$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.mft File: dqLtUg-AVK9-DJnb905Pde1FfDo.mft (raw, json) Hash identifier: BHk0XZy9E69KMLtKeaiplnAq8nZmRd1LW3PSeixkqEo= Subject key identifier: EE:02:71:F9:4B:25:F9:60:2E:FE:F9:69:B5:E2:DD:4F:04:45:EE:E7 Authority key identifier: 76:A2:ED:52:0F:80:54:AF:7E:0C:99:DB:F7:4E:4F:75:ED:45:7C:3A Certificate issuer: /CN=76A2ED520F8054AF7E0C99DBF74E4F75ED457C3A Certificate serial: 0DB2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dqLtUg-AVK9-DJnb905Pde1FfDo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.mft Manifest number: 0DB2 Signing time: Mon 13 Apr 2026 11:34:16 +0000 Manifest this update: Mon 13 Apr 2026 11:34:16 +0000 Manifest next update: Wed 15 Apr 2026 11:34:16 +0000 Files and hashes: 1: dqLtUg-AVK9-DJnb905Pde1FfDo.crl (hash: 8JfkiRe1zrpfJWrl0VJiT4ZK2sWZupBQw1z1/W1aZdA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/dqLtUg-AVK9-DJnb905Pde1FfDo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 23:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3506 (0xdb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76A2ED520F8054AF7E0C99DBF74E4F75ED457C3A Validity Not Before: Apr 13 11:34:16 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EE0271F94B25F9602EFEF969B5E2DD4F0445EEE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0a:45:d4:ca:28:7e:c8:d1:1e:8a:a9:a0:ed: 57:a1:95:97:d1:b5:f9:96:7d:03:60:43:af:d3:0c: 74:11:be:87:dd:2f:1e:3e:9f:9d:7d:34:dc:b0:25: 0c:24:ab:d9:59:40:63:5a:28:54:66:7b:f5:70:2c: 41:23:2e:b9:3b:b7:29:b0:d8:6b:ae:de:70:2b:de: bc:5c:eb:90:0e:b3:ad:59:0a:09:f4:2a:83:81:c3: 25:80:6f:67:4d:fc:19:29:d7:21:7e:a9:67:9d:e9: 37:e4:98:ee:8b:26:2e:f6:17:e4:61:13:53:bc:0e: 5e:c5:29:b5:a3:42:a8:84:9e:1a:7a:9d:d4:f0:cd: 9f:fb:37:18:a9:e3:8e:d8:24:9e:db:d1:2c:b4:e6: f4:ab:00:9c:f6:b5:84:a9:4d:b4:e1:f1:be:63:a7: 89:64:8d:e0:57:62:1d:db:ae:d6:2b:1b:ff:66:87: 2a:28:01:07:a5:8d:14:54:a5:ea:da:df:0d:ec:52: 8c:7f:83:8c:1b:22:78:3e:3c:e6:c6:93:a7:2d:99: 08:14:49:b3:b8:08:d4:03:2e:97:a1:99:51:06:db: 6b:16:ba:d7:2c:6f:78:2b:d9:3f:e5:35:58:52:da: 69:86:67:77:2b:06:5a:59:dd:0b:85:fd:a4:ec:92: 21:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:02:71:F9:4B:25:F9:60:2E:FE:F9:69:B5:E2:DD:4F:04:45:EE:E7 X509v3 Authority Key Identifier: keyid:76:A2:ED:52:0F:80:54:AF:7E:0C:99:DB:F7:4E:4F:75:ED:45:7C:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dqLtUg-AVK9-DJnb905Pde1FfDo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a4:1f:a6:b7:f3:d8:c3:e4:c6:7e:93:12:e6:c3:b1:c7:b5: 3a:76:26:d6:9a:24:47:f6:97:1d:81:b7:5b:a9:0c:e2:9d:cc: 81:90:4e:9d:dc:5b:24:2d:be:38:d4:ba:66:60:e8:73:c5:58: ec:02:1f:1c:29:20:3d:31:9d:64:d0:a1:65:0d:01:db:48:b3: 66:3d:1c:92:12:03:1f:2a:ad:6c:7b:98:ff:59:ae:a2:98:41: 17:cc:2a:16:a4:3d:f6:9f:54:94:a0:26:b4:b4:c5:91:62:2c: 85:9d:c3:e7:8f:1d:22:71:de:18:b5:a0:89:a9:2f:c4:38:c8: de:e8:9f:dc:b1:8c:1c:33:d7:97:ca:ca:d9:92:83:83:23:0a: 72:21:95:1c:6a:e3:e2:53:6c:89:ce:89:fd:87:27:c0:fd:6e: ff:df:bd:2d:09:e1:da:0f:28:8a:df:8f:c5:3f:28:08:da:9c: 67:b1:51:e3:9f:e8:1a:83:76:85:74:84:65:4f:5b:d1:be:6e: 97:4a:1b:a1:52:b2:c5:25:7e:f4:c7:b0:5e:a7:c9:b0:94:38: b0:2c:d2:b2:64:da:d3:4b:39:b6:67:a4:5f:28:1b:a8:a8:47: ec:52:b3:1d:77:ce:39:84:f4:c6:3a:b7:40:fd:7c:ce:b7:ce: ad:6b:bb:a8 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICDbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzZB MkVENTIwRjgwNTRBRjdFMEM5OURCRjc0RTRGNzVFRDQ1N0MzQTAeFw0yNjA0MTMx MTM0MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVFMDI3MUY5NEIyNUY5 NjAyRUZFRjk2OUI1RTJERDRGMDQ0NUVFRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChCkXUyih+yNEeiqmg7VehlZfRtfmWfQNgQ6/TDHQRvofdLx4+ n519NNywJQwkq9lZQGNaKFRme/VwLEEjLrk7tymw2Guu3nAr3rxc65AOs61ZCgn0 KoOBwyWAb2dN/Bkp1yF+qWed6TfkmO6LJi72F+RhE1O8Dl7FKbWjQqiEnhp6ndTw zZ/7Nxip447YJJ7b0Sy05vSrAJz2tYSpTbTh8b5jp4lkjeBXYh3brtYrG/9mhyoo AQeljRRUpera3w3sUox/g4wbIng+PObGk6ctmQgUSbO4CNQDLpehmVEG22sWutcs b3gr2T/lNVhS2mmGZ3crBlpZ3QuF/aTskiHzAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQU7gJx+Usl+WAu/vlpteLdTwRF7ucwHwYDVR0jBBgwFoAUdqLtUg+AVK9+DJnb 905Pde1FfDowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVBUkxB QllTUy9kcUx0VWctQVZLOS1ESm5iOTA1UGRlMUZmRG8uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL2RxTHRVZy1BVks5LURKbmI5MDVQZGUxRmZEby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BFQVJMQUJZU1MvZHFMdFVnLUFW SzktREpuYjkwNVBkZTFGZkRvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF2kH6a389jD5MZ+kxLmw7HHtTp2JtaaJEf2lx2Bt1upDOKdzIGQTp3c WyQtvjjUumZg6HPFWOwCHxwpID0xnWTQoWUNAdtIs2Y9HJISAx8qrWx7mP9ZrqKY QRfMKhakPfafVJSgJrS0xZFiLIWdw+ePHSJx3hi1oImpL8Q4yN7on9yxjBwz15fK ytmSg4MjCnIhlRxq4+JTbInOif2HJ8D9bv/fvS0J4doPKIrfj8U/KAjanGexUeOf 6BqDdoV0hGVPW9G+bpdKG6FSssUlfvTHsF6nybCUOLAs0rJk2tNLObZnpF8oG6io R+xSsx13zjmE9MY6t0D9fM63zq1ru6g= -----END CERTIFICATE-----Generated at Tue Apr 14 21:20:14 2026 by rpki-client