next update: Wed 15 Apr 2026 11:33:39 +0000 Files and hashes: 1: RVzVDYKVhJn9r8sK3xAlH0yrPi0.crl (hash: WgYt3/+I4IYtYifDr5duM/tve+ghb1vRfxaZDTdLgDQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEYONDORBIT/RVzVDYKVhJn9r8sK3xAlH0yrPi0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BEYONDORBIT/RVzVDYKVhJn9r8sK3xAlH0yrPi0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RVzVDYKVhJn9r8sK3xAlH0yrPi0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 23:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4819 (0x12d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=455CD50D82958499FDAFCB0ADF10251F4CAB3E2D Validity Not Before: Apr 13 11:33:39 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E666F7D92490F1A8BDF557B978FC18F70B1DD9B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:51:8a:02:56:18:ee:65:39:11:38:fb:34: a8:e5:a9:06:89:b7:5e:ad:96:65:a5:6f:0c:16:fa: 84:d3:26:4b:a7:3a:76:ac:64:68:7d:63:2d:42:75: 54:74:f1:bc:d4:49:24:df:85:70:fc:69:bd:1e:43: 13:31:1c:61:cd:cd:03:fb:a2:dc:b3:c4:16:22:fe: 8a:9a:a3:1b:65:6e:1a:55:78:d0:6b:0e:18:90:68: 9a:37:a4:4d:98:52:31:0e:bd:89:f0:39:c1:c3:58: 4f:ec:cd:18:bb:64:2b:a2:71:61:f3:12:9a:4c:1f: 01:90:ff:d7:ed:5f:ca:be:67:b5:c2:e3:de:1a:76: e3:83:f2:63:b8:1d:37:02:57:33:7d:88:83:15:6a: f8:91:9b:b5:c1:d7:1a:ef:53:e9:12:48:64:d3:05: 50:b1:c4:04:d2:bb:61:af:23:03:01:7c:ed:54:fa: 81:9c:be:fb:01:2c:57:89:6b:4f:23:85:4c:ce:4e: 1c:11:3e:a2:a3:f5:a5:c6:55:d1:15:d5:05:b8:c8: d8:b8:e7:87:31:a4:80:ea:bf:65:7b:4e:a7:15:6d: 2e:0b:08:66:82:d6:dc:8d:ba:8f:e1:14:7d:42:6b: 5f:8d:12:a3:75:e8:20:d8:33:1c:c9:20:0b:fc:9a: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:66:F7:D9:24:90:F1:A8:BD:F5:57:B9:78:FC:18:F7:0B:1D:D9:B1 X509v3 Authority Key Identifier: keyid:45:5C:D5:0D:82:95:84:99:FD:AF:CB:0A:DF:10:25:1F:4C:AB:3E:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEYONDORBIT/RVzVDYKVhJn9r8sK3xAlH0yrPi0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RVzVDYKVhJn9r8sK3xAlH0yrPi0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEYONDORBIT/RVzVDYKVhJn9r8sK3xAlH0yrPi0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ab:5b:c5:3e:8e:0e:06:00:5d:b6:ef:0e:5d:bf:dc:89:f4: 01:f2:07:1c:e8:24:4f:df:06:cd:10:d6:0f:6f:54:5f:e0:1a: a2:02:3b:55:f0:d8:b6:1e:44:9c:01:e4:05:33:a0:55:0f:46: 4b:a1:68:3f:f2:21:52:b4:a3:c8:12:92:8d:d0:fd:0c:90:4b: f2:d1:3a:7f:dd:c3:4d:e0:f0:21:39:aa:5f:7c:51:a6:ac:9e: c2:0a:33:c7:6f:e9:37:b0:dc:5e:6f:65:5f:7c:56:9b:f1:fc: 91:1c:50:9d:27:40:06:94:ee:14:6c:93:67:fb:9e:c2:7d:23: 13:73:55:6c:5a:9f:8a:72:21:e2:d2:62:19:7e:ce:a7:7b:f6: 6a:c9:58:61:3e:2d:0b:dd:5e:bc:06:03:d9:a2:03:72:be:92: 2c:9f:7b:98:c3:10:45:1a:b6:48:45:12:fc:1d:01:0c:75:aa: 55:b6:0e:5a:7d:f1:d7:74:9e:b4:8f:b2:8b:3d:65:5e:44:86: 44:96:4c:c9:1e:9b:2f:63:0b:47:99:3c:63:0a:0a:b0:f0:87: 98:48:9f:a9:a5:92:6c:e3:8d:e7:2f:69:3b:a1:fa:79:9e:a0: ba:b7:2f:c3:91:a2:b9:8c:16:64:c7:aa:eb:39:97:0f:60:ce: fb:12:b1:81 -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgICEtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU1 Q0Q1MEQ4Mjk1ODQ5OUZEQUZDQjBBREYxMDI1MUY0Q0FCM0UyRDAeFw0yNjA0MTMx MTMzMzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU2NjZGN0Q5MjQ5MEYx QThCREY1NTdCOTc4RkMxOEY3MEIxREQ5QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTilGKAlYY7mU5ETj7NKjlqQaJt16tlmWlbwwW+oTTJkunOnas ZGh9Yy1CdVR08bzUSSTfhXD8ab0eQxMxHGHNzQP7otyzxBYi/oqaoxtlbhpVeNBr DhiQaJo3pE2YUjEOvYnwOcHDWE/szRi7ZCuicWHzEppMHwGQ/9ftX8q+Z7XC494a duOD8mO4HTcCVzN9iIMVaviRm7XB1xrvU+kSSGTTBVCxxATSu2GvIwMBfO1U+oGc vvsBLFeJa08jhUzOThwRPqKj9aXGVdEV1QW4yNi454cxpIDqv2V7TqcVbS4LCGaC 1tyNuo/hFH1Ca1+NEqN16CDYMxzJIAv8mhpPAgMBAAGjggIRMIICDTAdBgNVHQ4E FgQU5mb32SSQ8ai99Ve5ePwY9wsd2bEwHwYDVR0jBBgwFoAURVzVDYKVhJn9r8sK 3xAlH0yrPi0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBhBgNVHR8EWjBYMFag VKBShlByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVZT05E T1JCSVQvUlZ6VkRZS1ZoSm45cjhzSzN4QWxIMHlyUGkwLmNybDBgBggrBgEFBQcB AQRUMFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kv VFdOSUNDQS9SVnpWRFlLVmhKbjlyOHNLM3hBbEgweXJQaTAuY2VyMA4GA1UdDwEB /wQEAwIHgDCBoQYIKwYBBQUHAQsEgZQwgZEwXAYIKwYBBQUHMAuGUHJzeW5jOi8v cnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9CRVlPTkRPUkJJVC9SVnpWRFlL VmhKbjlyOHNLM3hBbEgweXJQaTAubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jy ZHAudHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0B AQsFAAOCAQEAgKtbxT6ODgYAXbbvDl2/3In0AfIHHOgkT98GzRDWD29UX+AaogI7 VfDYth5EnAHkBTOgVQ9GS6FoP/IhUrSjyBKSjdD9DJBL8tE6f93DTeDwITmqX3xR pqyewgozx2/pN7DcXm9lX3xWm/H8kRxQnSdABpTuFGyTZ/uewn0jE3NVbFqfinIh 4tJiGX7Op3v2aslYYT4tC91evAYD2aIDcr6SLJ97mMMQRRq2SEUS/B0BDHWqVbYO Wn3x13SetI+yiz1lXkSGRJZMyR6bL2MLR5k8YwoKsPCHmEifqaWSbOON5y9pO6H6 eZ6gurcvw5GiuYwWZMeq6zmXD2DO+xKxgQ== -----END CERTIFICATE-----Generated at Tue Apr 14 23:25:42 2026 by rpki-client