$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft File: Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft (raw, json) Hash identifier: +m4TxwGkltQyAnJKpDIDLmB+IhhsK+4NmqrHG9Rt3l0= Subject key identifier: 3E:91:C8:32:C1:A0:B7:FD:FA:E6:CC:51:A2:5A:5D:22:91:43:62:79 Authority key identifier: 46:3A:AF:9D:F9:F6:55:8C:60:E4:81:6D:A0:24:85:62:F6:90:05:07 Certificate issuer: /CN=463AAF9DF9F6558C60E4816DA0248562F6900507 Certificate serial: 01EA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft Manifest number: 01E9 Signing time: Tue 21 Apr 2026 20:03:51 +0000 Manifest this update: Tue 21 Apr 2026 20:03:51 +0000 Manifest next update: Wed 22 Apr 2026 02:03:51 +0000 Files and hashes: 1: Rjqvnfn2VYxg5IFtoCSFYvaQBQc.crl (hash: 37W3eyRLrdpiPqgo5x52wH+K3QuG/4qmuWIDp3pTz+M=) 2: rPdWtUsi2UAHVk-l8KJCbvrCOD8.roa (hash: oTS/FYxx55v1DjeUunKoD2Yztyue5p9rzC+R5qtA5ek=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 02:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=463AAF9DF9F6558C60E4816DA0248562F6900507 Validity Not Before: Apr 21 20:03:51 2026 GMT Not After : Jan 15 15:30:19 2027 GMT Subject: CN=3E91C832C1A0B7FDFAE6CC51A25A5D2291436279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:f1:ec:9f:17:01:a4:cd:e1:b8:ac:d8:66: c5:09:3d:cb:c0:5e:b7:22:ae:46:46:92:3e:18:90: 64:6f:48:f7:42:51:7f:d2:21:55:8f:63:f3:13:b6: f1:0b:bd:ae:ec:4e:77:68:a3:6b:44:33:20:83:fc: 43:d6:3e:fb:f9:f0:d0:57:92:c3:b3:e4:da:d1:cd: 0a:21:31:fb:11:e3:31:1d:96:a9:6f:2c:8f:62:8b: 7e:78:6e:0d:f9:df:93:b8:84:17:43:c7:02:81:a2: 05:83:48:fd:69:12:76:0f:de:12:bb:54:c9:a3:ea: 2e:d7:31:de:24:e9:da:0a:b0:78:eb:55:09:37:de: a7:c3:d5:f0:53:f8:07:46:d2:57:3f:26:70:14:ac: e6:86:f5:6c:a0:fc:74:50:8d:2e:5e:20:b6:43:f5: 68:71:7c:0e:06:aa:66:b3:10:2a:f4:13:f1:7c:8f: d8:9f:a6:88:71:d8:37:a3:8c:8a:dd:0e:46:eb:df: 29:92:77:75:24:a7:56:5d:47:fb:bd:3d:38:2b:33: b6:3d:e2:38:a1:fe:cb:a1:d0:ee:2d:63:bd:3b:f1: 9e:1d:f4:8f:df:08:8a:4a:30:fa:67:6d:b6:38:6d: ef:70:b4:9c:4d:8d:dd:29:8a:27:1c:33:e9:43:8a: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:91:C8:32:C1:A0:B7:FD:FA:E6:CC:51:A2:5A:5D:22:91:43:62:79 X509v3 Authority Key Identifier: keyid:46:3A:AF:9D:F9:F6:55:8C:60:E4:81:6D:A0:24:85:62:F6:90:05:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:af:87:79:f7:59:f6:53:6e:45:5c:dc:96:26:6b:5b:00:eb: 6a:48:13:28:80:b0:57:1f:92:87:b8:3c:36:90:14:79:f1:3d: 7a:c1:32:31:b8:3a:e8:79:41:43:7c:61:f0:a6:01:50:39:bb: 97:ad:ab:2a:8c:7b:6f:02:bf:4a:f4:e4:b6:bb:a8:67:a6:cb: 51:98:e7:00:34:e4:9a:e2:91:36:6b:58:0d:85:7d:a0:4f:75: 41:7a:64:7d:e5:c2:6b:d6:c4:8d:b9:22:ee:bf:c8:45:f8:f5: 44:18:75:f6:82:ef:c9:23:43:d4:c8:5e:2f:30:c9:e6:9b:2e: 97:12:4b:e9:3d:79:13:1e:c2:6a:aa:a4:ba:e4:35:9a:3b:f9: 0d:06:50:87:01:88:c7:0a:00:ca:1e:dd:9e:f8:09:23:4b:e8: 0b:4b:ab:dd:b0:6a:f2:b1:38:8b:56:2c:b8:70:59:4b:3b:67: 06:d2:43:ea:cf:14:c6:8f:56:4f:44:bd:da:65:d6:0f:74:98: 08:c8:04:a0:ab:54:1c:27:99:d0:b0:56:86:f8:45:69:e2:9d: 64:73:88:c9:10:eb:0b:58:b9:7b:0c:6f:f6:f5:9e:4c:05:42: eb:67:94:09:dc:65:72:61:3b:44:9c:03:54:6f:39:3b:82:ff: 9f:df:0d:e5 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICAeowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDYz QUFGOURGOUY2NTU4QzYwRTQ4MTZEQTAyNDg1NjJGNjkwMDUwNzAeFw0yNjA0MjEy MDAzNTFaFw0yNzAxMTUxNTMwMTlaMDMxMTAvBgNVBAMTKDNFOTFDODMyQzFBMEI3 RkRGQUU2Q0M1MUEyNUE1RDIyOTE0MzYyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTyfHsnxcBpM3huKzYZsUJPcvAXrcirkZGkj4YkGRvSPdCUX/S IVWPY/MTtvELva7sTndoo2tEMyCD/EPWPvv58NBXksOz5NrRzQohMfsR4zEdlqlv LI9ii354bg3535O4hBdDxwKBogWDSP1pEnYP3hK7VMmj6i7XMd4k6doKsHjrVQk3 3qfD1fBT+AdG0lc/JnAUrOaG9Wyg/HRQjS5eILZD9WhxfA4GqmazECr0E/F8j9if pohx2DejjIrdDkbr3ymSd3Ukp1ZdR/u9PTgrM7Y94jih/suh0O4tY7078Z4d9I/f CIpKMPpnbbY4be9wtJxNjd0piiccM+lDilldAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUPpHIMsGgt/365sxRolpdIpFDYnkwHwYDVR0jBBgwFoAURjqvnfn2VYxg5IFt oCSFYvaQBQcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0FOUkFZ Uy9SanF2bmZuMlZZeGc1SUZ0b0NTRll2YVFCUWMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1JqcXZuZm4yVll4ZzVJRnRvQ1NGWXZhUUJRYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0tBTlJBWVMvUmpxdm5mbjJWWXhnNUlG dG9DU0ZZdmFRQlFjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AHuvh3n3WfZTbkVc3JYma1sA62pIEyiAsFcfkoe4PDaQFHnxPXrBMjG4Ouh5QUN8 YfCmAVA5u5etqyqMe28Cv0r05La7qGemy1GY5wA05JrikTZrWA2FfaBPdUF6ZH3l wmvWxI25Iu6/yEX49UQYdfaC78kjQ9TIXi8wyeabLpcSS+k9eRMewmqqpLrkNZo7 +Q0GUIcBiMcKAMoe3Z74CSNL6AtLq92wavKxOItWLLhwWUs7ZwbSQ+rPFMaPVk9E vdpl1g90mAjIBKCrVBwnmdCwVob4RWninWRziMkQ6wtYuXsMb/b1nkwFQutnlAnc ZXJhO0ScA1RvOTuC/5/fDeU= -----END CERTIFICATE-----Generated at Wed Apr 22 01:42:01 2026 by rpki-client