$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.mft File: mgzAu2MdFRMQI4SQg9lBotvN-mU.mft (raw, json) Hash identifier: UP1jGv/kt+kNHF9UN6TLpjTd4zhAqJ+ew6pQP0QltmA= Subject key identifier: 4A:4D:F4:81:3E:4B:7F:8C:32:24:F4:1D:66:99:28:16:9D:E4:3A:B1 Authority key identifier: 9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65 Certificate issuer: /CN=9A0CC0BB631D15131023849083D941A2DBCDFA65 Certificate serial: 040C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.mft Manifest number: 0407 Signing time: Sun 26 Apr 2026 17:04:52 +0000 Manifest this update: Sun 26 Apr 2026 17:04:52 +0000 Manifest next update: Tue 28 Apr 2026 17:04:52 +0000 Files and hashes: 1: XPrM1LaVIbQwT7rMMnAaLDmpBhk.roa (hash: qYPJ4Rx3jWotbSaxl5ragkrBL0zTcKpqWVCvoBptGRQ=) 2: mgzAu2MdFRMQI4SQg9lBotvN-mU.crl (hash: 3yLmS4gwhAWsFW20jZTWfMVtdbN2tNvURd10SQ3pgMU=) 3: qgOaViPcN4L98yRIgFSn3HaTGYs.roa (hash: K+EL15c28hgV4Cb0fsTmZSWErMzggQc9YUvFN73g1m4=) 4: xTExfB0jOCFW_HvSExDO--zZxeQ.roa (hash: wn+mu83zqWZqHj4dYPxNAS1yFnh8c3TSnFKAeF+06b0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 09:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1036 (0x40c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A0CC0BB631D15131023849083D941A2DBCDFA65 Validity Not Before: Apr 26 17:04:52 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4A4DF4813E4B7F8C3224F41D669928169DE43AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:59:b7:a6:ee:5f:12:2a:71:4d:a5:03:68: 47:9b:ee:30:cf:46:7a:73:f7:10:93:10:f1:ee:d7: f5:c6:e4:e7:8b:cb:10:07:0b:7f:92:c1:fb:7e:d2: 91:62:a6:10:6d:f9:de:03:ce:88:d1:6a:82:55:5f: 4d:60:a4:12:8e:1f:49:be:05:89:52:d8:f3:10:bb: 4f:4b:92:0a:8d:c1:10:c8:64:b0:5e:e9:01:df:c8: 62:2f:d4:5b:9d:41:fe:e3:2b:36:19:28:f6:e2:ae: 26:a0:52:8c:9e:30:e1:90:7d:5e:68:27:29:91:cc: 6a:d6:5d:34:59:6d:1c:7d:e9:2f:d9:8b:44:2e:4e: c3:50:9b:97:87:66:d4:11:eb:f1:c8:fa:91:af:e7: 06:e5:af:cf:11:c2:03:e2:4c:09:6d:01:0a:cd:12: ee:3e:04:5b:97:46:44:d4:39:93:54:b2:0d:9b:6e: 0d:14:9d:94:26:3f:80:97:74:21:88:1a:ec:bd:13: 5c:a2:a5:26:5e:a5:60:c8:97:3f:6d:d5:46:2d:f0: d8:4a:e4:e2:70:ed:51:8e:e2:67:b8:80:cc:00:bc: 2f:d6:0b:4a:96:37:63:26:a6:4e:b5:c2:83:29:93: e1:ca:d2:44:55:5c:32:03:b3:71:ae:b1:45:67:43: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4D:F4:81:3E:4B:7F:8C:32:24:F4:1D:66:99:28:16:9D:E4:3A:B1 X509v3 Authority Key Identifier: keyid:9A:0C:C0:BB:63:1D:15:13:10:23:84:90:83:D9:41:A2:DB:CD:FA:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mgzAu2MdFRMQI4SQg9lBotvN-mU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMYKL/mgzAu2MdFRMQI4SQg9lBotvN-mU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ad:9a:d4:f4:64:14:86:39:33:38:ad:df:ab:ec:b3:0d:b3: c9:65:73:77:be:dc:51:10:45:23:b8:f8:48:15:b1:74:9f:ef: 56:29:be:89:71:99:be:08:49:5e:76:a2:a2:7d:b3:fe:e5:dc: f9:cf:4c:2f:64:f8:18:da:23:19:66:e2:22:39:13:e1:0a:8e: 3e:c8:45:68:e4:cc:3b:58:dc:04:c7:88:2f:e1:a4:c5:f2:05: 39:ad:57:fe:0c:9d:bb:5c:a8:f0:cf:e7:9c:ec:f4:93:f0:dc: 13:fa:8c:bc:ce:8c:fd:65:b0:89:ae:1d:f3:74:9f:f8:71:71: 66:aa:8d:05:b1:1c:54:03:d0:58:9f:08:02:9f:8b:c8:d9:79: a3:fb:2e:a1:ab:cc:c4:e9:40:3f:1b:39:2a:0f:f4:10:70:01: 39:68:73:36:21:d2:02:6d:8e:4f:1f:b6:3d:d2:92:06:ca:7b: 9b:b0:74:12:a5:8c:50:01:da:8d:c6:ff:4e:44:a3:81:1a:80: 4f:b8:f2:9b:4b:dd:8c:3b:44:fa:a3:e2:39:17:0e:9d:54:0c: 4e:97:53:b9:6e:27:d5:8d:11:11:a3:4c:d4:8b:46:0a:94:68: ba:9c:3a:cb:0d:f9:01:5d:9f:df:23:4c:70:02:ba:27:1e:2c: 51:85:21:d9 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICBAwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEw Q0MwQkI2MzFEMTUxMzEwMjM4NDkwODNEOTQxQTJEQkNERkE2NTAeFw0yNjA0MjYx NzA0NTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRBNERGNDgxM0U0QjdG OEMzMjI0RjQxRDY2OTkyODE2OURFNDNBQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKIFm3pu5fEipxTaUDaEeb7jDPRnpz9xCTEPHu1/XG5OeLyxAH C3+Swft+0pFiphBt+d4DzojRaoJVX01gpBKOH0m+BYlS2PMQu09LkgqNwRDIZLBe 6QHfyGIv1FudQf7jKzYZKPbiriagUoyeMOGQfV5oJymRzGrWXTRZbRx96S/Zi0Qu TsNQm5eHZtQR6/HI+pGv5wblr88RwgPiTAltAQrNEu4+BFuXRkTUOZNUsg2bbg0U nZQmP4CXdCGIGuy9E1yipSZepWDIlz9t1UYt8NhK5OJw7VGO4me4gMwAvC/WC0qW N2Mmpk61woMpk+HK0kRVXDIDs3GusUVnQ5VrAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUSk30gT5Lf4wyJPQdZpkoFp3kOrEwHwYDVR0jBBgwFoAUmgzAu2MdFRMQI4SQ g9lBotvN+mUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1ZS0wv bWd6QXUyTWRGUk1RSTRTUWc5bEJvdHZOLW1VLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9tZ3pBdTJNZEZSTVFJNFNRZzlsQm90dk4tbVUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTVlLTC9tZ3pBdTJNZEZSTVFJNFNRZzls Qm90dk4tbVUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHK2a 1PRkFIY5Mzit36vssw2zyWVzd77cURBFI7j4SBWxdJ/vVim+iXGZvghJXnaion2z /uXc+c9ML2T4GNojGWbiIjkT4QqOPshFaOTMO1jcBMeIL+GkxfIFOa1X/gydu1yo 8M/nnOz0k/DcE/qMvM6M/WWwia4d83Sf+HFxZqqNBbEcVAPQWJ8IAp+LyNl5o/su oavMxOlAPxs5Kg/0EHABOWhzNiHSAm2OTx+2PdKSBsp7m7B0EqWMUAHajcb/TkSj gRqAT7jym0vdjDtE+qPiORcOnVQMTpdTuW4n1Y0REaNM1ItGCpRoupw6yw35AV2f 3yNMcAK6Jx4sUYUh2Q== -----END CERTIFICATE-----Generated at Mon Apr 27 08:26:40 2026 by rpki-client