$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft File: 866155EC56EF0A61BC489259EA6B444F2596FF9E.mft (raw, json) Hash identifier: SSH/DIxRvnk1xRCgA3b6NLG3RyB9WiM8dyjGtvaVzDU= Subject key identifier: 85:BA:B6:1E:67:2F:E2:C3:B0:FD:EC:4D:D8:46:A4:61:7C:2A:18:D0 Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E Certificate issuer: /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E Certificate serial: 0F4CE0651406F269B5C56501BC17DC4909DD41C2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft Manifest number: 0E Signing time: Wed 13 May 2026 05:17:03 +0000 Manifest this update: Wed 13 May 2026 05:12:03 +0000 Manifest next update: Thu 14 May 2026 06:31:03 +0000 Files and hashes: 1: 323030313a6434303a3a2f33322d3332203d3e2032393134.roa (hash: 95cinPFxr6M1UrLSOID8fzCFDcqIv0aWY/wubzGwKoY=) 2: 36312e35382e33342e302f32352d3235203d3e203138303138.roa (hash: sEbgj8r5BW9LG+uLbdsnQ3mfWS9qyXUgDZxxUrhdajU=) 3: 3132322e3235352e39342e302f32382d3238203d3e203138303138.roa (hash: 1FyQfERQbzRtqHMN+lCM3804V/dGWG068p//0dtL/f4=) 4: 3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa (hash: 5asE5DvsTfpB1BVRf4zu0Zel18vuQX5T6T90JBepePs=) 5: 36312e35382e33322e302f32302d3234203d3e2032393134.roa (hash: 5f4R2kruXwvonwhPEwdiJqWNobqGweT9ncTpgiNvvP8=) 6: 36312e35382e34312e3132382f32392d3239203d3e20313331363138.roa (hash: E6IxpTdYXlAMqeX0+c0IU8U2bczaMIO7WYlkAnDJQFE=) 7: 3132322e3235352e38302e302f32302d3234203d3e2032393134.roa (hash: fMdNagEZlOANeSxcOpb3w/TF/IYf3DkNkif0u6p7BJo=) 8: 36312e35382e34312e3137362f32382d3238203d3e2033393439.roa (hash: 8+1bqHrAQFD10kktfKxge62Vv7sjt8foTbNXn1au08A=) 9: 3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa (hash: QsixafQjwfqu9M7sBGz7C/Kx4ATf5EPodViRplY14v8=) 10: 3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa (hash: jFOqKNSTBrTIV1xUzqrbetFhA6QtKyhxqkPiIbQ8Meo=) 11: 3132322e3235352e39332e3131322f32382d3238203d3e203138303138.roa (hash: DCuf39QCWplBT1yHKKE16KE93ZquNcCivbp7rdZaTpo=) 12: 866155EC56EF0A61BC489259EA6B444F2596FF9E.crl (hash: PLBSKJXQ2kUbB5CwFlwQaleNuBrNkuDldF2XSTw10z0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4c:e0:65:14:06:f2:69:b5:c5:65:01:bc:17:dc:49:09:dd:41:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E Validity Not Before: May 13 05:12:03 2026 GMT Not After : May 14 06:31:03 2026 GMT Subject: CN=85BAB61E672FE2C3B0FDEC4DD846A4617C2A18D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:34:b7:5b:6d:86:b7:e6:94:6a:0b:f5:fb:a2: fb:63:fd:b6:95:44:ab:0c:e7:1f:11:f2:8b:0e:da: 76:11:2a:8c:41:74:5d:86:ad:0d:0a:ff:75:6b:39: 53:cc:35:da:ae:79:d5:ce:0b:32:9a:26:9a:b5:e1: 41:9b:6d:5d:a5:87:72:dd:a3:6f:03:9f:0d:5e:7a: 19:55:83:e2:04:16:e5:85:12:34:39:33:40:4f:05: 96:31:af:53:ec:26:00:9f:f8:d2:47:a5:c1:6c:25: 79:6a:21:8f:4d:d2:1e:b8:8a:52:2c:7c:a7:e2:2b: c2:36:3a:dc:c8:c6:0f:19:29:36:0a:0e:f8:ec:3a: 9a:e1:27:20:d1:41:e8:fc:cb:f1:11:eb:43:38:34: c4:94:87:32:69:15:52:a5:9d:cf:f3:27:1f:8d:04: 80:28:34:d4:ef:3a:67:fa:ef:80:f8:eb:b3:ad:0e: a6:99:1c:5c:52:b7:9d:21:ad:79:8d:43:76:38:9a: 39:ec:ba:b3:3e:7f:04:34:c8:7f:b4:cb:a7:67:fa: f1:eb:24:ca:ce:b3:0a:a0:84:da:ab:f8:8c:37:d5: 6f:dc:32:eb:6c:df:cb:40:2c:75:d3:1a:ee:05:0d: 64:6c:ab:fd:c4:9e:f1:06:30:b9:bd:da:b4:ce:58: 9c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BA:B6:1E:67:2F:E2:C3:B0:FD:EC:4D:D8:46:A4:61:7C:2A:18:D0 X509v3 Authority Key Identifier: keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d8:cd:97:a2:79:e8:9c:da:d7:24:ff:6c:dd:f7:90:18:06: 83:4f:8d:8b:24:70:b8:b3:ee:2e:28:00:7e:9e:cd:bd:e3:17: 55:00:be:a5:9f:ce:8d:24:e8:fa:1a:ad:5f:7e:69:f3:d8:52: 3a:89:88:6e:3b:1d:b0:a2:81:c5:8d:17:57:c4:06:e9:5f:fe: e9:6c:57:eb:14:36:09:24:6c:8a:55:5f:3e:b7:d1:7f:e6:ce: 2a:e2:eb:f2:cb:30:36:3b:32:85:19:86:51:ef:72:b6:47:13: 33:60:c9:60:32:7e:8f:fb:10:28:d3:c6:2c:c1:2f:96:d0:a9: 3d:42:60:00:4a:0e:54:3a:ed:c7:d5:63:77:da:87:39:fb:f0: 17:bd:3c:bf:4a:8d:6c:72:cd:3b:1e:d6:a9:0d:91:17:fe:03: 1b:da:c4:f3:fb:31:7a:75:9f:7b:0a:e1:c5:9b:a9:55:66:24: 33:16:31:f6:1e:4e:f3:e2:57:97:f1:ef:3e:86:5d:1c:be:1e: 3e:47:b1:3f:03:04:e0:8e:cb:c0:a8:87:d1:23:44:e0:5d:c9: e0:13:ef:d9:54:77:60:21:e7:b9:bd:75:f4:fe:8d:30:67:de: 6a:58:c6:d4:66:aa:84:4f:4c:61:62:aa:fb:65:6d:cc:f4:a2: 62:73:80:8d -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUD0zgZRQG8mm1xWUBvBfcSQndQcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2MTU1RUM1NkVGMEE2MUJDNDg5MjU5RUE2QjQ0NEYy NTk2RkY5RTAeFw0yNjA1MTMwNTEyMDNaFw0yNjA1MTQwNjMxMDNaMDMxMTAvBgNV BAMTKDg1QkFCNjFFNjcyRkUyQzNCMEZERUM0REQ4NDZBNDYxN0MyQTE4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqNLdbbYa35pRqC/X7ovtj/baV RKsM5x8R8osO2nYRKoxBdF2GrQ0K/3VrOVPMNdquedXOCzKaJpq14UGbbV2lh3Ld o28Dnw1eehlVg+IEFuWFEjQ5M0BPBZYxr1PsJgCf+NJHpcFsJXlqIY9N0h64ilIs fKfiK8I2OtzIxg8ZKTYKDvjsOprhJyDRQej8y/ER60M4NMSUhzJpFVKlnc/zJx+N BIAoNNTvOmf674D467OtDqaZHFxSt50hrXmNQ3Y4mjnsurM+fwQ0yH+0y6dn+vHr JMrOswqghNqr+Iw31W/cMuts38tALHXTGu4FDWRsq/3EnvEGMLm92rTOWJxxAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUhbq2Hmcv4sOw/exN2EakYXwqGNAwHwYDVR0j BBgwFoAUhmFV7FbvCmG8SJJZ6mtETyWW/54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOVFQv MC84NjYxNTVFQzU2RUYwQTYxQkM0ODkyNTlFQTZCNDQ0RjI1OTZGRjlFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzg2NjE1NUVDNTZFRjBBNjFCQzQ4OTI1OUVBNkI0 NDRGMjU5NkZGOUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05UVC8wLzg2NjE1NUVDNTZFRjBB NjFCQzQ4OTI1OUVBNkI0NDRGMjU5NkZGOUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCb2M2XonnonNrX JP9s3feQGAaDT42LJHC4s+4uKAB+ns294xdVAL6ln86NJOj6Gq1ffmnz2FI6iYhu Ox2wooHFjRdXxAbpX/7pbFfrFDYJJGyKVV8+t9F/5s4q4uvyyzA2OzKFGYZR73K2 RxMzYMlgMn6P+xAo08YswS+W0Kk9QmAASg5UOu3H1WN32oc5+/AXvTy/So1scs07 HtapDZEX/gMb2sTz+zF6dZ97CuHFm6lVZiQzFjH2Hk7z4leX8e8+hl0cvh4+R7E/ AwTgjsvAqIfRI0TgXcngE+/ZVHdgIee5vXX0/o0wZ95qWMbUZqqET0xhYqr7ZW3M 9KJic4CN -----END CERTIFICATE-----Generated at Wed May 13 20:36:36 2026 by rpki-client