$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/_WUEd5O9OBfyaU3MKm_uEkcp9N0.mft File: _WUEd5O9OBfyaU3MKm_uEkcp9N0.mft (raw, json) Hash identifier: CLNNS9sVGDYXFyC1LWbObrOqTZFitYVRs/LbpVJSy9E= Subject key identifier: FA:76:CF:73:27:4B:D4:EB:5F:17:6F:EB:EE:1E:55:B3:F8:80:F2:E6 Authority key identifier: FD:65:04:77:93:BD:38:17:F2:69:4D:CC:2A:6F:EE:12:47:29:F4:DD Certificate issuer: /CN=FD65047793BD3817F2694DCC2A6FEE124729F4DD Certificate serial: 01EB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_WUEd5O9OBfyaU3MKm_uEkcp9N0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/_WUEd5O9OBfyaU3MKm_uEkcp9N0.mft Manifest number: 01EA Signing time: Wed 22 Apr 2026 05:03:56 +0000 Manifest this update: Wed 22 Apr 2026 05:03:56 +0000 Manifest next update: Wed 22 Apr 2026 11:03:56 +0000 Files and hashes: 1: U35zTOumWfEL99IJzAFhbENgcYY.roa (hash: /RCkf59EqRgA1F2q9R2caeeg+3uEMVEmlzEajKKYNWE=) 2: _WUEd5O9OBfyaU3MKm_uEkcp9N0.crl (hash: rL5y0/5lMjwmlQ1LSACf3PyPCUJC3WMvlj/mDdkbONg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/_WUEd5O9OBfyaU3MKm_uEkcp9N0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/_WUEd5O9OBfyaU3MKm_uEkcp9N0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_WUEd5O9OBfyaU3MKm_uEkcp9N0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 09:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD65047793BD3817F2694DCC2A6FEE124729F4DD Validity Not Before: Apr 22 05:03:56 2026 GMT Not After : Jan 15 15:30:19 2027 GMT Subject: CN=FA76CF73274BD4EB5F176FEBEE1E55B3F880F2E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:1c:cc:83:50:b6:6c:1d:1d:76:2e:27:99: b6:17:61:ec:e3:59:08:e9:95:52:48:e3:50:7d:36: 2a:bb:dc:b8:42:cb:04:04:12:9a:eb:66:d7:65:32: 15:0f:45:16:c0:85:0c:21:7f:2b:61:f4:06:97:58: f7:a2:a3:75:c8:90:e5:a6:80:a7:19:52:d1:2d:9b: 3d:18:df:0e:bd:02:a4:c5:ba:9c:bf:f8:f2:3c:d1: f2:eb:a8:2f:26:ab:b8:d5:ef:13:f4:2f:32:9b:b0: 1f:27:f8:b2:8a:20:a9:56:dd:c7:59:43:c3:be:11: ae:bb:b1:5d:c2:ef:45:5f:89:ea:d9:3b:93:d0:28: 46:d2:ea:9b:d5:fb:92:14:2b:b0:95:c3:8f:aa:d4: 90:48:bd:62:e3:48:46:51:bb:ee:ee:97:c6:66:75: e9:71:df:67:90:1a:5e:75:b1:28:70:57:de:31:dc: 63:ea:54:7e:b8:58:76:3c:f3:6f:d1:6c:eb:a8:ff: c1:d9:6d:11:ee:71:bd:d8:0f:50:f2:a2:c2:fb:f7: 0e:cb:4a:7a:21:af:d1:c5:52:c6:11:30:fa:6d:ca: 36:9f:b0:ba:bc:04:13:5a:52:9f:da:31:a0:b6:c8: 60:a1:35:93:2b:5e:63:c1:59:5e:c4:73:ce:49:40: 7c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:76:CF:73:27:4B:D4:EB:5F:17:6F:EB:EE:1E:55:B3:F8:80:F2:E6 X509v3 Authority Key Identifier: keyid:FD:65:04:77:93:BD:38:17:F2:69:4D:CC:2A:6F:EE:12:47:29:F4:DD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/_WUEd5O9OBfyaU3MKm_uEkcp9N0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_WUEd5O9OBfyaU3MKm_uEkcp9N0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/_WUEd5O9OBfyaU3MKm_uEkcp9N0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:bb:4a:f8:97:ae:d7:8f:90:10:fc:59:b2:75:e6:75:ef:d6: d9:8a:c5:e3:b8:8e:f3:57:f6:84:81:52:50:40:1c:8c:29:1a: 58:06:fb:07:f6:26:67:8b:c2:1b:98:bd:f7:ac:ce:dd:d9:d2: ff:d0:46:aa:da:9f:71:84:b1:8c:03:5a:79:d8:84:2b:30:cb: 78:75:08:55:5e:46:40:24:20:d4:d4:10:91:d4:bf:8e:2f:c8: 8d:db:0a:75:95:9d:c7:2a:b5:7f:29:cd:da:2c:2c:2f:6a:86: b7:d2:84:e8:c9:e1:e5:76:cf:93:c4:35:8f:f9:a2:1a:33:ff: ee:45:c6:33:af:31:c0:9d:a6:45:7d:09:6c:fb:a0:bf:75:58: fb:c1:3f:13:2a:cb:5d:4e:19:fc:2e:eb:cf:e3:7c:bd:a6:50: b3:16:94:66:ff:45:8d:6d:a4:b4:7e:e7:b6:b5:b6:ff:48:bb: 29:77:69:24:63:da:76:a3:0e:ef:26:d6:5e:23:bf:44:ba:36: 4f:e4:25:ec:b4:16:01:d5:7f:ae:76:94:76:8d:93:fc:37:92: bb:84:97:9e:16:83:aa:ca:58:ee:a8:16:ca:be:54:f5:2f:77: cf:bb:8a:15:dc:93:e4:c7:14:d7:f6:b4:44:f0:de:88:cd:7e: e5:a2:51:a3 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICAeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkQ2 NTA0Nzc5M0JEMzgxN0YyNjk0RENDMkE2RkVFMTI0NzI5RjRERDAeFw0yNjA0MjIw NTAzNTZaFw0yNzAxMTUxNTMwMTlaMDMxMTAvBgNVBAMTKEZBNzZDRjczMjc0QkQ0 RUI1RjE3NkZFQkVFMUU1NUIzRjg4MEYyRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSqBzMg1C2bB0ddi4nmbYXYezjWQjplVJI41B9Niq73LhCywQE EprrZtdlMhUPRRbAhQwhfyth9AaXWPeio3XIkOWmgKcZUtEtmz0Y3w69AqTFupy/ +PI80fLrqC8mq7jV7xP0LzKbsB8n+LKKIKlW3cdZQ8O+Ea67sV3C70VfierZO5PQ KEbS6pvV+5IUK7CVw4+q1JBIvWLjSEZRu+7ul8Zmdelx32eQGl51sShwV94x3GPq VH64WHY882/RbOuo/8HZbRHucb3YD1DyosL79w7LSnohr9HFUsYRMPptyjafsLq8 BBNaUp/aMaC2yGChNZMrXmPBWV7Ec85JQHwDAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQU+nbPcydL1OtfF2/r7h5Vs/iA8uYwHwYDVR0jBBgwFoAU/WUEd5O9OBfyaU3M Km/uEkcp9N0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0FOUkFZ Uy9fV1VFZDVPOU9CZnlhVTNNS21fdUVrY3A5TjAuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL19XVUVkNU85T0JmeWFVM01LbV91RWtjcDlOMC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0tBTlJBWVMvX1dVRWQ1TzlPQmZ5YVUz TUttX3VFa2NwOU4wLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AHW7SviXrtePkBD8WbJ15nXv1tmKxeO4jvNX9oSBUlBAHIwpGlgG+wf2JmeLwhuY vfeszt3Z0v/QRqran3GEsYwDWnnYhCswy3h1CFVeRkAkINTUEJHUv44vyI3bCnWV nccqtX8pzdosLC9qhrfShOjJ4eV2z5PENY/5ohoz/+5FxjOvMcCdpkV9CWz7oL91 WPvBPxMqy11OGfwu68/jfL2mULMWlGb/RY1tpLR+57a1tv9Iuyl3aSRj2najDu8m 1l4jv0S6Nk/kJey0FgHVf652lHaNk/w3kruEl54Wg6rKWO6oFsq+VPUvd8+7ihXc k+THFNf2tETw3ojNfuWiUaM= -----END CERTIFICATE-----Generated at Wed Apr 22 07:55:55 2026 by rpki-client