$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft File: MRjDNNpY18ACHcqsqIHfudyDZf8.mft (raw, json) Hash identifier: 8qYmHJKkbkaNfyfycxigpY43M0hTzZMz7M2s2zL8tL0= Subject key identifier: F6:56:C2:46:23:F1:C5:FA:82:6A:36:23:D5:49:C7:8C:94:78:6F:D1 Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Certificate serial: 0A73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft Manifest number: 0A32 Signing time: Wed 11 Mar 2026 23:55:19 +0000 Manifest this update: Wed 11 Mar 2026 23:55:19 +0000 Manifest next update: Fri 13 Mar 2026 23:55:19 +0000 Files and hashes: 1: 44sG5xI6nObR0Nd-hc8TaTCdATg.roa (hash: FJ7Le5rn60lhby1vG/m2v/XL3EBad43cQPzlEDPMoKk=) 2: MRjDNNpY18ACHcqsqIHfudyDZf8.crl (hash: /DGcJmIweLSAfb7hHr8VeytTjgRxyM1iii8o1mf+5O4=) 3: QZjFtdoB5l0VTrzX-othhePeAgY.roa (hash: BLrWyqVSE+tVmnPedxYbiaCQSa6RU71YU5xms1YpmlU=) 4: RgDkEMJCY2F7bV8VjoICZToB688.roa (hash: E2RdXlJxuyvbQvWR6/H6hDw0kPmP0eLvhwfTrzlQacI=) 5: V9YEmLdJhQFtsWJWorisoXIvVtw.roa (hash: /VKlDId99UKtfPkAw8js8diP9eE4bkubMMbxq+BGPmY=) 6: j4REDXROM2lOtUIiuocgriI24RA.roa (hash: eYpGN7WBVE66cQ5mjTxFEu52wXsjQGtYMh23FEG0qh4=) 7: l0rXUoTh_xLUPs7d5-Nlb3JIaZI.roa (hash: Jnkka3SwH42MQr34xBXmyRwTQKDUuBpqeRrjMItSBHE=) 8: mqtTMHIAwZWCyqJa7LuHi2FU7jg.roa (hash: NawBos98lTXwDlztOK6wPoulJfb1zu4vVysJihoFx04=) 9: p8yAl_yP-081ADrm-UganPjkJ08.roa (hash: aUA/+cMla5OzPTrNKp9LZSQADBUzY1BszASwtFNmtGs=) 10: pav4izglQsCj6rdGqOT9LBlr1t4.roa (hash: YnSadJQeY0k7uPtTAPYtokP9YXFLCWmwBpsvESH4w7U=) 11: y9QGEN5055qgFt31vjnn3TxJtcY.roa (hash: w0LD8G8mjBGJjsDJSBm7oZ9yRTd2X636Wd2lQ7xbIpc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 01:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2675 (0xa73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Validity Not Before: Mar 11 23:55:19 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F656C24623F1C5FA826A3623D549C78C94786FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cc:20:a4:b2:9a:76:7c:ab:42:d7:70:d3:11: ff:4c:9e:35:91:34:8d:27:c0:20:0c:c4:f8:8e:bb: 4e:eb:cb:ac:9d:86:aa:fb:ed:1d:66:51:89:3d:d3: 22:12:f0:f1:b1:6b:75:a8:29:8c:24:a2:33:16:b6: e5:d8:67:ba:fc:86:88:a9:eb:9b:f5:e9:2c:cf:67: 49:62:ed:af:f1:98:aa:03:92:91:08:f6:0f:f8:88: 76:45:d3:10:fe:af:c9:73:8b:7d:26:7e:05:dd:82: 39:a3:ac:2e:08:16:55:ae:a6:3e:cf:ce:74:33:8d: 9d:83:82:c7:b4:37:38:16:a6:58:90:b2:57:37:3c: b7:52:09:7d:24:a8:3e:6d:9f:73:0c:1c:c3:56:ad: 76:76:93:f6:5f:58:43:4f:91:dd:0a:21:ce:cd:d7: 4d:49:e6:f9:7a:0b:c3:f6:55:05:c6:ab:85:f7:3c: 8d:e1:e9:3a:79:e5:44:bc:54:d3:5f:3c:e2:93:b0: 72:02:0f:61:f9:bf:4c:cf:b7:e5:03:95:1f:7b:ef: c2:ab:18:c1:ce:67:16:1c:a3:26:b2:34:a7:aa:4b: d3:af:09:ec:a4:f4:0b:69:6b:31:4d:fc:86:35:09: 33:35:4d:e4:88:28:8c:11:49:32:fa:fa:53:ea:a5: f9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:56:C2:46:23:F1:C5:FA:82:6A:36:23:D5:49:C7:8C:94:78:6F:D1 X509v3 Authority Key Identifier: keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:85:0e:19:dd:d8:c1:7f:52:26:bd:1a:67:66:a6:44:f4:77: 5e:62:38:9d:2c:5c:bb:0e:ac:fe:33:38:3b:62:80:13:ea:44: da:ef:03:58:f4:bd:9e:a5:00:b7:57:50:44:59:99:09:32:ec: 9b:0b:c3:2f:f3:44:a0:c3:22:30:4b:07:b9:47:4e:18:65:92: 0e:a9:98:ca:e9:d1:96:21:46:e1:8c:6f:a6:58:c7:f0:6f:ed: 22:90:ab:f4:eb:f7:b3:74:a4:21:9e:9b:c5:ef:f8:df:43:2c: a0:af:35:ae:4d:22:ec:13:f3:28:4d:24:61:ef:d1:68:c1:70: eb:f9:27:a8:7a:5d:8d:ec:6a:f5:39:13:a2:5c:5a:25:81:48: c2:58:ec:79:6a:e1:b0:50:e3:c8:bb:00:02:6d:36:2e:cc:1b: 8e:46:20:d7:05:2d:6c:81:1a:86:8b:e1:e7:bd:a3:a4:05:cb: ed:d2:21:f5:41:20:dd:43:c3:4f:56:09:6e:41:d2:46:0d:18: 43:3c:b9:e0:0a:0e:e3:13:86:42:19:e2:0d:9f:1b:b4:03:b3: 7e:4c:e3:0c:8c:c3:7c:82:cd:58:9c:2b:1b:cd:ad:4f:0b:c9: fa:1f:b1:c2:86:73:dd:f1:13:16:0c:dc:8b:49:3d:a5:73:2a: 3e:ca:99:9c -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICCnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEx OEMzMzREQTU4RDdDMDAyMURDQUFDQTg4MURGQjlEQzgzNjVGRjAeFw0yNjAzMTEy MzU1MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY2NTZDMjQ2MjNGMUM1 RkE4MjZBMzYyM0Q1NDlDNzhDOTQ3ODZGRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgzCCkspp2fKtC13DTEf9MnjWRNI0nwCAMxPiOu07ry6ydhqr7 7R1mUYk90yIS8PGxa3WoKYwkojMWtuXYZ7r8hoip65v16SzPZ0li7a/xmKoDkpEI 9g/4iHZF0xD+r8lzi30mfgXdgjmjrC4IFlWupj7PznQzjZ2Dgse0NzgWpliQslc3 PLdSCX0kqD5tn3MMHMNWrXZ2k/ZfWENPkd0KIc7N101J5vl6C8P2VQXGq4X3PI3h 6Tp55US8VNNfPOKTsHICD2H5v0zPt+UDlR9778KrGMHOZxYcoyayNKeqS9OvCeyk 9AtpazFN/IY1CTM1TeSIKIwRSTL6+lPqpfnbAgMBAAGjggIBMIIB/TAdBgNVHQ4E FgQU9lbCRiPxxfqCajYj1UnHjJR4b9EwHwYDVR0jBBgwFoAUMRjDNNpY18ACHcqs qIHfudyDZf8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL01S akROTnBZMThBQ0hjcXNxSUhmdWR5RFpmOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TVJqRE5OcFkxOEFDSGNxc3FJSGZ1ZHlEWmY4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL01SakROTnBZMThBQ0hjcXNxSUhmdWR5 RFpmOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkhQ4Z3djB f1ImvRpnZqZE9HdeYjidLFy7Dqz+Mzg7YoAT6kTa7wNY9L2epQC3V1BEWZkJMuyb C8Mv80SgwyIwSwe5R04YZZIOqZjK6dGWIUbhjG+mWMfwb+0ikKv06/ezdKQhnpvF 7/jfQyygrzWuTSLsE/MoTSRh79FowXDr+Seoel2N7Gr1OROiXFolgUjCWOx5auGw UOPIuwACbTYuzBuORiDXBS1sgRqGi+HnvaOkBcvt0iH1QSDdQ8NPVgluQdJGDRhD PLngCg7jE4ZCGeINnxu0A7N+TOMMjMN8gs1YnCsbza1PC8n6H7HChnPd8RMWDNyL ST2lcyo+ypmc -----END CERTIFICATE-----Generated at Thu Mar 12 22:41:39 2026 by rpki-client